last executing test programs: 17m0.163415917s ago: executing program 0 (id=12): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x1f6, 0xb, 0x4, 0x10000, 0x3, "28b5a641e334f0509032c430b5ba5551cc3812"}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r4}, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x17, 0x0, &(0x7f0000000200)) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r5, 0x4a350000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000280)=""/109, 0x6d, 0x0, &(0x7f00000004c0)=""/187, 0xbb}}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 16m52.533545921s ago: executing program 0 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r3 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r4, 0x402, 0x3d) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r5, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") r6 = socket(0x2, 0x3, 0xff) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bind$inet(r6, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000900", @ANYRES16=r11, @ANYBLOB="230525bd7000fedbdf25050000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f0000000680)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c51"], 0x34}}, 0x0) 16m49.272363942s ago: executing program 0 (id=35): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x2, 0x3, 0x9, 0x8, 0x8f7, 0xd}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x5e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r3}, 0xc) r6 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 16m33.953371134s ago: executing program 32 (id=35): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x2, 0x3, 0x9, 0x8, 0x8f7, 0xd}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x5e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r3}, 0xc) r6 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 16m18.400775938s ago: executing program 4 (id=87): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x2, 0x3, 0x9, 0x8, 0x8f7, 0xd}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x5e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r3}, 0xc) r6 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 16m5.734633549s ago: executing program 4 (id=105): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r4}, 0xc) r7 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r7) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 16m0.251815319s ago: executing program 4 (id=113): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r0, 0x0, 0x0, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) 15m59.141500804s ago: executing program 4 (id=115): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x2, 0x3, 0x9, 0x8, 0x8f7, 0xd}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x5e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r4}, 0xc) r7 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r7) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 15m56.829305767s ago: executing program 4 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r4 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r5, 0x402, 0x3d) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x2, 0x3, 0xff) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bind$inet(r7, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000900", @ANYRES16=r12, @ANYBLOB="230525bd7000fedbdf25050000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f0000000680)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c51"], 0x34}}, 0x0) 15m53.483677511s ago: executing program 4 (id=127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x2, 0x3, 0x9, 0x8, 0x8f7, 0xd}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x5e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r4}, 0xc) r7 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r7) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 15m38.051895229s ago: executing program 33 (id=127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x2, 0x3, 0x9, 0x8, 0x8f7, 0xd}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x5e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r4}, 0xc) r7 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r7) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m18.407210771s ago: executing program 5 (id=3285): fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00\b', 0x8, 0x3a, 0x0, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x31}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 3m18.074877326s ago: executing program 5 (id=3289): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x40014) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4, 0x8000}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r3, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) fcntl$setown(r4, 0x8, r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) tkill(r2, 0x13) 3m16.409523144s ago: executing program 5 (id=3303): syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003020000ff2505a1a440000102030109023b000101802002090400810202060027052406000005240008000d240f01ffff0000ff010100050905820208000907060905030220000003a0"], 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xf8e, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18030000ff0000000000000000000000851000000600000018000000070000000000000005000000250000000000000018000000000000000000000000000000950000000000000095000000000000004ffc31c34a6208789d65e0c1c588bf2e567825dd46889a837403d0ef38e4691b0aecfea8ca00c122d366153e087aa31ccc282a70fc948f11081206a0594ef1e40c04abbb598a149f394d2f32c7c6c657428985631879380957211dee3bd49adef671e2ed292136ea5d62564fc067b89b5f80a3580ccdccb24a624b72fa867290640a338abfa52c698aba63e9b9a2f0217f09b467f00cfe7c4e55d52540d69c34c99bb592c68a0b5e0d182c603f13a9e4f45a16b64f69ad4cb90858c56757026f2e6cc98a7a491f0ee5ab2920a4d68810999d5b8228a60c85e2cfc4f8aa6eeed5ede070e5d868afba8b67ce5d2576c5ab176603d82a7719cdef09ab3ec85889bfa5822b315d0e61cfe956e6a6698018c136b8f92b98775c2d7ac3358c54ce5caf0096fe33a54c00779966b8f989008ddfdc8dd95bfcce802704143641f5ea2704"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa2025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) socket(0x11, 0x3, 0xfff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x40a, 0x800000, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x400047bc, 0x0, 0x0, 0x0, 0x0) 3m14.740194722s ago: executing program 5 (id=3314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_emit_ethernet(0x47, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x11, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x11, 0x0, @opaque="0300000070e185af60"}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x174, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@private1, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@proto={0x5, 0x19, 0x33}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@multicast1, 0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'xxhash64-generic\x00'}}}]}, 0x174}}, 0x0) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x90000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x0, 0xfffffffc}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x20004080) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peekuser(0x3, r8, 0xd7a8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140020304000e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a7cee4090000001fb791643a5ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af2f28fcb1dc7a2cfe8ee732717c6ef", 0x5e}], 0x2a44c0e}, 0x0) 3m13.428979133s ago: executing program 5 (id=3324): syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003020000ff2505a1a440000102030109023b000101802002090400810202060027052406000005240008000d240f01ffff0000ff010100050905820208000907060905030220000003a0"], 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xf8e, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa2025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) socket(0x11, 0x3, 0xfff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x40a, 0x800000, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x400047bc, 0x0, 0x0, 0x0, 0x0) 3m12.750379845s ago: executing program 5 (id=3333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0x10}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') r2 = socket$netlink(0x10, 0x3, 0x10) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0xa1c6c0, 0x9c37611dc13d0d27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fchown(r3, 0x0, 0x0) bind$netlink(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1004, &(0x7f0000000080), 0x111, 0xed7a5c78258865d6}}, 0xfffffda4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83040500000000001800128008000100736974000c00028006000f0006000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r6, 0x18}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x9) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) 3m12.731206286s ago: executing program 34 (id=3333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0x10}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') r2 = socket$netlink(0x10, 0x3, 0x10) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0xa1c6c0, 0x9c37611dc13d0d27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fchown(r3, 0x0, 0x0) bind$netlink(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1004, &(0x7f0000000080), 0x111, 0xed7a5c78258865d6}}, 0xfffffda4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83040500000000001800128008000100736974000c00028006000f0006000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r6, 0x18}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x9) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) 2m43.511499668s ago: executing program 6 (id=3534): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) (fail_nth: 2) 2m42.297655254s ago: executing program 6 (id=3540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a928e08b"], 0x1c}}, 0x4000054) (fail_nth: 1) 2m41.835622016s ago: executing program 6 (id=3545): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRESOCT=r1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r2}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf25050006de6a7150f723203bc300000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a004e200000000100000000000000000000ffffac1414bbb22d000000000000"], 0x70}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) memfd_create(&(0x7f00000004c0)='\x00', 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 2m41.595270687s ago: executing program 6 (id=3550): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") eventfd2(0x7, 0x801) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="4e4f137360dcdeb3", 0x8}, {&(0x7f0000000140)="1e6d23cb1c", 0x5}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) r4 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x1000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir\x00', 0x26b240, 0x25) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f0000000600)="0bbb268dd6ffa80800fbff00000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000bbfbb594ee6e9ac821ee83907c78026ac6d0042d", 0x44) fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r9, &(0x7f0000000200)='fdinfo\x00') write(r6, &(0x7f0000000740)='foo', 0x3) 2m40.984475956s ago: executing program 6 (id=3555): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x9}, 0x10060, 0x3ff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$setlease(r1, 0x400, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") 2m40.653829931s ago: executing program 6 (id=3560): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc)=0x7, 0x4) timerfd_settime(0xffffffffffffffff, 0xca9a3b, &(0x7f0000000200), 0x0) sendto(r0, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000009c0)=""/4091, 0xffb}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f0000000080)=""/89, 0x59}, {&(0x7f0000000240)=""/226, 0xe2}], 0x4}, 0x1}], 0x11, 0x10140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x31, 0xff, 0xd, 0x8, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0xff, 0x6, 0x0, 0x93}, 0xe) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) flock(r2, 