last executing test programs: 13.845003964s ago: executing program 1 (id=716): r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2c9700, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, 0x0}}], 0x1, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x8216, 0x6, 0x11000, 0x0, 0x9484, 0x1, 0x400}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x43, 0x74, 0x0, 0x5, 0x8a00, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x8474a7c, 0x8}, 0x100080, 0x6, 0x7, 0x9, 0x3aaf499f, 0x72, 0x0, 0x0, 0x10, 0x0, 0x9}, 0x0, 0xe, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x580, &(0x7f00000007c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000070000070300000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 13.449607057s ago: executing program 1 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x3}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003c80)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r1], 0x3c}}, 0x0) 13.092531168s ago: executing program 1 (id=725): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) pivot_root(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000240)="54da04d3085e0b94e1a28966f00bd646b03c6526b85e9b9a1058720f9c30e3b3d796bbe9ff8aa906364fd0ed9bb9b62dbe222561bec78c809e14f0c94e7d6001", 0x40}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private1, 0x7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="a0a2ee717c49930de69c6b4edb43ad06f465d52af21ba24016c690eb8d0176e505f667013e1e2178275d9e666831c8c6c441770be0a2e94e4e729bd5e4fa1c30a4e4d7974b5118e9e22a66448221e8c41164a5c61f91350be7cbf6c4dfa9efea309a82c78167f35f3536cf14b5cf81bd000a7f0990451c6a899442fb6d5a6a0ba4ccfbf4f129a97ec0b72bea2c836bdde1e7556b34d996c700e2aa41054f8a32ca74f65738528f929cedd13a7230e54b48df43230bb27eb492d6e931132c35cd3d4e19ac51aa3e4b74c676f10c2cfe2d7501239dd2ee990871b9ed00230286004887", 0xe2}, {&(0x7f0000000280)="b92f993e21270062da04985fe69511eee2c3bbf50fd4efbf68a792c6202e28109f2cc85a431ceb4b165e581d358d2b51c3941aac881dc48c586ade22f78171ec41b8ef059076579fa19dc5b339579569f99bb600fb95ba7cc512d214b34fa28f616fcfcf63317c30d38e0f0d10bde573628e841e5870b94d85", 0x79}, {&(0x7f0000000300)="acb9f4645c126967182aebce53708f30e5785da73b61a4f6806c479c388fd3d0aea5233f977160b3de3d7d3fb1fd8a47537454ac5dc23a91865a477423e0fda80fd70daf85b2040fe41ec45d31da5b54a0469124c7eb33339c5d", 0x5a}, {&(0x7f0000000200)="66c43a6cdf5736cf286e5b29e2ba90", 0xf}, {&(0x7f0000000380)="be7bf865f860c6b60891561a22893fa0aea74efc9f61ceae1b216b1f6b464f6d4f923c85caca258986b28fd505f6ad8b7364d65768a24a3b28c15790a01d56128556b008687a59c08019cbec1debcded2713311584e622415becc63bc8791882004d4d1095b0a52b41a7a3fc8766eb2f74fbd88bc4a4954f", 0x78}, {&(0x7f0000000400)="b83fce97f184eb2fac083703ab895d574d0b8db52eb1fc8139", 0x19}], 0x6}}], 0x2, 0x40091) 12.87595591s ago: executing program 1 (id=727): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$eJzs3M9vFFUcAPDv7G5BfnZF/AGiomgk/mhpQeXgRRMTD5qY6AGPtRSCLNTQmghpbDEELyZKwt2YeDHxL/DkiagnE694NyTEcAE9rRl2dtlud8u2u91t3c8nGfpe9+2+73dm3s6bGaYBDKz96T9JxPaIuB4RwxGRq2+wpbKk7e7cmpv859bcZBLl8vt/J+nb4vatuclq0yT7ua1SKaQflLuURLFJvzPnL5yeKJWmzmX10dkzn4zOnL/w8qkzEyenTk6dHT969MjhsddeHX+lK3mmMd3e+/n0vj1vf3jl3cljVz769cdKvOXy1WuHFuXRHUMRMVdbJ42e625nfbejrpwU+hgIK7I5IgrZ3no9hiN/aWftteF464u+BgesqXK5XB5v/fJCGfgfS6LfEQD9UT3Qp+e/1aVHU4914eYblROgNO872VJ5pRAXszZDDee33bQ/Io4t/PttukTD9RQAgLXwczr/eanJ/K8Y8Uhdu53ZvaFiRDwYEbsi4qGI2B0RD0el7aMR8dgK+9/fUF86/8ndWF1m7Unnf69n97YWz/9qd8GK+ay2427+Q8mJU6WpQ9k6ORhDm9P6WNNPTyIW0p9/fN2q//r5X7qk/VfnglkcNwqbF7/n+MTsRMeJZ25ejNhbaJZ/EoV7WcSeiNi7yj5OvfDDvsW/yddK989/GV24z1T+LuL5yvZfiIb8q5Ll70+OPhClqUOj1b1iqd9+v/xeq/47yr8L0u2/ten+X8u/mNTfr51Z8hGb7tfH5T+/bHlOs9r9f1PywaLOP5uYnT03FrEpeWfp7+sucFfr1fZp/gcPNB//u+Lemng8ItKd+ImIeDIinspifzoinomIA8vk/8ubz368+vzXVpr//Iq2/8oL+dPXfmrVf3vb/0i1cjeodr7/2g2wk3UHAAAAG0UuIrZHkhuplXO5kZHK/5ffHVtzpemZ2RdPTH969njlGYFiDOWqV7qG666HjmXXhqv18aw+n9UPZ9eNr+a33K2PTE6Xjvc7eRhw21qM/9Rf+X5HB6w5z2vB4DL+YXCtfvz75oCN7j6jONerOIDecxSHwdVs/M/3IQ6g9xz/YXDVxv83bTSue9yr8eFNYONx/IfBZfzDQOrkuf51UYjvI5Zvk6yXUFdU+KqTtxd6EGHk1seK6mFhPB/RxzAK7f5Vizhfnu+4035/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHfwEAAP//qO7n/A==") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042090}, 0xc000) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0xc010, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') (async) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00', 0x89901) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000006c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000800)='./file0/../file0/../file0/../file0/file0\x00') 12.72014539s ago: executing program 1 (id=731): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x1228fd9667e9cce0) ioctl$FIONCLEX(r0, 0x5450) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x4040, 0x0, 0x4}, 0x18) mknodat$loop(r2, &(0x7f0000000240)='./file0\x00', 0x10, 0x0) r3 = socket$inet6(0xa, 0x80000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @dev, @dev}, &(0x7f0000000540)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x2, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x21, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000003c0)='GPL\x00', 0xffffffff, 0xfc, &(0x7f0000000400)=""/252, 0x40f00, 0x4, '\x00', r4, @fallback=0x35, r0, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, r0, 0xa, &(0x7f00000006c0)=[r0, r0, r0, 0x1, r0, r0, r0, r0, r6], &(0x7f0000000700)=[{0x2, 0x2, 0xb, 0x7}, {0x3, 0x1, 0x3, 0x1}, {0x5, 0x1, 0xb, 0x3}, {0x4, 0x4, 0xb, 0x1}, {0x0, 0x4, 0x5, 0xb}, {0x5, 0x2, 0xc, 0x8}, {0x3, 0x3, 0xa, 0x6}, {0x5, 0x5, 0xf, 0x3}, {0x0, 0x3, 0xe, 0x8}, {0x2, 0x4, 0x0, 0x8}], 0x10, 0x4}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x94, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x60, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xffc0}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x65}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x2c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x2}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x9}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x1ff}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @local}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000a40)) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x12, 0x6, 0x5, 0x9, 0xc000, r0, 0x7, '\x00', r4, r0, 0x3, 0x1, 0x1, 0x0, @value=r0}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0xd, 0xbf, 0x40, 0xffffffffffffffff, 0xe, '\x00', 0x0, r0, 0x2, 0x1, 0x1, 0x8}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xffffffff, '\x00', 0x0, r0, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x20, 0x4, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x1, 0x1, 0x2, 0x50, 0x4}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x77bdd4df74b7be23, 0x2, '\x00', 0x0, @netfilter, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x2, 0x4, 0x9}, 0x10, r5, r8, 0x9, &(0x7f0000000d00)=[r9, r0, r10, r11], &(0x7f0000000d40)=[{0x1, 0x2, 0xb, 0x7}, {0x1, 0x5, 0x9, 0x2}, {0x1, 0x1, 0x5, 0xb}, {0x5, 0x1, 0xb, 0x3}, {0x5, 0x3, 0x0, 0x7}, {0x2, 0x4, 0xf, 0x2}, {0x32, 0x3, 0x8, 0x2}, {0x0, 0x5, 0xa, 0xc}, {0x1, 0x5, 0x2, 0x7}], 0x10, 0x8}, 0x94) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f0000000ec0)=0x80000000, 0x4) r13 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) open_by_handle_at(r13, &(0x7f0000000f40)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x3, 0x7ff, 0x7fff, 0x3}, {0x86, 0x8, 0x3}}}, 0x32000) writev(r11, &(0x7f0000001000)=[{&(0x7f0000000f80)="1252a73e3f45f6b96645998c09df06eeb81bd43f80aa5c9af18dd54cb7adde7be9ed15c6204c95e2f66f49", 0x2b}, {&(0x7f0000000fc0)="1c7c7fe943668a5f5b", 0x9}], 0x2) pipe2(&(0x7f0000001040), 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001080)={@remote, @rand_addr=0x64010101, 0x0, 0x1, [@rand_addr=0x64010100]}, 0x14) r14 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r12, r14, &(0x7f00000010c0)=0x3, 0x2000000000000000) sendmsg$nl_generic(r8, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x134, 0x35, 0x200, 0x70bd27, 0x25dfdbfe, {0x1}, [@nested={0xc, 0xcb, 0x0, 0x1, [@typed={0x4, 0x129}, @nested={0x4, 0x13c}]}, @nested={0x111, 0x33, 0x0, 0x1, [@typed={0x14, 0x24, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x136}, @generic="17e910229faf7edecad23ce86af80ff1aaf56e4ddab1de214db57b173d0b082df8d2edc23a98b93afe48ef7b805bf75be26c9d92ea654585097a9d296922bf2cd376185a9277fdf0e509c21041a2c922706a68200c3dcdf60d40e3ee7de21de9fd33bf14a3e562b3a9412b4fe82405eea008438355363a70cd4fcfd9d3ca0cdb6782b9da963f64b6b3a6c9c01157a3a642546ed68c7c26e7ac35e7260188dd4a01347753dc13ca219f1b87870c8cb8883c48b0484c011df984f067d1605e4794faae753748a4a2f97f8fc6db120bd31485ee9773b2a0a8265951d057ba", @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xa4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 12.345893062s ago: executing program 1 (id=735): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0xc}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, 0x0) sync_file_range(r0, 0x2a, 0x1, 0x0) 12.290938854s ago: executing program 32 (id=735): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0xc}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, 0x0) sync_file_range(r0, 0x2a, 0x1, 0x0) 3.117311429s ago: executing program 5 (id=833): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) getpid() socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16], 0x21, 0x286, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 2.671595304s ago: executing program 5 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001880)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14, 0x8}, @ipv4=@generic={{0xa, 0x4, 0x2, 0x2, 0x28, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0x7, 0x11, "0de9c4a59f2e04c0d1000083fcd7cf"}]}}}}, 0x36) (fail_nth: 1) 2.660535165s ago: executing program 0 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x29, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4054) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x19, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0xc, &(0x7f0000000340)=0x0) io_submit(r6, 0x3, &(0x7f0000000180)=[&(0x7f0000000240)={0x11, 0x0, 0x11, 0x1, 0x95, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3, r5, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x402, r5, 0x0, 0x0, 0x2}]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) write$binfmt_script(r7, &(0x7f0000000ac0)={'#! ', './file0'}, 0xb) ioctl$EVIOCGLED(r4, 0x40284504, &(0x7f0000000000)=""/56) 2.312271805s ago: executing program 5 (id=841): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0}) sendmmsg$inet(r1, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000200)}], 0x3, &(0x7f0000000300)}, 0x6}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000, &(0x7f0000000a40)={r2, r3+10000000}) 2.311853185s ago: executing program 0 (id=842): r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2c9700, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, 0x0}}], 0x1, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x8216, 0x6, 0x11000, 0x0, 0x9484, 0x1, 0x400}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x43, 0x74, 0x0, 0x5, 0x8a00, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x8474a7c, 0x8}, 0x100080, 0x6, 0x7, 0x9, 0x3aaf499f, 0x72, 0x0, 0x0, 0x10, 0x0, 0x9}, 0x0, 0xe, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x580, &(0x7f00000007c0)="$eJzs3V1rHFUfAPD/bDZ9Sfs8SaEU9UICvbBSu2kSXyoIrZeixYLe1yXZhpJNt2Q3pYmFthf2xhspgogF8QPotZfFL+CnKGihSAl64U1kNrPNNtnN65rdur8fTHLOzCTnnD1zzvxnZ5YNoG+Npj9yES9HxFdJxHDTtnxkG0dX91t+emsqXZJYWfnkjySSbF1j/yT7fSTLvBQRv3wRcTq3sdzq4tJssVwuzWf5sdrc9bHq4tKZq3PFmdJM6drE5OS5tyYn3n3n7Y619fVLf3378cMPzn15cvmbHx8fu5/EhTiabWtuxx7cac6Mxmj2mgzGhXU7jnegsF6SdLsC7MpANs4HI50DhmMgG/XAf9/tiFgB+lRi/EOfasQBjWv7Dl0HvzCevL96AbSx/fnV90biUP3aaGg5ee7KKL3eHelA+WkZP//+4H66xBbvQ9zuQHkADXfuRsTZfH7j/Jdk89/una2/eby59WX02/kHuulhGv+80Sr+yT2Lf6JF/HOkxdjdja3Hf+5xRBzsQFEtpfHfey3j32dT18hAlvtfPeYbTK5cLZfORsT/I+JUDB5M85vdzzm3/Gil3bbm+C9d0vIbsWBWj8f5da2fLtaKe2lzsyd3I15Zi3+T2DD/H6rHuuv7P309Lm2zjBOlB6+227Z1+5t1PgJe+SHitZb9v3ZHK9n8/uRY/XgYaxwVG/1578Sv7crfWfs7L+3/oc3bP5I036+t7ryM7w/9XWq3bbfH/4Hk03r6QLbuZrFWmx+POJB8tHH9xNrfNvKN/dP2nzq5+fzX6vg/HBGfbbP9947fa7trL/T/9I76f+eJRx9+/l278rfX/2/WU6eyNduZ/7Zbwb28dgAAAAAAANBrchFxNJJc4Vk6lysUVp/vOB5DuXKlWjt9pbJwbTrqn5UdicFc4073cNPzEOPZ87CN/MS6/GREHIuIrwcO1/OFqUp5utuNBwAAAAAAAAAAAAAAAAAAgB5xpM3n/1O/DXS7dsC/zld+Q//acvx34puegJ7k/A/9y/iH/pVvmQT6gUEP/atp/CdJNysC7Dvnf+hfa+N/qKv1APaf8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAB01KWLF9NlZfnprak0P31jcWG2cuPMdKk6W5hbmCpMVeavF2YqlZlyqTBVmdvq/5UrlevjE7Fwc6xWqtbGqotLl+cqC9dql6/OFWdKl0uD+9IqAAAAAAAAAAAAAAAAAAAAeLFUF5dmi+VyaV6ibeJ89EQ1dp1Iturl89nBsKsi8t1voMS6xE/Dex/d3ZyVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5/wQAAP//sHcxLQ==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000070000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.944205326s ago: executing program 4 (id=847): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) pwrite64(r2, &(0x7f0000000000)='l\v', 0x2, 0x404042ffc) (fail_nth: 6) 1.943695017s ago: executing program 2 (id=848): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) getpid() socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16], 0x21, 0x286, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 1.943213117s ago: executing program 0 (id=849): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) (async) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x20, 0xffffffdc, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0xfff1, 0xc}, {0x3, 0xb}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x18}, {0xfff3, 0x2}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="780000c50a00", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf2503000000060008000000000006000800a1aa00000c00090000000000000000000c0009000201aaaaaaaaaaaa06000800000000000c0009000201aaaaaaaaaaaa050012000b0000000c0009008493ef0e3bd874a005001200000000000c0009000203aaaaaaaaaaaa"], 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000001840)=ANY=[@ANYBLOB="f99afbd7d3d0a8e51800b92d00040000000055a8d3840000181100002e07528b5fd7a8ff49df3abf33c0ae82e3fff95d2d75b6f7bf29a8e0726b45fe48c0fb17dea32538919d21ae873462856378dfb32ca0c25e7858157f41edb5551a191c67c35530bda5b5c153da6df393ca008989e18776194bcab4e2233cff2b8fb7afa03ede6d675b105765cc16294ac90579cbb53eaaaa0983c2360a6a5389c78df5f80b206f239d1a791b37aa74f227c826cbd2a3f7acd914a353d70fdd14489d32afa2c81b1987651dbb8763451c1eb88af3586f69aee697ae5084b896533661ac9fb359a435ab45592ccd2de539dbd2aaa33862f9", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x51}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRES32=r5], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) recvmmsg(r0, &(0x7f0000002480), 0x40000000000010e, 0x2062, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1.484616404s ago: executing program 0 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001880)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14, 0x8}, @ipv4=@generic={{0xa, 0x4, 0x2, 0x2, 0x28, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0x7, 0x11, "0de9c4a59f2e04c0d1000083fcd7cf"}]}}}}, 0x36) (fail_nth: 2) 1.436085316s ago: executing program 3 (id=853): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0xc}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1/file0\x00', 0x200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x5, 0x0, "af930753d5acd754b5bce70c98eaf1933a65b7202145eac36394bd3579d86d4584e5ab496dcf35dab624e30bcd4e0201772b7d805a789e556734cd9d4c2f87637ce413bb7ca06dc3951ccfeb8e689de7"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sync_file_range(r0, 0x2a, 0x1, 0x0) 1.290736685s ago: executing program 5 (id=854): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) pwrite64(r2, &(0x7f0000000000)='l\v', 0x2, 0x404043000) 1.224279689s ago: executing program 0 (id=855): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRESDEC], 0x10}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f8b47c82061b14dabf1eeeab780292200"], 0x10}, 0x4c086) setsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000300)="2c8971179a4c38dc502a70fc615cda4c5305f31aeda009a7c2c230bba93ad0b8248052a799e66eea91610422c580451d574875", 0x33) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x49aa5f05cd9d6f3f}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48014}, 0x1) sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="0f028b09b6a5e04e4480a95af8e06f1515de9436c0fe8a5600a4bce89e9048a72579071f110bea44de138533db88b23b", 0x30}, {&(0x7f0000000080)="55a62b9879a9c1f9e2242841a524bad50a8a233a76fd08a993636fa259cf016867578dc7418df22d", 0x28}], 0x2}, 0x20008840) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f00000001c0)='./file0\x00', 0xc0, &(0x7f0000000200)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00881c90bed42f8c7eddbb7d6f2e0a3740cecbee21abdad8a132266ba77ed29e8aa6b20b3cde041dd02002639c37b72a152b33c94aeb5870d761550c1c26c22a5b1293cebcb95202ffa123b69bbd24b4ff1fa6d3a45dbd5c76478c020276d1978278b3f17fb3a1e990c02a1a618b"], 0x1, 0x246, &(0x7f00000016c0)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6, 0x0, 0x6c}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r8, @ANYRESHEX=r6, @ANYBLOB="5c60720900000000000000fdfa9a00f5dc6b0729a83e880a022780800560c9be101745daa3e4abb2cad55c96d21cd68406822cd713127d625844b33d38d4387b83339238ec1dae2db688315791a0ccd2c21347c563411f7ec1bda33d9e6b9ac7580ebe207a964b363bcce3264b8b8d87e7cc4742a83a3e243455c5c1ae4d5c585240df5cf2cc6f65d1a50b6f5e747db1ac6b99652d405fd2fd317a9e0a977c4f6ce39f250c694c5ef300000000000000", @ANYRES32=0x0, @ANYBLOB="40ff7724f1d50b350198e79e0f7057966cf093fd239aae5d78992d3bc3be1e7b57ba134374306765608d8bb5591d76129df7993160023f9ff6ecf5ba628b083ad1aa8c31531a8a7438490c0a776f53844c8b489d37f442debe7a1b6e8e43f92d007101e2dd63859c950c25f6ef2c37dbeed55f880dbf971b4b380d0e6df6aa524cc73873c952c99eaf6d7a"], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80804) 1.185793041s ago: executing program 2 (id=856): r0 = socket$kcm(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r2, &(0x7f0000000280)='.