last executing test programs: 8m59.823705856s ago: executing program 32 (id=1596): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6m22.051602087s ago: executing program 33 (id=3202): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) read(r1, 0x0, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x37f}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) dup(r3) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xa2) bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5m38.377782063s ago: executing program 34 (id=4202): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) recvfrom$phonet(r0, &(0x7f0000000680)=""/205, 0xcd, 0x10000, 0x0, 0x0) 5m37.639722636s ago: executing program 35 (id=4218): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x1, 0x3, 0x81}}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 5m15.228787071s ago: executing program 36 (id=4670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 5m14.010568601s ago: executing program 3 (id=4694): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 5m12.946686557s ago: executing program 3 (id=4698): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x35, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e904a20002bc468eced80c430800450000400000e0000011"], 0x0) 5m12.794139472s ago: executing program 3 (id=4699): r0 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x40012100, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 5m11.669865683s ago: executing program 3 (id=4715): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m11.462974653s ago: executing program 3 (id=4718): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x35, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e904a20002bc468eced80c430800450000400000e0000011"], 0x0) 5m11.058745643s ago: executing program 3 (id=4729): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000780)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8000, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 5m11.044611265s ago: executing program 37 (id=4729): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000780)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8000, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 5m0.554835971s ago: executing program 7 (id=4922): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000800)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x0, 0x80000000, 0x1000, 0xfffffffb, 0x100, 0x3, 0x3, 0xd129}}) 5m0.400384906s ago: executing program 7 (id=4924): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="fa", 0x1, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 5m0.188142697s ago: executing program 7 (id=4925): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) 4m59.912289465s ago: executing program 9 (id=4931): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13775, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) 4m59.85309688s ago: executing program 9 (id=4937): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 4m59.819541823s ago: executing program 9 (id=4939): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x20, r0, 0x801, 0x70bd28, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}}, 0x20044090) 4m59.737818252s ago: executing program 9 (id=4943): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m59.683241707s ago: executing program 9 (id=4945): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0xfffffffffffffd37, &(0x7f00000002c0)=0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m59.418657444s ago: executing program 9 (id=4951): r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x20000800) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 4m59.196629235s ago: executing program 38 (id=4951): r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x20000800) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 4m58.922728362s ago: executing program 7 (id=4955): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m58.801419444s ago: executing program 7 (id=4957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) 4m58.681115386s ago: executing program 7 (id=4960): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 4m58.625414092s ago: executing program 39 (id=4960): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 4m53.072894011s ago: executing program 4 (id=5070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x92bb, 0x21a) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, 0x0, 0x0) 4m52.754297833s ago: executing program 4 (id=5073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7098}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fgetxattr(r2, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) 4m52.628427825s ago: executing program 4 (id=5075): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) 4m52.585929699s ago: executing program 4 (id=5077): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m52.555739732s ago: executing program 4 (id=5078): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x20) sendto$inet(r0, &(0x7f0000000300), 0x0, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 4m49.860443238s ago: executing program 4 (id=5118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3, 0x6, 0x9, 0x10, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x7}, 0x50) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='-cpu\bet'], 0xd) 4m49.830691291s ago: executing program 40 (id=5118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3, 0x6, 0x9, 0x10, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x7}, 0x50) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='-cpu\bet'], 0xd) 4m49.117850022s ago: executing program 2 (id=5130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x20000804) sendmsg$nl_route_sched(r1, 0x0, 0x20004804) 4m48.950665438s ago: executing program 2 (id=5131): connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, r1, 0x901, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 4m48.707114173s ago: executing program 2 (id=5133): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=ANY=[@ANYBLOB="cc0000001b0001002bbd7000fddbdf2500000000002400000400000000000001ac1414390000000000000000000000004e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000007000000000000000600000000000000020000000000000007000000000000000c00000000000000a604000000000000060000000000000002000000000000000000000000000000f4fffffffffffffff2ffffffffffffff790a0000b26b6e00010101010000000005"], 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004) 4m48.664294707s ago: executing program 2 (id=5134): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 4m48.22663105s ago: executing program 2 (id=5136): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13775, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) 4m47.710708961s ago: executing program 2 (id=5143): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=ANY=[@ANYBLOB="cc0000001b0001002bbd7000fddbdf2500000000002400000400000000000001ac1414390000000000000000000000004e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000007000000000000000600000000000000020000000000000007000000000000000c00000000000000a604000000000000060000000000000002000000000000000000000000000000f4fffffffffffffff2ffffffffffffff790a0000b26b6e00010101010000000005"], 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004) 4m47.710413431s ago: executing program 41 (id=5143): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=ANY=[@ANYBLOB="cc0000001b0001002bbd7000fddbdf2500000000002400000400000000000001ac1414390000000000000000000000004e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000007000000000000000600000000000000020000000000000007000000000000000c00000000000000a604000000000000060000000000000002000000000000000000000000000000f4fffffffffffffff2ffffffffffffff790a0000b26b6e00010101010000000005"], 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004) 3.296379214s ago: executing program 1 (id=8884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x39}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x8c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x2000003, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0xd, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757819"], 0x65) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvG1kZAPBv3DhN23STBQ6w0i4rdlFbQe1mw+5GHJZFQnBaCbHcS0jcKKoTV4mz20QrcP4CJIQAiRNcuCDxByChSlw4IqRKcAZpEQhBFyQ4QAeNPU6CM07crhs3zu8nTee9Gc9833PzxjOep3EAZ9aLEfFmRDxM0/RaRMzky0v5FK3OlL3ugwfvLWVTEmn69t+SSPJl3X0l+fxSvtlURHztKxHfTA7H3dzeub1Yr9c28nq1uXanurm9c311bXGltlJbn5+fe23h9YVXF24MpZ2XI+KNL/3p+9/56Zff+OVn3/3jzb9c/VaW1nS+/mA7HtHEUSs7TS+fn+rZYOMxgz2NsvaUu5ULg22z+wTzAQCgv+wc/yMR8amIuBYzce7o01kAAADgFEq/MB3/SSLSYpN9lgMAAACnSKk9BjYpVfKxANNRKlUqnTG8H4uLpXpjs/mZW42t9eXOWNnZKJdurdZrN/KxwrNRTrL6XLu8X3+lpz4fEc9GxPdmLrTrlaVGfXnUX34AAADAGXGp5/r/nzOd638AAABgzMyOOgEAAADgiXP9DwAAAOPP9T8AAACMta++9VY2pd3fv15+Z3vrduOd68u1zduVta2lylJj405lpdFYaT+zb+24/dUbjTufi/Wtu9VmbbNZvby9c3OtsbXevLkaUyfSIAAAAOCQZz957/dJRLQ+f6E9ZSZHnRRwIib2Skk+L+j9f3imM3//hJICTsS5AV7z/vni5c4T4HSb6F3Qp68D46c86gSAkUuOWd938M5vOrPSkPMBAACG78oniu//Xzt2y5ZTfjjldGI4u3ru/6czo0oEOHHt+/+DDuRxsgBjpTzQCEBgnH3Y+//HS9NHSggAABi66faUlCr513vTUSpVKhGX2z8LUE5urdZrNyLimYj43Uz5fFafa2+ZHHvNAAAAAAAAAAAAAAAAAAAAAAAAAAB0pGkSKQAAADDWIkp/Tn7VeZb/lZmXp3u/H5hM/t3+SeDJiHj3R2//4O5is7kxly3/+97y5g/z5a+M4hsMAAAAoFf3Or09/9eoswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg3Hzw4L2l7jTAyy8MK+5fvxgRs0XxJ2KqPZ+KckRc/EcSEwe2SyLi3BDit3Yj4uNF8ZMsrb2QRfGH8Sa0dpNW2lYYP2bzd6Eo/qUhxIez7F52/HmzqP+X4sX2vLj/TUT8X/1x9T/+xd7x71yf/n95wBjP3f95tW/83YjnJoqPf934SZ/4Lw0Y/xtf39npty79ccSV7udP+4h3MMJ+qdpcu1Pd3N65vrq2uFJbqa3Pz8+9tvD6wqsLN6q3Vuu1/N/CGN99/hcPj2r/xcLPvyTPpn/7Xy7YX9Fn0n/v333w0W6ldTj+1ZcK4v/6J/krDscv5XE+nZez9Ve65VanfNALP/vtC0e1f3m//eVH+f+/2m+nvQ51lOcH/dMBAJ6Aze2d24v1em1jbAvZVfpTkMbjFCbjqUhjfAvfzgr3h7XDNE3TrE8VrLoXEYPsJ4kht7RUnM9+oe8RYNRHJgAAYNj2T/pHnQkAAAAAAAAAAAAAAAAAAACcXSfxlLXemPuPQE6G8QhtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICh+F8AAAD//5b016Y=") r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT=r5, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x7, 0x1}, 0x8}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) 3.067806066s ago: executing program 1 (id=8885): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x58, 0x0, 0xa}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001840)={r6, @in6={{0xa, 0x4e22, 0x1, @private1, 0x4}}}, 0x84) 2.153817877s ago: executing program 1 (id=8893): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d", 0x1b}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200480d4}, 0x80) 1.909391751s ago: executing program 0 (id=8896): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f00000002c0)=[{0x0}], 0x1, 0x7, 0x1) 1.781695713s ago: executing program 5 (id=8898): syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x9, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002bbd7000fbdbdf25770000000c0099007b000000160000000500ee00060000000800ef000a0000000500ee00000000000800ef00080000000800ef00020000000500ee00090000000500ee00010000000800ef0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20044041}, 0x8880) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a042, 0x155) close(r4) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/mdstat\x00', 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_clone(0x248e4180, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$EVIOCGPROP(r4, 0x80404509, 0x0) timerfd_create(0x1, 0x80800) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="faffff95000200000000000000000f0000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000440)={r4}, 0x5a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r6, 0x0, 0x3, 0x800000) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.71571727s ago: executing program 0 (id=8899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a0104aa000000000000000a00000a0900010073797a31000000000900020073797a320000000020000000000a01080000000000000000050000010900010073797a310000000034000000080a030000000000000000000a000006080009400000000109009c4173797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x81}, 0x18) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r7, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.71508932s ago: executing program 6 (id=8900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08e2ffffffffff7ff2fb959b916ad29c15e4a69be73b252fa0d4ececb9d4d54539f3"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0xf0, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe985, 0x74}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x9, 0xfffffffc]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ac}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b8}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x7]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb20}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x33a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb778}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008090}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000940)={0x0, 0x2421, 0x8, 0x8000, 0x40024c}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x480, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f0000000080)=r10}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r12}, 0x10) brk(0x5) io_uring_enter(r7, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 1.648338677s ago: executing program 6 (id=8901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') lseek(r2, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x24, &(0x7f00000031c0)={0x1, 0x0, 0x200}) 1.61113733s ago: executing program 5 (id=8902): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x1}}, 0x10, 0x0}, 0x24000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 1.610824481s ago: executing program 6 (id=8903): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x58, 0x0, 0xa}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001840)={r6, @in6={{0xa, 0x4e22, 0x1, @private1, 0x4}}}, 0x84) 1.490118692s ago: executing program 0 (id=8904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f00000002c0)=[{0x0}], 0x1, 0x7, 0x1) 1.260462705s ago: executing program 0 (id=8905): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f00000004c0)={[{@test_dummy_encryption_v1}, {@oldalloc}, {@i_version}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@block_validity}, {@grpid}, {@jqfmt_vfsv0}, {@nodelalloc}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffff}}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/198, 0xc6}, 0x9}, {{&(0x7f0000000b00)=@l2tp={0x2, 0x0, @loopback}, 0x80, 0x0, 0xffffffffffffffa1, &(0x7f0000000d40)=""/174, 0xae}, 0x1}, {{&(0x7f0000000e00)=@tipc=@id, 0x80, &(0x7f0000000f40)=[{0x0}, {0x0}], 0x2, &(0x7f0000000f80)=""/18, 0x12}, 0xcd38}, {{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/96}, {&(0x7f0000001100)=""/4096}, {&(0x7f00000003c0)=""/226}, {&(0x7f0000000740)=""/235}, {&(0x7f0000000840)=""/254}, {&(0x7f0000000580)=""/190}], 0x0, &(0x7f0000002100)=""/245}, 0x7}], 0x3, 0x0, &(0x7f00000010c0)={0x0, 0x3938700}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000004000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 1.259320355s ago: executing program 1 (id=8906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') gettid() mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdnob', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010930100e1f137c848e2de22c700000000000000000000000a30000000030a01080000000000000000010000000900030073797a3200000000040004800900010073797a3000000000140000001100010000000000000000000000000ab639886a0dacc62d017bf318dae7d627a83c552957b1d02a0136fa7e61fd291156ae757d16a250631e62f64d16270e733d3b3536fbd207e895686c6590c2b950f280368f"], 0x58}}, 0x0) unshare(0x22020600) r7 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x800, 