0x1) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x44, 0x1, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4044884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x4, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x20000, 0x3, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 2m40.640906742s ago: executing program 35 (id=3560): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc)=0x7, 0x4) timerfd_settime(0xffffffffffffffff, 0xca9a3b, &(0x7f0000000200), 0x0) sendto(r0, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000009c0)=""/4091, 0xffb}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f0000000080)=""/89, 0x59}, {&(0x7f0000000240)=""/226, 0xe2}], 0x4}, 0x1}], 0x11, 0x10140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x31, 0xff, 0xd, 0x8, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0xff, 0x6, 0x0, 0x93}, 0xe) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) flock(r2, 0x1) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x44, 0x1, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4044884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x4, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x20000, 0x3, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 2m14.092805519s ago: executing program 3 (id=3734): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de2500000000000000", 0x3f}, {&(0x7f0000000e80)="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", 0x11f}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179", 0x2d}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8ae", 0x30}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m13.995760503s ago: executing program 3 (id=3735): socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 2m13.943982606s ago: executing program 3 (id=3736): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x9}, 0x10060, 0x3ff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$eJzs3cFrm2UYAPCnadd20zUFRVARXwYevISu/gMrsoFYUOYi04PwzaYakiUjCZUM0eHFq/+B9+HRmyD+Azvo3Zu3XTzuMPZJ8iVd0mWbtbZh+vtB+Z587/t8fb835OPJITx3r353vbHbrexmvShdSFGKiNK9iPVhVFgYHUvDeDkm3Yo3y1d/f+2Djz5+d2t7++LllC5tXXlrM6W09vrPX3z5w7lfes99+OPaTytxZ/2Tu39u/nHnpTsv331w5fN6N9W7aandS1m61m73smvNWtqpdxuVlN5v1rJuLdVb3Vpnany32b5xo5+y1s7ZMzc6tW43Za1+atT6qddOvbV+yj7L6q1UqVTS2TPB01RvX76cbRXx6hPmXTipBXEMOp2tbPAZXnlkpHp7LgsCAObqqPX/8tHq/9Z0/X8quo3KC28Ulz50/d9R/x/SZP3Pf9Wg/l8efX4jIn/4PUD9DwAAAAAAAAAAAAAAz4J7eV7O87w8Pu7/OGD0es7L45g98v4f+Jv3+jheEz/cW41ofrtX3asWx2J8azfq0YxabEQ57g8eC2NFfOmd7YsbaWg9zl7/eph/7teI6uJ0/vkox/rs/PNFftrPj8HxVJyZzN+Mcrw4O39zZv5ybHw/kV+Jcvz2abSjGTvDx9vD/K/Op/T2e9sH8leG8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6iksVej6Hu/V404HXuj/v2VhxPWp/vjF/mj/vql2Ihy3J/dn39jZn/+pXhlab73DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj3f7NRtZs1jonFYx7/g/PLI+Dx2ctFNNvHRg6HdOTV552nb8f5HmeP8jzfGqodKjrnB7d5IyhwZW/WS2GizM7rX9re1cXTvStPEpwKiKeMCcfbeDk0GL8k//1/P4+z5yzEhHHeqdrg6A0/w0/dHDijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MXC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTh4JmsuxmMmPy6Y9z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//xp0CCU=") 2m11.836613715s ago: executing program 3 (id=3747): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x3, 0x0, 0x0, 0x7, 0x54f90, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x19a5f5dc}, 0x640, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xe, 0x0, 0x0, 0x0, 0x10020000006}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={0x0}) mmap(&(0x7f00004be000/0x2000)=nil, 0x2000, 0x100000a, 0x50, r3, 0xc8201000) r5 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000380), 0x4) sendfile(0xffffffffffffffff, r7, 0x0, 0x7fffffffffffffff) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r3) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m11.129538287s ago: executing program 3 (id=3751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x454}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000014000180050002000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2m10.673390369s ago: executing program 3 (id=3755): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0xc4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x8c, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x84, 0x3, [@m_connmark={0x80, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x4d, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m10.673056999s ago: executing program 36 (id=3755): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0xc4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x8c, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x84, 0x3, [@m_connmark={0x80, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x4d, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.537725936s ago: executing program 9 (id=4610): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 6.069403107s ago: executing program 1 (id=4613): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000120001022bbd7000fddbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/246, 0xf6}], 0x1) 6.00164181s ago: executing program 9 (id=4614): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x0, [0xffffffbd, 0x40, 0x80000001]}, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x8080, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @local, 0x2}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r8, 0x1, 0x0, @void}, 0x10) write(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) 5.998769241s ago: executing program 1 (id=4615): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 5.973916462s ago: executing program 1 (id=4616): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x3) openat$cgroup_int(r1, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) 5.605688819s ago: executing program 1 (id=4618): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20044040) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000000240)={0x1, 0x4, 0x80000}, 0x20) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(0x0, 0x0, 0x0, 0x10000, 0x0) 5.498638424s ago: executing program 1 (id=4621): r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c6500007466383d302c00ef7cf9c9e427ab131e48bcb8e8584feb067a2a04bfb53d8acd1a7464c88ceadeb81c1a0a30069011756aa4b047305d230985f1517f13617faa8a8ef798318c0f939dfef1d31c5b266caf9084e4e7cfde9ba9b1007b9c8f019de569c2c65df0fb1106c53f5ed1d67eb004830e465f1da48dfeca72541be2cfc1ae0fd7dd06a1119074aa25561765f678fa139276a5e1f014a4d913ed7e95e6f8e08e70f545dcb1e22102f460b9a944604469f45c4a950919a8cc48f0c9f09c972b639d01e1da6fbde3753f82286b3a0f3157d03502f3cad14f9ad803a912d36677e0c9d9bd34983a71d5f5eeac6f1e3c03065350d8b41aef668369d0c2c082e9"], 0x0, 0x373, &(0x7f00000006c0)="$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") r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) 5.321646142s ago: executing program 1 (id=4627): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @loopback}], 0x20) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5cc) 5.256183365s ago: executing program 37 (id=4627): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @loopback}], 0x20) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5cc) 5.14736022s ago: executing program 9 (id=4629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfdb4) 4.925616401s ago: executing program 9 (id=4631): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20044040) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000000240)={0x1, 0x4, 0x80000}, 0x20) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(0x0, 0x0, 0x0, 0x10000, 0x0) 4.796986517s ago: executing program 9 (id=4633): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r0, 0x15, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x6}}, 0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000001100)) 4.210467674s ago: executing program 9 (id=4642): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140), 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000001f40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001fc0)=""/212, 0xd4}, {&(0x7f0000002880)=""/230, 0xe6}, {&(0x7f0000002980)=""/190, 0xbe}, {0x0}, {0x0}, {&(0x7f0000002b40)=""/107, 0x6b}, {&(0x7f0000002740)=""/25, 0x19}], 0x7, &(0x7f0000002180)=""/235, 0xeb}, 0x4f}, {{&(0x7f0000002300)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002380)=""/79, 0x4f}, {&(0x7f0000002280)=""/52, 0x34}, {&(0x7f0000002800)=""/80, 0x50}, {&(0x7f0000002480)=""/62, 0x3e}, {&(0x7f00000024c0)=""/244, 0xf4}, {&(0x7f00000025c0)=""/212, 0xd4}], 0x6, &(0x7f0000002740)}, 0x6}], 0x2, 0x0, 0x0) 4.157508156s ago: executing program 38 (id=4642): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140), 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000001f40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001fc0)=""/212, 0xd4}, {&(0x7f0000002880)=""/230, 0xe6}, {&(0x7f0000002980)=""/190, 0xbe}, {0x0}, {0x0}, {&(0x7f0000002b40)=""/107, 0x6b}, {&(0x7f0000002740)=""/25, 0x19}], 0x7, &(0x7f0000002180)=""/235, 0xeb}, 0x4f}, {{&(0x7f0000002300)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002380)=""/79, 0x4f}, {&(0x7f0000002280)=""/52, 0x34}, {&(0x7f0000002800)=""/80, 0x50}, {&(0x7f0000002480)=""/62, 0x3e}, {&(0x7f00000024c0)=""/244, 0xf4}, {&(0x7f00000025c0)=""/212, 0xd4}], 0x6, &(0x7f0000002740)}, 0x6}], 0x2, 0x0, 0x0) 3.892547109s ago: executing program 7 (id=4647): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000084000000020000000a0070"], 0x20, 0x4048800}, 0x4000000) 2.99843933s ago: executing program 7 (id=4653): r0 = msgget$private(0x0, 0x193) msgsnd(r0, 0x0, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2000400) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000980)={[{0x2b, 'io'}]}, 0x4) 2.677606586s ago: executing program 7 (id=4654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x73, 0x0, &(0x7f0000000100)="a162cef0563a20f5177241eeb3f0311a24907baf8f19334cfebe55f0c82b5b48844b47f9fda725e9dbb8a5d66335af516d097e891e2991dcca406a6652f66d496d157ca668a1b7d01ac7cb6fa8536ae8c22ab833126cccb51313ba08f6ad6e950aa5097e0d91fa661c6d08f0d5fe0027dd501a", 0x0, 0x6, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x44) 2.597671069s ago: executing program 7 (id=4655): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20044040) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000000240)={0x1, 0x4, 0x80000}, 0x20) 2.523280363s ago: executing program 8 (id=4656): socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) syz_open_procfs$namespace(0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$eJzs3V1v3FgZB/D/mfdMIVSAqlWVbU5TkFIRZj2T7VSjgITxeBLDzHhkTyCRkFaFJquokwJtkejctLmBRVq+AHd7wwUfYiUuEBf7LeAKpBUICbECISOfY89Lxp4kTZp22f8v2h3HfnzO8bHXzzpjH4OIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIggrKZhVAXaTnd7R6azmp7biX/JYma5Li2P23ri9rw682G9gAj/QamEN/TsN748DrkW/msFS/q3JZTCjxKGV65d3fhSLhOvP6fBLwJpBQok1/X46fDBvcFg79EpCs8itfjXETLpy3LxxKbddXzX6ZibtnR8VzbqdeOtrZYvW07b9nf9vt2Rlmdn+q4nV63bstporEu7sntrEWiabTueeffrNcOoy+8U9Y4GUPGtLafddrqbKiZcHMbcle//QAfYZkfK/YPB3vpEw54l9XEYVE3YisxkcBhUO6lPakatVq3WatX6ncadu4aRm5lhhIQxgpmICz9o6VPmYk/gROeQsZr/Mf4kgDZK6GIbO5CJPxaa8OCik7I8Euf/DOy59U7m/yUgTI5L+fHi61D5/4b+7UZa/k9pi4RUKyQtESnzz/aTVy2SeIynGOIB7mGAAfbw6ALKlpDL5y6hYEQ9ObufktcopcTP/9mEjS4c+HDhoAMTm/g8ZDRHooE66jDwDrbQgg+JFhy0YcPHLnz0YYdHVCGs2YaJPlx4kFiFhduQqKKBBtYhYaOCXbjYRhebaMLEv4Ig2MeB6vf1qD3PE7YCcVA1ZSOKyMXH3R5qc7Y2Lf//8JleO8r/BvP/Z5U+Dor646N5MUSvgSC6/j+j5ZfTGiIiIiIiIiJ6GYT6jl2ob+XfBBCg5bRtYyqm+MpaR0REREREREQXQSAoYglC35WPNyFmr/+JiIiIiIiI6NNNqGfsBICyuqlfjB+XOs0fAbKX0EQiIiIiIiIiOif15P+NAhCou/yXIU66/s9dbgOJiIiIiIiI6NzemxhjP5eNxtgN4q/1MwCW/1wUH/6tCC8vjno7XxGHZrjEPIxiZu4A6Leui8VooF71UfiooJdY9pKIapPAP+O/PoQ+3k8e6/95oAkhvGMNKGQnC0hpgMC1qxv1XPQb3sdNvcrNaLjb+8MM1BI9onC55bTtiuW2N6owzcVM397p/+zhwc8Bb7Sd+weDvcqPfjy4r9pyFM46OgwLfTbVnExyZ4zb8kSNt6CeuUga3XgBrbjKX3U7ZaHqNeLtz8I8zExWNG8H1BcAvZW/wIreZyuBji0PRwP/CmBZDf5QrWyEO2xq6728GLeienzLk3ZEypaXVCtu6Zhbq7f0R9wnYTkZUfpaFqhVZvfBVCtqk604uS/E34/1//xWQJTCvlgPW/H7sKBjrfj+h3rl9d5OPDzGaVoxcxQQEb0q++MspAYxnxljP04P8Unt9HkHOSA6y+ns/l76m3yCKH/E2f3JbwKdobJALvpuIrmWOK8gPKOvClVOQX9JkbuecEY3Kp8EQWAuljB5Rv9vEMQbZMzPblN5/SgIguNn9N+N34EUNXumFf8OgmCjqjLJr49l1Q/CFT5Izap+u5ZFCUU8OfyJGgA/9O7eu3sPa7X1uvG2YdypIa/+VyH6yIK5h4iIZpz8jh0VkZkTId7GTV3Gzft//aqemsp4X4xuKVDeAga4jzUsh9e44TVnYqll7OOb/9C3Iazpq1Zgpaw/y0N57epGuPYo9kDk1Bte1lKv6lQu1bHq9obaKPaPX4hXmc7U49j1S9gTREREl2clfpXPsTwMTOV/TOf/0lT+X8Oqjli9nnjdXZ64pXAtvjoeXdIPrxwlxlZPbvy3LrgziIiIPiNs72NR7v9SeJ7Te6faaFTN/pYtPdf6rvSc5qYtnW7f9qwts7tpy57n9l3Lbcueh6KzYPvS3+71XK8vW64ne67v7Kg3v8vo1e/R9/7we23b9G1pud2+afVl0/Et2dv+dtvxt2xPrez3bMtpOZbZd9yu9N1tz7IrUvq2PRHoNO1u32k54WRX9jynY3q78ntue7tjy6btW57T67u6wLgup9tyvY4qtoLgzC86JCIi+n/0+Onwwb3BYO/R8YmF8NJczzlCSszsRCGhQI4RRERE9JoZp+szrFR6iQ0iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIqIZJz/Sd8aJfNLDgsBozk8Xozl4jvEjhjPlCJy3PZ94f8iHNbzI6pmzVho/EjHMAkgNXhjNibt/MuboLJXiKvDC/fOXzwFX1BzoObkLPABmnx+9qJLjEYsTY76xrxemra4WJi4qjvZF7uL/cwgnHv52dpEItyIIgmD+6sXpPiyc/ngOO+tRYc4uWDjh+LnMsxARvQr/CwAA///SlDIY") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.497779444s