\x00', 0x0, r3, 0x1000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@setlink={0x44, 0x13, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x4a02, 0x581}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x31, 0xe7c, 0x4}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000050) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x8719470d9569919, 0x110c34, 0x7ffc, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x9}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x800, 0x8, 0x0, 0x3, 0x7f}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0xc4, 0xa, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0xa8, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48040}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r8, 0xc0a85322, &(0x7f0000000400)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000000)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@nobh}]}, 0x2, 0x4a7, &(0x7f0000000980)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox5hsS+i2kSaCfcFGEU+CFPQsHkX/AvEigqgnwZPgyZMUiubS1lNkdmeS7GY3bZJNtnY/H9js8+w8O/N8d+aZeeZ5JgF0rKHsTxKxOyJ+jYiBara2wFD17ebC5clbC5cnk1hcfPWPpFLuxsLlyaJo8b1deWY4jUjfT/KN1Jq9cPHMRLlcOp/nR+fO9uXJidOl06Vz48ePHzs69tST40+0JM4srhsH35k5dOCF16++NHny6hs/fJnVd3e+fGUc6/TLaJMFQ1ngfy5W1C97ZIMbu1vtWZFOuttYEdalK2JH9t5Taf8D0RXLO28gnn+vnXUDtlZ2beprvnh+EbiHJdHuGgDtUVzody50TWb3wKvvgwe2svvRdtefichuebK4b+av6pLuSPMyPXX3t600FBEn5//6NHvF5sYhAADuyIeTn5zojYhLt754Met7LPf20u7/Vt5/q/zdm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9Vnd/0mvbXKVa8r6f0/nc1u1/b+i9xeDXXluTyX+nuTUdLl0JP9NhqOnL8uPrbGNb577+aNmy1b2/7JXtv2iL5jX41p33QDd1MTcRKVT2gLX34042J0kq+NPlmYCkog4EBEH17fqvUVi+tHPDzUrdPv419CCeabFz7Lw5rP9Px918ReS6vzkm6OzFy4+Pn22fn5ytD/KpSOjxVGx2o8/ffBKs+1X4+/Pc43j37H5MJu6Xqq+r9j/K5YutYHl+drZ1m5/g8d/2pu8Vpln7s0/e3tibu78WERvcqKSr/l8fPm7Rb4onx3/w4cbt/99+Xey/X9fRGQH8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/LdAFv9Uw/Pf0vE/mNTs//Unus5891Wz7d/Z/j9WSQ3nn1TOf3WSunyj6nRH9NVXcLO/HwAAAPwTpJVn4JN0ZCmdpiMj1Wf498fOtDwzO/fYqZm3zk1Vn5UfjJ60GOkayMdDy9Pl0lgyn6+xOj46no8VF+OlR/Nx44+7dlTyI5Mz5ak2xw6dbleT9p/5vavdtQO2WO30UjEBPN7blsoA26x+Hj2tzV55OZwM4F7l/7WhczVs/8tP1KTbWRdge7n+Q+dq1P6v1OXNBcC9yfUfOpf2Dx0q/bbhx19ve0WAdnD9h460mf/r38JE/91RjfYktnunxLoKR5FI2/5DtSrRH3dFNTaeuJS35lauuc0nJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBb5OwAA//90rtry") epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r2) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fedbdf2532000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24008081) 1.000011341s ago: executing program 4 (id=857): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r2, 0x3ff}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000300)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4) socket(0x10, 0x3, 0x0) getdents(r3, 0x0, 0x0) 981.927483ms ago: executing program 3 (id=858): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0xc}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x100000, @desc3}}) 840.109761ms ago: executing program 2 (id=859): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffefff0000000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00200000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 748.190026ms ago: executing program 3 (id=860): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async, rerun: 32) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) (rerun: 32) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x40000) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x1, 0x803, 0x0) (async) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) (async, rerun: 32) r12 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174"], 0x20}}, 0x0) (async) socket(0x1, 0x803, 0x0) 746.027426ms ago: executing program 2 (id=861): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, 0x8) 737.849227ms ago: executing program 2 (id=862): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0xc}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x25400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x100b28, 0x9, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) 640.530732ms ago: executing program 4 (id=863): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4, &(0x7f0000000100), 0x1, 0x4a1, &(0x7f00000004c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setpgid(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 554.291528ms ago: executing program 2 (id=864): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000200)}], 0x3, &(0x7f0000000300)}, 0x6}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000, &(0x7f0000000a40)={r3, r4+10000000}) 553.859687ms ago: executing program 3 (id=865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001880)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14, 0x8}, @ipv4=@generic={{0xa, 0x4, 0x2, 0x2, 0x28, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0x7, 0x11, "0de9c4a59f2e04c0d1000083fcd7cf"}]}}}}, 0x36) 553.434048ms ago: executing program 4 (id=866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001880)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14, 0x8}, @ipv4=@generic={{0xa, 0x4, 0x2, 0x2, 0x28, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0x7, 0x11, "0de9c4a59f2e04c0d1000083fcd7cf"}]}}}}, 0x36) (fail_nth: 3) 236.139176ms ago: executing program 5 (id=867): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xd6d, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b00a0000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff95, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() syz_pidfd_open(r3, 0x0) waitid(0x0, r3, &(0x7f0000000180), 0x1000000, &(0x7f0000000280)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x69) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @b}}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r5, 0x0, 0x33, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 233.942427ms ago: executing program 5 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000080fe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa0900"/486], 0x610) 228.940857ms ago: executing program 3 (id=869): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0xc480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x42, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x8ca4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 196.635579ms ago: executing program 0 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00ff0300000000000000000a"], 0x38}}, 0x4000000) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r8, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) close(r7) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000001c0)="fab560d4cc174e29bc0864c6557c268e", 0x10) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r5, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) recvmmsg(r5, 0x0, 0x0, 0x1000400000de, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) close(r5) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00030000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 100.175424ms ago: executing program 4 (id=871): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0xc}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x200000, @desc3}}) 93.731735ms ago: executing program 3 (id=872): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffefff0000000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00fb0000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 0s ago: executing program 4 (id=873): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r2, 0x3ff}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000300)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4) socket(0x10, 0x3, 0x0) getdents(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): t_refault_anon 49 [ 67.798726][ T4796] total_workingset_refault_file 210 [ 67.804116][ T4796] total_swap 2965504 [ 67.808068][ T4796] total_swapcached 126976 [ 67.812440][ T4796] total_pgpgin 19192 [ 67.816358][ T4796] total_pgpgout 19158 [ 67.820379][ T4796] total_pgfault 23675 [ 67.824403][ T4796] total_pgmajfault 21 [ 67.828453][ T4796] total_inactive_anon 126976 [ 67.833258][ T4796] total_active_anon 0 [ 67.837434][ T4796] total_inactive_file 0 [ 67.841660][ T4796] total_active_file 12288 [ 67.846136][ T4796] total_unevictable 0 [ 67.850181][ T4796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.394,pid=4795,uid=0 [ 67.864791][ T4796] Memory cgroup out of memory: Killed process 4795 (syz.4.394) total-vm:96324kB, anon-rss:1312kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 67.902260][ T4826] xt_hashlimit: size too large, truncated to 1048576 [ 68.176250][ T4837] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.219091][ T4837] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.404: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.260474][ T4837] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.404: Failed to acquire dquot type 0 [ 68.276619][ T4842] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.303167][ T4837] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.404: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.326232][ T4837] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.404: Invalid inode bitmap blk 0 in block_group 0 [ 68.339123][ T31] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.381534][ T31] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 68.402944][ T4837] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 68.411846][ T4837] EXT4-fs (loop3): 1 orphan inode deleted [ 68.444335][ T4837] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.404: Invalid block bitmap block 0 in block_group 0 [ 68.506124][ T4853] xt_hashlimit: size too large, truncated to 1048576 [ 68.604102][ T4859] EXT4-fs: Ignoring removed orlov option [ 68.609954][ T4859] EXT4-fs: inline encryption not supported [ 68.616545][ T4859] EXT4-fs: dax option not supported [ 68.660131][ T4861] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.414: inode has both inline data and extents flags [ 68.675188][ T4859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.413'. [ 68.680835][ T4861] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.414: couldn't read orphan inode 15 (err -117) [ 68.794503][ T4867] journal_path: not usable as path [ 68.799712][ T4867] EXT4-fs: error: could not find journal device path [ 68.815006][ T4870] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 68.824659][ T4870] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.417: casefold flag without casefold feature [ 68.839260][ T4870] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.417: couldn't read orphan inode 15 (err -117) [ 68.883094][ T4872] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.025372][ T4881] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.317215][ T4905] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.429: inode has both inline data and extents flags [ 69.395162][ T4908] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.414733][ T4905] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.429: couldn't read orphan inode 15 (err -117) [ 69.576765][ T4914] journal_path: not usable as path [ 69.581988][ T4914] EXT4-fs: error: could not find journal device path [ 69.614118][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.686670][ T4924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.721144][ T4924] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 69.729237][ T4924] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 69.737980][ T4924] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.744938][ T4924] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.759525][ T4924] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 69.780298][ T4924] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.435: bg 0: block 40: padding at end of block bitmap is not set [ 69.794940][ T4924] EXT4-fs (loop2): Remounting filesystem read-only [ 69.802304][ T4924] EXT4-fs (loop2): 1 truncate cleaned up [ 69.811402][ T4929] netlink: 84 bytes leftover after parsing attributes in process `syz.1.437'. [ 69.965119][ T4941] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.441: inode has both inline data and extents flags [ 69.978593][ T4941] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.441: couldn't read orphan inode 15 (err -117) [ 70.009834][ T4941] netlink: 136 bytes leftover after parsing attributes in process `syz.2.441'. [ 70.193052][ T4944] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.265330][ T3312] EXT4-fs unmount: 89 callbacks suppressed [ 70.265351][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.346827][ T4950] netlink: 'syz.1.444': attribute type 39 has an invalid length. [ 70.608039][ T4958] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.619624][ T4958] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 70.629771][ T4958] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.443: Corrupt directory, running e2fsck is recommended [ 70.669287][ T4961] xt_hashlimit: size too large, truncated to 1048576 [ 70.695421][ T4958] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 70.703751][ T4958] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.443: corrupted in-inode xattr: invalid ea_ino [ 70.718374][ T4958] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.443: couldn't read orphan inode 15 (err -117) [ 70.731460][ T4958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.787975][ T4958] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.799558][ T4958] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 70.809764][ T4958] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.443: Corrupt directory, running e2fsck is recommended [ 70.845455][ T4958] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.443: path /89/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 71.065216][ T4981] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.073947][ T4981] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.088899][ T4981] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.455: corrupted inode contents [ 71.108686][ T4981] EXT4-fs (loop1): Remounting filesystem read-only [ 71.115641][ T4981] EXT4-fs (loop1): 1 truncate cleaned up [ 71.128370][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.139151][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.149963][ T12] __quota_error: 16 callbacks suppressed [ 71.149979][ T12] Quota error (device loop1): write_blk: dquota write failed [ 71.163329][ T12] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 