0xa, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r11}, 0x18) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x2) pidfd_getfd(r5, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x3c) 860.414955ms ago: executing program 1 (id=8908): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sync() bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 794.927021ms ago: executing program 0 (id=8909): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 715.929679ms ago: executing program 8 (id=8910): r0 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) write$selinux_access(0xffffffffffffffff, 0x0, 0x56) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) statfs(0x0, &(0x7f0000000280)=""/75) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1200, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") io_uring_setup(0x6b9e, 0x0) r4 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r4, r2, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 715.349479ms ago: executing program 6 (id=8911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') lseek(r2, 0xffffffffffffffff, 0x1) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000000)={0xec, 0x1, &(0x7f0000000b00)}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000031c0)={0x1, 0x0, 0x200}) 638.417466ms ago: executing program 6 (id=8912): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x0, 0x3, 0x800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 630.000727ms ago: executing program 0 (id=8913): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semctl$GETZCNT(0x0, 0x4, 0xf, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r5 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r5, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44800}}, {{&(0x7f0000000240)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES8=r4, @ANYBLOB="021f5200"], 0x18, 0x8000}}], 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r0, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r1, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 626.108728ms ago: executing program 5 (id=8914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f00000002c0)=[{0x0}], 0x1, 0x7, 0x1) 474.394563ms ago: executing program 5 (id=8915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x39}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x8c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x2000003, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0xd, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757819"], 0x65) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT=r5, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x7, 0x1}, 0x8}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) 373.045603ms ago: executing program 6 (id=8916): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d", 0x1b}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200480d4}, 0x80) 216.622788ms ago: executing program 5 (id=8917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x39}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x8c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x2000003, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0xd, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757819"], 0x65) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 203.115649ms ago: executing program 8 (id=8918): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000180)={[{@grpquota}, {@inode_readahead_blks}, {@quota}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 167.785753ms ago: executing program 1 (id=8919): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0xd9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x1]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/14, 0xe}, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r5, r1}, 0xc) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) 124.781837ms ago: executing program 8 (id=8920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x24, &(0x7f00000031c0)={0x1, 0x0, 0x200}) 47.910294ms ago: executing program 8 (id=8921): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) mmap(&(0x7f000004c000/0x2000)=nil, 0x2000, 0x8, 0x4000010, 0xffffffffffffffff, 0x71ab7000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2020, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004814}, 0x8804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r2) 47.079595ms ago: executing program 5 (id=8922): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sync() bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.241937ms ago: executing program 8 (id=8923): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=8924): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sync() bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) kernel console output (not intermixed with test programs): inode #3: comm syz.6.8658: corrupted inode contents [ 751.232093][T32389] EXT4-fs (loop0): 1 truncate cleaned up [ 751.238171][T32389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.251155][T32406] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.8658: mark_inode_dirty error [ 751.251193][T32389] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.269848][T32406] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8658: corrupted inode contents [ 751.290105][T32389] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.304278][T32406] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.8658: mark_inode_dirty error [ 751.321342][ T9885] bridge_slave_1: left allmulticast mode [ 751.327079][ T9885] bridge_slave_1: left promiscuous mode [ 751.329648][T32406] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.8658: Failed to acquire dquot type 0 [ 751.332806][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.344989][T32406] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8658: corrupted inode contents [ 751.364204][T32406] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.8658: mark_inode_dirty error [ 751.376686][ T9885] bridge_slave_0: left allmulticast mode [ 751.382382][ T9885] bridge_slave_0: left promiscuous mode [ 751.388124][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.395352][T32406] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8658: corrupted inode contents [ 751.408093][T32406] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8658: mark_inode_dirty error [ 751.431613][T32406] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8658: corrupted inode contents [ 751.449974][T32406] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 751.457494][T32428] loop0: detected capacity change from 0 to 512 [ 751.490243][T32428] EXT4-fs: Ignoring removed nobh option [ 751.496486][T32406] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8658: corrupted inode contents [ 751.521907][T32428] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8661: corrupted inode contents [ 751.534115][T32428] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8661: mark_inode_dirty error [ 751.547434][T32428] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8661: corrupted inode contents [ 751.547930][T32406] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.8658: mark_inode_dirty error [ 751.560084][T32428] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8661: mark_inode_dirty error [ 751.589342][T32406] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 751.598431][T32428] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8661: Failed to acquire dquot type 0 [ 751.629762][T32428] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8661: corrupted inode contents [ 751.642010][T32406] EXT4-fs (loop6): 1 truncate cleaned up [ 751.651736][T32406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.664306][T32406] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.674725][T32428] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8661: mark_inode_dirty error [ 751.686520][T32428] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8661: corrupted inode contents [ 751.700331][T32406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.709836][T32428] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8661: mark_inode_dirty error [ 751.721703][T32428] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8661: corrupted inode contents [ 751.750064][T32428] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 751.758916][ T9885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.777492][ T9885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.778645][T32428] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8661: corrupted inode contents [ 751.810558][ T9885] bond0 (unregistering): Released all slaves [ 751.824401][T32459] loop8: detected capacity change from 0 to 512 [ 751.832065][T32459] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 751.834159][ T9885] bond1 (unregistering): Released all slaves [ 751.843779][T32459] EXT4-fs (loop8): 1 truncate cleaned up [ 751.854257][T32459] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.868659][T32428] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8661: mark_inode_dirty error [ 751.881481][T32428] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 751.915160][T32463] loop6: detected capacity change from 0 to 512 [ 751.922611][T32463] EXT4-fs: Ignoring removed oldalloc option [ 751.931869][ T9885] bond2 (unregistering): Released all slaves [ 751.967097][T32428] EXT4-fs (loop0): 1 truncate cleaned up [ 751.991514][T32428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.024256][T32428] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.038232][T32463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.086734][ T9885] tipc: Disabling bearer [ 752.087719][T29544] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.092007][ T9885] tipc: Left network mode [ 752.112438][T32463] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 752.115254][T32428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.135144][ T9885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.142586][ T9885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.162350][ T9885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.169828][ T9885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.181001][ T9885] team0: left allmulticast mode [ 752.185871][ T9885] team_slave_0: left allmulticast mode [ 752.191925][ T9885] team_slave_1: left allmulticast mode [ 752.197474][ T9885] team0: left promiscuous mode [ 752.202644][ T9885] team_slave_0: left promiscuous mode [ 752.208070][ T9885] team_slave_1: left promiscuous mode [ 752.217024][ T9885] veth1_macvtap: left promiscuous mode [ 752.223342][ T9885] veth0_macvtap: left promiscuous mode [ 752.229011][ T9885] veth1_vlan: left promiscuous mode [ 752.234413][ T9885] veth0_vlan: left promiscuous mode [ 752.257035][T32051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.357175][ T9885] team0 (unregistering): Port device team_slave_1 removed [ 752.407144][ T9885] team0 (unregistering): Port device team_slave_0 removed [ 752.428456][T32520] netlink: 'syz.6.8671': attribute type 29 has an invalid length. [ 752.436352][T32520] netlink: 'syz.6.8671': attribute type 29 has an invalid length. [ 752.451701][T32509] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8667'. [ 752.551503][T32534] siw: device registration error -23 [ 752.557016][T32533] loop5: detected capacity change from 0 to 512 [ 752.564075][T32533] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 752.575757][T32533] EXT4-fs (loop5): 1 truncate cleaned up [ 752.582015][T32533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.627631][T27807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.664057][T32542] loop5: detected capacity change from 0 to 512 [ 752.682333][T32542] EXT4-fs: Ignoring removed nobh option [ 752.691788][T32544] loop6: detected capacity change from 0 to 512 [ 752.703770][T32544] EXT4-fs: Ignoring removed nobh option [ 752.711687][T32542] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.8679: corrupted inode contents [ 752.712970][T32550] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8683'. [ 752.724097][T32542] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.8679: mark_inode_dirty error [ 752.760333][T32544] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8681: corrupted inode contents [ 752.773178][T32542] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.8679: corrupted inode contents [ 752.787410][T32544] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.8681: mark_inode_dirty error [ 752.807467][ T9885] IPVS: stop unused estimator thread 0... [ 752.819397][T32542] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.8679: mark_inode_dirty error [ 752.831247][T32544] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8681: corrupted inode contents [ 752.843251][T32544] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.8681: mark_inode_dirty error [ 752.854738][T32544] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.8681: Failed to acquire dquot type 0 [ 752.861341][T32542] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8679: Failed to acquire dquot type 0 [ 752.877435][T32554] loop0: detected capacity change from 0 to 4096 [ 752.880005][T32542] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8679: corrupted inode contents [ 752.884420][T32554] EXT4-fs: test_dummy_encryption option not supported [ 752.898050][T32542] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.8679: mark_inode_dirty error [ 752.929429][T32542] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8679: corrupted inode contents [ 752.959226][T32542] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8679: mark_inode_dirty error [ 752.979361][T32542] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8679: corrupted inode contents [ 753.005230][T32544] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8681: corrupted inode contents [ 753.028443][T32554] xt_CT: No such helper "pptp" [ 753.029781][T32544] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.8681: mark_inode_dirty error [ 753.044650][T32542] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 753.053371][T32542] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8679: corrupted inode contents [ 753.065344][T32542] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.8679: mark_inode_dirty error [ 753.124162][T32542] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 753.124999][T32544] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8681: corrupted inode contents [ 753.133637][T32542] EXT4-fs (loop5): 1 truncate cleaned up [ 753.154155][T32542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.166839][T32542] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.179764][T32542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.188847][T32544] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8681: mark_inode_dirty error [ 753.220782][T32544] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8681: corrupted inode contents [ 753.237182][T32567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8688'. [ 753.247462][T32544] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 753.287531][T32544] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8681: corrupted inode contents [ 753.314435][T32571] loop0: detected capacity change from 0 to 512 [ 753.329654][T32544] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.8681: mark_inode_dirty error [ 753.350605][T32571] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 753.369416][T32544] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 753.380327][T32571] EXT4-fs (loop0): 1 truncate cleaned up [ 753.386414][T32571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.413440][T32544] EXT4-fs (loop6): 1 truncate cleaned up [ 