ago: executing program 7 (id=4657): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r0, &(0x7f0000000280)={0x1000019, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) 2.333661122s ago: executing program 7 (id=4658): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x41, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52eb2eee8725914164b8d4ee9600baefff583bd7bf6319da2f2bcab4cb813b7125563c3"}}) 2.333578822s ago: executing program 39 (id=4658): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x41, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52eb2eee8725914164b8d4ee9600baefff583bd7bf6319da2f2bcab4cb813b7125563c3"}}) 2.256272355s ago: executing program 8 (id=4661): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000084000000020000000a0070"], 0x20, 0x4048800}, 0x4000000) 2.14243122s ago: executing program 8 (id=4662): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.254106402s ago: executing program 8 (id=4665): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20044040) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000000240)={0x1, 0x4, 0x80000}, 0x20) 1.169710036s ago: executing program 8 (id=4666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfdb4) 949.667236ms ago: executing program 8 (id=4671): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x20, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10009}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 949.546746ms ago: executing program 40 (id=4671): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x20, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10009}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 513.866776ms ago: executing program 2 (id=4676): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 425.67944ms ago: executing program 2 (id=4677): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x800000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) 424.060031ms ago: executing program 2 (id=4678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfdb4) 394.483892ms ago: executing program 2 (id=4679): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x4a, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52eb2eee8725914164b8d4ee9600baefff583bd7bf6319da2f2bcab4cb813b7125563c3099ce8762ddcd08a33"}}) 350.400954ms ago: executing program 2 (id=4680): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x5, 0x1e7b, 0x2, 0x0, 0x2, "3251d7f69a94537a698a43fa21f954b95af526"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) writev(r1, &(0x7f0000000d80)=[{&(0x7f00000003c0)="dfa12aa843fa723dca90589fa5a50d133e6338ffc4f3723dba116d9675b497ddceb8451bf082f99f90ec756d51c57d29e8ed884a0fd57108b0d804f56f843ae8caca04846c99a5703a2c1822c157157ac209", 0x52}], 0x1) 296.683216ms ago: executing program 2 (id=4681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040), 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r1, 0x1) ppoll(&(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) write(r2, &(0x7f0000000040), 0xffffff4a) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) 183.850942ms ago: executing program 0 (id=4628): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000040)=0x9, 0x4) sendmmsg$inet6(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000180)={0xa, 0x5e23, 0xfc96, @loopback, 0x3}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000002d80)="cc", 0x1}], 0x1}}], 0x1, 0x4010040) 69.729187ms ago: executing program 0 (id=4682): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x80c406, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES64], 0xff, 0x2b1, &(0x7f0000000100)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 0s ago: executing program 0 (id=4683): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg$unix(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) kernel console output (not intermixed with test programs): 0000 r/w without journal. Quota mode: writeback. [ 984.330997][T24710] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.356243][T24717] loop1: detected capacity change from 0 to 512 [ 984.377768][T24695] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4156: bg 0: block 5: invalid block bitmap [ 984.441773][T24695] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 300 with error 28 [ 984.480818][T24717] EXT4-fs (loop1): 1 orphan inode deleted [ 984.489478][T24695] EXT4-fs (loop2): This should not happen!! Data will be lost [ 984.489478][T24695] [ 984.505818][T24695] EXT4-fs (loop2): Total free blocks count 0 [ 984.512146][T24695] EXT4-fs (loop2): Free/Dirty block details [ 984.518459][T24695] EXT4-fs (loop2): free_blocks=0 [ 984.523746][T24695] EXT4-fs (loop2): dirty_blocks=300 [ 984.529183][T24695] EXT4-fs (loop2): Block reservation details [ 984.535482][T24695] EXT4-fs (loop2): i_reserved_data_blocks=300 [ 984.544439][T24717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.677231][T18413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.084480][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.155179][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.402594][T24755] EXT4-fs (loop1): 1 orphan inode deleted [ 985.410464][T24755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.534284][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.549656][T24760] Set syz1 is full, maxelem 65536 reached [ 985.582206][T24800] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.4167'. [ 985.747304][T24806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4165'. [ 986.035831][T24810] netlink: 1004 bytes leftover after parsing attributes in process `syz.7.4168'. [ 986.047180][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.138258][T24749] Set syz1 is full, maxelem 65536 reached [ 986.245110][T24814] tipc: Enabling of bearer rejected, failed to enable media [ 986.247221][T24825] EXT4-fs (loop7): 1 orphan inode deleted [ 986.273936][T24825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.350087][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.408137][T24877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.423020][T24877] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.450782][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.644634][T24923] netlink: 1004 bytes leftover after parsing attributes in process `syz.7.4181'. [ 986.785237][T24930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 986.806263][T24930] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4183: iget: bad i_size value: 38620345925642 [ 986.809171][T24926] EXT4-fs (loop7): 1 orphan inode deleted [ 986.831633][T24926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.852822][T24930] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 986.853135][T24930] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4183: couldn't read orphan inode 15 (err -117) [ 986.862294][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 986.862320][ C0] EXT4-fs (loop8): initial error at time 1774398591: ext4_orphan_get:1391: inode 15 [ 986.862366][ C0] EXT4-fs (loop8): last error at time 1774398591: ext4_orphan_get:1391: inode 15 [ 986.901588][T24930] loop8: lost filesystem error report for type 5 error -117 [ 986.902178][T24930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.972845][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.003977][T24946] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4183: bg 0: block 5: invalid block bitmap [ 987.075381][T24946] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 700 with error 28 [ 987.090578][T24955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.110374][T24947] set_capacity_and_notify: 7 callbacks suppressed [ 987.110392][T24947] loop2: detected capacity change from 0 to 512 [ 987.130977][T24955] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.148271][T24946] EXT4-fs (loop8): This should not happen!! Data will be lost [ 987.148271][T24946] [ 987.164172][T24947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 987.191096][T24946] EXT4-fs (loop8): Total free blocks count 0 [ 987.231606][T24947] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4185: iget: bad i_size value: 38620345925642 [ 987.260987][T24946] EXT4-fs (loop8): Free/Dirty block details [ 987.281014][T24946] EXT4-fs (loop8): free_blocks=0 [ 987.288079][T24947] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 987.290898][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 987.306564][ C0] EXT4-fs (loop2): initial error at time 1774398591: ext4_orphan_get:1391: inode 15 [ 987.316071][ C0] EXT4-fs (loop2): last error at time 1774398591: ext4_orphan_get:1391: inode 15 [ 987.325980][T24946] EXT4-fs (loop8): dirty_blocks=700 [ 987.336387][T24946] EXT4-fs (loop8): Block reservation details [ 987.342700][T24947] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4185: couldn't read orphan inode 15 (err -117) [ 987.361896][T24946] EXT4-fs (loop8): i_reserved_data_blocks=700 [ 987.378140][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.391037][T24947] loop2: lost filesystem error report for type 5 error -117 [ 987.391623][T24947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.485998][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.528712][T24973] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4185: bg 0: block 5: invalid block bitmap [ 987.560837][T24973] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 500 with error 28 [ 987.575108][T24975] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.4189'. [ 987.591177][T24973] EXT4-fs (loop2): This should not happen!! Data will be lost [ 987.591177][T24973] [ 987.607331][T24973] EXT4-fs (loop2): Total free blocks count 0 [ 987.626833][T24963] Set syz1 is full, maxelem 65536 reached [ 987.640168][T24951] Set syz1 is full, maxelem 65536 reached [ 987.649532][T24973] EXT4-fs (loop2): Free/Dirty block details [ 987.665894][T24973] EXT4-fs (loop2): free_blocks=0 [ 987.676040][T24973] EXT4-fs (loop2): dirty_blocks=524 [ 987.733452][T24973] EXT4-fs (loop2): Block reservation details [ 987.740332][T24973] EXT4-fs (loop2): i_reserved_data_blocks=524 [ 987.777807][T24977] loop9: detected capacity change from 0 to 512 [ 987.858092][ T4442] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 500 with max blocks 24 with error 28 [ 987.881551][T24983] loop8: detected capacity change from 0 to 512 [ 987.887942][T24977] EXT4-fs (loop9): 1 orphan inode deleted [ 987.890790][T24977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.946097][T24983] EXT4-fs (loop8): 1 orphan inode deleted [ 987.957644][T24983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.020240][T21664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.030697][T25035] loop2: detected capacity change from 0 to 512 [ 988.066919][T25024] tipc: Enabling of bearer rejected, failed to enable media [ 988.081302][T25059] loop9: detected capacity change from 0 to 512 [ 988.090264][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.113700][T25059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.126483][T25059] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 988.142235][T25035] EXT4-fs (loop2): 1 orphan inode