71.184627][ T4990] set_capacity_and_notify: 22 callbacks suppressed [ 71.184648][ T4990] loop0: detected capacity change from 0 to 1024 [ 71.196126][ T4991] xt_hashlimit: size too large, truncated to 1048576 [ 71.218986][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 71.229190][ T12] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 71.241978][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 71.256044][ T4990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.273566][ T4981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.371402][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.414151][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.443296][ T5011] loop4: detected capacity change from 0 to 512 [ 71.464511][ T5007] loop2: detected capacity change from 0 to 128 [ 71.506497][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.517716][ T5011] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.461: inode has both inline data and extents flags [ 71.538811][ T5011] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.461: couldn't read orphan inode 15 (err -117) [ 71.594559][ T5011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.658699][ T5018] loop1: detected capacity change from 0 to 128 [ 71.665831][ T3631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.673036][ T5011] netlink: 136 bytes leftover after parsing attributes in process `syz.4.461'. [ 71.888828][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.183806][ T5028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.468'. [ 72.227590][ T5038] netlink: 'syz.4.472': attribute type 4 has an invalid length. [ 72.248130][ T5036] loop1: detected capacity change from 0 to 512 [ 72.257347][ T5040] loop3: detected capacity change from 0 to 512 [ 72.271077][ T5036] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.282687][ T5036] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 72.292852][ T5036] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.471: Corrupt directory, running e2fsck is recommended [ 72.323463][ T5036] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 72.331958][ T5036] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.471: corrupted in-inode xattr: invalid ea_ino [ 72.345520][ T5036] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.471: couldn't read orphan inode 15 (err -117) [ 72.358008][ T5036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.401422][ T5036] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.413112][ T5036] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 72.413133][ T5036] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.471: Corrupt directory, running e2fsck is recommended [ 72.429116][ T5036] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.471: path /88/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 72.502378][ T5040] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.502469][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.519611][ T5040] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.554895][ T5046] loop0: detected capacity change from 0 to 128 [ 72.586912][ T5052] loop1: detected capacity change from 0 to 512 [ 72.598507][ T5040] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.473: corrupted inode contents [ 72.610658][ T5040] EXT4-fs (loop3): Remounting filesystem read-only [ 72.617483][ T5040] EXT4-fs (loop3): 1 truncate cleaned up [ 72.623494][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.634133][ T12] Quota error (device loop3): write_blk: dquota write failed [ 72.641632][ T12] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 72.651762][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.655530][ T5052] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 72.662409][ T12] Quota error (device loop3): write_blk: dquota write failed [ 72.677989][ T12] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 72.691754][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.701952][ T12] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 72.718494][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 72.730107][ T5040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.743982][ T5052] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.476: bad orphan inode 15 [ 72.754443][ T5052] ext4_test_bit(bit=14, block=18) = 1 [ 72.759934][ T5052] is_bad_inode(inode)=0 [ 72.764114][ T5052] NEXT_ORPHAN(inode)=1023 [ 72.768529][ T5052] max_ino=32 [ 72.771796][ T5052] i_nlink=0 [ 72.775988][ T5052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 72.790676][ T5052] ext2 filesystem being mounted at /89/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 72.821108][ T5052] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #12: comm syz.1.476: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 61(61) [ 72.862239][ T5058] loop2: detected capacity change from 0 to 1024 [ 72.870015][ T5052] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #12: comm syz.1.476: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 61(61) [ 72.917805][ T5058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.931502][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 72.939144][ T5067] loop4: detected capacity change from 0 to 128 [ 72.964003][ T5058] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.987387][ T5071] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 72.995118][ T5071] netlink: 'syz.0.482': attribute type 2 has an invalid length. [ 73.050662][ T5080] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.056101][ T5058] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.479: bg 0: block 112: padding at end of block bitmap is not set [ 73.089802][ T5058] EXT4-fs (loop2): Remounting filesystem read-only [ 73.103851][ T5080] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.128691][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.187740][ T5090] journal_path: not usable as path [ 73.192970][ T5090] EXT4-fs: error: could not find journal device path [ 73.227344][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.279667][ T5093] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 73.291247][ T5093] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 73.301408][ T5093] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.487: Corrupt directory, running e2fsck is recommended [ 73.322191][ T5100] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.340426][ T5090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.385071][ T5093] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 73.394156][ T5100] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.404740][ T5093] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.487: corrupted in-inode xattr: invalid ea_ino [ 73.460949][ T5093] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.487: couldn't read orphan inode 15 (err -117) [ 73.492572][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.505835][ T5093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.542338][ T5093] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 73.554037][ T5093] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 73.564192][ T5093] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.487: Corrupt directory, running e2fsck is recommended [ 73.579072][ T5093] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.487: path /105/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 73.624541][ T5114] netlink: 'syz.4.492': attribute type 66 has an invalid length. [ 73.638998][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.673962][ T5117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.685795][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.706737][ T5117] EXT4-fs (loop1): 1 truncate cleaned up [ 73.754394][ T5117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.831186][ T5134] macvtap1: entered promiscuous mode [ 73.836544][ T5134] syz_tun: entered promiscuous mode [ 73.862120][ T5136] process 'syz.4.499' launched '/dev/fd/10' with NULL argv: empty string added [ 73.904070][ T5142] journal_path: not usable as path [ 73.909256][ T5142] EXT4-fs: error: could not find journal device path [ 73.927114][ T5134] syz_tun: left promiscuous mode [ 73.945733][ T5142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.179246][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.221640][ T5158] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 74.233429][ T5158] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 74.243595][ T5158] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.508: Corrupt directory, running e2fsck is recommended [ 74.276166][ T5158] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 74.284556][ T5158] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.508: corrupted in-inode xattr: invalid ea_ino [ 74.306358][ T5158] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.508: couldn't read orphan inode 15 (err -117) [ 74.330242][ T5158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.378346][ T5158] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 74.389947][ T5158] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 74.400085][ T5158] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.508: Corrupt directory, running e2fsck is recommended [ 74.413429][ T5158] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.508: path /110/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 74.481199][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.492649][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'. [ 74.562101][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.746606][ T5177] EXT4-fs: inline encryption not supported [ 74.819632][ T5177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.850729][ T5172] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.514: Allocating blocks 385-513 which overlap fs metadata [ 74.909265][ T5194] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.932209][ T5196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.946430][ T5194] EXT4-fs (loop0): 1 truncate cleaned up [ 74.953314][ T5194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.968206][ T5172] EXT4-fs (loop1): pa ffff888107613230: logic 16, phys. 129, len 24 [ 74.976318][ T5172] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 74.987539][ T5172] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 75.000030][ T5172] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.000030][ T5172] [ 75.009737][ T5172] EXT4-fs (loop1): Total free blocks count 0 [ 75.015756][ T5172] EXT4-fs (loop1): Free/Dirty block details [ 75.021710][ T5172] EXT4-fs (loop1): free_blocks=128 [ 75.026848][ T5172] EXT4-fs (loop1): dirty_blocks=0 [ 75.031917][ T5172] EXT4-fs (loop1): Block reservation details [ 75.037914][ T5172] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 75.116564][ T5211] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.128257][ T5211] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 75.138419][ T5211] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.526: Corrupt directory, running e2fsck is recommended [ 75.169935][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.184819][ T5211] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 75.210517][ T5211] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.526: corrupted in-inode xattr: invalid ea_ino [ 75.227365][ T5211] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.526: couldn't read orphan inode 15 (err -117) [ 75.261869][ T5211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.295348][ T5211] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.306914][ T5211] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 75.317137][ T5211] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.526: Corrupt directory, running e2fsck is recommended [ 75.332245][ T5211] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.526: path /101/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 75.406844][ T5233] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.414838][ T5233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.423622][ T5233] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.428044][ T5235] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.449685][ T5233] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.532: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 75.468525][ T5235] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.484994][ T5233] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.532: couldn't read orphan inode 11 (err -117) [ 75.507829][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.508258][ T5233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.537936][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.562938][ T5240] FAULT_INJECTION: forcing a failure. [ 75.562938][ T5240] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.576168][ T5240] CPU: 1 UID: 0 PID: 5240 Comm: syz.2.536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.576249][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.576347][ T5240] Call Trace: [ 75.576356][ T5240] [ 75.576366][ T5240] __dump_stack+0x1d/0x30 [ 75.576398][ T5240] dump_stack_lvl+0x95/0xd0 [ 75.576463][ T5240] dump_stack+0x15/0x1b [ 75.576488][ T5240] should_fail_ex+0x263/0x280 [ 75.576519][ T5240] should_fail+0xb/0x20 [ 75.576574][ T5240] should_fail_usercopy+0x1a/0x20 [ 75.576609][ T5240] _copy_from_user+0x1c/0xb0 [ 75.576630][ T5240] sctp_setsockopt+0x164/0xea0 [ 75.576658][ T5240] sock_common_setsockopt+0x69/0x80 [ 75.576706][ T5240] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 75.576743][ T5240] __sys_setsockopt+0x184/0x200 [ 75.576786][ T5240] __x64_sys_setsockopt+0x64/0x80 [ 75.576838][ T5240] x64_sys_call+0x21d5/0x3000 [ 75.576871][ T5240] do_syscall_64+0xc0/0x2a0 [ 75.576940][ T5240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.576962][ T5240] RIP: 0033:0x7f26b2aeaeb9 [ 75.576977][ T5240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.576995][ T5240] RSP: 002b:00007f26b1547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.577020][ T5240] RAX: ffffffffffffffda RBX: 00007f26b2d65fa0 RCX: 00007f26b2aeaeb9 [ 75.577037][ T5240] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000003 [ 75.577063][ T5240] RBP: 00007f26b1547090 R08: 0000000000000008 R09: 0000000000000000 [ 75.577078][ T5240] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.577093][ T5240] R13: 00007f26b2d66038 R14: 00007f26b2d65fa0 R15: 00007ffe042fcd48 [ 75.577116][ T5240] [ 75.577485][ T5241] ext4: Unknown parameter 'nouser_xattr' [ 75.781780][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.796430][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.841667][ T5245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.855413][ T5249] netlink: 'syz.0.540': attribute type 4 has an invalid length. [ 75.892437][ T5243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.928134][ T5262] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.949184][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 75.954403][ T5262] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.995070][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.020526][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.078901][ T5267] xt_hashlimit: size too large, truncated to 1048576 [ 76.100421][ T5270] netlink: 'syz.3.548': attribute type 21 has an invalid length. [ 76.101599][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.118565][ T5270] netlink: 156 bytes leftover after parsing attributes in process `syz.3.548'. [ 76.127689][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 76.177358][ T5275] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.190218][ T5275] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.202244][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 76.202259][ T29] audit: type=1400 audit(1770229445.404:701): avc: denied { getopt } for pid=5268 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.251822][ T5279] set_capacity_and_notify: 24 callbacks suppressed [ 76.251846][ T5279] loop2: detected capacity change from 0 to 512 [ 76.277865][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.292661][ T5279] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.320917][ T5279] EXT4-fs (loop2): 1 truncate