753.439495][T32544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.501200][T32544] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.520880][T28782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.537305][T32544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.653783][T32586] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8694'. [ 753.776425][T32594] netlink: 'syz.6.8697': attribute type 21 has an invalid length. [ 753.875379][T32594] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8697'. [ 754.126097][ T3417] hid_parser_main: 50 callbacks suppressed [ 754.126118][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x1 [ 754.139582][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 754.146971][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 754.154392][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 754.161817][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 754.169284][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 754.176663][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 754.184083][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 754.191514][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 754.199004][ T3417] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 754.209159][ T3417] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz1 [ 754.441930][T32610] loop6: detected capacity change from 0 to 512 [ 754.449810][T32610] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 754.481193][T32610] EXT4-fs (loop6): 1 truncate cleaned up [ 754.487247][T32610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.551443][T32051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.576200][T32620] loop0: detected capacity change from 0 to 512 [ 754.590014][T32620] EXT4-fs: Ignoring removed nobh option [ 754.603726][T32623] FAULT_INJECTION: forcing a failure. [ 754.603726][T32623] name failslab, interval 1, probability 0, space 0, times 0 [ 754.616410][T32623] CPU: 0 UID: 0 PID: 32623 Comm: syz.5.8707 Not tainted syzkaller #0 PREEMPT(voluntary) [ 754.616439][T32623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 754.616450][T32623] Call Trace: [ 754.616456][T32623] [ 754.616462][T32623] __dump_stack+0x1d/0x30 [ 754.616481][T32623] dump_stack_lvl+0xe8/0x140 [ 754.616497][T32623] dump_stack+0x15/0x1b [ 754.616573][T32623] should_fail_ex+0x265/0x280 [ 754.616607][T32623] should_failslab+0x8c/0xb0 [ 754.616638][T32623] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 754.616664][T32623] ? __alloc_skb+0x101/0x320 [ 754.616716][T32623] __alloc_skb+0x101/0x320 [ 754.616738][T32623] pfkey_sendmsg+0xd7/0x900 [ 754.616766][T32623] ? avc_has_perm+0xf7/0x180 [ 754.616892][T32623] ? selinux_socket_sendmsg+0x175/0x1b0 [ 754.616917][T32623] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 754.617005][T32623] __sock_sendmsg+0x145/0x180 [ 754.617030][T32623] ____sys_sendmsg+0x31e/0x4e0 [ 754.617062][T32623] ___sys_sendmsg+0x17b/0x1d0 [ 754.617103][T32623] __x64_sys_sendmsg+0xd4/0x160 [ 754.617143][T32623] x64_sys_call+0x191e/0x3000 [ 754.617161][T32623] do_syscall_64+0xd2/0x200 [ 754.617182][T32623] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 754.617255][T32623] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 754.617360][T32623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.617446][T32623] RIP: 0033:0x7fc02cafeec9 [ 754.617461][T32623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.617482][T32623] RSP: 002b:00007fc02b55f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.617504][T32623] RAX: ffffffffffffffda RBX: 00007fc02cd55fa0 RCX: 00007fc02cafeec9 [ 754.617515][T32623] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 754.617525][T32623] RBP: 00007fc02b55f090 R08: 0000000000000000 R09: 0000000000000000 [ 754.617536][T32623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.617546][T32623] R13: 00007fc02cd56038 R14: 00007fc02cd55fa0 R15: 00007fffb4478ca8 [ 754.617607][T32623] [ 754.623630][T32624] loop6: detected capacity change from 0 to 4096 [ 754.833975][T32624] EXT4-fs: test_dummy_encryption option not supported [ 754.834332][T32620] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8705: corrupted inode contents [ 754.894226][T32620] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8705: mark_inode_dirty error [ 754.944975][T32620] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8705: corrupted inode contents [ 754.965032][T32620] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8705: mark_inode_dirty error [ 754.997556][T32633] loop1: detected capacity change from 0 to 1024 [ 755.017076][T32636] loop5: detected capacity change from 0 to 4096 [ 755.017601][T32620] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8705: Failed to acquire dquot type 0 [ 755.030973][T32636] EXT4-fs: test_dummy_encryption option not supported [ 755.039224][T32637] xt_CT: No such helper "pptp" [ 755.081351][T32620] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8705: corrupted inode contents [ 755.151929][T32620] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8705: mark_inode_dirty error [ 755.170632][T32620] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8705: corrupted inode contents [ 755.184627][T32644] netlink: 'syz.1.8714': attribute type 29 has an invalid length. [ 755.192489][T32644] netlink: 'syz.1.8714': attribute type 29 has an invalid length. [ 755.207908][T32620] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8705: mark_inode_dirty error [ 755.240068][T32620] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8705: corrupted inode contents [ 755.249290][T32636] xt_CT: No such helper "pptp" [ 755.252367][T32620] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 755.267124][T32620] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8705: corrupted inode contents [ 755.298030][T32650] loop1: detected capacity change from 0 to 512 [ 755.304647][T32620] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8705: mark_inode_dirty error [ 755.316867][T32650] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 755.326917][T32620] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 755.337186][T32620] EXT4-fs (loop0): 1 truncate cleaned up [ 755.343439][T32620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.361705][T32650] EXT4-fs (loop1): 1 truncate cleaned up [ 755.369148][ T29] kauditd_printk_skb: 900 callbacks suppressed [ 755.369161][ T29] audit: type=1326 audit(2000000259.130:72451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.399117][ T29] audit: type=1326 audit(2000000259.130:72452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.429218][T32620] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.429274][ T29] audit: type=1326 audit(2000000259.190:72453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.429305][ T29] audit: type=1326 audit(2000000259.190:72454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.440186][T32650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.463296][ T29] audit: type=1326 audit(2000000259.190:72455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.523034][ T29] audit: type=1326 audit(2000000259.190:72456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.548108][ T29] audit: type=1326 audit(2000000259.190:72457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.558617][T32620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.571713][ T29] audit: type=1326 audit(2000000259.190:72458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.604175][ T29] audit: type=1326 audit(2000000259.190:72459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.627853][ T29] audit: type=1326 audit(2000000259.190:72460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02cafeec9 code=0x7ffc0000 [ 755.780015][T32662] loop8: detected capacity change from 0 to 512 [ 755.794006][T32662] EXT4-fs: Ignoring removed nobh option [ 755.816285][T32662] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8720: corrupted inode contents [ 755.826513][T32669] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8721'. [ 755.828533][T32662] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.8720: mark_inode_dirty error [ 755.849262][T32662] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8720: corrupted inode contents [ 755.861214][T32662] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.8720: mark_inode_dirty error [ 755.875035][T32672] loop0: detected capacity change from 0 to 512 [ 755.875412][T32662] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8720: Failed to acquire dquot type 0 [ 755.885240][T32672] EXT4-fs: Ignoring removed nobh option [ 755.893374][T32662] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8720: corrupted inode contents [ 755.911093][T32662] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.8720: mark_inode_dirty error [ 755.922780][T32662] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8720: corrupted inode contents [ 755.924624][T32672] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8722: corrupted inode contents [ 755.935491][T32662] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.8720: mark_inode_dirty error [ 755.947427][T32672] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8722: mark_inode_dirty error [ 755.959420][T32662] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8720: corrupted inode contents [ 755.981818][T32662] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 755.982080][T32672] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8722: corrupted inode contents [ 755.994016][T32662] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8720: corrupted inode contents [ 756.002349][T32672] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8722: mark_inode_dirty error [ 756.016476][T32662] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.8720: mark_inode_dirty error [ 756.025754][T32672] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8722: Failed to acquire dquot type 0 [ 756.039672][T32662] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 756.050252][T32672] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8722: corrupted inode contents [ 756.058879][T32662] EXT4-fs (loop8): 1 truncate cleaned up [ 756.070629][T32672] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8722: mark_inode_dirty error [ 756.076401][T32662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.087550][T32672] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8722: corrupted inode contents [ 756.099842][T32662] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.114867][T32672] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8722: mark_inode_dirty error [ 756.123909][T32662] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.133966][T32672] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8722: corrupted inode contents [ 756.154929][T32672] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 756.166656][T30005] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.169203][T32672] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8722: corrupted inode contents [ 756.207873][T32672] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8722: mark_inode_dirty error [ 756.235395][T32672] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 756.264992][T32683] netlink: 'syz.8.8726': attribute type 29 has an invalid length. [ 756.272902][T32683] netlink: 'syz.8.8726': attribute type 29 has an invalid length. [ 756.282765][T32685] loop1: detected capacity change from 0 to 1024 [ 756.282898][T32672] EXT4-fs (loop0): 1 truncate cleaned up [ 756.290911][T32685] EXT4-fs: Ignoring removed orlov option [ 756.295728][T32672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.313126][T32685] ext4: Unknown parameter 'obj_type' [ 756.324073][T32672] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.334711][T32685] loop1: detected capacity change from 0 to 512 [ 756.335917][T32672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.345254][T32685] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 756.363724][T32685] EXT4-fs (loop1): 1 truncate cleaned up [ 756.371622][T32685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.398090][T32685] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8727'. [ 756.414506][T32690] loop5: detected capacity change from 0 to 512 [ 756.422534][T30005] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.432238][T32690] EXT4-fs: Ignoring removed nobh option [ 756.447556][T32691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 756.468765][T32690] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.8729: corrupted inode contents [ 756.483669][T32690] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.8729: mark_inode_dirty error [ 756.513053][T32697] loop1: detected capacity change from 0 to 512 [ 756.520026][T32697] EXT4-fs: Ignoring removed nobh option [ 756.527135][T32690] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.8729: corrupted inode contents [ 756.558778][T32697] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8731: corrupted inode contents [ 756.574379][T32690] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.8729: mark_inode_dirty error [ 756.575783][T32697] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.8731: mark_inode_dirty error [ 756.591734][T32702] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8732'. [ 756.597804][T32697] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8731: corrupted inode contents [ 756.618565][T32690] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8729: Failed to acquire dquot type 0 [ 756.618804][T32697] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.8731: mark_inode_dirty error [ 756.642354][T32697] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.8731: Failed to acquire dquot type 0 [ 756.649218][T32690] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8729: corrupted inode contents [ 756.654287][T32697] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8731: corrupted inode contents [ 756.678657][T32697] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.8731: mark_inode_dirty error [ 756.693049][T32690] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.8729: mark_inode_dirty error [ 756.700086][T32704] loop6: detected capacity change from 0 to 512 [ 756.711149][T32697] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8731: corrupted inode contents [ 756.723082][T32690] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8729: corrupted inode contents [ 756.723210][T32697] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8731: mark_inode_dirty error [ 756.749755][T32690] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8729: mark_inode_dirty error [ 756.761787][T32704] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 756.773140][T32704] EXT4-fs (loop6): 1 truncate cleaned up [ 756.779404][T32704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.792398][T32697] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8731: corrupted inode contents [ 756.809192][T32690] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8729: corrupted inode contents [ 756.821331][T32697] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 756.830135][T32697] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8731: corrupted inode contents [ 756.842250][T32697] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.8731: mark_inode_dirty error [ 756.853431][T32697] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 756.862652][T32697] EXT4-fs (loop1): 1 truncate cleaned up [ 756.868849][T32697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.881395][T32697] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.892809][T32697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.902470][T32690] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 