deleted [ 988.161891][T25035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.209175][T18413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.286851][T21664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.455385][T25080] loop2: detected capacity change from 0 to 512 [ 988.535612][T25080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 988.584947][T25080] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4199: iget: bad i_size value: 38620345925642 [ 988.636200][T25080] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 988.637371][T25080] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4199: couldn't read orphan inode 15 (err -117) [ 988.646561][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 988.646581][ C1] EXT4-fs (loop2): initial error at time 1774398593: ext4_orphan_get:1391: inode 15 [ 988.646604][ C1] EXT4-fs (loop2): last error at time 1774398593: ext4_orphan_get:1391: inode 15 [ 988.698239][T25080] loop2: lost filesystem error report for type 5 error -117 [ 988.709453][T25080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.796092][T16943] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 988.823571][T16943] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 988.836303][T16943] EXT4-fs (loop2): This should not happen!! Data will be lost [ 988.836303][T16943] [ 988.853233][T16943] EXT4-fs (loop2): Total free blocks count 0 [ 988.860910][T16943] EXT4-fs (loop2): Free/Dirty block details [ 988.867289][T16943] EXT4-fs (loop2): free_blocks=0 [ 988.872541][T16943] EXT4-fs (loop2): dirty_blocks=2256 [ 988.877917][T16943] EXT4-fs (loop2): Block reservation details [ 988.884262][T16943] EXT4-fs (loop2): i_reserved_data_blocks=2256 [ 988.900128][T25083] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 204 with error 28 [ 989.056211][T25125] Set syz1 is full, maxelem 65536 reached [ 989.154694][T25143] loop8: detected capacity change from 0 to 512 [ 989.157628][T25161] loop9: detected capacity change from 0 to 512 [ 989.199353][T25161] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.240826][T25161] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.257187][T25143] EXT4-fs (loop8): 1 orphan inode deleted [ 989.290481][T25143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.304045][T21664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.471654][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.613493][T25232] loop8: detected capacity change from 0 to 512 [ 989.651357][T25232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 989.667492][T25232] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4219: iget: bad i_size value: 38620345925642 [ 989.746816][T25232] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 989.747620][T25232] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4219: couldn't read orphan inode 15 (err -117) [ 989.756827][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 989.756851][ C1] EXT4-fs (loop8): initial error at time 1774398594: ext4_orphan_get:1391: inode 15 [ 989.756880][ C1] EXT4-fs (loop8): last error at time 1774398594: ext4_orphan_get:1391: inode 15 [ 989.788459][T25230] loop9: detected capacity change from 0 to 512 [ 989.807398][T25230] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 989.827079][T25232] loop8: lost filesystem error report for type 5 error -117 [ 989.829537][T25231] Set syz1 is full, maxelem 65536 reached [ 989.910475][T25232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.990331][T25240] Set syz1 is full, maxelem 65536 reached [ 990.102352][T25232] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4219: bg 0: block 5: invalid block bitmap [ 990.137814][T25232] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1600 with error 28 [ 990.138387][T25278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.167227][T25232] EXT4-fs (loop8): This should not happen!! Data will be lost [ 990.167227][T25232] [ 990.176410][T25278] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.187207][T25232] EXT4-fs (loop8): Total free blocks count 0 [ 990.193841][T25232] EXT4-fs (loop8): Free/Dirty block details [ 990.200168][T25232] EXT4-fs (loop8): free_blocks=0 [ 990.205316][T25232] EXT4-fs (loop8): dirty_blocks=1640 [ 990.210823][T25232] EXT4-fs (loop8): Block reservation details [ 990.216860][T25232] EXT4-fs (loop8): i_reserved_data_blocks=1640 [ 990.436570][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.701913][ T4442] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 1600 with max blocks 40 with error 28 [ 991.686498][T25384] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4229'. [ 991.941538][T25400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 991.978379][T25400] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4233: iget: bad i_size value: 38620345925642 [ 992.018113][T25400] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 992.020879][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 992.036543][ C1] EXT4-fs (loop1): initial error at time 1774398596: ext4_orphan_get:1391: inode 15 [ 992.046025][ C1] EXT4-fs (loop1): last error at time 1774398596: ext4_orphan_get:1391: inode 15 [ 992.061027][T25400] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4233: couldn't read orphan inode 15 (err -117) [ 992.099078][T25400] loop1: lost filesystem error report for type 5 error -117 [ 992.099870][T25400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.121191][T25442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 992.133004][T25442] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.4235: iget: bad i_size value: 38620345925642 [ 992.160996][T25442] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 992.161288][T25442] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4235: couldn't read orphan inode 15 (err -117) [ 992.182286][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 992.182311][ C0] EXT4-fs (loop7): initial error at time 1774398596: ext4_orphan_get:1391: inode 15 [ 992.182357][ C0] EXT4-fs (loop7): last error at time 1774398596: ext4_orphan_get:1391: inode 15 [ 992.213045][T25456] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4233: bg 0: block 5: invalid block bitmap [ 992.226371][T25456] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 992.290957][T25442] loop7: lost filesystem error report for type 5 error -117 [ 992.290994][T25456] EXT4-fs (loop1): This should not happen!! Data will be lost [ 992.290994][T25456] [ 992.294002][T25442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.298465][T25456] EXT4-fs (loop1): Total free blocks count 0 [ 992.340952][T25456] EXT4-fs (loop1): Free/Dirty block details [ 992.347122][T25456] EXT4-fs (loop1): free_blocks=0 [ 992.353256][T25456] EXT4-fs (loop1): dirty_blocks=3728 [ 992.358849][T25456] EXT4-fs (loop1): Block reservation details [ 992.365103][T25456] EXT4-fs (loop1): i_reserved_data_blocks=3728 [ 992.441813][ T4454] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1676 with error 28 [ 992.441821][T25442] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4235: bg 0: block 5: invalid block bitmap [ 992.453121][T25442] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 992.501353][T25442] EXT4-fs (loop7): This should not happen!! Data will be lost [ 992.501353][T25442] [ 992.559540][T25442] EXT4-fs (loop7): Total free blocks count 0 [ 992.585134][T25442] EXT4-fs (loop7): Free/Dirty block details [ 992.599443][T25476] set_capacity_and_notify: 3 callbacks suppressed [ 992.599459][T25476] loop1: detected capacity change from 0 to 512 [ 992.601346][T25442] EXT4-fs (loop7): free_blocks=0 [ 992.625191][T25476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 992.645055][T25442] EXT4-fs (loop7): dirty_blocks=3388 [ 992.659586][T25482] loop8: detected capacity change from 0 to 1024 [ 992.667764][T25476] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4237: iget: bad i_size value: 38620345925642 [ 992.670738][T25442] EXT4-fs (loop7): Block reservation details [ 992.684401][T25482] EXT4-fs: test_dummy_encryption option not supported [ 992.699649][T25476] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 992.699918][T25476] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4237: couldn't read orphan inode 15 (err -117) [ 992.708601][T25442] EXT4-fs (loop7): i_reserved_data_blocks=3388 [ 992.709076][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 992.733535][ C1] EXT4-fs (loop1): initial error at time 1774398597: ext4_orphan_get:1391: inode 15 [ 992.742982][ C1] EXT4-fs (loop1): last error at time 1774398597: ext4_orphan_get:1391: inode 15 [ 992.762138][ T4442] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1336 with error 28 [ 992.780941][T25476] loop1: lost filesystem error report for type 5 error -117 [ 992.793510][T25476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.913346][T25503] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4237: bg 0: block 5: invalid block bitmap [ 992.946322][T25503] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 360 with error 28 [ 992.976849][T25503] EXT4-fs (loop1): This should not happen!! Data will be lost [ 992.976849][T25503] [ 992.988265][T25503] EXT4-fs (loop1): Total free blocks count 0 [ 992.994565][T25503] EXT4-fs (loop1): Free/Dirty block details [ 993.000585][T25503] EXT4-fs (loop1): free_blocks=0 [ 993.005922][T25503] EXT4-fs (loop1): dirty_blocks=420 [ 993.017205][T25503] EXT4-fs (loop1): Block reservation details [ 993.025432][T25503] EXT4-fs (loop1): i_reserved_data_blocks=420 [ 993.110321][T25520] loop8: detected capacity change from 0 to 512 [ 993.153843][T25520] EXT4-fs (loop8): 1 orphan inode deleted [ 993.165194][T25520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 993.179646][ T1364] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 993.190747][T25520] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 993.207352][T25520] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 993.217760][ T1364] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 993.290353][ T4442] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 360 with max blocks 60 with error 28 [ 994.322642][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.339790][T25587] loop7: detected capacity change from 0 to 512 [ 994.409886][T25587] EXT4-fs (loop7): 1 orphan inode deleted [ 994.430503][T25587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.443223][T25612] loop8: detected capacity change from 0 to 512 [ 994.454243][T25612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 994.479123][T25612] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4249: iget: bad i_size value: 38620345925642 [ 994.492473][T25612] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 994.500935][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 994.516692][ C0] EXT4-fs (loop8): initial error at time 1774398598: ext4_orphan_get:1391: inode 15 [ 994.526089][ C0] EXT4-fs (loop8): last error at time 1774398598: ext4_orphan_get:1391: inode 15 [ 994.535574][T25612] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4249: couldn't read orphan inode 15 (err -117) [ 994.547560][T25612] loop8: lost filesystem error report for type 5 error -117 [ 994.553833][T25612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.554920][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.595954][T25620] loop9: detected capacity change from 0 to 512 [ 994.608766][T25620] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 994.681015][T25631] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4249: bg 0: block 5: invalid block bitmap [ 994.744274][T25631] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1148 with error 28 [ 994.786534][T25631] EXT4-fs (loop8): This should not happen!! Data will be lost [ 994.786534][T25631] [ 994.831440][T25631] EXT4-fs (loop8): Total free blocks count 0 [ 994.856839][T25631] EXT4-fs (loop8): Free/Dirty block details [ 994.973072][T25631] EXT4-fs (loop8): free_blocks=0 [ 994.978069][T25631] EXT4-fs (loop8): dirty_blocks=1392 [ 994.986195][T25631] EXT4-fs (loop8): Block