cleaned up [ 76.329432][ T5279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.372805][ T5284] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 76.380643][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 76.465014][ T29] audit: type=1400 audit(1770229445.714:702): avc: denied { connect } for pid=5287 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.508459][ T5296] netlink: 'syz.4.556': attribute type 4 has an invalid length. [ 76.548560][ T5298] loop4: detected capacity change from 0 to 1024 [ 76.575059][ T5298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.589438][ T29] audit: type=1400 audit(1770229445.824:703): avc: denied { ioctl } for pid=5299 comm="syz.0.558" path="socket:[11825]" dev="sockfs" ino=11825 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.627004][ T5304] loop0: detected capacity change from 0 to 128 [ 76.637975][ T5304] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.650745][ T5304] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.673302][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.711237][ T5309] loop0: detected capacity change from 0 to 128 [ 76.722126][ T5309] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.739624][ T5309] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.752168][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.799333][ T29] audit: type=1400 audit(1770229446.034:704): avc: denied { bind } for pid=5311 comm="syz.4.562" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.819507][ T29] audit: type=1400 audit(1770229446.034:705): avc: denied { name_bind } for pid=5311 comm="syz.4.562" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 76.840796][ T5316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.564'. [ 76.851294][ T29] audit: type=1400 audit(1770229446.104:706): avc: denied { nlmsg_read } for pid=5315 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.884623][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.937574][ T29] audit: type=1400 audit(1770229446.184:707): avc: denied { create } for pid=5326 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 76.965997][ T5330] netlink: 108 bytes leftover after parsing attributes in process `syz.0.567'. [ 76.978302][ T5332] netlink: 'syz.4.568': attribute type 4 has an invalid length. [ 77.027224][ T29] audit: type=1400 audit(1770229446.254:708): avc: denied { write } for pid=5333 comm="syz.4.569" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.032984][ T5337] loop1: detected capacity change from 0 to 128 [ 77.067744][ T5337] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.101705][ T5337] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.113592][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.145832][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.172233][ T29] audit: type=1400 audit(1770229446.414:709): avc: denied { setopt } for pid=5347 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.199454][ T5344] tipc: Started in network mode [ 77.204577][ T5344] tipc: Node identity 16ad0a8a3e3, cluster identity 4711 [ 77.211980][ T5344] tipc: Enabled bearer , priority 0 [ 77.221356][ T5346] loop2: detected capacity change from 0 to 1024 [ 77.229853][ T5344] syzkaller0: entered promiscuous mode [ 77.235415][ T5344] syzkaller0: entered allmulticast mode [ 77.254642][ T5344] tipc: Resetting bearer [ 77.261836][ T5344] loop0: detected capacity change from 0 to 128 [ 77.270649][ T5346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.283937][ T5355] loop1: detected capacity change from 0 to 128 [ 77.290751][ T5344] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.315587][ T5355] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.329763][ T5344] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.343184][ T5355] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.358447][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 77.367738][ T29] audit: type=1400 audit(1770229446.614:710): avc: denied { bind } for pid=5356 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.388441][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 77.399180][ T5343] tipc: Resetting bearer [ 77.420426][ T5359] loop3: detected capacity change from 0 to 512 [ 77.431038][ T5343] tipc: Disabling bearer [ 77.442150][ T5362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5362 comm=syz.4.579 [ 77.464288][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.473656][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 77.485734][ T5359] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 77.498915][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.509842][ T5362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5362 comm=syz.4.579 [ 77.525407][ T5362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5362 comm=syz.4.579 [ 77.535618][ T5359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'. [ 77.547101][ T5359] unsupported nlmsg_type 40 [ 77.559295][ T315] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.574162][ T5366] netlink: 108 bytes leftover after parsing attributes in process `syz.2.581'. [ 77.615624][ T5362] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 77.641702][ T5362] bond1 (unregistering): Released all slaves [ 77.650632][ T5375] loop3: detected capacity change from 0 to 512 [ 77.652345][ T5376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5376 comm=syz.4.579 [ 77.669697][ T5375] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.693248][ T5375] EXT4-fs (loop3): 1 truncate cleaned up [ 77.700104][ T5375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.719458][ T5377] netlink: 'syz.1.580': attribute type 4 has an invalid length. [ 77.780966][ T5383] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.804341][ T5388] msdos: Unknown parameter '' [ 77.904329][ T5403] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.112354][ T5426] netlink: 108 bytes leftover after parsing attributes in process `syz.0.594'. [ 78.200444][ T5440] netlink: 'syz.0.598': attribute type 4 has an invalid length. [ 78.276943][ T5445] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.421144][ T5450] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.438256][ T5452] batadv1: entered promiscuous mode [ 78.463058][ T5452] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 78.675431][ T5461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 78.877907][ T5479] netlink: 108 bytes leftover after parsing attributes in process `syz.0.608'. [ 78.936012][ T5485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.610'. [ 78.956346][ T5482] netlink: 'syz.0.609': attribute type 12 has an invalid length. [ 79.062518][ T5494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.078776][ T5491] xt_hashlimit: size too large, truncated to 1048576 [ 79.175425][ T5494] EXT4-fs (loop4): 1 truncate cleaned up [ 79.223451][ T5512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.618'. [ 79.317980][ T5520] Invalid ELF header len 1 [ 79.348413][ T5526] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 79.360172][ T5526] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 79.360198][ T5526] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.621: Corrupt directory, running e2fsck is recommended [ 79.442252][ T5526] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 79.462758][ T5526] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.621: corrupted in-inode xattr: invalid ea_ino [ 79.478768][ T5526] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.621: couldn't read orphan inode 15 (err -117) [ 79.497745][ T5526] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 79.509471][ T5526] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 79.519739][ T5526] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.621: Corrupt directory, running e2fsck is recommended [ 79.532764][ T5526] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.621: path /112/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 79.668927][ T5551] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.766818][ T5558] EXT4-fs: Ignoring removed orlov option [ 79.772586][ T5558] EXT4-fs: inline encryption not supported [ 79.787220][ T5558] EXT4-fs: dax option not supported [ 80.092717][ T5567] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.116776][ T5567] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.165021][ T5567] EXT4-fs error (device loop2): __ext4_iget:5426: inode #12: block 13: comm syz.2.633: invalid block [ 80.188916][ T5567] EXT4-fs (loop2): Remounting filesystem read-only [ 80.337940][ T5572] xt_hashlimit: size too large, truncated to 1048576 [ 80.384604][ T5574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5574 comm=syz.3.636 [ 80.451741][ T5575] macvlan2: entered promiscuous mode [ 80.557864][ T5589] tmpfs: Bad value for 'mpol' [ 80.582948][ T5586] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.621254][ T5589] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.639199][ T5593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.669795][ T5589] EXT4-fs (loop0): mount failed [ 80.706455][ T5597] netlink: 'syz.3.642': attribute type 2 has an invalid length. [ 80.714211][ T5597] netlink: 'syz.3.642': attribute type 8 has an invalid length. [ 80.727708][ T5600] EXT4-fs: Ignoring removed orlov option [ 80.733525][ T5600] EXT4-fs: inline encryption not supported [ 80.756174][ T5600] EXT4-fs: dax option not supported [ 80.812202][ T5606] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.858637][ T5606] EXT4-fs (loop4): 1 truncate cleaned up [ 80.917408][ T5612] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.945801][ T5620] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.217198][ T5640] xt_hashlimit: size too large, truncated to 1048576 [ 81.445312][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 81.445406][ T29] audit: type=1400 audit(1770229706.692:722): avc: denied { read write } for pid=5649 comm="syz.0.657" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.475660][ T29] audit: type=1400 audit(1770229706.692:723): avc: denied { open } for pid=5649 comm="syz.0.657" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.694781][ T5661] set_capacity_and_notify: 21 callbacks suppressed [ 81.694848][ T5661] loop4: detected capacity change from 0 to 1024 [ 81.708651][ T5661] EXT4-fs: Ignoring removed orlov option [ 81.714610][ T5661] EXT4-fs: inline encryption not supported [ 81.721604][ T5661] EXT4-fs: dax option not supported [ 81.868079][ T5673] loop1: detected capacity change from 0 to 128 [ 81.887602][ T5673] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.899924][ T5670] loop3: detected capacity change from 0 to 128 [ 81.928991][ T5674] loop0: detected capacity change from 0 to 128 [ 81.932730][ T5670] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.977253][ T29] audit: type=1400 audit(1770229707.202:724): avc: denied { create } for pid=5677 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.997303][ T29] audit: type=1400 audit(1770229707.202:725): avc: denied { ioctl } for pid=5677 comm="syz.4.666" path="socket:[13333]" dev="sockfs" ino=13333 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.128376][ T5688] loop1: detected capacity change from 0 to 512 [ 82.154044][ T5688] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.181154][ T5690] loop0: detected capacity change from 0 to 512 [ 82.192746][ T5692] mmap: syz.4.672 (5692) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.209242][ T5688] EXT4-fs (loop1): 1 truncate cleaned up [ 82.226019][ T29] audit: type=1400 audit(1770229707.462:726): avc: denied { shutdown } for pid=5691 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.243520][ T5699] xt_hashlimit: size too large, truncated to 1048576 [ 82.246366][ T29] audit: type=1400 audit(1770229707.462:727): avc: denied { write } for pid=5691 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.318449][ T5690] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.330012][ T5690] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 82.340183][ T5690] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.671: Corrupt directory, running e2fsck is recommended [ 82.376651][ T5690] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 82.386210][ T5690] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.671: corrupted in-inode xattr: invalid ea_ino [ 82.443423][ T5690] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.671: couldn't read orphan inode 15 (err -117) [ 82.456782][ T5705] __nla_validate_parse: 8 callbacks suppressed [ 82.456907][ T5705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'. [ 82.474322][ T5690] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.485906][ T5690] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 82.496028][ T5690] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.671: Corrupt directory, running e2fsck is recommended [ 82.509318][ T5690] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.671: path /125/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 82.604162][ T5712] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 82.631695][ T5714] loop4: detected capacity change from 0 to 1024 [ 82.638437][ T5714] EXT4-fs: Ignoring removed orlov option [ 82.644218][ T5714] EXT4-fs: inline encryption not supported [ 82.650119][ T5714] EXT4-fs: dax option not supported [ 82.705178][ T5716] loop0: detected capacity change from 0 to 1024 [ 82.713414][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 82.730143][ T5716] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.803551][ T5721] loop3: detected capacity change from 0 to 128 [ 82.876450][ T5721] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.063767][ T5728] loop4: detected capacity change from 0 to 1024 [ 83.209349][ T29] audit: type=1400 audit(1770229708.452:728): avc: denied { mount } for pid=5731 comm="syz.3.683" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.245005][ T29] audit: type=1400 audit(1770229708.482:729): avc: denied { unmount } for pid=5731 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.268645][ T5734] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.287756][ T5734] netlink: 2 bytes leftover after parsing attributes in process `syz.1.684'. [ 83.298602][ T5734] batadv_slave_1: entered promiscuous mode [ 83.381736][ T5747] IPVS: set_ctl: invalid protocol: 60 172.20.20.30:20003 [ 83.389624][ T5748] random: crng reseeded on system resumption [ 83.398780][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 83.410318][ T29] audit: type=1400 audit(1770229708.632:730): avc: denied { write } for pid=5746 comm="syz.3.688" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.433345][ T29] audit: type=1400 audit(1770229708.642:731): avc: denied { open } for pid=5746 comm="syz.3.688" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.457663][ T5749] netlink: 108 bytes leftover after parsing attributes in process `syz.2.687'. [ 83.502816][ T5756] xt_hashlimit: size too large, truncated to 1048576 [ 83.618850][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 83.632507][ T5762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'. [ 83.642455][ T5762] netlink: 'syz.2.693': attribute type 3 has an invalid length. [ 83.663765][ T5762] netlink: 'syz.2.693': attribute type 3 has an invalid length. [ 83.720785][ T5764] bond3: option ad_actor_sys_prio: invalid value (0) [ 83.727526][ T5764] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 83.764604][ T5773] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.765315][ T5764] bond3 (unregistering): Released all slaves [ 83.802438][ T5772] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.846293][ T5772] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 1803188595: comm syz.2.696: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 83.862158][ T5772] EXT4-fs (loop2): Remounting filesystem read-only [ 83.907713][ T5772] EXT4-fs (loop2): mount failed [ 83.930168][ T5778] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.127823][ T5791] netlink: 108 bytes leftover after parsing attributes in process `syz.1.703'. [ 84.704303][ T5799] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.705: inode has both inline data and extents flags [ 84.750855][ T5799] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.705: couldn't read orphan inode 15 (err -117) [ 84.787207][ T5799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.705'. [ 84.804279][ T5807] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.815928][ T5807] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 84.826206][ T5807] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.708: Corrupt directory, running e2fsck is recommended [ 84.896822][ T5807] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 84.935089][ T5807] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.708: corrupted in-inode xattr: invalid ea_ino [ 84.971637][ T5807] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.708: couldn't read orphan inode 15 (err -117) [ 85.018511][ T5807] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.030151][ T5807] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 85.040263][ T5807] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.708: Corrupt directory, running e2fsck is recommended [ 85.053191][ T5807] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.708: path /164/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 85.104196][ T5821] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.209714][ T5696] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 85.260856][ T5828] netlink: 108 bytes leftover after parsing attributes in process `syz.4.715'. [ 85.470269][ T5841] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.719: inode has both inline data and extents flags [ 85.499763][ T5841] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.719: couldn't read orphan inode 15 (err -117) [ 85.679622][ T5850] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.949210][ T5850] EXT4-fs (loop4): 1 truncate cleaned up [ 85.958246][ T5858] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.203296][ T5869] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 86.214467][ T5869] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.229670][ T5869] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.727: Block bitmap for bg 0 marked uninitialized [ 86.249227][ T5869] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 86.258610][ T5869] EXT4-fs (loop1): 1 orphan inode deleted [ 86.298896][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /136/file1: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 86.324565][ T3314] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 86.338464][ T5875] netlink: 'syz.2.730': attribute type 1 has an invalid length. [ 86.346567][ T3314] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 86.361627][ T5875] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 86.481583][ T5878] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.493166][ T5878] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 86.503278][ T5878] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.732: Corrupt directory, running e2fsck is recommended [ 86.570233][ T5878] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 86.578361][ T5878] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.732: corrupted in-inode xattr: invalid ea_ino [ 86.601177][ T5883] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.734: inode has both inline data and extents flags [ 86.616583][ T5878] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.732: couldn't read orphan inode 15 (err -117) [ 86.645600][ T5885] bridge_slave_0: left allmulticast mode [ 86.651365][ T5885] bridge_slave_0: left promiscuous mode [ 86.657135][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.665430][ T5883] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.734: couldn't read orphan inode 15 (err -117) [ 86.679691][ T5837] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 86.700992][ T5890] set_capacity_and_notify: 17 callbacks suppressed [ 86.701010][ T5890] loop4: detected capacity change from 0 to 512 [ 86.715746][ T5878] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.727555][ T5878] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 86.737726][ T5878] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.732: Corrupt directory, running e2fsck is recommended [ 86.754454][ T5885] bridge_slave_1: left allmulticast mode [ 86.760181][ T5885] bridge_slave_1: left promiscuous mode [ 86.765918][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.774327][ T5878] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.732: path /151/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 86.797108][ T5890] /dev/loop4: Can't open blockdev [ 86.820600][ T5885] bond0: (slave bond_slave_0): Releasing backup interface [ 86.841706][ T5885] bond0: (slave bond_slave_1): Releasing backup interface [ 86.893928][ T5885] team0: Port device team_slave_0 removed [ 86.913818][ T5885] team0: Port device team_slave_1 removed [ 86.926625][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.934270][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.944943][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.952414][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.964033][ T5885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.991369][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.003843][ T5889] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 87.004202][ T5890] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 87.062223][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.082642][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 87.082660][ T29] audit: type=1400 audit(1770229712.332:739): avc: denied { write } for pid=5902 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.121429][ T29] audit: type=1400 audit(1770229712.372:740): avc: denied { getopt } for pid=5905 comm="syz.4.739" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.122374][ T4225] IPVS: starting estimator thread 0... [ 87.221523][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.249663][ T5907] IPVS: using max 2160 ests per chain, 108000 per kthread [ 87.376988][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.389020][ T5928] 9p: Bad value for 'version' [ 87.394110][ T29] audit: type=1400 audit(1770229712.632:741): avc: denied { mounton } for pid=5927 comm="syz.3.745" path="/154/file0" dev="tmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.536051][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 87.546968][ T5931] loop4: detected capacity change from 0 to 512 [ 87.557950][ T5933] loop3: detected capacity change from 0 to 512 [ 87.625190][ T5933] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.670792][ T5931] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.747: inode has both inline data and extents flags [ 87.769252][ T5936] loop0: detected capacity change from 0 to 512 [ 87.799715][ T37] bridge_slave_1: left allmulticast mode [ 87.805442][ T37] bridge_slave_1: left promiscuous mode [ 87.811261][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.820840][ T5933] EXT4-fs (loop3): 1 truncate cleaned up [ 87.839086][ T5931] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.747: couldn't read orphan inode 15 (err -117) [ 87.864298][ T5936] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.875870][ T5936] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 87.886038][ T5936] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.748: Corrupt directory, running e2fsck is recommended [ 87.905014][ T37] bridge_slave_0: left allmulticast mode [ 87.910765][ T37] bridge_slave_0: left promiscuous mode [ 87.916502][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.923604][ T29] audit: type=1400 audit(1770229713.042:742): avc: denied { read } for pid=3039 comm="dhcpcd" name="n26" dev="tmpfs" ino=7288 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.945311][ T29] audit: type=1400 audit(1770229713.042:743): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=7288 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.968321][ T29] audit: type=1400 audit(1770229713.042:744): avc: denied { getattr } for pid=3039 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=7288 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.998394][ T5939] FAULT_INJECTION: forcing a failure. [ 87.998394][ T5939] name failslab, interval 1, probability 0, space 0, times 0 [ 88.011186][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.3.746 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.011221][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.011237][ T5939] Call Trace: [ 88.011245][ T5939] [ 88.011255][ T5939] __dump_stack+0x1d/0x30 [ 88.011284][ T5939] dump_stack_lvl+0x95/0xd0 [ 88.011307][ T5939] dump_stack+0x15/0x1b [ 88.011344][ T5939] should_fail_ex+0x263/0x280 [ 88.011425][ T5939] should_failslab+0x8c/0xb0 [ 88.011453][ T5939] __kmalloc_cache_noprof+0x64/0x4a0 [ 88.011533][ T5939] ? __iomap_dio_rw+0x194/0x14c0 [ 88.011562][ T5939] __iomap_dio_rw+0x194/0x14c0 [ 88.011608][ T5939] ? __brelse+0x32/0x60 [ 88.011630][ T5939] ? __ext4_journal_get_write_access+0x1d1/0x350 [ 88.011678][ T5939] iomap_dio_rw+0x40/0x90 [ 88.011741][ T5939] ext4_file_write_iter+0xae5/0xf70 [ 88.011792][ T5939] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 88.011915][ T5939] vfs_write+0x5a6/0x9f0 [ 88.011946][ T5939] __x64_sys_pwrite64+0xfd/0x150 [ 88.011975][ T5939] x64_sys_call+0x9f7/0x3000 [ 88.012034][ T5939] do_syscall_64+0xc0/0x2a0 [ 88.012066][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.012090][ T5939] RIP: 0033:0x7f4d62cdaeb9 [ 88.012110][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.012163][ T5939] RSP: 002b:00007f4d61716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 88.012190][ T5939] RAX: ffffffffffffffda RBX: 00007f4d62f56090 RCX: 00007f4d62cdaeb9 [ 88.012251][ T5939] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000007 [ 88.012264][ T5939] RBP: 00007f4d61716090 R08: 0000000000000000 R09: 0000000000000000 [ 88.012277][ T5939] R10: 0000000404042ffc R11: 0000000000000246 R12: 0000000000000001 [ 88.012293][ T5939] R13: 00007f4d62f56128 R14: 00007f4d62f56090 R15: 00007ffd3687ec78 [ 88.012318][ T5939] [ 88.013558][ T5936] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 88.211745][ T5936] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.748: corrupted in-inode xattr: invalid ea_ino [ 88.226837][ T5936] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.748: couldn't read orphan inode 15 (err -117) [ 88.264820][ T5936] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.276445][ T5936] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 88.286586][ T5936] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.748: Corrupt directory, running e2fsck is recommended [ 88.309882][ T5943] loop2: detected capacity change from 0 to 128 [ 88.318330][ T5936] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.748: path /135/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 88.340972][ T5943] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.368500][ T5943] FAULT_INJECTION: forcing a failure. [ 88.368500][ T5943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.381856][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: syz.2.749 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.381943][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.381960][ T5943] Call Trace: [ 88.381967][ T5943] [ 88.381974][ T5943] __dump_stack+0x1d/0x30 [ 88.382031][ T5943] dump_stack_lvl+0x95/0xd0 [ 88.382125][ T5943] dump_stack+0x15/0x1b [ 88.382161][ T5943] should_fail_ex+0x263/0x280 [ 88.382273][ T5943] should_fail+0xb/0x20 [ 88.382442][ T5943] should_fail_usercopy+0x1a/0x20 [ 88.382479][ T5943] _copy_from_user+0x1c/0xb0 [ 88.382499][ T5943] ext4_ioctl+0x188b/0x3170 [ 88.382605][ T5943] ? ioctl_has_perm+0x27e/0x2d0 [ 88.382636][ T5943] ? do_vfs_ioctl+0x84f/0xe70 [ 88.382695][ T5943] ? selinux_file_ioctl+0x5f7/0xcb0 [ 88.382721][ T5943] ? __rcu_read_unlock+0x4e/0x70 [ 88.382830][ T5943] ? __rcu_read_unlock+0x4e/0x70 [ 88.382868][ T5943] ? __fget_files+0x184/0x1c0 [ 88.382897][ T5943] ? mutex_lock+0x57/0x90 [ 88.382957][ T5943] ? __pfx_ext4_ioctl+0x10/0x10 [ 88.383061][ T5943] __se_sys_ioctl+0xce/0x140 [ 88.383093][ T5943] __x64_sys_ioctl+0x43/0x50 [ 88.383124][ T5943] x64_sys_call+0x14b0/0x3000 [ 88.383163][ T5943] do_syscall_64+0xc0/0x2a0 [ 88.383243][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.383264][ T5943] RIP: 0033:0x7f26b2aeaeb9 [ 88.383284][ T5943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.383307][ T5943] RSP: 002b:00007f26b1547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.383373][ T5943] RAX: ffffffffffffffda RBX: 00007f26b2d65fa0 RCX: 00007f26b2aeaeb9 [ 88.383432][ T5943] RDX: 0000200000000000 RSI: 00000000c0185879 RDI: 0000000000000005 [ 88.383450][ T5943] RBP: 00007f26b1547090 R08: 0000000000000000 R09: 0000000000000000 [ 88.383464][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.383477][ T5943] R13: 00007f26b2d66038 R14: 00007f26b2d65fa0 R15: 00007ffe042fcd48 [ 88.383502][ T5943] [ 88.605961][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.608969][ T5946] loop3: detected capacity change from 0 to 128 [ 88.628412][ T5946] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.639519][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.653729][ T37] bond0 (unregistering): Released all slaves [ 88.674167][ T5941] __nla_validate_parse: 10 callbacks suppressed [ 88.674215][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 88.753425][ T37] hsr_slave_0: left promiscuous mode [ 88.777716][ T37] hsr_slave_1: left promiscuous mode [ 88.788444][ T29] audit: type=1400 audit(1770229714.032:745): avc: denied { read open } for pid=5959 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.796347][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.821188][ T29] audit: type=1400 audit(1770229714.032:746): avc: denied { getattr } for pid=5959 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.846570][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.866940][ T5960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5960 comm=syz.0.755 [ 88.881094][ T5964] netlink: 108 bytes leftover after parsing attributes in process `syz.4.753'. [ 88.914289][ T5968] loop0: detected capacity change from 0 to 1024 [ 88.923180][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.930740][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.938617][ T5968] EXT4-fs: Ignoring removed bh option [ 88.970118][ T5968] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.757: Allocating blocks 497-513 which overlap fs metadata [ 88.972288][ T29] audit: type=1400 audit(1770229714.212:747): avc: denied { append } for pid=5967 comm="syz.0.757" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.994857][ T5968] EXT4-fs (loop0): Remounting filesystem read-only [ 89.019776][ T37] veth1_macvtap: left promiscuous mode [ 89.025296][ T37] veth0_macvtap: left promiscuous mode [ 89.031208][ T37] veth1_vlan: left promiscuous mode [ 89.036536][ T37] veth0_vlan: left promiscuous mode [ 89.182380][ T5983] loop3: detected capacity change from 0 to 512 [ 89.191978][ T29] audit: type=1400 audit(1770229714.432:748): avc: denied { add_name } for pid=5957 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.349302][ T5983] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.361033][ T5983] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 89.371231][ T5983] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.761: Corrupt directory, running e2fsck is recommended [ 89.502671][ T37] team0 (unregistering): Port device team_slave_1 removed [ 89.514829][ T6004] loop0: detected capacity change from 0 to 128 [ 89.553256][ T6004] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.576844][ T37] team0 (unregistering): Port device team_slave_0 removed [ 89.592677][ T5983] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 89.610704][ T6004] FAULT_INJECTION: forcing a failure. [ 89.610704][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.623826][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.0.762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.623977][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.623992][ T6004] Call Trace: [ 89.623999][ T6004] [ 89.624024][ T6004] __dump_stack+0x1d/0x30 [ 89.624055][ T6004] dump_stack_lvl+0x95/0xd0 [ 