756.914173][T32690] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8729: corrupted inode contents [ 756.926445][T32690] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.8729: mark_inode_dirty error [ 756.937828][T32690] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 756.947189][T32690] EXT4-fs (loop5): 1 truncate cleaned up [ 756.953607][T32690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.966255][T32690] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.977617][T32690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.068988][T32713] netlink: 'syz.5.8734': attribute type 21 has an invalid length. [ 757.085098][T32712] loop1: detected capacity change from 0 to 512 [ 757.092086][T32712] EXT4-fs: Ignoring removed nobh option [ 757.098353][T32713] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8734'. [ 757.111097][T32712] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8735: corrupted inode contents [ 757.123383][T32712] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.8735: mark_inode_dirty error [ 757.135165][T32712] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8735: corrupted inode contents [ 757.149629][T32712] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.8735: mark_inode_dirty error [ 757.161374][T32712] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.8735: Failed to acquire dquot type 0 [ 757.173238][T32712] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8735: corrupted inode contents [ 757.185555][T32712] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.8735: mark_inode_dirty error [ 757.197242][T32712] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8735: corrupted inode contents [ 757.209681][T32712] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8735: mark_inode_dirty error [ 757.221196][T32712] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8735: corrupted inode contents [ 757.233646][T32712] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 757.242360][T32712] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8735: corrupted inode contents [ 757.256390][T32712] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.8735: mark_inode_dirty error [ 757.278277][T32712] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 757.289148][T32712] EXT4-fs (loop1): 1 truncate cleaned up [ 757.295282][T32712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.307934][T32712] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.321931][T32712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.539510][T32051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.610672][T32721] FAULT_INJECTION: forcing a failure. [ 757.610672][T32721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.623875][T32721] CPU: 0 UID: 0 PID: 32721 Comm: syz.6.8737 Not tainted syzkaller #0 PREEMPT(voluntary) [ 757.623899][T32721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 757.623911][T32721] Call Trace: [ 757.623944][T32721] [ 757.623954][T32721] __dump_stack+0x1d/0x30 [ 757.624001][T32721] dump_stack_lvl+0xe8/0x140 [ 757.624024][T32721] dump_stack+0x15/0x1b [ 757.624039][T32721] should_fail_ex+0x265/0x280 [ 757.624077][T32721] should_fail+0xb/0x20 [ 757.624107][T32721] should_fail_usercopy+0x1a/0x20 [ 757.624128][T32721] _copy_to_iter+0x251/0xe70 [ 757.624185][T32721] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 757.624240][T32721] ? _raw_spin_unlock+0x26/0x50 [ 757.624276][T32721] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 757.624324][T32721] __skb_datagram_iter+0x2f4/0x690 [ 757.624417][T32721] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 757.624453][T32721] skb_copy_datagram_iter+0x3d/0x110 [ 757.624497][T32721] unix_stream_read_actor+0x43/0x70 [ 757.624526][T32721] unix_stream_read_generic+0x6b1/0x1570 [ 757.624628][T32721] ? __pfx_autoremove_wake_function+0x10/0x10 [ 757.624650][T32721] unix_stream_recvmsg+0xc3/0xf0 [ 757.624678][T32721] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 757.624706][T32721] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 757.624777][T32721] sock_recvmsg+0x139/0x170 [ 757.624802][T32721] ____sys_recvmsg+0xf5/0x280 [ 757.624842][T32721] ___sys_recvmsg+0x11f/0x370 [ 757.625025][T32721] do_recvmmsg+0x1ef/0x540 [ 757.625071][T32721] __x64_sys_recvmmsg+0xe5/0x170 [ 757.625118][T32721] x64_sys_call+0x27aa/0x3000 [ 757.625139][T32721] do_syscall_64+0xd2/0x200 [ 757.625159][T32721] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 757.625182][T32721] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 757.625202][T32721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.625269][T32721] RIP: 0033:0x7f855e00eec9 [ 757.625282][T32721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.625307][T32721] RSP: 002b:00007f855ca6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 757.625323][T32721] RAX: ffffffffffffffda RBX: 00007f855e265fa0 RCX: 00007f855e00eec9 [ 757.625335][T32721] RDX: 040000000000013c RSI: 00002000000034c0 RDI: 0000000000000005 [ 757.625346][T32721] RBP: 00007f855ca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 757.625361][T32721] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 757.625373][T32721] R13: 00007f855e266038 R14: 00007f855e265fa0 R15: 00007ffc46eb79c8 [ 757.625390][T32721] [ 757.953436][T32725] loop5: detected capacity change from 0 to 1024 [ 757.962619][T32725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.180519][T27807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.258770][T32730] loop1: detected capacity change from 0 to 512 [ 758.265776][T32730] EXT4-fs: Ignoring removed nobh option [ 758.272470][T32731] siw: device registration error -23 [ 758.288411][T32730] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8740: corrupted inode contents [ 758.301333][T32730] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.8740: mark_inode_dirty error [ 758.313384][T32730] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8740: corrupted inode contents [ 758.327804][T32730] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.8740: mark_inode_dirty error [ 758.339656][T32730] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.8740: Failed to acquire dquot type 0 [ 758.365011][T32730] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8740: corrupted inode contents [ 758.380623][T32730] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.8740: mark_inode_dirty error [ 758.406336][T32730] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8740: corrupted inode contents [ 758.435361][T32730] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8740: mark_inode_dirty error [ 758.449851][T32730] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8740: corrupted inode contents [ 758.486620][T32730] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 758.498633][T32739] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8743'. [ 758.511343][T32730] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8740: corrupted inode contents [ 758.531490][T32730] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.8740: mark_inode_dirty error [ 758.552616][T32730] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 758.569637][T32730] EXT4-fs (loop1): 1 truncate cleaned up [ 758.577103][T32730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.609538][T32730] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.625020][T32741] lo speed is unknown, defaulting to 1000 [ 758.742975][T32730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.754104][T32744] netlink: 'syz.5.8744': attribute type 21 has an invalid length. [ 758.769895][T32744] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8744'. [ 758.896066][T32747] 9pnet_fd: Insufficient options for proto=fd [ 758.998233][T32751] loop1: detected capacity change from 0 to 512 [ 759.006122][T32752] FAULT_INJECTION: forcing a failure. [ 759.006122][T32752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.019210][T32752] CPU: 1 UID: 0 PID: 32752 Comm: syz.0.8745 Not tainted syzkaller #0 PREEMPT(voluntary) [ 759.019354][T32752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 759.019367][T32752] Call Trace: [ 759.019374][T32752] [ 759.019385][T32752] __dump_stack+0x1d/0x30 [ 759.019413][T32752] dump_stack_lvl+0xe8/0x140 [ 759.019468][T32752] dump_stack+0x15/0x1b [ 759.019484][T32752] should_fail_ex+0x265/0x280 [ 759.019527][T32752] should_fail+0xb/0x20 [ 759.019654][T32752] should_fail_usercopy+0x1a/0x20 [ 759.019684][T32752] _copy_from_user+0x1c/0xb0 [ 759.019763][T32752] __copy_msghdr+0x244/0x300 [ 759.019802][T32752] ___sys_sendmsg+0x109/0x1d0 [ 759.019890][T32752] ? arch_irq_work_raise+0x46/0x50 [ 759.019998][T32752] __x64_sys_sendmsg+0xd4/0x160 [ 759.020048][T32752] x64_sys_call+0x191e/0x3000 [ 759.020160][T32752] do_syscall_64+0xd2/0x200 [ 759.020260][T32752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 759.020297][T32752] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 759.020338][T32752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.020364][T32752] RIP: 0033:0x7f6d5c01eec9 [ 759.020447][T32752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.020485][T32752] RSP: 002b:00007f6d5aa66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.020508][T32752] RAX: ffffffffffffffda RBX: 00007f6d5c276090 RCX: 00007f6d5c01eec9 [ 759.020525][T32752] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 759.020541][T32752] RBP: 00007f6d5aa66090 R08: 0000000000000000 R09: 0000000000000000 [ 759.020556][T32752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.020571][T32752] R13: 00007f6d5c276128 R14: 00007f6d5c276090 R15: 00007ffc6db46a18 [ 759.020597][T32752] [ 759.229258][T32751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 759.260270][T32751] EXT4-fs (loop1): 1 truncate cleaned up [ 759.266508][T32751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.365289][T32755] loop8: detected capacity change from 0 to 512 [ 759.371943][T32755] EXT4-fs: Ignoring removed oldalloc option [ 759.390778][T32755] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.405046][T32755] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 759.459102][T32755] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8748: bg 0: block 217: padding at end of block bitmap is not set [ 759.487099][T29544] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.566969][T32763] loop8: detected capacity change from 0 to 1024 [ 759.577484][T32763] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.605583][ T302] siw: device registration error -23 [ 759.711512][ T306] loop5: detected capacity change from 0 to 512 [ 759.719502][ T306] EXT4-fs: Ignoring removed oldalloc option [ 759.731218][ T306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.744110][ T306] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 759.779138][ T306] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8752: bg 0: block 217: padding at end of block bitmap is not set [ 759.814393][T27807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.836666][T30005] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.847091][T29544] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.300357][ T337] loop5: detected capacity change from 0 to 512 [ 760.307051][ T337] EXT4-fs: Ignoring removed oldalloc option [ 760.505915][ T337] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 760.749598][ T350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8762'. [ 760.762983][ T337] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8758: bg 0: block 217: padding at end of block bitmap is not set [ 760.803021][ T352] netlink: 'syz.0.8763': attribute type 29 has an invalid length. [ 760.810949][ T352] netlink: 'syz.0.8763': attribute type 29 has an invalid length. [ 760.836493][ T29] kauditd_printk_skb: 828 callbacks suppressed [ 760.836509][ T29] audit: type=1326 audit(2000000264.160:73277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 760.866267][ T29] audit: type=1326 audit(2000000264.160:73278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 760.889759][ T29] audit: type=1326 audit(2000000264.160:73279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 760.913192][ T29] audit: type=1326 audit(2000000264.160:73280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 760.936679][ T29] audit: type=1326 audit(2000000264.160:73281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 760.961242][ T29] audit: type=1326 audit(2000000264.160:73282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 760.984620][ T29] audit: type=1326 audit(2000000264.160:73283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 761.008034][ T29] audit: type=1326 audit(2000000264.160:73284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 761.031406][ T29] audit: type=1326 audit(2000000264.160:73285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 761.054848][ T29] audit: type=1326 audit(2000000264.160:73286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=344 comm="syz.0.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6d5c01eec9 code=0x7ffc0000 [ 761.153367][ T9903] bridge_slave_1: left allmulticast mode [ 761.159148][ T9903] bridge_slave_1: left promiscuous mode [ 761.164910][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.187247][ T355] loop1: detected capacity change from 0 to 512 [ 761.195130][ T355] EXT4-fs: Ignoring removed oldalloc option [ 761.201862][ T9903] bridge_slave_0: left allmulticast mode [ 761.207542][ T9903] bridge_slave_0: left promiscuous mode [ 761.213431][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.226931][ T359] loop0: detected capacity change from 0 to 512 [ 761.233731][ T359] EXT4-fs: Ignoring removed oldalloc option [ 761.254689][ T355] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 761.271501][ T359] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 761.290697][ T9903] bond1 (unregistering): (slave ip6gretap0): Releasing active interface [ 761.364625][ T355] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8765: bg 0: block 217: padding at end of block bitmap is not set [ 761.429240][ T9903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.438493][ T9903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.448729][ T9903] bond0 (unregistering): Released all slaves [ 761.457402][ T9903] bond1 (unregistering): Released all slaves [ 761.473916][ T9903] bond2 (unregistering): Released all slaves [ 761.482807][ T9903] bond3 (unregistering): Released all slaves [ 761.497422][ T375] loop1: detected capacity change from 0 to 512 [ 761.504411][ T375] EXT4-fs: Ignoring removed nobh option [ 761.513235][ T367] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 761.526442][ T375] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8770: corrupted inode contents [ 761.538471][ T375] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.8770: mark_inode_dirty error [ 761.551310][ T375] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8770: corrupted inode contents [ 761.563234][ T375] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.8770: mark_inode_dirty error [ 761.576195][ T375] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.8770: Failed to acquire dquot type 0 [ 761.593371][ T9903] tipc: Left network mode [ 761.602183][ T375] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8770: corrupted inode contents [ 761.630437][ T9903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.658516][ T9903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.665933][ T375] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.8770: mark_inode_dirty error [ 761.679036][ T9903] team0: left allmulticast mode [ 761.683961][ T9903] team_slave_0: left allmulticast mode [ 761.689505][ T9903] team_slave_1: left allmulticast mode [ 761.695046][ T9903] team0: left promiscuous mode [ 761.700026][ T9903] team_slave_0: left promiscuous mode [ 761.705673][ T9903] team_slave_1: left promiscuous mode [ 761.730790][ T381] loop0: detected capacity change from 0 to 512 [ 761.740304][ T381] EXT4-fs: Ignoring removed nobh option [ 761.746225][ T375] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8770: corrupted inode contents [ 761.746807][ T375] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8770: mark_inode_dirty error [ 761.747264][ T375] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8770: corrupted inode contents [ 761.747460][ T375] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 761.747818][ T375] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8770: corrupted inode contents [ 761.749584][ T375] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.8770: mark_inode_dirty error [ 761.749897][ T375] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 761.764023][ T381] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8772: corrupted inode contents [ 761.764210][ T381] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8772: mark_inode_dirty error [ 761.764601][ T381] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8772: corrupted inode contents [ 761.764766][ T381] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8772: mark_inode_dirty error [ 761.765424][ T381] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8772: Failed to acquire dquot type 0 [ 761.765593][ T375] EXT4-fs (loop1): 1 truncate cleaned up [ 761.765900][ T381] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8772: corrupted inode contents [ 761.766041][ T381] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8772: mark_inode_dirty error [ 761.766164][ T375] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.766246][ T381] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8772: corrupted inode contents [ 761.766483][ T381] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8772: mark_inode_dirty error [ 761.766750][ T381] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8772: corrupted inode contents [ 761.766934][ T381] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 761.767119][ T381] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8772: corrupted inode contents [ 761.767327][ T381] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8772: mark_inode_dirty error [ 761.767503][ T381] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 761.767904][ T381] EXT4-fs (loop0): 1 truncate cleaned up [ 761.768509][ T381] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.798234][ T9903] team0 (unregistering): Port device team_slave_1 removed [ 761.801420][ T390] netlink: 'syz.6.8775': attribute type 1 has an invalid length. [ 762.043742][ T395] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 762.058304][ T9903] team0 (unregistering): Port device team_slave_0 removed [ 762.076746][ T395] SELinux: failed to load policy [ 762.118577][ T395] loop0: detected capacity change from 0 to 512 [ 762.154434][ T395] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 762.231182][ T405] loop1: detected capacity change from 0 to 512 [ 762.238060][ T405] EXT4-fs: Ignoring removed nobh option [ 762.280028][ T395] EXT4-fs (loop0): mount failed [ 762.313022][ T407] loop6: detected capacity change from 0 to 512 [ 762.313101][T18747] hid_parser_main: 22 callbacks suppressed [ 762.313141][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x1 [ 762.320715][ T407] EXT4-fs: Ignoring removed nobh option [ 762.325153][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 762.345729][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 762.353306][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 762.360794][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 762.368192][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 762.375621][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 762.383023][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 762.390431][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x2 [ 762.397897][T18747] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 762.419493][ T407] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8781: corrupted inode contents [ 762.429363][T18747] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz1 [ 762.437802][ T405] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8780: corrupted inode contents [ 762.480845][ T407] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.8781: mark_inode_dirty error [ 762.497495][ T405] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.8780: mark_inode_dirty error [ 762.523964][ T407] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8781: corrupted inode contents [ 762.539493][ T405] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8780: corrupted inode contents [ 762.555512][ T407] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.8781: mark_inode_dirty error [ 762.555522][ T405] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.8780: mark_inode_dirty error [ 762.556056][ T405] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.8780: Failed to acquire dquot type 0 [ 762.591708][ T415] netlink: 'syz.0.8783': attribute type 29 has an invalid length. [ 762.599632][ T415] netlink: 'syz.0.8783': attribute type 29 has an invalid length. [ 762.617714][ T407] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.8781: Failed to acquire dquot type 0 [ 762.653684][ T405] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8780: corrupted inode contents [ 762.665885][ T407] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8781: corrupted inode contents [ 762.688123][ T407] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.8781: mark_inode_dirty error [ 762.711089][ T405] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.8780: mark_inode_dirty error [ 762.729871][ T407] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8781: corrupted inode contents [ 762.730814][ T405] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8780: corrupted inode contents [ 762.755173][ T423] 9pnet_fd: Insufficient options for proto=fd [ 762.761529][ T407] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8781: mark_inode_dirty error [ 762.784062][ T407] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8781: corrupted inode contents [ 762.822795][ T407] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 762.828593][ T426] FAULT_INJECTION: forcing a failure. [ 762.828593][ T426] name failslab, interval 1, probability 0, space 0, times 0 [ 762.839765][ T405] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8780: mark_inode_dirty error [ 762.844094][ T426] CPU: 0 UID: 0 PID: 426 Comm: syz.5.8788 Not tainted syzkaller #0 PREEMPT(voluntary) [ 762.844137][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 762.844156][ T426] Call Trace: [ 762.844166][ T426] [ 762.844179][ T426] __dump_stack+0x1d/0x30 [ 762.844212][ T426] dump_stack_lvl+0xe8/0x140 [ 762.844251][ T426] dump_stack+0x15/0x1b [ 762.844348][ T426] should_fail_ex+0x265/0x280 [ 762.844400][ T426] should_failslab+0x8c/0xb0 [ 762.844492][ T426] __kmalloc_noprof+0xa5/0x570 [ 762.844532][ T426] ? io_cache_alloc_new+0x2a/0xb0 [ 762.844580][ T426] io_cache_alloc_new+0x2a/0xb0 [ 762.844616][ T426] io_uring_cmd_prep+0x1cd/0x240 [ 762.844673][ T426] io_submit_sqes+0x5ef/0x1060 [ 762.844732][ T426] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 762.844865][ T426] ? 0xffffffff81000000 [ 762.845005][ T426] ? __rcu_read_unlock+0x4f/0x70 [ 762.845085][ T426] ? get_pid_task+0x96/0xd0 [ 762.845118][ T426] ? sized_strscpy+0x193/0x1a0 [ 762.845222][ T426] ? bpf_get_current_comm+0x7c/0xb0 [ 762.845265][ T426] ? __rcu_read_unlock+0x4f/0x70 [ 762.845301][ T426] ? bpf_trace_run2+0x124/0x1c0 [ 762.845348][ T426] ? __bpf_trace_sys_enter+0x10/0x30 [ 762.845440][ T426] __x64_sys_io_uring_enter+0x78/0x90 [ 762.845491][ T426] x64_sys_call+0x2df0/0x3000 [ 762.845525][ T426] do_syscall_64+0xd2/0x200 [ 762.845612][ T426] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 762.845651][ T426] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 762.845747][ T426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.845780][ T426] RIP: 0033:0x7fc02cafeec9 [ 762.845800][ T426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.845874][ T426] RSP: 002b:00007fc02b55f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 762.845901][ T426] RAX: ffffffffffffffda RBX: 00007fc02cd55fa0 RCX: 00007fc02cafeec9 [ 762.845919][ T426] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000005 [ 762.845938][ T426] RBP: 00007fc02b55f090 R08: 0000000000000000 R09: 0000000000000000 [ 762.845956][ T426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.845973][ T426] R13: 00007fc02cd56038 R14: 00007fc02cd55fa0 R15: 00007fffb4478ca8 [ 762.846005][ T426] [ 763.069307][ T407] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8781: corrupted inode contents [ 763.070898][ T405] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8780: corrupted inode contents [ 763.140128][ T407] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.8781: mark_inode_dirty error [ 763.172332][ T407] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 763.199604][ T407] EXT4-fs (loop6): 1 truncate cleaned up [ 763.263042][ T407] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.269618][ T431] SELinux: failed to load policy [ 763.278489][ T405] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 763.290740][ T405] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8780: corrupted inode contents [ 763.305453][ T405] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.8780: mark_inode_dirty error [ 763.318071][ T405] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 763.328329][ T405] EXT4-fs (loop1): 1 truncate cleaned up [ 763.335348][ T405] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.518475][ T436] loop6: detected capacity change from 0 to 512 [ 763.572132][ T436] EXT4-fs: Ignoring removed nobh option [ 763.619931][ T436] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8792: corrupted inode contents [ 763.634294][ T436] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.8792: mark_inode_dirty error [ 763.647143][ T436] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8792: corrupted inode contents [ 763.659524][ T436] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.8792: mark_inode_dirty error [ 763.671329][ T450] lo speed is unknown, defaulting to 1000 [ 763.677282][ T450] lo speed is unknown, defaulting to 1000 [ 763.683403][ T450] lo speed is unknown, defaulting to 1000 [ 763.690953][ T450] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 763.700364][ T436] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.8792: Failed to acquire dquot type 0 [ 763.717666][ T436] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8792: corrupted inode contents [ 763.730705][ T450] lo speed is unknown, defaulting to 1000 [ 763.744062][ T450] lo speed is unknown, defaulting to 1000 [ 763.754804][ T450] lo speed is unknown, defaulting to 1000 [ 763.760942][ T436] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.8792: mark_inode_dirty error [ 763.772899][ T450] lo speed is unknown, defaulting to 1000 [ 763.779157][ T450] lo speed is unknown, defaulting to 1000 [ 763.785274][ T436] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8792: corrupted inode contents [ 763.797975][ T450] lo speed is unknown, defaulting to 1000 [ 763.804329][ T450] lo speed is unknown, defaulting to 1000 [ 763.810612][ T436] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8792: mark_inode_dirty error [ 763.822426][ T450] lo speed is unknown, defaulting to 1000 [ 763.828879][ T436] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8792: corrupted inode contents [ 763.873798][ T436] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 763.888799][ T452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8795'. [ 763.898206][ T436] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8792: corrupted inode contents [ 763.918334][ T436] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.8792: mark_inode_dirty error [ 763.986321][ T454] loop1: detected capacity change from 0 to 4096 [ 763.994761][ T454] EXT4-fs: test_dummy_encryption option not supported [ 764.001221][ T436] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 764.111527][ T436] EXT4-fs (loop6): 1 truncate cleaned up [ 764.122312][ T436] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.161283][ T467] FAULT_INJECTION: forcing a failure. [ 764.161283][ T467] name failslab, interval 1, probability 0, space 0, times 0 [ 764.173975][ T467] CPU: 1 UID: 0 PID: 467 Comm: syz.8.8799 Not tainted syzkaller #0 PREEMPT(voluntary) [ 764.174003][ T467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 764.174019][ T467] Call Trace: [ 764.174026][ T467] [ 764.174054][ T467] __dump_stack+0x1d/0x30 [ 764.174079][ T467] dump_stack_lvl+0xe8/0x140 [ 764.174102][ T467] dump_stack+0x15/0x1b [ 764.174121][ T467] should_fail_ex+0x265/0x280 [ 764.174219][ T467] should_failslab+0x8c/0xb0 [ 764.174266][ T467] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 764.174300][ T467] ? __alloc_skb+0x101/0x320 [ 764.174322][ T467] __alloc_skb+0x101/0x320 [ 764.174344][ T467] netlink_alloc_large_skb+0xbf/0xf0 [ 764.174401][ T467] netlink_sendmsg+0x3cf/0x6b0 [ 764.174439][ T467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.174474][ T467] __sock_sendmsg+0x145/0x180 [ 764.174565][ T467] ____sys_sendmsg+0x31e/0x4e0 [ 764.174604][ T467] ___sys_sendmsg+0x17b/0x1d0 [ 764.174656][ T467] __x64_sys_sendmsg+0xd4/0x160 [ 764.174713][ T467] x64_sys_call+0x191e/0x3000 [ 764.174732][ T467] do_syscall_64+0xd2/0x200 [ 764.174757][ T467] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 764.174819][ T467] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 764.174846][ T467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.174870][ T467] RIP: 0033:0x7ff3cb50eec9 [ 764.174887][ T467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.174921][ T467] RSP: 002b:00007ff3c9f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.174939][ T467] RAX: ffffffffffffffda RBX: 00007ff3cb765fa0 RCX: 00007ff3cb50eec9 [ 764.174955][ T467] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 764.174971][ T467] RBP: 00007ff3c9f77090 R08: 0000000000000000 R09: 0000000000000000 [ 764.174986][ T467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.175065][ T467] R13: 00007ff3cb766038 R14: 00007ff3cb765fa0 R15: 00007ffe11b1b3e8 [ 764.175084][ T467] [ 764.397975][ T470] xt_CT: No such helper "pptp" [ 764.404118][ T469] loop0: detected capacity change from 0 to 512 [ 764.411635][ T469] EXT4-fs: Ignoring removed nobh option [ 764.432206][ T469] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8801: corrupted inode contents [ 764.449367][ T469] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8801: mark_inode_dirty error [ 764.458999][ T474] loop8: detected capacity change from 0 to 1024 [ 764.461148][ T469] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8801: corrupted inode contents [ 764.478935][ T469] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8801: mark_inode_dirty error [ 764.491280][ T469] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8801: Failed to acquire dquot type 0 [ 764.498837][ T474] EXT4-fs: Ignoring removed orlov option [ 764.504798][ T469] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8801: corrupted inode contents [ 764.523022][ T474] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 764.533228][ T469] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8801: mark_inode_dirty error [ 764.559753][ T479] loop6: detected capacity change from 0 to 512 [ 764.566776][ T479] EXT4-fs: Ignoring removed nobh option [ 764.579496][ T469] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8801: corrupted inode contents [ 764.598197][ T474] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 764.610663][ T474] EXT4-fs (loop8): This should not happen!! Data will be lost [ 764.610663][ T474] [ 764.620417][ T474] EXT4-fs (loop8): Total free blocks count 0 [ 764.626400][ T474] EXT4-fs (loop8): Free/Dirty block details [ 764.632426][ T474] EXT4-fs (loop8): free_blocks=0 [ 764.637390][ T474] EXT4-fs (loop8): dirty_blocks=0 [ 764.642455][ T474] EXT4-fs (loop8): Block reservation details [ 764.648531][ T474] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 764.658762][ T479] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8804: corrupted inode contents [ 764.670602][ T469] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8801: mark_inode_dirty error [ 764.686331][ T479] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.8804: mark_inode_dirty error [ 764.708003][ T469] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8801: corrupted inode contents [ 764.720191][ T479] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8804: corrupted inode contents [ 764.732160][ T469] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 764.741007][ T479] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.8804: mark_inode_dirty error [ 764.752548][ T469] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8801: corrupted inode contents [ 764.765834][ T479] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.8804: Failed to acquire dquot type 0 [ 764.777364][ T469] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8801: mark_inode_dirty error [ 764.788647][ T469] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 764.798184][ T469] EXT4-fs (loop0): 1 truncate cleaned up [ 764.804451][ T479] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8804: corrupted inode contents [ 764.817184][ T469] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.827793][ T479] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.8804: mark_inode_dirty error [ 764.863311][ T489] loop8: detected capacity change from 0 to 512 [ 764.872819][ T489] EXT4-fs: Ignoring removed oldalloc option [ 764.879923][ T479] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8804: corrupted inode contents [ 764.901118][ T489] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 764.923451][ T479] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8804: mark_inode_dirty error [ 764.965132][ T494] loop0: detected capacity change from 0 to 1024 [ 764.994191][ T498] loop8: detected capacity change from 0 to 512 [ 765.002193][ T479] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8804: corrupted inode contents [ 765.066750][ T479] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 765.082037][ T498] EXT4-fs: Ignoring removed nobh option [ 765.102242][ T479] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8804: corrupted inode contents [ 765.127457][ T479] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.8804: mark_inode_dirty error [ 765.151641][ T507] loop1: detected capacity change from 0 to 128 [ 765.160879][ T498] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8809: corrupted inode contents [ 765.163151][ T512] loop5: detected capacity change from 0 to 512 [ 765.179872][ T512] EXT4-fs: Ignoring removed nobh option [ 765.186230][ T479] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 765.196067][ T498] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.8809: mark_inode_dirty error [ 765.196695][ T479] EXT4-fs (loop6): 1 truncate cleaned up [ 765.207497][ T507] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 765.224386][ T479] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.236402][ T498] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8809: corrupted inode contents [ 765.254423][ T498] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.8809: mark_inode_dirty error [ 765.266592][ T512] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.8813: corrupted inode contents [ 765.279043][ T512] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.8813: mark_inode_dirty error [ 765.294989][ T512] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.8813: corrupted inode contents [ 765.299461][ T498] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8809: Failed to acquire dquot type 0 [ 765.308219][ T512] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.8813: mark_inode_dirty error [ 765.327117][ T498] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8809: corrupted inode contents [ 765.336805][ T512] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8813: Failed to acquire dquot type 0 [ 765.347163][ T518] loop1: detected capacity change from 0 to 1024 [ 765.354183][ T512] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8813: corrupted inode contents [ 765.371967][ T512] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.8813: mark_inode_dirty error [ 765.372554][ T498] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.8809: mark_inode_dirty error [ 765.383583][ T512] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8813: corrupted inode contents [ 765.415543][ T512] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8813: mark_inode_dirty error [ 765.427385][ T512] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8813: corrupted inode contents [ 765.430741][ T498] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8809: corrupted inode contents [ 765.442174][ T512] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 765.464354][ T521] netlink: 'syz.6.8815': attribute type 21 has an invalid length. [ 765.470594][ T512] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8813: corrupted inode contents [ 765.472372][ T521] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8815'. [ 765.496074][ T498] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.8809: mark_inode_dirty error [ 765.507851][ T512] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.8813: mark_inode_dirty error [ 765.528572][ T512] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 765.537885][ T498] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8809: corrupted inode contents [ 765.553106][ T498] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 765.562409][ T512] EXT4-fs (loop5): 1 truncate cleaned up [ 765.568579][ T512] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.580019][ T498] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8809: corrupted inode contents [ 765.610331][ T498] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.8809: mark_inode_dirty error [ 765.630279][ T498] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 765.652725][ T498] EXT4-fs (loop8): 1 truncate cleaned up [ 765.675788][ T524] loop5: detected capacity change from 0 to 256 [ 765.683196][ T524] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 765.695585][ T498] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.723549][ T526] loop0: detected capacity change from 0 to 512 [ 765.730822][ T526] EXT4-fs: Ignoring removed nobh option [ 765.737488][ T524] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 765.750271][ T526] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8817: corrupted inode contents [ 765.772744][ T526] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8817: mark_inode_dirty error [ 765.786392][ T526] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8817: corrupted inode contents [ 765.798633][ T526] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8817: mark_inode_dirty error [ 765.810532][ T526] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8817: Failed to acquire dquot type 0 [ 765.822631][ T526] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8817: corrupted inode contents [ 765.834772][ T526] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8817: mark_inode_dirty error [ 765.846414][ T526] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8817: corrupted inode contents [ 765.855783][ T29] kauditd_printk_skb: 1199 callbacks suppressed [ 765.855863][ T29] audit: type=1326 audit(2000000269.610:74465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 765.859060][ T526] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8817: mark_inode_dirty error [ 765.867060][ T29] audit: type=1326 audit(2000000269.630:74466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 765.924251][ T29] audit: type=1326 audit(2000000269.630:74467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 765.947811][ T29] audit: type=1326 audit(2000000269.630:74468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 765.971529][ T29] audit: type=1326 audit(2000000269.630:74469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 765.994967][ T29] audit: type=1326 audit(2000000269.630:74470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 766.018394][ T29] audit: type=1326 audit(2000000269.630:74471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 766.053232][ T532] loop8: detected capacity change from 0 to 4096 [ 766.059910][ T526] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8817: corrupted inode contents [ 766.072576][ T532] EXT4-fs: test_dummy_encryption option not supported [ 766.079888][ T534] loop5: detected capacity change from 0 to 256 [ 766.088520][ T534] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 766.102228][ T526] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 766.110974][ T29] audit: type=1326 audit(2000000269.660:74472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 766.111350][ T526] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8817: corrupted inode contents [ 766.134529][ T29] audit: type=1326 audit(2000000269.660:74473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 766.134569][ T29] audit: type=1326 audit(2000000269.660:74474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=497 comm="syz.8.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 766.179482][ T534] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 766.214307][ T530] FAULT_INJECTION: forcing a failure. [ 766.214307][ T530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.227439][ T530] CPU: 0 UID: 0 PID: 530 Comm: syz.5.8818 Not tainted syzkaller #0 PREEMPT(voluntary) [ 766.227471][ T530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 766.227525][ T530] Call Trace: [ 766.227531][ T530] [ 766.227617][ T530] __dump_stack+0x1d/0x30 [ 766.227642][ T530] dump_stack_lvl+0xe8/0x140 [ 766.227668][ T530] dump_stack+0x15/0x1b [ 766.227775][ T530] should_fail_ex+0x265/0x280 [ 766.227821][ T530] should_fail+0xb/0x20 [ 766.227861][ T530] should_fail_usercopy+0x1a/0x20 [ 766.227886][ T530] _copy_to_user+0x20/0xa0 [ 766.227944][ T530] simple_read_from_buffer+0xb5/0x130 [ 766.227974][ T530] proc_fail_nth_read+0x10e/0x150 [ 766.228014][ T530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 766.228111][ T530] vfs_read+0x1a8/0x770 [ 766.228150][ T530] ? __rcu_read_unlock+0x4f/0x70 [ 766.228213][ T530] ? __fget_files+0x184/0x1c0 [ 766.228327][ T530] ksys_read+0xda/0x1a0 [ 766.228360][ T530] __x64_sys_read+0x40/0x50 [ 766.228392][ T530] x64_sys_call+0x27c0/0x3000 [ 766.228494][ T530] do_syscall_64+0xd2/0x200 [ 766.228527][ T530] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 766.228611][ T530] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 766.228640][ T530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.228668][ T530] RIP: 0033:0x7fc02cafd8dc [ 766.228755][ T530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 766.228780][ T530] RSP: 002b:00007fc02b55f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 766.228805][ T530] RAX: ffffffffffffffda RBX: 00007fc02cd55fa0 RCX: 00007fc02cafd8dc [ 766.228822][ T530] RDX: 000000000000000f RSI: 00007fc02b55f0a0 RDI: 0000000000000004 [ 766.228835][ T530] RBP: 00007fc02b55f090 R08: 0000000000000000 R09: 0000000000000000 [ 766.228847][ T530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.228859][ T530] R13: 00007fc02cd56038 R14: 00007fc02cd55fa0 R15: 00007fffb4478ca8 [ 766.228879][ T530] [ 766.426961][ T526] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8817: mark_inode_dirty error [ 766.440876][ T526] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 766.451837][ T538] xt_CT: No such helper "pptp" [ 766.458897][ T526] EXT4-fs (loop0): 1 truncate cleaned up [ 766.465116][ T526] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.546568][ T548] loop0: detected capacity change from 0 to 4096 [ 766.553277][ T539] loop6: detected capacity change from 0 to 1024 [ 766.553788][ T548] EXT4-fs: test_dummy_encryption option not supported [ 766.659514][ T552] siw: device registration error -23 [ 766.745259][ T555] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8826'. [ 766.775002][ T555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8826'. [ 766.804409][ T557] loop0: detected capacity change from 0 to 512 [ 766.811620][ T557] EXT4-fs: Ignoring removed nobh option [ 766.831281][ T557] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8827: corrupted inode contents [ 766.843377][ T555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8826'. [ 766.864045][ T557] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8827: mark_inode_dirty error [ 766.882532][ T557] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8827: corrupted inode contents [ 766.916460][ T557] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8827: mark_inode_dirty error [ 766.941006][ T557] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8827: Failed to acquire dquot type 0 [ 766.979749][ T557] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8827: corrupted inode contents [ 767.019191][ T557] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8827: mark_inode_dirty error [ 767.045552][ T557] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8827: corrupted inode contents [ 767.063242][ T555] lo speed is unknown, defaulting to 1000 [ 767.073999][ T557] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8827: mark_inode_dirty error [ 767.109122][ T557] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8827: corrupted inode contents [ 767.122981][ T557] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 767.189130][ T557] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8827: corrupted inode contents [ 767.204920][ T557] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8827: mark_inode_dirty error [ 767.229382][ T557] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 767.249525][ T557] EXT4-fs (loop0): 1 truncate cleaned up [ 767.255626][ T557] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.483808][ T601] loop0: detected capacity change from 0 to 512 [ 767.504713][ T601] EXT4-fs: Ignoring removed nobh option [ 768.409849][ T601] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8830: corrupted inode contents [ 768.438035][ T601] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8830: mark_inode_dirty error [ 768.453362][ T646] loop6: detected capacity change from 0 to 512 [ 768.462826][ T646] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 768.473255][ T601] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8830: corrupted inode contents [ 768.486841][ T646] EXT4-fs (loop6): 1 truncate cleaned up [ 768.489155][ T601] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8830: mark_inode_dirty error [ 768.508907][ T648] loop8: detected capacity change from 0 to 1024 [ 768.516389][ T601] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8830: Failed to acquire dquot type 0 [ 768.539914][ T601] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8830: corrupted inode contents [ 768.552249][ T601] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8830: mark_inode_dirty error [ 768.573921][ T601] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8830: corrupted inode contents [ 768.641353][ T601] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8830: mark_inode_dirty error [ 768.681097][ T601] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8830: corrupted inode contents [ 768.709606][ T601] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 768.738328][ T601] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8830: corrupted inode contents [ 768.761799][ T601] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8830: mark_inode_dirty error [ 768.777410][ T601] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 768.794653][ T601] EXT4-fs (loop0): 1 truncate cleaned up [ 768.801148][ T601] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.814121][ T657] loop1: detected capacity change from 0 to 512 [ 768.821931][ T657] EXT4-fs: Ignoring removed nobh option [ 768.841754][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8838: corrupted inode contents [ 768.854163][ T657] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.8838: mark_inode_dirty error [ 768.874693][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.8838: corrupted inode contents [ 768.906230][ T657] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.8838: mark_inode_dirty error [ 768.932976][ T657] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.8838: Failed to acquire dquot type 0 [ 768.983403][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8838: corrupted inode contents [ 769.025572][ T657] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.8838: mark_inode_dirty error [ 769.053983][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8838: corrupted inode contents [ 769.066152][ T657] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8838: mark_inode_dirty error [ 769.077733][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8838: corrupted inode contents [ 769.090113][ T657] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 769.099910][ T657] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8838: corrupted inode contents [ 769.112156][ T657] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.8838: mark_inode_dirty error [ 769.123632][ T657] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 769.133889][ T657] EXT4-fs (loop1): 1 truncate cleaned up [ 769.145617][ T657] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.181746][ T681] 9pnet_fd: Insufficient options for proto=fd [ 769.245687][ T688] loop8: detected capacity change from 0 to 512 [ 769.252879][ T688] EXT4-fs: Ignoring removed nobh option [ 769.284602][ T693] loop1: detected capacity change from 0 to 1024 [ 769.293252][ T688] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8849: corrupted inode contents [ 769.298812][ T690] loop0: detected capacity change from 0 to 512 [ 769.305380][ T688] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.8849: mark_inode_dirty error [ 769.312562][ T690] EXT4-fs: Ignoring removed nobh option [ 769.328502][ T688] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8849: corrupted inode contents [ 769.352152][ T688] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.8849: mark_inode_dirty error [ 769.370140][ T688] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8849: Failed to acquire dquot type 0 [ 769.391722][ T688] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8849: corrupted inode contents [ 769.404677][ T688] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.8849: mark_inode_dirty error [ 769.416529][ T688] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8849: corrupted inode contents [ 769.416777][ T690] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8850: corrupted inode contents [ 769.429389][ T688] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.8849: mark_inode_dirty error [ 769.452321][ T688] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8849: corrupted inode contents [ 769.464406][ T703] siw: device registration error -23 [ 769.470644][ T690] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8850: mark_inode_dirty error [ 769.481951][ T688] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 769.501754][ T688] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8849: corrupted inode contents [ 769.509955][ T690] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8850: corrupted inode contents [ 769.514044][ T688] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.8849: mark_inode_dirty error [ 769.537530][ T690] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8850: mark_inode_dirty error [ 769.537688][ T688] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 769.558496][ T688] EXT4-fs (loop8): 1 truncate cleaned up [ 769.558538][ T690] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8850: Failed to acquire dquot type 0 [ 769.565019][ T688] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.576953][ T690] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8850: corrupted inode contents [ 769.601271][ T690] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8850: mark_inode_dirty error [ 769.632064][ T690] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8850: corrupted inode contents [ 769.652337][ T690] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8850: mark_inode_dirty error [ 769.664388][ T690] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8850: corrupted inode contents [ 769.676555][ T690] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 769.681959][ T9] hid_parser_main: 20 callbacks suppressed [ 769.681982][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x1 [ 769.685565][ T690] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8850: corrupted inode contents [ 769.690941][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 769.690968][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 769.698576][ T690] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8850: mark_inode_dirty error [ 769.710182][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 769.736632][ T690] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 769.743338][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 769.759595][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 769.767010][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 769.774421][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 769.781843][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x2 [ 769.788847][ T690] EXT4-fs (loop0): 1 truncate cleaned up [ 769.789276][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 769.803665][ T690] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.850919][ T9] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz1 [ 769.861265][ T710] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8855'. [ 769.888164][ T714] program syz.5.8857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 769.889873][ T712] loop0: detected capacity change from 0 to 512 [ 769.904347][ T712] EXT4-fs: Ignoring removed nobh option [ 769.931278][ T716] loop5: detected capacity change from 0 to 512 [ 769.938256][ T712] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8856: corrupted inode contents [ 769.938599][ T716] EXT4-fs: Ignoring removed nobh option [ 769.952531][ T712] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8856: mark_inode_dirty error [ 769.967909][ T712] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8856: corrupted inode contents [ 769.980492][ T712] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8856: mark_inode_dirty error [ 769.994262][ T712] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8856: Failed to acquire dquot type 0 [ 770.006114][ T712] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8856: corrupted inode contents [ 770.022958][ T716] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.8858: corrupted inode contents [ 770.026513][ T712] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8856: mark_inode_dirty error [ 770.035415][ T716] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.8858: mark_inode_dirty error [ 770.048781][ T712] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8856: corrupted inode contents [ 770.069657][ T725] loop8: detected capacity change from 0 to 1024 [ 770.071772][ T712] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8856: mark_inode_dirty error [ 770.077526][ T716] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.8858: corrupted inode contents [ 770.087945][ T712] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8856: corrupted inode contents [ 770.111637][ T716] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.8858: mark_inode_dirty error [ 770.123960][ T712] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 770.138483][ T728] loop1: detected capacity change from 0 to 512 [ 770.145791][ T728] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 770.152315][ T712] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8856: corrupted inode contents [ 770.168720][ T716] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8858: Failed to acquire dquot type 0 [ 770.180302][ T712] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8856: mark_inode_dirty error [ 770.181701][ T716] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8858: corrupted inode contents [ 770.204745][ T728] EXT4-fs (loop1): 1 truncate cleaned up [ 770.211350][ T712] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 770.220365][ T716] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.8858: mark_inode_dirty error [ 770.232121][ T712] EXT4-fs (loop0): 1 truncate cleaned up [ 770.238355][ T716] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8858: corrupted inode contents [ 770.250428][ T712] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.262292][ T716] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8858: mark_inode_dirty error [ 770.273985][ T716] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8858: corrupted inode contents [ 770.286193][ T716] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 770.295719][ T716] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.8858: corrupted inode contents [ 770.307890][ T716] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.8858: mark_inode_dirty error [ 770.319306][ T716] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 770.329455][ T716] EXT4-fs (loop5): 1 truncate cleaned up [ 770.340049][ T716] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.414882][ T734] loop0: detected capacity change from 0 to 4096 [ 770.427123][ T734] EXT4-fs: test_dummy_encryption option not supported [ 770.670224][ T741] xt_CT: No such helper "pptp" [ 770.728319][ T749] loop8: detected capacity change from 0 to 512 [ 770.735285][ T749] EXT4-fs: Ignoring removed nobh option [ 770.761891][ T749] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8867: corrupted inode contents [ 770.774100][ T749] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.8867: mark_inode_dirty error [ 770.786010][ T749] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8867: corrupted inode contents [ 770.798213][ T749] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.8867: mark_inode_dirty error [ 770.809989][ T749] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8867: Failed to acquire dquot type 0 [ 770.821778][ T749] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8867: corrupted inode contents [ 770.834339][ T749] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.8867: mark_inode_dirty error [ 770.845939][ T749] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8867: corrupted inode contents [ 770.859483][ T749] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.8867: mark_inode_dirty error [ 770.871047][ T749] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8867: corrupted inode contents [ 770.883207][ T749] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 770.891975][ T749] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8867: corrupted inode contents [ 770.904110][ T749] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.8867: mark_inode_dirty error [ 770.916124][ T749] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 770.925509][ T749] EXT4-fs (loop8): 1 truncate cleaned up [ 770.932005][ T749] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.945303][ T29] kauditd_printk_skb: 1121 callbacks suppressed [ 770.945384][ T29] audit: type=1326 audit(2000000274.710:75580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3cb50d710 code=0x7ffc0000 [ 770.975407][ T29] audit: type=1326 audit(2000000274.710:75581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3cb50eacb code=0x7ffc0000 [ 770.998781][ T29] audit: type=1326 audit(2000000274.710:75582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff3cb50db2a code=0x7ffc0000 [ 771.022051][ T29] audit: type=1326 audit(2000000274.710:75583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 771.045515][ T29] audit: type=1326 audit(2000000274.710:75584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 771.069015][ T29] audit: type=1326 audit(2000000274.710:75585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 771.092472][ T29] audit: type=1326 audit(2000000274.710:75586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 771.115881][ T29] audit: type=1326 audit(2000000274.710:75587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 771.139291][ T29] audit: type=1326 audit(2000000274.710:75588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 771.162690][ T29] audit: type=1326 audit(2000000274.710:75589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.8.8867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb50eec9 code=0x7ffc0000 [ 771.304590][ T759] loop8: detected capacity change from 0 to 512 [ 771.311316][ T759] EXT4-fs: Ignoring removed oldalloc option [ 771.327529][ T757] loop1: detected capacity change from 0 to 1024 [ 771.342088][ T759] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 771.420227][ T759] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8871: bg 0: block 217: padding at end of block bitmap is not set [ 771.620040][ T770] loop8: detected capacity change from 0 to 512 [ 771.637822][ T770] EXT4-fs: Ignoring removed nobh option [ 771.660793][ T770] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8873: corrupted inode contents [ 771.679310][ T770] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.8873: mark_inode_dirty error [ 771.694527][ T770] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8873: corrupted inode contents [ 771.716729][ T770] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.8873: mark_inode_dirty error [ 771.728426][ T770] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8873: Failed to acquire dquot type 0 [ 771.740616][ T770] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8873: corrupted inode contents [ 771.753876][ T770] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.8873: mark_inode_dirty error [ 771.765480][ T770] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8873: corrupted inode contents [ 771.777787][ T770] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.8873: mark_inode_dirty error [ 771.797843][ T770] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8873: corrupted inode contents [ 771.811118][ T770] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 771.830904][ T770] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8873: corrupted inode contents [ 771.832701][ T774] loop1: detected capacity change from 0 to 512 [ 771.849600][ T774] EXT4-fs: Ignoring removed oldalloc option [ 771.855650][ T770] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.8873: mark_inode_dirty error [ 771.868164][ T770] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 