reservation details [ 994.992218][T25631] EXT4-fs (loop8): i_reserved_data_blocks=1392 [ 995.002948][T25645] loop2: detected capacity change from 0 to 1024 [ 995.049918][T25645] EXT4-fs: test_dummy_encryption option not supported [ 995.299505][ T4462] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 1148 with max blocks 244 with error 28 [ 995.560583][T25663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4256'. [ 995.601122][T25663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4256'. [ 995.664069][T25659] loop2: detected capacity change from 0 to 512 [ 995.735514][T25665] loop8: detected capacity change from 0 to 512 [ 995.739884][T25671] Set syz1 is full, maxelem 65536 reached [ 995.777376][T25673] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4258'. [ 995.829200][T25665] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 995.930143][T25706] loop7: detected capacity change from 0 to 1024 [ 995.993536][T25706] EXT4-fs: test_dummy_encryption option not supported [ 996.080197][T25659] EXT4-fs (loop2): 1 orphan inode deleted [ 996.095949][ T1364] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 996.136488][ T1364] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 996.181611][ T1364] loop2: lost filesystem error report for type 5 error -117 [ 996.186910][T25659] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.225807][T25656] Set syz1 is full, maxelem 65536 reached [ 996.263957][T25659] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 996.619917][T25713] EXT4-fs (loop7): 1 orphan inode deleted [ 996.634392][T25713] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.652163][T25713] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 997.234847][T25720] EXT4-fs (loop1): 1 orphan inode deleted [ 997.361204][ T4462] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 997.395276][ T4462] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:37: Failed to release dquot type 1 [ 997.726757][T25734] set_capacity_and_notify: 2 callbacks suppressed [ 997.726774][T25734] loop7: detected capacity change from 0 to 512 [ 998.113861][T25734] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.393192][T25750] loop7: detected capacity change from 0 to 512 [ 998.448873][T25750] EXT4-fs (loop7): 1 orphan inode deleted [ 998.677972][T25764] tipc: Enabling of bearer rejected, failed to enable media [ 998.747359][T25770] loop1: detected capacity change from 0 to 512 [ 998.822111][T25770] EXT4-fs (loop1): 1 orphan inode deleted [ 999.386421][T25795] loop9: detected capacity change from 0 to 512 [ 999.464069][T25795] EXT4-fs (loop9): 1 orphan inode deleted [ 999.494654][T25790] loop1: detected capacity change from 0 to 512 [ 999.519048][T25832] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4269'. [ 999.553119][T25790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 999.580183][T25790] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4276: iget: bad i_size value: 38620345925642 [ 999.608088][T25790] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 999.610907][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 999.626568][ C0] EXT4-fs (loop1): initial error at time 1774398604: ext4_orphan_get:1391: inode 15 [ 999.636116][ C0] EXT4-fs (loop1): last error at time 1774398604: ext4_orphan_get:1391: inode 15 [ 999.645461][T25790] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4276: couldn't read orphan inode 15 (err -117) [ 999.657389][T25790] loop1: lost filesystem error report for type 5 error -117 [ 999.685828][ T1364] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap [ 999.724478][ T28] audit: type=1326 audit(1774398604.219:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 999.768491][ T1364] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 40 with error 28 [ 999.783676][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4272'. [ 999.801317][ T1364] EXT4-fs (loop1): This should not happen!! Data will be lost [ 999.801317][ T1364] [ 999.811339][ T28] audit: type=1326 audit(1774398604.219:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 999.817427][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4272'. [ 999.835264][ T1364] EXT4-fs (loop1): Total free blocks count 0 [ 999.850211][ T1364] EXT4-fs (loop1): Free/Dirty block details [ 999.856388][ T28] audit: type=1326 audit(1774398604.219:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 999.879955][ T1364] EXT4-fs (loop1): free_blocks=0 [ 999.885134][ T1364] EXT4-fs (loop1): dirty_blocks=44 [ 999.890491][ T1364] EXT4-fs (loop1): Block reservation details [ 999.896564][ T1364] EXT4-fs (loop1): i_reserved_data_blocks=44 [ 999.903031][T25818] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 4 with error 28 [ 999.921611][ T28] audit: type=1326 audit(1774398604.219:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 999.946514][T25818] EXT4-fs (loop1): This should not happen!! Data will be lost [ 999.946514][T25818] [ 999.960784][ T28] audit: type=1326 audit(1774398604.219:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 1000.026351][ T28] audit: type=1326 audit(1774398604.219:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 1000.050538][ T28] audit: type=1326 audit(1774398604.219:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 1000.074412][ T28] audit: type=1326 audit(1774398604.219:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 1000.104075][ T28] audit: type=1326 audit(1774398604.219:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 1000.129858][ T28] audit: type=1326 audit(1774398604.219:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25847 comm="syz.9.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681f77c799 code=0x7ffc0000 [ 1000.261888][T25858] loop9: detected capacity change from 0 to 512 [ 1000.346204][T25841] Set syz1 is full, maxelem 65536 reached [ 1000.380309][T25858] EXT4-fs (loop9): 1 orphan inode deleted [ 1000.423856][T25878] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4279'. [ 1000.496702][T25880] loop1: detected capacity change from 0 to 512 [ 1000.533854][T25889] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4280'. [ 1000.571554][T25880] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1000.626521][T25901] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4282'. [ 1001.953743][T26002] loop2: detected capacity change from 0 to 512 [ 1001.969479][T26002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1002.054307][T26002] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4291: iget: bad i_size value: 38620345925642 [ 1002.097721][T26002] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1002.097952][T26002] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4291: couldn't read orphan inode 15 (err -117) [ 1002.107114][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1002.107135][ C0] EXT4-fs (loop2): initial error at time 1774398606: ext4_orphan_get:1391: inode 15 [ 1002.107164][ C0] EXT4-fs (loop2): last error at time 1774398606: ext4_orphan_get:1391: inode 15 [ 1002.190891][T26002] loop2: lost filesystem error report for type 5 error -117 [ 1002.221465][T16943] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 1002.311079][T16943] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 524 with error 28 [ 1002.350877][T16943] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1002.350877][T16943] [ 1002.380895][T16943] EXT4-fs (loop2): Total free blocks count 0 [ 1002.386914][T16943] EXT4-fs (loop2): Free/Dirty block details [ 1002.411111][T16943] EXT4-fs (loop2): free_blocks=0 [ 1002.416111][T16943] EXT4-fs (loop2): dirty_blocks=528 [ 1002.431031][T16943] EXT4-fs (loop2): Block reservation details [ 1002.437091][T16943] EXT4-fs (loop2): i_reserved_data_blocks=528 [ 1002.465522][T26003] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 524 with max blocks 4 with error 28 [ 1002.498426][T26003] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1002.498426][T26003] [ 1002.701836][T26047] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4294'. [ 1002.823291][T26043] loop2: detected capacity change from 0 to 512 [ 1002.841141][T26056] netlink: 140 bytes leftover after parsing attributes in process `syz.8.4296'. [ 1002.946960][T26043] EXT4-fs (loop2): 1 orphan inode deleted [ 1003.166966][T26073] loop7: detected capacity change from 0 to 512 [ 1003.263738][T26073] EXT4-fs (loop7): 1 orphan inode deleted [ 1003.576799][T26070] Set syz1 is full, maxelem 65536 reached [ 1004.053102][T26131] loop9: detected capacity change from 0 to 512 [ 1004.101007][T26128] Set syz1 is full, maxelem 65536 reached [ 1004.127773][T26131] EXT4-fs (loop9): 1 orphan inode deleted [ 1004.264588][T26179] loop8: detected capacity change from 0 to 1024 [ 1004.292098][T26179] EXT4-fs: test_dummy_encryption option not supported [ 1004.376780][T26195] loop2: detected capacity change from 0 to 512 [ 1004.418429][T26195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1004.425408][T26128] Set syz1 is full, maxelem 65536 reached [ 1004.440055][T26195] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4307: iget: bad i_size value: 38620345925642 [ 1004.474698][T26195] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1004.475112][T26195] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4307: couldn't read orphan inode 15 (err -117) [ 1004.484356][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1004.484378][ C0] EXT4-fs (loop2): initial error at time 1774398608: ext4_orphan_get:1391: inode 15 [ 1004.484414][ C0] EXT4-fs (loop2): last error at time 1774398608: ext4_orphan_get:1391: inode 15 [ 1004.522126][T26195] loop2: lost filesystem error report for type 5 error -117 [ 1004.550039][T26187] loop7: detected capacity change from 0 to 512 [ 1004.593981][T26195] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4307: bg 0: block 5: invalid block bitmap [ 1004.606936][T26195] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1004.619633][T26195] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1004.619633][T26195] [ 1004.635773][T26195] EXT4-fs (loop2): Total free blocks count 0 [ 1004.657792][T26195] EXT4-fs (loop2): Free/Dirty block details [ 1004.663870][T26195] EXT4-fs (loop2): free_blocks=0 [ 1004.669035][T26195] EXT4-fs (loop2): dirty_blocks=3968 [ 1004.676776][T26187] EXT4-fs (loop7): 1 orphan inode deleted [ 1004.681233][T26195] EXT4-fs (loop2): Block reservation details [ 1004.688909][T26195] EXT4-fs (loop2): i_reserved_data_blocks=3968 [ 1004.803035][ T1364] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1916 with error 28 [ 1004.824353][ T1364] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1004.824353][ T1364] [ 1004.895889][T26210] loop8: detected capacity change from 0 to 512 [ 1004.921918][T26220] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4312'. [ 1005.094039][T26210] EXT4-fs (loop8): 1 orphan inode deleted [ 1005.120945][T16943] __quota_error: 4 callbacks suppressed [ 1005.120966][T16943] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1005.202815][T26210] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.217508][T16943] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 1005.236887][T26237] loop9: detected capacity change from 0 to 512 [ 1005.268800][T26210] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1005.311440][T26237] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1005.446894][T26263] loop2: detected capacity change from 0 to 512 [ 1005.590157][T26263] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1005.659127][T26260] Set syz1 is full, maxelem 65536 reached [ 1006.125972][T26271] Set syz1 is full, maxelem 65536 reached [ 1006.307459][T26270] Set syz1 is full, maxelem 65536 reached [ 1006.437303][T26298] loop1: detected capacity change from 0 to 512 [ 1006.552027][T26298] EXT4-fs (loop1): 1 orphan inode deleted [ 1007.038061][ T28] audit: type=1400 audit(1774398611.529:1664): avc: denied { map } for pid=26321 comm="syz.1.4322" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1007.123073][T26331] EXT4-fs (loop7): 1 orphan inode deleted [ 1007.375106][T26348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1007.403424][T26348] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.4324: iget: bad i_size value: 38620345925642 [ 1007.421000][T26348] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1007.433245][T26348] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4324: couldn't read orphan inode 15 (err -117) [ 1007.442441][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1007.442461][ C0] EXT4-fs (loop7): initial error at time 1774398611: ext4_orphan_get:1391: inode 15 [ 1007.442489][ C0] EXT4-fs (loop7): last error at time 1774398611: ext4_orphan_get:1391: inode 15 [ 1007.560937][T26348] loop7: lost filesystem error report for type 5 error -117 [ 1007.630949][T26348] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4324: bg 0: block 5: invalid block bitmap [ 1007.672875][T26348] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1840 with error 28 [ 1007.706932][T26348] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1007.706932][T26348] [ 1007.726928][T26348] EXT4-fs (loop7): Total free blocks count 0 [ 1007.741329][T26348] EXT4-fs (loop7): Free/Dirty block details [ 1007.751197][T26348] EXT4-fs (loop7): free_blocks=0 [ 1007.764590][T26355] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1007.780982][T26348] EXT4-fs (loop7): dirty_blocks=1840 [ 1007.796604][T26348] EXT4-fs (loop7): Block reservation details [ 1007.810475][T26348] EXT4-fs (loop7): i_reserved_data_blocks=1840 [ 1008.267680][T26394] set_capacity_and_notify: 2 callbacks suppressed [ 1008.267698][T26394] loop8: detected capacity change from 0 to 512 [ 1008.304514][T26394] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1008.338100][T26394] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4328: iget: bad i_size value: 38620345925642 [ 1008.411980][T26394] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1008.412200][T26394] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4328: couldn't read orphan inode 15 (err -117) [ 1008.421436][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1008.421457][ C1] EXT4-fs (loop8): initial error at time 1774398612: ext4_orphan_get:1391: inode 15 [ 1008.421487][ C1] EXT4-fs (loop8): last error at time 1774398612: ext4_orphan_get:1391: inode 15 [ 1008.522080][T26394] loop8: lost filesystem error report for type 5 error -117 [ 1008.762279][T26418] loop1: detected capacity change from 0 to 1024 [ 1008.798290][T26418] EXT4-fs: test_dummy_encryption option not supported [ 1008.856620][T26412] loop2: detected capacity change from 0 to 512 [ 1008.967027][T26433] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4335'. [ 1009.071704][T26412] EXT4-fs (loop2): 1 orphan inode deleted [ 1009.224328][T26436] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4336'. [ 1009.385425][T26450] loop9: detected capacity change from 0 to 1024 [ 1009.434172][T26450] EXT4-fs: test_dummy_encryption option not supported [ 1009.435122][T26451] loop2: detected capacity change from 0 to 512 [ 1009.556213][T26458] loop1: detected capacity change from 0 to 512 [ 1009.633009][T26451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1009.671519][T26458] EXT4-fs (loop1): 1 orphan inode deleted [ 1009.684492][T26458] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.702919][T26458] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1009.723547][T26451] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4337: iget: bad i_size value: 38620345925642 [ 1009.766467][T26451] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1009.766923][T26451] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4337: couldn't read orphan inode 15 (err -117) [ 1009.776160][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1009.776180][ C1] EXT4-fs (loop2): initial error at time 1774398614: ext4_orphan_get:1391: inode 15 [ 1009.776209][ C1] EXT4-fs (loop2): last error at time 1774398614: ext4_orphan_get:1391: inode 15 [ 1009.865097][T26451] loop2: lost filesystem error report for type 5 error -117 [ 1009.932235][T26469] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4337: bg 0: block 5: invalid block bitmap [ 1009.981455][T26469] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 832 with error 28 [ 1010.004048][T26469] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1010.004048][T26469] [ 1010.022135][T26469] EXT4-fs (loop2): Total free blocks count 0 [ 1010.035736][T26470] loop9: detected capacity change from 0 to 512 [ 1010.046524][T26469] EXT4-fs (loop2): Free/Dirty block details [ 1010.061037][T26469] EXT4-fs (loop2): free_blocks=0 [ 1010.066176][T26469] EXT4-fs (loop2): dirty_blocks=832 [ 1010.078217][T26469] EXT4-fs (loop2): Block reservation details [ 1010.102196][T26469] EXT4-fs (loop2): i_reserved_data_blocks=832 [ 1010.163092][T26470] EXT4-fs (loop9): 1 orphan inode deleted [ 1010.202575][T26470] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.242129][T26470] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1010.434217][ T1364] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1010.520039][ T1364] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 1010.582031][ T1364] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1010.601028][ T1364] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 1010.694219][T26478] loop8: detected capacity change from 0 to 512 [ 1010.728882][T26478] EXT4-fs (loop8): 1 orphan inode deleted [ 1010.811037][T26493] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4342'. [ 1010.865192][T26503] loop7: detected capacity change from 0 to 1024 [ 1010.873662][T26503] EXT4-fs: test_dummy_encryption option not supported [ 1010.886285][T26486] loop1: detected capacity change from 0 to 512 [ 1010.976363][T26486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1011.003843][T26517] FAULT_INJECTION: forcing a failure. [ 1011.003843][T26517] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.033397][T26517] CPU: 0 UID: 0 PID: 26517 Comm: syz.8.4345 Tainted: G W syzkaller #0 PREEMPT(full) [ 1011.033424][T26517] Tainted: [W]=WARN [ 1011.033430][T26517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1011.033541][T26517] Call Trace: [ 1011.033549][T26517] [ 1011.033555][T26517] __dump_stack+0x1d/0x30 [ 1011.033584][T26517] dump_stack_lvl+0x95/0xd0 [ 1011.033740][T26517] dump_stack+0x15/0x1b [ 1011.033799][T26517] should_fail_ex+0x263/0x280 [ 1011.033821][T26517] should_failslab+0x8c/0xb0 [ 1011.033846][T26517] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1011.033868][T26517] ? __alloc_skb+0x2d6/0x690 [ 1011.033893][T26517] __alloc_skb+0x2d6/0x690 [ 1011.033913][T26520] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.4346'. [ 1011.033920][T26517] ? __alloc_skb+0x200/0x690 [ 1011.033941][T26517] netlink_alloc_large_skb+0xbf/0xf0 [ 1011.033964][T26517] netlink_sendmsg+0x40c/0x6f0 [ 1011.033991][T26517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.034033][T26517] ____sys_sendmsg+0x563/0x5b0 [ 1011.034064][T26517] ___sys_sendmsg+0x195/0x1e0 [ 1011.034161][T26517] __x64_sys_sendmsg+0xd4/0x160 [ 1011.034235][T26517] x64_sys_call+0x194c/0x3020 [ 1011.034257][T26517] do_syscall_64+0x12c/0x370 [ 1011.034280][T26517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.034403][T26517] RIP: 0033:0x7f3575b9c799 [ 1011.034419][T26517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.034435][T26517] RSP: 002b:00007f35745ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1011.034453][T26517] RAX: ffffffffffffffda RBX: 00007f3575e15fa0 RCX: 00007f3575b9c799 [ 1011.034466][T26517] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1011.034478][T26517] RBP: 00007f35745ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.034490][T26517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.034510][T26517] R13: 00007f3575e16038 R14: 00007f3575e15fa0 R15: 00007ffd1546cea8 [ 1011.034527][T26517] [ 1011.034571][T26486] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4340: iget: bad i_size value: 38620345925642 [ 1011.093199][T26520] netlink: zone id is out of range [ 1011.093211][T26520] netlink: zone id is out of range [ 1011.093218][T26520] netlink: zone id is out of range [ 1011.158124][T26525] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4347'. [ 1011.161176][T26486] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1011.279202][T26486] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4340: couldn't read orphan inode 15 (err -117) [ 1011.288358][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1011.288396][ C0] EXT4-fs (loop1): initial error at time 1774398615: ext4_orphan_get:1391: inode 15 [ 1011.288423][ C0] EXT4-fs (loop1): last error at time 1774398615: ext4_orphan_get:1391: inode 15 [ 1011.355491][T26486] loop1: lost filesystem error report for type 5 error -117 [ 1011.363086][T26530] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.4348: dx entry: limit 0 != root limit 125 [ 1011.392918][T26530] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4348: Corrupt directory, running e2fsck is recommended [ 1011.427137][T26530] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 8: comm syz.8.4348: lblock 11 mapped to illegal pblock 8 (length 1) [ 1011.428287][T26503] EXT4-fs (loop7): 1 orphan inode deleted [ 1011.453782][T26503] EXT4-fs mount: 50 callbacks suppressed [ 1011.453824][T26503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.460937][T26530] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1011.474135][ T4442] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1011.493317][T26530] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1011.494949][T26503] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.501512][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1011.501532][ C1] EXT4-fs (loop8): initial error at time 1774398615: ext4_map_blocks:776: inode 2: block 8 [ 1011.501568][ C1] EXT4-fs (loop8): last error at time 1774398615: ext4_map_blocks:776: inode 2: block 8 [ 1011.503722][T26530] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.539668][T26503] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1011.565616][ T4442] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:27: Failed to release dquot type 1 [ 1011.613497][ T28] audit: type=1326 audit(1774398616.119:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26529 comm="syz.8.4348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3575b9c799 code=0x0 [ 1011.636982][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.646983][ T28] audit: type=1326 audit(1774398616.119:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26529 comm="syz.8.4348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3575b9c799 code=0x0 [ 1011.735468][T26545] FAULT_INJECTION: forcing a failure. [ 1011.735468][T26545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1011.751918][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.762321][T26545] CPU: 1 UID: 0 PID: 26545 Comm: syz.1.4349 Tainted: G W syzkaller #0 PREEMPT(full) [ 1011.762429][T26545] Tainted: [W]=WARN [ 1011.762436][T26545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1011.762449][T26545] Call Trace: [ 1011.762456][T26545] [ 1011.762464][T26545] __dump_stack+0x1d/0x30 [ 1011.762492][T26545] dump_stack_lvl+0x95/0xd0 [ 1011.762508][T26545] dump_stack+0x15/0x1b [ 1011.762561][T26545] should_fail_ex+0x263/0x280 [ 1011.762587][T26545] should_fail+0xb/0x20 [ 1011.762607][T26545] should_fail_usercopy+0x1a/0x20 [ 1011.762645][T26545] _copy_from_user+0x1c/0xb0 [ 1011.762668][T26545] sctp_setsockopt+0x164/0xea0 [ 1011.762691][T26545] sock_common_setsockopt+0x69/0x80 [ 1011.762730][T26545] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1011.762750][T26545] __sys_setsockopt+0x184/0x200 [ 1011.762774][T26545] __x64_sys_setsockopt+0x64/0x80 [ 1011.762795][T26545] x64_sys_call+0x2327/0x3020 [ 1011.762881][T26545] do_syscall_64+0x12c/0x370 [ 1011.762902][T26545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.762920][T26545] RIP: 0033:0x7f147535c799 [ 1011.762947][T26545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.762962][T26545] RSP: 002b:00007f1473d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1011.763051][T26545] RAX: ffffffffffffffda RBX: 00007f14755d6090 RCX: 00007f147535c799 [ 1011.763065][T26545] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 1011.763099][T26545] RBP: 00007f1473d96090 R08: 000000000000009c R09: 0000000000000000 [ 1011.763110][T26545] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1011.763120][T26545] R13: 00007f14755d6128 R14: 00007f14755d6090 R15: 00007ffc18772968 [ 1011.763134][T26545] [ 1012.109914][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.995669][T26636] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4358'. [ 1013.059736][T21664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.257116][T26641] EXT4-fs (loop2): 1 orphan inode deleted [ 1013.266597][T26641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.394062][T18413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.468330][T26702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4365'. [ 1013.528502][T26705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4367'. [ 1013.563645][T26696] set_capacity_and_notify: 3 callbacks suppressed [ 1013.563677][T26696] loop8: detected capacity change from 0 to 512 [ 1013.571319][T26708] Set syz1 is full, maxelem 65536 reached [ 1013.794803][T26696] EXT4-fs (loop8): 1 orphan inode deleted [ 1013.805535][T26696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.096602][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.304060][T26735] loop9: detected capacity change from 0 to 1024 [ 1014.351444][T26735] EXT4-fs: test_dummy_encryption option not supported [ 1014.929240][T26772] loop9: detected capacity change from 0 to 512 [ 1015.224095][T26772] EXT4-fs (loop9): 1 orphan inode deleted [ 1015.241146][T16943] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1015.279240][T16943] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 1015.323487][T26779] loop8: detected capacity change from 0 to 512 [ 1015.353752][T26772] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.368370][T26772] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1015.419407][T26779] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1015.445275][T26772] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1015.752450][T26817] loop7: detected capacity change from 0 to 512 [ 1015.833798][T26817] EXT4-fs (loop7): 1 orphan inode deleted [ 1015.842813][T26817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.071553][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.581056][T26843] Set syz1 is full, maxelem 65536 reached [ 1016.760426][T26842] Set syz1 is full, maxelem 65536 reached [ 1017.321929][T26900] loop2: detected capacity change from 0 to 512 [ 1017.375233][T26900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1017.411649][T26900] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4384: iget: bad i_size value: 38620345925642 [ 1017.450271][T26900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1017.450523][T26900] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4384: couldn't read orphan inode 15 (err -117) [ 1017.459705][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1017.459737][ C1] EXT4-fs (loop2): initial error at time 1774398621: ext4_orphan_get:1391: inode 15 [ 1017.459761][ C1] EXT4-fs (loop2): last error at time 1774398621: ext4_orphan_get:1391: inode 15 [ 1017.497018][T26900] loop2: lost filesystem error report for type 5 error -117 [ 1017.498878][T26904] loop7: detected capacity change from 0 to 512 [ 1017.501295][T26900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.542405][T26904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1017.563094][T26904] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.4385: iget: bad i_size value: 38620345925642 [ 1017.595699][T18413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.625099][T26904] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1017.630466][T26904] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4385: couldn't read orphan inode 15 (err -117) [ 1017.639653][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1017.639680][ C1] EXT4-fs (loop7): initial error at time 1774398622: ext4_orphan_get:1391: inode 15 [ 1017.639712][ C1] EXT4-fs (loop7): last error at time 1774398622: ext4_orphan_get:1391: inode 15 [ 1017.719403][T26904] loop7: lost filesystem error report for type 5 error -117 [ 1017.722544][T26904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.824886][T26906] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4385: bg 0: block 5: invalid block bitmap [ 1017.861313][T26906] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1540 with error 28 [ 1017.896333][T26906] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1017.896333][T26906] [ 1017.906048][T26906] EXT4-fs (loop7): Total free blocks count 0 [ 1017.912091][T26906] EXT4-fs (loop7): Free/Dirty block details [ 1017.918469][T26906] EXT4-fs (loop7): free_blocks=0 [ 1017.923521][T26906] EXT4-fs (loop7): dirty_blocks=1620 [ 1017.929031][T26906] EXT4-fs (loop7): Block reservation details [ 1017.937111][T26906] EXT4-fs (loop7): i_reserved_data_blocks=1620 [ 1018.052929][T16943] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 1540 with max blocks 80 with error 28 [ 1018.075980][T21664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.118658][T26919] loop7: detected capacity change from 0 to 2048 [ 1018.168233][T26919] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.212806][T26919] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.229856][T26930] loop9: detected capacity change from 0 to 512 [ 1018.289024][T26930] EXT4-fs (loop9): 1 orphan inode deleted [ 1018.302310][T26930] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.507071][T21664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.655696][ T4462] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:37: bg 0: block 345: padding at end of block bitmap is not set [ 1018.686675][ T4462] EXT4-fs (loop7): Remounting filesystem read-only [ 1018.739160][T26957] loop2: detected capacity change from 0 to 512 [ 1018.783629][T26974] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4394'. [ 1018.784392][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.799278][T26974] vlan2: entered promiscuous mode [ 1018.815151][T26970] loop8: detected capacity change from 0 to 512 [ 1018.822559][T26974] bridge0: entered promiscuous mode [ 1018.823846][T26970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1018.838848][T26974] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4394'. [ 1018.852384][T26978] loop1: detected capacity change from 0 to 1024 [ 1018.859065][T26978] EXT4-fs: Ignoring removed orlov option [ 1018.864838][T26978] EXT4-fs: Ignoring removed bh option [ 1018.868461][T26957] EXT4-fs (loop2): 1 orphan inode deleted [ 1018.879617][T26970] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4396: iget: bad i_size value: 38620345925642 [ 1018.883670][T26957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.911333][T26978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1018.932976][T26978] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1018.942053][T26970] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1018.950864][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1018.955785][T26970] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4396: couldn't read orphan inode 15 (err -117) [ 1018.960099][ C1] EXT4-fs (loop8): initial error at time 1774398623: ext4_orphan_get:1391: inode 15 [ 1018.966758][T26970] loop8: lost filesystem error report for type 5 error -117 [ 1018.978343][ C1] [ 1018.978353][ C1] EXT4-fs (loop8): last error at time 1774398623: ext4_orphan_get:1391: inode 15 [ 1019.009608][T26970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.032872][T18413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.054022][T27001] loop7: detected capacity change from 0 to 1024 [ 1019.061041][T27001] EXT4-fs: test_dummy_encryption option not supported [ 1019.177435][T27014] loop2: detected capacity change from 0 to 512 [ 1019.186988][T27014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1019.204679][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.204921][T27014] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4399: iget: bad i_size value: 38620345925642 [ 1019.226720][T27014] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1019.227343][T27014] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4399: couldn't read orphan inode 15 (err -117) [ 1019.236537][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1019.236563][ C0] EXT4-fs (loop2): initial error at time 1774398623: ext4_orphan_get:1391: inode 15 [ 1019.236591][ C0] EXT4-fs (loop2): last error at time 1774398623: ext4_orphan_get:1391: inode 15 [ 1019.273677][T27014] loop2: lost filesystem error report for type 5 error -117 [ 1019.316498][T27019] loop7: detected capacity change from 0 to 512 [ 1019.374061][T27014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.409955][T27019] EXT4-fs (loop7): 1 orphan inode deleted [ 1019.423019][T27019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.438782][T27019] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.463528][ T1364] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1019.493631][ T1364] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 1019.574958][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.596215][T27024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4399: bg 0: block 5: invalid block bitmap [ 1019.673801][T27024] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 128 with error 28 [ 1019.689759][T27024] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1019.689759][T27024] [ 1020.220921][T27024] EXT4-fs (loop2): Total free blocks count 0 [ 1020.227403][T27024] EXT4-fs (loop2): Free/Dirty block details [ 1020.691022][T27024] EXT4-fs (loop2): free_blocks=0 [ 1020.696016][T27024] EXT4-fs (loop2): dirty_blocks=132 [ 1020.729410][T27024] EXT4-fs (loop2): Block reservation details [ 1020.742319][T27024] EXT4-fs (loop2): i_reserved_data_blocks=132 [ 1021.275152][T27039] loop8: detected capacity change from 0 to 512 [ 1021.288713][T27039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1021.325115][T27039] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4400: iget: bad i_size value: 38620345925642 [ 1021.337844][T27039] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1021.338139][T27039] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4400: couldn't read orphan inode 15 (err -117) [ 1021.343218][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.347454][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1021.361110][T16943] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 128 with max blocks 4 with error 28 [ 1021.368243][ C0] EXT4-fs (loop8): initial error at time 1774398625: ext4_orphan_get:1391: inode 15 [ 1021.396548][ C0] EXT4-fs (loop8): last error at time 1774398625: ext4_orphan_get:1391: inode 15 [ 1021.410926][T27039] loop8: lost filesystem error report for type 5 error -117 [ 1021.417464][T27039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.417636][T27056] loop9: detected capacity change from 0 to 1024 [ 1021.444509][T27056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1021.475665][T27056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.525554][ T28] audit: type=1400 audit(1774398625.999:1667): avc: denied { ioctl } for pid=27070 comm="syz.2.4405" path="socket:[58963]" dev="sockfs" ino=58963 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1021.621590][T27041] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4400: bg 0: block 5: invalid block bitmap [ 1021.650181][T27076] loop7: detected capacity change from 0 to 512 [ 1021.665610][T27041] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 712 with error 28 [ 1021.686924][T27041] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1021.686924][T27041] [ 