89.624080][ T6004] dump_stack+0x15/0x1b [ 89.624162][ T6004] should_fail_ex+0x263/0x280 [ 89.624195][ T6004] should_fail+0xb/0x20 [ 89.624229][ T6004] should_fail_usercopy+0x1a/0x20 [ 89.624314][ T6004] _copy_to_user+0x20/0xa0 [ 89.624361][ T6004] ext4_ioctl+0x1475/0x3170 [ 89.624397][ T6004] ? ioctl_has_perm+0x27e/0x2d0 [ 89.624438][ T6004] ? do_vfs_ioctl+0x84f/0xe70 [ 89.624471][ T6004] ? selinux_file_ioctl+0x5f7/0xcb0 [ 89.624502][ T6004] ? __rcu_read_unlock+0x4e/0x70 [ 89.624554][ T6004] ? __fget_files+0x184/0x1c0 [ 89.624580][ T6004] ? __pfx_ext4_ioctl+0x10/0x10 [ 89.624611][ T6004] __se_sys_ioctl+0xce/0x140 [ 89.624801][ T6004] __x64_sys_ioctl+0x43/0x50 [ 89.624917][ T6004] x64_sys_call+0x14b0/0x3000 [ 89.624958][ T6004] do_syscall_64+0xc0/0x2a0 [ 89.624993][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.625071][ T6004] RIP: 0033:0x7f4327b8aeb9 [ 89.625087][ T6004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.625113][ T6004] RSP: 002b:00007f43265e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.625136][ T6004] RAX: ffffffffffffffda RBX: 00007f4327e05fa0 RCX: 00007f4327b8aeb9 [ 89.625221][ T6004] RDX: 0000200000000000 RSI: 00000000c0185879 RDI: 0000000000000005 [ 89.625240][ T6004] RBP: 00007f43265e7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.625254][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.625301][ T6004] R13: 00007f4327e06038 R14: 00007f4327e05fa0 R15: 00007fff835071e8 [ 89.625371][ T6004] [ 89.824022][ T5983] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.761: corrupted in-inode xattr: invalid ea_ino [ 89.839529][ T5983] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.761: couldn't read orphan inode 15 (err -117) [ 89.865223][ T5983] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.876873][ T5983] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 89.887152][ T5983] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.761: Corrupt directory, running e2fsck is recommended [ 89.920411][ T5983] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.761: path /159/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 89.955206][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.962458][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.985121][ T5893] bridge_slave_0: entered allmulticast mode [ 89.991835][ T5893] bridge_slave_0: entered promiscuous mode [ 90.020784][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.027914][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.041256][ T5893] bridge_slave_1: entered allmulticast mode [ 90.047996][ T5893] bridge_slave_1: entered promiscuous mode [ 90.078803][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.088514][ T6012] loop0: detected capacity change from 0 to 512 [ 90.098603][ T6012] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.763: inode has both inline data and extents flags [ 90.103818][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.143761][ T5893] team0: Port device team_slave_0 added [ 90.150592][ T5893] team0: Port device team_slave_1 added [ 90.170017][ T6012] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.763: couldn't read orphan inode 15 (err -117) [ 90.196282][ T6019] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.229055][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.236123][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.262126][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.282045][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.289069][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.315145][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.368758][ T6031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.388868][ T6034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.441892][ T6031] EXT4-fs (loop3): 1 truncate cleaned up [ 90.444769][ T6034] EXT4-fs (loop0): 1 truncate cleaned up [ 90.482358][ T5893] hsr_slave_0: entered promiscuous mode [ 90.500118][ T5893] hsr_slave_1: entered promiscuous mode [ 90.506127][ T5893] debugfs: 'hsr0' already exists in 'hsr' [ 90.511929][ T5893] Cannot create hsr debugfs directory [ 90.629236][ T5893] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.639490][ T5893] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.656035][ T5893] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.669215][ T5893] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.738679][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.757149][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.771982][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.779346][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.803418][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.807758][ T6067] EXT4-fs: Ignoring removed i_version option [ 90.810661][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.816596][ T6067] EXT4-fs: Ignoring removed oldalloc option [ 90.874697][ T5893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.885244][ T5893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.941642][ T6075] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.962704][ T6079] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 91.016852][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.093561][ T6090] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.105150][ T6090] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 91.115334][ T6090] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.775: Corrupt directory, running e2fsck is recommended [ 91.177622][ T6090] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 91.186861][ T6090] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.775: corrupted in-inode xattr: invalid ea_ino [ 91.216565][ T6090] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.775: couldn't read orphan inode 15 (err -117) [ 91.248233][ T6090] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.259847][ T6090] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 91.270182][ T6090] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.775: Corrupt directory, running e2fsck is recommended [ 91.285716][ T6090] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.775: path /180/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 91.377799][ T5893] veth0_vlan: entered promiscuous mode [ 91.392190][ T5893] veth1_vlan: entered promiscuous mode [ 91.416576][ T5893] veth0_macvtap: entered promiscuous mode [ 91.446016][ T5893] veth1_macvtap: entered promiscuous mode [ 91.467003][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.478586][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.507103][ T6117] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.668188][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.691165][ T6118] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.778: inode has both inline data and extents flags [ 91.712290][ T6125] set_capacity_and_notify: 8 callbacks suppressed [ 91.712308][ T6125] loop4: detected capacity change from 0 to 128 [ 91.738585][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.783634][ T6118] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.778: couldn't read orphan inode 15 (err -117) [ 91.806490][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.821228][ T6125] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.871840][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.915070][ T6130] loop5: detected capacity change from 0 to 1024 [ 92.045871][ T6137] loop2: detected capacity change from 0 to 512 [ 92.054734][ T6139] netlink: 120 bytes leftover after parsing attributes in process `syz.0.782'. [ 92.059202][ T6137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.165743][ T6137] EXT4-fs (loop2): 1 truncate cleaned up [ 92.209695][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 92.209713][ T29] audit: type=1326 audit(1770229717.452:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5e9290aeb9 code=0x7ffc0000 [ 92.257106][ T6147] loop0: detected capacity change from 0 to 128 [ 92.283085][ T6148] loop4: detected capacity change from 0 to 512 [ 92.313236][ T6156] FAULT_INJECTION: forcing a failure. [ 92.313236][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 92.325945][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: syz.2.781 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.326047][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.326061][ T6156] Call Trace: [ 92.326067][ T6156] [ 92.326077][ T6156] __dump_stack+0x1d/0x30 [ 92.326104][ T6156] dump_stack_lvl+0x95/0xd0 [ 92.326173][ T6156] dump_stack+0x15/0x1b [ 92.326197][ T6156] should_fail_ex+0x263/0x280 [ 92.326237][ T6156] should_failslab+0x8c/0xb0 [ 92.326280][ T6156] kmem_cache_alloc_noprof+0x68/0x490 [ 92.326312][ T6156] ? ext4_mb_new_blocks+0x7a8/0x2080 [ 92.326350][ T6156] ext4_mb_new_blocks+0x7a8/0x2080 [ 92.326464][ T6156] ? ext4_get_branch+0x321/0x3a0 [ 92.326496][ T6156] ext4_new_meta_blocks+0x102/0x1f0 [ 92.326542][ T6156] ext4_ind_map_blocks+0xc7b/0x15d0 [ 92.326589][ T6156] ext4_map_blocks+0x61b/0xd70 [ 92.326625][ T6156] ext4_iomap_begin+0xa20/0x1000 [ 92.326742][ T6156] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 92.326848][ T6156] iomap_iter+0x3f7/0x800 [ 92.326896][ T6156] __iomap_dio_rw+0x858/0x14c0 [ 92.326953][ T6156] iomap_dio_rw+0x40/0x90 [ 92.327001][ T6156] ext4_file_write_iter+0xae5/0xf70 [ 92.327094][ T6156] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 92.327133][ T6156] vfs_write+0x5a6/0x9f0 [ 92.327163][ T6156] __x64_sys_pwrite64+0xfd/0x150 [ 92.327259][ T6156] x64_sys_call+0x9f7/0x3000 [ 92.327283][ T6156] do_syscall_64+0xc0/0x2a0 [ 92.327315][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.327355][ T6156] RIP: 0033:0x7f26b2aeaeb9 [ 92.327374][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.327417][ T6156] RSP: 002b:00007f26b1526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 92.327437][ T6156] RAX: ffffffffffffffda RBX: 00007f26b2d66090 RCX: 00007f26b2aeaeb9 [ 92.327451][ T6156] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000007 [ 92.327464][ T6156] RBP: 00007f26b1526090 R08: 0000000000000000 R09: 0000000000000000 [ 92.327476][ T6156] R10: 0000000404042ffc R11: 0000000000000246 R12: 0000000000000001 [ 92.327532][ T6156] R13: 00007f26b2d66128 R14: 00007f26b2d66090 R15: 00007ffe042fcd48 [ 92.327557][ T6156] [ 92.359219][ T6148] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.421104][ T6147] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.481346][ T6148] EXT4-fs (loop4): 1 truncate cleaned up [ 92.544599][ T6161] loop3: detected capacity change from 0 to 512 [ 92.570816][ T6147] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 92.580625][ T6163] loop5: detected capacity change from 0 to 512 [ 92.591031][ T6161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.629305][ T6161] EXT4-fs (loop3): 1 truncate cleaned up [ 92.646999][ T6163] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.658930][ T6163] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 92.669079][ T6163] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.789: Corrupt directory, running e2fsck is recommended [ 92.671125][ T6167] loop0: detected capacity change from 0 to 128 [ 92.729175][ T6167] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.742174][ T6167] FAULT_INJECTION: forcing a failure. [ 92.742174][ T6167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.755429][ T6167] CPU: 1 UID: 0 PID: 6167 Comm: syz.0.790 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.755458][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.755472][ T6167] Call Trace: [ 92.755477][ T6167] [ 92.755486][ T6167] __dump_stack+0x1d/0x30 [ 92.755590][ T6167] dump_stack_lvl+0x95/0xd0 [ 92.755715][ T6167] dump_stack+0x15/0x1b [ 92.755746][ T6167] should_fail_ex+0x263/0x280 [ 92.755783][ T6167] should_fail+0xb/0x20 [ 92.755817][ T6167] should_fail_usercopy+0x1a/0x20 [ 92.755893][ T6167] _copy_from_user+0x1c/0xb0 [ 92.755914][ T6167] kstrtouint_from_user+0x69/0xf0 [ 92.755948][ T6167] proc_fail_nth_write+0x50/0x160 [ 92.755981][ T6167] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 92.756047][ T6167] vfs_write+0x269/0x9f0 [ 92.756072][ T6167] ? __rcu_read_unlock+0x4e/0x70 [ 92.756146][ T6167] ? __fget_files+0x184/0x1c0 [ 92.756169][ T6167] ? mutex_lock+0x57/0x90 [ 92.756200][ T6167] ksys_write+0xdc/0x1a0 [ 92.756226][ T6167] __x64_sys_write+0x40/0x50 [ 92.756327][ T6167] x64_sys_call+0x2847/0x3000 [ 92.756359][ T6167] do_syscall_64+0xc0/0x2a0 [ 92.756498][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.756542][ T6167] RIP: 0033:0x7f4327b4b78e [ 92.756559][ T6167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.756581][ T6167] RSP: 002b:00007f43265e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.756610][ T6167] RAX: ffffffffffffffda RBX: 00007f43265e76c0 RCX: 00007f4327b4b78e [ 92.756629][ T6167] RDX: 0000000000000001 RSI: 00007f43265e70a0 RDI: 0000000000000006 [ 92.756647][ T6167] RBP: 00007f43265e7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.756662][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.756674][ T6167] R13: 00007f4327e06038 R14: 00007f4327e05fa0 R15: 00007fff835071e8 [ 92.756695][ T6167] [ 92.772733][ T6163] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 92.959930][ T6163] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.789: corrupted in-inode xattr: invalid ea_ino [ 92.976248][ T6163] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.789: couldn't read orphan inode 15 (err -117) [ 92.999814][ T6163] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.011459][ T6163] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 93.021738][ T6163] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.789: Corrupt directory, running e2fsck is recommended [ 93.047392][ T6183] loop2: detected capacity change from 0 to 512 [ 93.054152][ T6163] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.789: path /2/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 93.081036][ T6186] netlink: 'syz.4.795': attribute type 10 has an invalid length. [ 93.093021][ T6183] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.793: inode has both inline data and extents flags [ 93.123466][ T6186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.130097][ T6185] loop0: detected capacity change from 0 to 128 [ 93.141217][ T6186] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 93.151454][ T6183] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.793: couldn't read orphan inode 15 (err -117) [ 93.168240][ T6186] bond0: (slave batadv0): Releasing backup interface [ 93.190386][ T6185] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.277381][ T6193] SELinux: ebitmap start bit (1970496256) is beyond the end of the bitmap (1088) [ 93.280040][ T29] audit: type=1400 audit(1770229718.522:775): avc: denied { load_policy } for pid=6192 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 93.288424][ T6193] SELinux: failed to load policy [ 93.326541][ T6197] netlink: 'syz.2.796': attribute type 43 has an invalid length. [ 93.369041][ T6193] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.406981][ T6202] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.423895][ T6193] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.798: corrupted xattr block 32: bad e_name length [ 93.437519][ T6193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 93.447093][ T6193] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.798: corrupted xattr block 32: bad e_name length [ 93.461250][ T6193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 93.502748][ T6211] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.515185][ T29] audit: type=1400 audit(1770229718.762:776): avc: denied { setattr } for pid=6192 comm="syz.0.798" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.519589][ T6213] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.798: corrupted xattr block 32: bad e_name length [ 93.562249][ T6213] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 93.576071][ T6193] EXT4-fs error (device loop0): ext4_xattr_block_find:1879: inode #15: comm syz.0.798: corrupted xattr block 32: bad e_name length [ 93.590912][ T29] audit: type=1400 audit(1770229718.842:777): avc: denied { execute } for pid=6192 