771.881086][ T774] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 771.891668][ T770] EXT4-fs (loop8): 1 truncate cleaned up [ 771.897771][ T770] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.909199][ T774] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8874: bg 0: block 217: padding at end of block bitmap is not set [ 771.988919][ T782] loop8: detected capacity change from 0 to 1024 [ 771.996260][ T782] EXT4-fs: Ignoring removed orlov option [ 772.002731][ T782] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 772.018360][ T780] loop1: detected capacity change from 0 to 1024 [ 772.090872][ T782] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 772.103331][ T782] EXT4-fs (loop8): This should not happen!! Data will be lost [ 772.103331][ T782] [ 772.113096][ T782] EXT4-fs (loop8): Total free blocks count 0 [ 772.119139][ T782] EXT4-fs (loop8): Free/Dirty block details [ 772.125135][ T782] EXT4-fs (loop8): free_blocks=0 [ 772.130111][ T782] EXT4-fs (loop8): dirty_blocks=0 [ 772.135144][ T782] EXT4-fs (loop8): Block reservation details [ 772.141267][ T782] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 772.274165][ T790] loop8: detected capacity change from 0 to 512 [ 772.288784][ T788] loop0: detected capacity change from 0 to 512 [ 772.295617][ T790] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 772.306134][ T788] EXT4-fs: Ignoring removed nobh option [ 772.314499][ T790] EXT4-fs (loop8): 1 truncate cleaned up [ 772.340573][ T788] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8878: corrupted inode contents [ 772.352672][ T788] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8878: mark_inode_dirty error [ 772.364411][ T788] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8878: corrupted inode contents [ 772.376339][ T788] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8878: mark_inode_dirty error [ 772.399409][ T788] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8878: Failed to acquire dquot type 0 [ 772.421410][ T788] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8878: corrupted inode contents [ 772.434064][ T788] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8878: mark_inode_dirty error [ 772.445785][ T788] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8878: corrupted inode contents [ 772.458066][ T788] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8878: mark_inode_dirty error [ 772.469664][ T788] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8878: corrupted inode contents [ 772.481761][ T788] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 772.490464][ T788] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8878: corrupted inode contents [ 772.502548][ T788] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8878: mark_inode_dirty error [ 772.514055][ T788] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 772.524245][ T788] EXT4-fs (loop0): 1 truncate cleaned up [ 772.536836][ T788] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.700274][ T804] loop6: detected capacity change from 0 to 512 [ 772.725841][ T804] EXT4-fs: Ignoring removed nobh option [ 772.748076][ T807] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 772.757213][ T807] SELinux: failed to load policy [ 772.763739][ T804] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8883: corrupted inode contents [ 772.780310][ T807] loop1: detected capacity change from 0 to 512 [ 772.788901][ T804] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.8883: mark_inode_dirty error [ 772.801966][ T807] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 772.817007][ T804] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8883: corrupted inode contents [ 772.829245][ T804] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.8883: mark_inode_dirty error [ 772.829457][ T807] EXT4-fs (loop1): mount failed [ 772.850367][ T804] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.8883: Failed to acquire dquot type 0 [ 772.865351][ T804] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8883: corrupted inode contents [ 772.877489][ T804] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.8883: mark_inode_dirty error [ 772.890304][ T804] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8883: corrupted inode contents [ 772.902563][ T804] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8883: mark_inode_dirty error [ 772.914729][ T804] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8883: corrupted inode contents [ 772.927174][ T804] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 772.936031][ T804] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8883: corrupted inode contents [ 772.948108][ T804] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.8883: mark_inode_dirty error [ 772.959447][ T804] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 772.977413][ T804] EXT4-fs (loop6): 1 truncate cleaned up [ 772.983913][ T804] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.181492][ T819] loop8: detected capacity change from 0 to 512 [ 773.188419][ T819] EXT4-fs: Ignoring removed oldalloc option [ 773.316769][ T819] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 773.344641][ T830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8887'. [ 773.364259][ T832] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8889'. [ 773.403270][ T819] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8886: bg 0: block 217: padding at end of block bitmap is not set [ 773.430794][ T832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8889'. [ 773.475011][ T832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8889'. [ 773.592851][ T835] loop6: detected capacity change from 0 to 4096 [ 773.642682][ T835] EXT4-fs: test_dummy_encryption option not supported [ 773.655547][ T837] loop0: detected capacity change from 0 to 512 [ 773.690245][ T837] EXT4-fs: Ignoring removed nobh option [ 773.730410][ T832] lo speed is unknown, defaulting to 1000 [ 773.804012][ T837] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8892: corrupted inode contents [ 773.819190][ T837] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.8892: mark_inode_dirty error [ 773.830984][ T837] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.8892: corrupted inode contents [ 773.842998][ T837] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8892: mark_inode_dirty error [ 773.869608][ T837] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.8892: Failed to acquire dquot type 0 [ 773.885836][ T837] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8892: corrupted inode contents [ 773.919239][ T837] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.8892: mark_inode_dirty error [ 773.931146][ T837] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8892: corrupted inode contents [ 773.943380][ T837] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8892: mark_inode_dirty error [ 773.955583][ T837] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8892: corrupted inode contents [ 773.969590][ T837] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 773.978325][ T837] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.8892: corrupted inode contents [ 773.978451][ T850] loop6: detected capacity change from 0 to 512 [ 773.990465][ T837] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.8892: mark_inode_dirty error [ 773.998410][ T850] EXT4-fs: Ignoring removed nobh option [ 774.008217][ T837] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 774.025891][ T837] EXT4-fs (loop0): 1 truncate cleaned up [ 774.031779][ T850] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8895: corrupted inode contents [ 774.032487][ T837] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.044936][ T850] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.8895: mark_inode_dirty error [ 774.065962][ T850] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.8895: corrupted inode contents [ 774.078685][ T850] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.8895: mark_inode_dirty error [ 774.090393][ T850] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.8895: Failed to acquire dquot type 0 [ 774.102289][ T850] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8895: corrupted inode contents [ 774.114764][ T850] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.8895: mark_inode_dirty error [ 774.129005][ T850] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8895: corrupted inode contents [ 774.142207][ T850] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8895: mark_inode_dirty error [ 774.155508][ T850] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8895: corrupted inode contents [ 774.167842][ T850] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 774.176614][ T858] loop8: detected capacity change from 0 to 512 [ 774.177196][ T850] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8895: corrupted inode contents [ 774.184606][ T858] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 774.206093][ T850] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.8895: mark_inode_dirty error [ 774.219743][ T850] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 774.232146][ T850] EXT4-fs (loop6): 1 truncate cleaned up [ 774.238447][ T850] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.253603][ T858] EXT4-fs (loop8): 1 truncate cleaned up [ 774.290248][ T863] loop0: detected capacity change from 0 to 512 [ 774.297056][ T863] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 774.306991][ T861] loop5: detected capacity change from 0 to 1024 [ 774.313860][ T861] EXT4-fs: Ignoring removed orlov option [ 774.321352][ T863] EXT4-fs (loop0): 1 truncate cleaned up [ 774.333096][ T861] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 774.858004][ T902] 9pnet_fd: Insufficient options for proto=fd [ 774.909796][ T898] loop0: detected capacity change from 0 to 4096 [ 774.959809][ T898] EXT4-fs: test_dummy_encryption option not supported [ 775.225351][ T915] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8907'. [ 775.285913][ T917] loop1: detected capacity change from 0 to 1024 [ 775.425102][ T962] loop6: detected capacity change from 0 to 1024 [ 775.448181][ T962] EXT4-fs: Ignoring removed orlov option [ 775.454676][ T958] loop8: detected capacity change from 0 to 512 [ 775.456572][ T962] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 775.461995][ T958] EXT4-fs: Ignoring removed nobh option [ 775.481054][ T958] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8910: corrupted inode contents [ 775.494655][ T958] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.8910: mark_inode_dirty error [ 775.511290][ T958] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.8910: corrupted inode contents [ 775.527051][ T976] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 775.535799][ T976] SELinux: failed to load policy [ 775.549279][ T962] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 775.561758][ T962] EXT4-fs (loop6): This should not happen!! Data will be lost [ 775.561758][ T962] [ 775.571480][ T962] EXT4-fs (loop6): Total free blocks count 0 [ 775.577479][ T962] EXT4-fs (loop6): Free/Dirty block details [ 775.583420][ T962] EXT4-fs (loop6): free_blocks=0 [ 775.588363][ T962] EXT4-fs (loop6): dirty_blocks=0 [ 775.593480][ T962] EXT4-fs (loop6): Block reservation details [ 775.599595][ T962] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 775.606023][ T958] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.8910: mark_inode_dirty error [ 775.617770][ T958] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8910: Failed to acquire dquot type 0 [ 775.629384][ T976] loop5: detected capacity change from 0 to 512 [ 775.629649][ T958] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8910: corrupted inode contents [ 775.661844][ T958] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.8910: mark_inode_dirty error [ 775.675398][ T958] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8910: corrupted inode contents [ 775.687686][ T958] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.8910: mark_inode_dirty error [ 775.707556][ T976] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 775.712165][ T958] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8910: corrupted inode contents [ 775.723283][ T976] EXT4-fs (loop5): mount failed [ 775.734890][ T958] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 775.747943][ T958] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.8910: corrupted inode contents [ 775.763040][ T958] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.8910: mark_inode_dirty error [ 775.776588][ T958] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 775.786443][ T958] EXT4-fs (loop8): 1 truncate cleaned up [ 775.792865][ T958] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.840104][ T985] loop8: detected capacity change from 0 to 512 [ 775.846686][ T985] EXT4-fs: Ignoring removed oldalloc option [ 775.850145][ T983] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 775.861376][ T983] SELinux: failed to load policy [ 775.872597][ T985] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 775.886255][ T985] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8918: bg 0: block 217: padding at end of block bitmap is not set [ 775.908840][ T983] loop5: detected capacity change from 0 to 512 [ 775.920797][ T983] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 775.936072][ T983] EXT4-fs (loop5): mount failed [ 775.982355][ T996] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8921'. [ 776.021075][ T1001] loop5: detected capacity change from 0 to 1024 [ 776.048919][ T1001] ================================================================== [ 776.057058][ T1001] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / move_expired_inodes [ 776.066051][ T1001] [ 776.068387][ T1001] read-write to 0xffff888145db2d10 of 4 bytes by task 3695 on cpu 1: [ 776.076457][ T1001] move_expired_inodes+0x17a/0x400 [ 776.081594][ T1001] queue_io+0xd9/0x2c0 [ 776.085687][ T1001] wb_writeback+0x226/0x5c0 [ 776.090206][ T1001] wb_workfn+0x194/0x910 [ 776.094457][ T1001] process_scheduled_works+0x4ce/0x9d0 [ 776.099931][ T1001] worker_thread+0x582/0x770 [ 776.104523][ T1001] kthread+0x489/0x510 [ 776.108602][ T1001] ret_from_fork+0x122/0x1b0 [ 776.113243][ T1001] ret_from_fork_asm+0x1a/0x30 [ 776.118008][ T1001] [ 776.120328][ T1001] read to 0xffff888145db2d10 of 4 bytes by task 1001 on cpu 0: [ 776.127875][ T1001] generic_buffers_fsync_noflush+0x80/0x120 [ 776.133772][ T1001] ext4_sync_file+0x1ab/0x690 [ 776.138448][ T1001] vfs_fsync_range+0x10d/0x130 [ 776.143216][ T1001] ext4_buffered_write_iter+0x34f/0x3c0 [ 776.148764][ T1001] ext4_file_write_iter+0x387/0xf60 [ 776.153982][ T1001] iter_file_splice_write+0x666/0xa60 [ 776.159355][ T1001] direct_splice_actor+0x156/0x2a0 [ 776.164468][ T1001] splice_direct_to_actor+0x312/0x680 [ 776.169857][ T1001] do_splice_direct+0xda/0x150 [ 776.174638][ T1001] do_sendfile+0x380/0x650 [ 776.179076][ T1001] __x64_sys_sendfile64+0x105/0x150 [ 776.184298][ T1001] x64_sys_call+0x2bb4/0x3000 [ 776.188981][ T1001] do_syscall_64+0xd2/0x200 [ 776.193495][ T1001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.199391][ T1001] [ 776.201733][ T1001] value changed: 0x00000070 -> 0x00020002 [ 776.207446][ T1001] [ 776.209768][ T1001] Reported by Kernel Concurrency Sanitizer on: [ 776.215915][ T1001] CPU: 0 UID: 0 PID: 1001 Comm: syz.5.8922 Not tainted syzkaller #0 PREEMPT(voluntary) [ 776.225633][ T1001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 776.235689][ T1001] ================================================================== [ 776.244446][ T1007] loop8: detected capacity change from 0 to 1024