comm="syz.0.798" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.614882][ T6213] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.798: corrupted xattr block 32: bad e_name length [ 93.629897][ T6213] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 93.639288][ T6213] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.798: corrupted xattr block 32: bad e_name length [ 93.670857][ T29] audit: type=1400 audit(1770229718.882:778): avc: denied { read open } for pid=6192 comm="syz.0.798" path="/148/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.696851][ T6215] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.806: inode has both inline data and extents flags [ 93.712361][ T6218] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.725899][ T29] audit: type=1400 audit(1770229718.972:779): avc: denied { setopt } for pid=6216 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.734572][ T6218] EXT4-fs (loop3): 1 truncate cleaned up [ 93.745419][ T29] audit: type=1400 audit(1770229718.972:780): avc: denied { bind } for pid=6216 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.769928][ T6213] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 93.770032][ T6213] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.798: corrupted xattr block 32: bad e_name length [ 93.779247][ T29] audit: type=1400 audit(1770229719.022:781): avc: denied { execute_no_trans } for pid=6192 comm="syz.0.798" path="/148/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.793881][ T6215] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.806: couldn't read orphan inode 15 (err -117) [ 93.835986][ T6213] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 93.881679][ T29] audit: type=1400 audit(1770229719.132:782): avc: denied { read write } for pid=6217 comm="syz.3.805" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.895313][ T6227] FAULT_INJECTION: forcing a failure. [ 93.895313][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 93.904406][ T29] audit: type=1400 audit(1770229719.132:783): avc: denied { open } for pid=6217 comm="syz.3.805" path="/166/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.916927][ T6227] CPU: 0 UID: 0 PID: 6227 Comm: syz.3.805 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.917007][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.917068][ T6227] Call Trace: [ 93.917084][ T6227] [ 93.917119][ T6227] __dump_stack+0x1d/0x30 [ 93.917268][ T6227] dump_stack_lvl+0x95/0xd0 [ 93.917338][ T6227] dump_stack+0x15/0x1b [ 93.917400][ T6227] should_fail_ex+0x263/0x280 [ 93.917502][ T6227] should_failslab+0x8c/0xb0 [ 93.917621][ T6227] kmem_cache_alloc_noprof+0x68/0x490 [ 93.917758][ T6227] ? ext4_mb_new_blocks+0x2fd/0x2080 [ 93.917867][ T6227] ext4_mb_new_blocks+0x2fd/0x2080 [ 93.917973][ T6227] ? ext4_get_branch+0x321/0x3a0 [ 93.918109][ T6227] ext4_new_meta_blocks+0x102/0x1f0 [ 93.918222][ T6227] ext4_ind_map_blocks+0xc7b/0x15d0 [ 93.918340][ T6227] ext4_map_blocks+0x61b/0xd70 [ 93.918523][ T6227] ext4_iomap_begin+0xa20/0x1000 [ 93.918645][ T6227] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 93.918827][ T6227] iomap_iter+0x3f7/0x800 [ 93.918951][ T6227] __iomap_dio_rw+0x858/0x14c0 [ 93.919075][ T6227] iomap_dio_rw+0x40/0x90 [ 93.919120][ T6227] ext4_file_write_iter+0xae5/0xf70 [ 93.919251][ T6227] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 93.919357][ T6227] vfs_write+0x5a6/0x9f0 [ 93.919443][ T6227] __x64_sys_pwrite64+0xfd/0x150 [ 93.919518][ T6227] x64_sys_call+0x9f7/0x3000 [ 93.919615][ T6227] do_syscall_64+0xc0/0x2a0 [ 93.919725][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.919806][ T6227] RIP: 0033:0x7f4d62cdaeb9 [ 93.919888][ T6227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.919962][ T6227] RSP: 002b:00007f4d61716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 93.920041][ T6227] RAX: ffffffffffffffda RBX: 00007f4d62f56090 RCX: 00007f4d62cdaeb9 [ 93.920083][ T6227] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000007 [ 93.920125][ T6227] RBP: 00007f4d61716090 R08: 0000000000000000 R09: 0000000000000000 [ 93.920172][ T6227] R10: 0000000404042ffc R11: 0000000000000246 R12: 0000000000000001 [ 93.920213][ T6227] R13: 00007f4d62f56128 R14: 00007f4d62f56090 R15: 00007ffd3687ec78 [ 93.920283][ T6227] [ 94.110518][ T6229] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 94.193174][ T6229] EXT4-fs (loop5): 1 truncate cleaned up [ 94.200835][ T6232] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 94.212402][ T6232] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 94.222549][ T6232] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.809: Corrupt directory, running e2fsck is recommended [ 94.263749][ T6232] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 94.264362][ T6235] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.272155][ T6232] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.809: corrupted in-inode xattr: invalid ea_ino [ 94.296958][ T6232] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.809: couldn't read orphan inode 15 (err -117) [ 94.324765][ T6232] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 94.336405][ T6232] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 94.346657][ T6232] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.809: Corrupt directory, running e2fsck is recommended [ 94.379915][ T6240] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.390834][ T6232] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.809: path /149/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 94.441535][ T6240] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.482915][ T6240] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.581430][ T6240] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.598636][ T6255] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.616538][ T6255] FAULT_INJECTION: forcing a failure. [ 94.616538][ T6255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.629702][ T6255] CPU: 0 UID: 0 PID: 6255 Comm: syz.4.816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.629740][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.629758][ T6255] Call Trace: [ 94.629772][ T6255] [ 94.629798][ T6255] __dump_stack+0x1d/0x30 [ 94.629828][ T6255] dump_stack_lvl+0x95/0xd0 [ 94.629896][ T6255] dump_stack+0x15/0x1b [ 94.629923][ T6255] should_fail_ex+0x263/0x280 [ 94.630004][ T6255] should_fail+0xb/0x20 [ 94.630036][ T6255] should_fail_usercopy+0x1a/0x20 [ 94.630076][ T6255] _copy_to_user+0x20/0xa0 [ 94.630110][ T6255] ext4_ioctl+0x1475/0x3170 [ 94.630211][ T6255] ? ioctl_has_perm+0x27e/0x2d0 [ 94.630250][ T6255] ? do_vfs_ioctl+0x84f/0xe70 [ 94.630286][ T6255] ? selinux_file_ioctl+0x5f7/0xcb0 [ 94.630327][ T6255] ? __rcu_read_unlock+0x4e/0x70 [ 94.630365][ T6255] ? __rcu_read_unlock+0x4e/0x70 [ 94.630480][ T6255] ? __fget_files+0x184/0x1c0 [ 94.630599][ T6255] ? mutex_lock+0x57/0x90 [ 94.630629][ T6255] ? __pfx_ext4_ioctl+0x10/0x10 [ 94.630675][ T6255] __se_sys_ioctl+0xce/0x140 [ 94.630737][ T6255] __x64_sys_ioctl+0x43/0x50 [ 94.630773][ T6255] x64_sys_call+0x14b0/0x3000 [ 94.630798][ T6255] do_syscall_64+0xc0/0x2a0 [ 94.630914][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.630943][ T6255] RIP: 0033:0x7f5e9290aeb9 [ 94.630964][ T6255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.630988][ T6255] RSP: 002b:00007f5e91367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.631015][ T6255] RAX: ffffffffffffffda RBX: 00007f5e92b85fa0 RCX: 00007f5e9290aeb9 [ 94.631035][ T6255] RDX: 0000200000000040 RSI: 00000000c0185879 RDI: 0000000000000004 [ 94.631052][ T6255] RBP: 00007f5e91367090 R08: 0000000000000000 R09: 0000000000000000 [ 94.631069][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.631147][ T6255] R13: 00007f5e92b86038 R14: 00007f5e92b85fa0 R15: 00007fffd0350698 [ 94.631214][ T6255] [ 94.884660][ T315] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.893006][ T315] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.912175][ T315] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.951090][ T315] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.994196][ T6265] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.084813][ T6271] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.819: inode has both inline data and extents flags [ 95.115460][ T6271] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.819: couldn't read orphan inode 15 (err -117) [ 95.196195][ T6281] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.207935][ T6281] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 95.218091][ T6281] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.825: Corrupt directory, running e2fsck is recommended [ 95.308672][ T6285] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.311552][ T6281] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 95.331038][ T6281] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.825: corrupted in-inode xattr: invalid ea_ino [ 95.376845][ T6281] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.825: couldn't read orphan inode 15 (err -117) [ 95.397633][ T6286] xt_hashlimit: size too large, truncated to 1048576 [ 95.415825][ T6281] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.425704][ T6289] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.427589][ T6281] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 95.447408][ T6281] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.825: Corrupt directory, running e2fsck is recommended [ 95.460253][ T6289] EXT4-fs (loop0): 1 truncate cleaned up [ 95.569553][ T6281] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.825: path /11/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 95.576972][ T6292] FAULT_INJECTION: forcing a failure. [ 95.576972][ T6292] name failslab, interval 1, probability 0, space 0, times 0 [ 95.602846][ T6292] CPU: 0 UID: 0 PID: 6292 Comm: syz.0.828 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.602895][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.602908][ T6292] Call Trace: [ 95.602918][ T6292] [ 95.602929][ T6292] __dump_stack+0x1d/0x30 [ 95.603024][ T6292] dump_stack_lvl+0x95/0xd0 [ 95.603050][ T6292] dump_stack+0x15/0x1b [ 95.603142][ T6292] should_fail_ex+0x263/0x280 [ 95.603216][ T6292] should_failslab+0x8c/0xb0 [ 95.603259][ T6292] kmem_cache_alloc_noprof+0x68/0x490 [ 95.603314][ T6292] ? ext4_mb_new_blocks+0x7a8/0x2080 [ 95.603363][ T6292] ext4_mb_new_blocks+0x7a8/0x2080 [ 95.603405][ T6292] ? ext4_get_branch+0x321/0x3a0 [ 95.603440][ T6292] ext4_new_meta_blocks+0x102/0x1f0 [ 95.603489][ T6292] ext4_ind_map_blocks+0xc7b/0x15d0 [ 95.603597][ T6292] ext4_map_blocks+0x61b/0xd70 [ 95.603643][ T6292] ext4_iomap_begin+0xa20/0x1000 [ 95.603705][ T6292] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 95.603744][ T6292] iomap_iter+0x3f7/0x800 [ 95.603800][ T6292] __iomap_dio_rw+0x858/0x14c0 [ 95.603911][ T6292] iomap_dio_rw+0x40/0x90 [ 95.603943][ T6292] ext4_file_write_iter+0xae5/0xf70 [ 95.603996][ T6292] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 95.604052][ T6292] vfs_write+0x5a6/0x9f0 [ 95.604078][ T6292] __x64_sys_pwrite64+0xfd/0x150 [ 95.604102][ T6292] x64_sys_call+0x9f7/0x3000 [ 95.604176][ T6292] do_syscall_64+0xc0/0x2a0 [ 95.604218][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.604290][ T6292] RIP: 0033:0x7f4327b8aeb9 [ 95.604309][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.604329][ T6292] RSP: 002b:00007f43265c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 95.604355][ T6292] RAX: ffffffffffffffda RBX: 00007f4327e06090 RCX: 00007f4327b8aeb9 [ 95.604374][ T6292] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000007 [ 95.604391][ T6292] RBP: 00007f43265c6090 R08: 0000000000000000 R09: 0000000000000000 [ 95.604432][ T6292] R10: 0000000404042ffc R11: 0000000000000246 R12: 0000000000000001 [ 95.604446][ T6292] R13: 00007f4327e06128 R14: 00007f4327e06090 R15: 00007fff835071e8 [ 95.604473][ T6292] [ 95.899585][ T6298] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.020210][ T6303] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.044063][ T6308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.067347][ T6303] FAULT_INJECTION: forcing a failure. [ 96.067347][ T6303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.080553][ T6303] CPU: 1 UID: 0 PID: 6303 Comm: syz.3.832 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.080581][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.080594][ T6303] Call Trace: [ 96.080600][ T6303] [ 96.080607][ T6303] __dump_stack+0x1d/0x30 [ 96.080699][ T6303] dump_stack_lvl+0x95/0xd0 [ 96.080722][ T6303] dump_stack+0x15/0x1b [ 96.080742][ T6303] should_fail_ex+0x263/0x280 [ 96.080819][ T6303] should_fail+0xb/0x20 [ 96.080848][ T6303] should_fail_usercopy+0x1a/0x20 [ 96.080881][ T6303] _copy_to_user+0x20/0xa0 [ 96.080913][ T6303] simple_read_from_buffer+0xb5/0x130 [ 96.080952][ T6303] proc_fail_nth_read+0x10e/0x150 [ 96.080981][ T6303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.081065][ T6303] vfs_read+0x1ab/0x7f0 [ 96.081084][ T6303] ? __rcu_read_unlock+0x4e/0x70 [ 96.081114][ T6303] ? __fget_files+0x184/0x1c0 [ 96.081197][ T6303] ? mutex_lock+0x57/0x90 [ 96.081221][ T6303] ksys_read+0xdc/0x1a0 [ 96.081242][ T6303] __x64_sys_read+0x40/0x50 [ 96.081327][ T6303] x64_sys_call+0x2889/0x3000 [ 96.081353][ T6303] do_syscall_64+0xc0/0x2a0 [ 96.081392][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.081463][ T6303] RIP: 0033:0x7f4d62c9b78e [ 96.081479][ T6303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.081498][ T6303] RSP: 002b:00007f4d61736fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.081519][ T6303] RAX: ffffffffffffffda RBX: 00007f4d617376c0 RCX: 00007f4d62c9b78e [ 96.081533][ T6303] RDX: 000000000000000f RSI: 00007f4d617370a0 RDI: 0000000000000005 [ 96.081577][ T6303] RBP: 00007f4d61737090 R08: 0000000000000000 R09: 0000000000000000 [ 96.081590][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.081603][ T6303] R13: 00007f4d62f56038 R14: 00007f4d62f55fa0 R15: 00007ffd3687ec78 [ 96.081625][ T6303] [ 96.282488][ T6308] EXT4-fs (loop2): 1 truncate cleaned up [ 96.402620][ T6314] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.836: inode has both inline data and extents flags [ 96.455598][ T6317] bio_check_eod: 147 callbacks suppressed [ 96.455616][ T6317] syz.0.838: attempt to access beyond end of device [ 96.455616][ T6317] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 96.475404][ T6314] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.836: couldn't read orphan inode 15 (err -117) [ 96.488651][ T6319] FAULT_INJECTION: forcing a failure. [ 96.488651][ T6319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.501895][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: syz.5.837 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.501924][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.501968][ T6319] Call Trace: [ 96.501975][ T6319] [ 96.501983][ T6319] __dump_stack+0x1d/0x30 [ 96.502015][ T6319] dump_stack_lvl+0x95/0xd0 [ 96.502042][ T6319] dump_stack+0x15/0x1b [ 96.502137][ T6319] should_fail_ex+0x263/0x280 [ 96.502234][ T6319] should_fail+0xb/0x20 [ 96.502451][ T6319] should_fail_usercopy+0x1a/0x20 [ 96.502494][ T6319] _copy_from_iter+0xcf/0xea0 [ 96.502585][ T6319] ? __rcu_read_unlock+0x4e/0x70 [ 96.502627][ T6319] tun_get_user+0x15f/0x27c0 [ 96.502655][ T6319] ? ref_tracker_alloc+0x1f2/0x2f0 [ 96.502704][ T6319] tun_chr_write_iter+0x15e/0x210 [ 96.502727][ T6319] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 96.502753][ T6319] vfs_write+0x5a6/0x9f0 [ 96.502784][ T6319] ksys_write+0xdc/0x1a0 [ 96.502891][ T6319] __x64_sys_write+0x40/0x50 [ 96.502916][ T6319] x64_sys_call+0x2847/0x3000 [ 96.503020][ T6319] do_syscall_64+0xc0/0x2a0 [ 96.503055][ T6319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.503154][ T6319] RIP: 0033:0x7f084406aeb9 [ 96.503171][ T6319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.503194][ T6319] RSP: 002b:00007f0842ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.503281][ T6319] RAX: ffffffffffffffda RBX: 00007f08442e5fa0 RCX: 00007f084406aeb9 [ 96.503299][ T6319] RDX: 0000000000000036 RSI: 0000200000001880 RDI: 0000000000000003 [ 96.503318][ T6319] RBP: 00007f0842ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.503336][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.503350][ T6319] R13: 00007f08442e6038 R14: 00007f08442e5fa0 R15: 00007fff9e44b698 [ 96.503433][ T6319] [ 96.757367][ T6323] set_capacity_and_notify: 23 callbacks suppressed [ 96.757405][ T6323] loop3: detected capacity change from 0 to 512 [ 96.790697][ T6323] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.802337][ T6323] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 96.812580][ T6323] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.840: Corrupt directory, running e2fsck is recommended [ 96.881526][ T6323] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 96.890222][ T6323] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.840: corrupted in-inode xattr: invalid ea_ino [ 96.906462][ T6328] loop0: detected capacity change from 0 to 1024 [ 96.908313][ T6323] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.840: couldn't read orphan inode 15 (err -117) [ 96.933563][ T6323] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.945164][ T6323] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 96.955379][ T6323] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.840: Corrupt directory, running e2fsck is recommended [ 96.970898][ T6332] loop2: detected capacity change from 0 to 128 [ 96.982645][ T6332] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.997437][ T6323] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.840: path /173/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 97.057716][ T6337] sctp: [Deprecated]: syz.2.845 (pid 6337) Use of int in max_burst socket option. [ 97.057716][ T6337] Use struct sctp_assoc_value instead [ 97.141882][ T6342] loop4: detected capacity change from 0 to 512 [ 97.156791][ T6342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.192507][ T6342] EXT4-fs (loop4): 1 truncate cleaned up [ 97.220990][ T6344] loop2: detected capacity change from 0 to 128 [ 97.249295][ T6355] loop3: detected capacity change from 0 to 512 [ 97.266083][ T6356] FAULT_INJECTION: forcing a failure. [ 97.266083][ T6356] name failslab, interval 1, probability 0, space 0, times 0 [ 97.278781][ T6356] CPU: 1 UID: 0 PID: 6356 Comm: syz.4.847 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.278850][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.278868][ T6356] Call Trace: [ 97.278877][ T6356] [ 97.278887][ T6356] __dump_stack+0x1d/0x30 [ 97.278919][ T6356] dump_stack_lvl+0x95/0xd0 [ 97.278947][ T6356] dump_stack+0x15/0x1b [ 97.278971][ T6356] should_fail_ex+0x263/0x280 [ 97.279048][ T6356] should_failslab+0x8c/0xb0 [ 97.279192][ T6356] kmem_cache_alloc_noprof+0x68/0x490 [ 97.279214][ T6356] ? ext4_mb_new_blocks+0x2fd/0x2080 [ 97.279242][ T6356] ext4_mb_new_blocks+0x2fd/0x2080 [ 97.279351][ T6356] ? __mark_inode_dirty+0x1af/0x740 [ 97.279404][ T6356] ? _raw_spin_lock+0x52/0xa0 [ 97.279444][ T6356] ? __list_add_valid_or_report+0x38/0xe0 [ 97.279510][ T6356] ext4_new_meta_blocks+0x102/0x1f0 [ 97.279557][ T6356] ext4_ind_map_blocks+0xc7b/0x15d0 [ 97.279605][ T6356] ext4_map_blocks+0x61b/0xd70 [ 97.279665][ T6356] ext4_iomap_begin+0xa20/0x1000 [ 97.279774][ T6356] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 97.279861][ T6356] iomap_iter+0x3f7/0x800 [ 97.279945][ T6356] __iomap_dio_rw+0x858/0x14c0 [ 97.279993][ T6356] iomap_dio_rw+0x40/0x90 [ 97.280065][ T6356] ext4_file_write_iter+0xae5/0xf70 [ 97.280107][ T6356] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 97.280147][ T6356] vfs_write+0x5a6/0x9f0 [ 97.280175][ T6356] __x64_sys_pwrite64+0xfd/0x150 [ 97.280273][ T6356] x64_sys_call+0x9f7/0x3000 [ 97.280306][ T6356] do_syscall_64+0xc0/0x2a0 [ 97.280347][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.280375][ T6356] RIP: 0033:0x7f5e9290aeb9 [ 97.280403][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.280458][ T6356] RSP: 002b:00007f5e91346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 97.280481][ T6356] RAX: ffffffffffffffda RBX: 00007f5e92b86090 RCX: 00007f5e9290aeb9 [ 97.280499][ T6356] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000007 [ 97.280515][ T6356] RBP: 00007f5e91346090 R08: 0000000000000000 R09: 0000000000000000 [ 97.280531][ T6356] R10: 0000000404042ffc R11: 0000000000000246 R12: 0000000000000001 [ 97.280547][ T6356] R13: 00007f5e92b86128 R14: 00007f5e92b86090 R15: 00007fffd0350698 [ 97.280626][ T6356] [ 97.524286][ T6355] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.851: inode has both inline data and extents flags [ 97.537863][ T6355] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.851: couldn't read orphan inode 15 (err -117) [ 97.584229][ T6360] FAULT_INJECTION: forcing a failure. [ 97.584229][ T6360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.597364][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz.0.852 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.597456][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.597485][ T6360] Call Trace: [ 97.597494][ T6360] [ 97.597504][ T6360] __dump_stack+0x1d/0x30 [ 97.597537][ T6360] dump_stack_lvl+0x95/0xd0 [ 97.597582][ T6360] dump_stack+0x15/0x1b [ 97.597609][ T6360] should_fail_ex+0x263/0x280 [ 97.597651][ T6360] should_fail+0xb/0x20 [ 97.597689][ T6360] should_fail_usercopy+0x1a/0x20 [ 97.597772][ T6360] _copy_from_iter+0xcf/0xea0 [ 97.597829][ T6360] ? __rcu_read_unlock+0x4e/0x70 [ 97.597874][ T6360] tun_get_user+0x390/0x27c0 [ 97.597932][ T6360] ? ref_tracker_alloc+0x1f2/0x2f0 [ 97.597988][ T6360] tun_chr_write_iter+0x15e/0x210 [ 97.598017][ T6360] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 97.598044][ T6360] vfs_write+0x5a6/0x9f0 [ 97.598152][ T6360] ksys_write+0xdc/0x1a0 [ 97.598250][ T6360] __x64_sys_write+0x40/0x50 [ 97.598277][ T6360] x64_sys_call+0x2847/0x3000 [ 97.598311][ T6360] do_syscall_64+0xc0/0x2a0 [ 97.598355][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.598440][ T6360] RIP: 0033:0x7f4327b8aeb9 [ 97.598469][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.598494][ T6360] RSP: 002b:00007f43265e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.598522][ T6360] RAX: ffffffffffffffda RBX: 00007f4327e05fa0 RCX: 00007f4327b8aeb9 [ 97.598541][ T6360] RDX: 0000000000000036 RSI: 0000200000001880 RDI: 0000000000000003 [ 97.598625][ T6360] RBP: 00007f43265e7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.598644][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.598661][ T6360] R13: 00007f4327e06038 R14: 00007f4327e05fa0 R15: 00007fff835071e8 [ 97.598685][ T6360] [ 97.824323][ T6363] loop5: detected capacity change from 0 to 512 [ 97.833800][ T6363] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.856604][ T6363] EXT4-fs (loop5): 1 truncate cleaned up [ 97.874512][ T6366] loop3: detected capacity change from 0 to 128 [ 97.884206][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 97.884221][ T29] audit: type=1400 audit(1770229723.132:786): avc: denied { setopt } for pid=6367 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.915708][ T6368] loop0: detected capacity change from 0 to 512 [ 97.925794][ T6368] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 97.936452][ T29] audit: type=1326 audit(1770229723.182:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.0.855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4327b8aeb9 code=0x0 [ 97.970597][ T29] audit: type=1400 audit(1770229723.192:788): avc: denied { mount } for pid=6369 comm="syz.2.856" name="/" dev="configfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 97.993492][ T29] audit: type=1400 audit(1770229723.192:789): avc: denied { search } for pid=6369 comm="syz.2.856" name="/" dev="configfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.011602][ T6370] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 98.015652][ T29] audit: type=1400 audit(1770229723.192:790): avc: denied { setattr } for pid=6369 comm="syz.2.856" name="/" dev="configfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.060269][ T6366] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.095285][ T6378] loop4: detected capacity change from 0 to 512 [ 98.127551][ T6373] EXT4-fs: Ignoring removed nobh option [ 98.133528][ T6373] EXT4-fs: Ignoring removed nobh option [ 98.139816][ T6378] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.151440][ T6378] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 98.161667][ T6378] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.857: Corrupt directory, running e2fsck is recommended [ 98.176932][ T6373] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 150994947)! [ 98.187829][ T6373] EXT4-fs (loop2): group descriptors corrupted! [ 98.206111][ T6382] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.217987][ T6378] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 98.227282][ T6378] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.857: corrupted in-inode xattr: invalid ea_ino [ 98.240886][ T6378] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.857: couldn't read orphan inode 15 (err -117) [ 98.270765][ T6378] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.282731][ T6378] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 98.293045][ T6378] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.857: Corrupt directory, running e2fsck is recommended [ 98.306856][ T6378] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.857: path /198/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 98.380535][ T6393] tun0: tun_chr_ioctl cmd 1074025673 [ 98.386774][ T6390] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.398808][ T6393] tun0: tun_chr_ioctl cmd 1074025673 [ 98.404461][ T6393] tun0: tun_chr_ioctl cmd 1074025673 [ 98.410272][ T6393] tun0: tun_chr_ioctl cmd 1074025673 [ 98.416797][ T6393] tun0: tun_chr_ioctl cmd 1074025673 [ 98.422604][ T6392] tun0: tun_chr_ioctl cmd 1074025675 [ 98.428021][ T6392] tun0: persist enabled [ 98.432781][ T6393] tun0: tun_chr_ioctl cmd 1074025673 [ 98.438336][ T6393] tun0: tun_chr_ioctl cmd 1074025673 [ 98.444034][ T6392] tun0: tun_chr_ioctl cmd 1074025675 [ 98.449444][ T6392] tun0: persist disabled [ 98.455741][ T6393] tun0: tun_chr_ioctl cmd 1074025673 [ 98.461272][ T6393] tun0: tun_chr_ioctl cmd 1074025673 [ 98.483116][ T6396] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.863: inode has both inline data and extents flags [ 98.498743][ T6396] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.863: couldn't read orphan inode 15 (err -117) [ 98.568935][ T6405] FAULT_INJECTION: forcing a failure. [ 98.568935][ T6405] name failslab, interval 1, probability 0, space 0, times 0 [ 98.581762][ T6405] CPU: 1 UID: 0 PID: 6405 Comm: syz.4.866 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.581819][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.581831][ T6405] Call Trace: [ 98.581837][ T6405] [ 98.581844][ T6405] __dump_stack+0x1d/0x30 [ 98.581867][ T6405] dump_stack_lvl+0x95/0xd0 [ 98.581886][ T6405] dump_stack+0x15/0x1b [ 98.581917][ T6405] should_fail_ex+0x263/0x280 [ 98.582009][ T6405] should_failslab+0x8c/0xb0 [ 98.582030][ T6405] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 98.582052][ T6405] ? __alloc_skb+0x2f0/0x4b0 [ 98.582088][ T6405] __alloc_skb+0x2f0/0x4b0 [ 98.582112][ T6405] ? __alloc_skb+0x219/0x4b0 [ 98.582145][ T6405] alloc_skb_with_frags+0x7d/0x470 [ 98.582178][ T6405] ? selinux_file_open+0x2e6/0x330 [ 98.582249][ T6405] ? should_fail_ex+0xd9/0x280 [ 98.582276][ T6405] sock_alloc_send_pskb+0x44d/0x500 [ 98.582300][ T6405] tun_get_user+0x62b/0x27c0 [ 98.582331][ T6405] ? ref_tracker_alloc+0x1f2/0x2f0 [ 98.582363][ T6405] tun_chr_write_iter+0x15e/0x210 [ 98.582382][ T6405] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 98.582400][ T6405] vfs_write+0x5a6/0x9f0 [ 98.582498][ T6405] ksys_write+0xdc/0x1a0 [ 98.582516][ T6405] __x64_sys_write+0x40/0x50 [ 98.582533][ T6405] x64_sys_call+0x2847/0x3000 [ 98.582554][ T6405] do_syscall_64+0xc0/0x2a0 [ 98.582653][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.582680][ T6405] RIP: 0033:0x7f5e9290aeb9 [ 98.582699][ T6405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.582725][ T6405] RSP: 002b:00007f5e91367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.582798][ T6405] RAX: ffffffffffffffda RBX: 00007f5e92b85fa0 RCX: 00007f5e9290aeb9 [ 98.582811][ T6405] RDX: 0000000000000036 RSI: 0000200000001880 RDI: 0000000000000003 [ 98.582868][ T6405] RBP: 00007f5e91367090 R08: 0000000000000000 R09: 0000000000000000 [ 98.582880][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.582891][ T6405] R13: 00007f5e92b86038 R14: 00007f5e92b85fa0 R15: 00007fffd0350698 [ 98.582909][ T6405] [ 98.980890][ T6419] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.003746][ T29] audit: type=1326 audit(1770229724.252:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4327b8aeb9 code=0x7ffc0000 [ 99.027242][ T29] audit: type=1326 audit(1770229724.252:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4327b8aeb9 code=0x7ffc0000 [ 99.050662][ T29] audit: type=1326 audit(1770229724.252:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4327b8aeb9 code=0x7ffc0000 [ 99.074002][ T29] audit: type=1326 audit(1770229724.252:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4327b8aeb9 code=0x7ffc0000 [ 99.097583][ T29] audit: type=1326 audit(1770229724.252:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4327b8aeb9 code=0x7ffc0000 [ 99.143471][ T3538] ================================================================== [ 99.151618][ T3538] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_to_ts [ 99.159641][ T3538] [ 99.161995][ T3538] write to 0xffff888104b05e08 of 4 bytes by task 3306 on cpu 0: [ 99.167685][ T6423] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.169650][ T3538] inode_set_ctime_to_ts+0xa9/0x190 [ 99.169693][ T3538] inode_set_ctime_current+0x1e5/0x810 [ 99.169725][ T3538] shmem_symlink+0x36b/0x3b0 [ 99.169745][ T3538] vfs_symlink+0x2c3/0x3c0 [ 99.181405][ T6423] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 99.186501][ T3538] do_symlinkat+0xf0/0x460 [ 99.192162][ T6423] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.873: Corrupt directory, running e2fsck is recommended [ 99.196553][ T3538] __x64_sys_symlink+0x50/0x60 [ 99.232962][ T3538] x64_sys_call+0x24a9/0x3000 [ 99.237759][ T3538] do_syscall_64+0xc0/0x2a0 [ 99.242294][ T3538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.248203][ T3538] [ 99.250546][ T3538] read to 0xffff888104b05e08 of 4 bytes by task 3538 on cpu 1: [ 99.258109][ T3538] generic_fillattr+0x1d1/0x340 [ 99.262980][ T3538] shmem_getattr+0x181/0x200 [ 99.267596][ T3538] vfs_getattr_nosec+0x146/0x1e0 [ 99.272561][ T3538] vfs_getattr+0x48/0x60 [ 99.276821][ T3538] vfs_statx_path+0x28/0x140 [ 99.281456][ T3538] vfs_statx+0xc4/0x170 [ 99.285635][ T3538] vfs_fstatat+0x115/0x170 [ 99.290091][ T3538] __se_sys_newfstatat+0x55/0x3e0 [ 99.295165][ T3538] __x64_sys_newfstatat+0x55/0x70 [ 99.300214][ T3538] x64_sys_call+0x111f/0x3000 [ 99.304919][ T3538] do_syscall_64+0xc0/0x2a0 [ 99.309455][ T3538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.315375][ T3538] [ 99.317713][ T3538] value changed: 0x0a46b47b -> 0x1763a37f [ 99.323437][ T3538] [ 99.325772][ T3538] Reported by Kernel Concurrency Sanitizer on: [ 99.331937][ T3538] CPU: 1 UID: 0 PID: 3538 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.341244][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.351314][ T3538] ================================================================== [ 99.378543][ T6423] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 99.386834][ T6423] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.873: corrupted in-inode xattr: invalid ea_ino [ 99.400537][ T6423] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.873: couldn't read orphan inode 15 (err -117) [ 99.424547][ T6423] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.436188][ T6423] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 99.446400][ T6423] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.873: Corrupt directory, running e2fsck is recommended [ 99.459298][ T6423] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.873: path /202/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0