1021.703490][T27041] EXT4-fs (loop8): Total free blocks count 0 [ 1021.732272][T27041] EXT4-fs (loop8): Free/Dirty block details [ 1021.738310][T27041] EXT4-fs (loop8): free_blocks=0 [ 1021.748644][T27041] EXT4-fs (loop8): dirty_blocks=1148 [ 1021.754348][T27041] EXT4-fs (loop8): Block reservation details [ 1021.760393][T27041] EXT4-fs (loop8): i_reserved_data_blocks=1148 [ 1021.768849][T27076] EXT4-fs (loop7): 1 orphan inode deleted [ 1021.793831][T27076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.814163][ T4454] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 712 with max blocks 436 with error 28 [ 1021.884980][T27122] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4410'. [ 1021.891904][T21664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.939580][T27129] loop8: detected capacity change from 0 to 1024 [ 1021.951356][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.976777][T27129] EXT4-fs: test_dummy_encryption option not supported [ 1022.592367][T27162] FAULT_INJECTION: forcing a failure. [ 1022.592367][T27162] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.697250][T27162] CPU: 1 UID: 0 PID: 27162 Comm: syz.2.4416 Tainted: G W syzkaller #0 PREEMPT(full) [ 1022.697284][T27162] Tainted: [W]=WARN [ 1022.697303][T27162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1022.697313][T27162] Call Trace: [ 1022.697320][T27162] [ 1022.697328][T27162] __dump_stack+0x1d/0x30 [ 1022.697354][T27162] dump_stack_lvl+0x95/0xd0 [ 1022.697481][T27162] dump_stack+0x15/0x1b [ 1022.697533][T27162] should_fail_ex+0x263/0x280 [ 1022.697558][T27162] ? percpu_ref_init+0x9c/0x250 [ 1022.697602][T27162] should_failslab+0x8c/0xb0 [ 1022.697619][T27162] ? __pfx_free_ioctx_users+0x10/0x10 [ 1022.697643][T27162] __kmalloc_cache_noprof+0x5f/0x410 [ 1022.697666][T27162] ? __pfx_free_ioctx_users+0x10/0x10 [ 1022.697765][T27162] percpu_ref_init+0x9c/0x250 [ 1022.697784][T27162] ioctx_alloc+0x1a1/0x4c0 [ 1022.697895][T27162] __se_sys_io_setup+0x6b/0x1b0 [ 1022.697917][T27162] __x64_sys_io_setup+0x31/0x40 [ 1022.697981][T27162] x64_sys_call+0x24f1/0x3020 [ 1022.698000][T27162] do_syscall_64+0x12c/0x370 [ 1022.698089][T27162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.698195][T27162] RIP: 0033:0x7effcaf8c799 [ 1022.698208][T27162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.698223][T27162] RSP: 002b:00007effc99a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1022.698242][T27162] RAX: ffffffffffffffda RBX: 00007effcb206180 RCX: 00007effcaf8c799 [ 1022.698253][T27162] RDX: 0000000000000000 RSI: 0000200000004200 RDI: 0000000000000008 [ 1022.698282][T27162] RBP: 00007effc99a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.698329][T27162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.698341][T27162] R13: 00007effcb206218 R14: 00007effcb206180 R15: 00007ffd4489a408 [ 1022.698357][T27162] [ 1023.159291][T27151] EXT4-fs (loop8): 1 orphan inode deleted [ 1023.171454][T27151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.187804][T27151] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.209682][T27145] EXT4-fs (loop9): 1 orphan inode deleted [ 1023.226304][T27145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.666174][ T4462] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1023.679478][ T4462] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:37: Failed to release dquot type 1 [ 1023.692395][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.720986][T27185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1023.732208][T27188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4423'. [ 1023.752368][T27197] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4422'. [ 1023.764297][T27185] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4421: iget: bad i_size value: 38620345925642 [ 1023.778563][T21664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.787411][T27185] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1023.790023][T27185] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4421: couldn't read orphan inode 15 (err -117) [ 1023.790167][T27197] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4422'. [ 1023.799250][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1023.826414][ C1] EXT4-fs (loop2): initial error at time 1774398628: ext4_orphan_get:1391: inode 15 [ 1023.835860][ C1] EXT4-fs (loop2): last error at time 1774398628: ext4_orphan_get:1391: inode 15 [ 1023.852989][T27185] loop2: lost filesystem error report for type 5 error -117 [ 1023.861410][T27185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.985576][T27244] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4421: bg 0: block 5: invalid block bitmap [ 1023.998629][T27244] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 904 with error 28 [ 1024.011891][T27244] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1024.011891][T27244] [ 1024.021991][T27244] EXT4-fs (loop2): Total free blocks count 0 [ 1024.028326][T27244] EXT4-fs (loop2): Free/Dirty block details [ 1024.034874][T27244] EXT4-fs (loop2): free_blocks=0 [ 1024.039826][T27244] EXT4-fs (loop2): dirty_blocks=924 [ 1024.045293][T27244] EXT4-fs (loop2): Block reservation details [ 1024.051382][T27244] EXT4-fs (loop2): i_reserved_data_blocks=924 [ 1024.060751][ T4462] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 904 with max blocks 20 with error 28 [ 1024.772442][T27269] set_capacity_and_notify: 3 callbacks suppressed [ 1024.772457][T27269] loop1: detected capacity change from 0 to 512 [ 1024.795470][T27269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1024.806070][T27269] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4433: iget: bad i_size value: 38620345925642 [ 1024.819172][T27269] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1024.822384][T27269] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4433: couldn't read orphan inode 15 (err -117) [ 1024.830876][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1024.832247][T27269] loop1: lost filesystem error report for type 5 error -117 [ 1024.843615][ C1] EXT4-fs (loop1): initial error at time 1774398629: ext4_orphan_get:1391: inode 15 [ 1024.843649][ C1] EXT4-fs (loop1): last error at time 1774398629: ext4_orphan_get:1391: inode 15 [ 1024.877166][T27269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.967002][T27270] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4433: bg 0: block 5: invalid block bitmap [ 1024.980326][T27270] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1024.995041][T27270] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1024.995041][T27270] [ 1025.005171][T27270] EXT4-fs (loop1): Total free blocks count 0 [ 1025.011311][T27270] EXT4-fs (loop1): Free/Dirty block details [ 1025.021581][T27270] EXT4-fs (loop1): free_blocks=0 [ 1025.094294][T27270] EXT4-fs (loop1): dirty_blocks=3764 [ 1025.099623][T27270] EXT4-fs (loop1): Block reservation details [ 1025.129779][T27270] EXT4-fs (loop1): i_reserved_data_blocks=3764 [ 1025.145942][T27276] loop8: detected capacity change from 0 to 512 [ 1025.236959][T27276] EXT4-fs (loop8): 1 orphan inode deleted [ 1025.246147][ T1364] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1712 with error 28 [ 1025.261476][T27276] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1025.299319][T27289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4435'. [ 1025.342052][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.435421][T27295] loop1: detected capacity change from 0 to 512 [ 1025.500091][T27295] EXT4-fs (loop1): 1 orphan inode deleted [ 1025.512590][T27295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1025.952664][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.039347][T27326] netlink: 'syz.1.4440': attribute type 4 has an invalid length. [ 1026.970990][T27226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1027.031272][T27368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4446'. [ 1027.202236][T27364] loop8: detected capacity change from 0 to 512 [ 1027.506394][T27381] loop2: detected capacity change from 0 to 512 [ 1027.582130][T27364] EXT4-fs (loop8): 1 orphan inode deleted [ 1027.612477][T27364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.643457][T27390] loop9: detected capacity change from 0 to 512 [ 1027.657431][T27381] EXT4-fs (loop2): 1 orphan inode deleted [ 1027.684865][T27390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1027.706492][T27381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.747127][T27390] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.4449: iget: bad i_size value: 38620345925642 [ 1027.780893][T27390] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1027.790886][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1027.806746][ C1] EXT4-fs (loop9): initial error at time 1774398632: ext4_orphan_get:1391: inode 15 [ 1027.816251][ C1] EXT4-fs (loop9): last error at time 1774398632: ext4_orphan_get:1391: inode 15 [ 1027.855297][T27390] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4449: couldn't read orphan inode 15 (err -117) [ 1027.868594][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.885949][T27390] loop9: lost filesystem error report for type 5 error -117 [ 1027.901207][T27390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.924688][T18413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.047674][T27417] loop1: detected capacity change from 0 to 512 [ 1028.056254][T27427] netlink: 'syz.2.4452': attribute type 4 has an invalid length. [ 1028.085195][T27430] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4449: bg 0: block 5: invalid block bitmap [ 1028.130239][T27430] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 956 with error 28 [ 1028.148088][T27417] EXT4-fs (loop1): 1 orphan inode deleted [ 1028.159452][T27417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.176066][T27430] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1028.176066][T27430] [ 1028.211258][T27430] EXT4-fs (loop9): Total free blocks count 0 [ 1028.217669][T27430] EXT4-fs (loop9): Free/Dirty block details [ 1028.223779][T27430] EXT4-fs (loop9): free_blocks=0 [ 1028.309372][T27430] EXT4-fs (loop9): dirty_blocks=960 [ 1028.333240][T27430] EXT4-fs (loop9): Block reservation details [ 1028.339302][T27430] EXT4-fs (loop9): i_reserved_data_blocks=960 [ 1028.346382][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.420742][ T4462] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 956 with max blocks 4 with error 28 [ 1028.586713][T27474] loop7: detected capacity change from 0 to 512 [ 1028.606698][T27474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1028.625579][T27474] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.4458: iget: bad i_size value: 38620345925642 [ 1028.642247][T27474] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1028.650882][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1028.666582][ C1] EXT4-fs (loop7): initial error at time 1774398633: ext4_orphan_get:1391: inode 15 [ 1028.676007][ C1] EXT4-fs (loop7): last error at time 1774398633: ext4_orphan_get:1391: inode 15 [ 1028.731064][T27474] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4458: couldn't read orphan inode 15 (err -117) [ 1028.754491][T27474] loop7: lost filesystem error report for type 5 error -117 [ 1028.755206][T27474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.805863][T27479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1029.035888][T27486] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4458: bg 0: block 5: invalid block bitmap [ 1029.050303][T27486] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 656 with error 28 [ 1029.198876][T27486] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1029.198876][T27486] [ 1029.401546][T27486] EXT4-fs (loop7): Total free blocks count 0 [ 1029.410683][T27486] EXT4-fs (loop7): Free/Dirty block details [ 1029.421046][T27486] EXT4-fs (loop7): free_blocks=0 [ 1029.479689][T27486] EXT4-fs (loop7): dirty_blocks=660 [ 1029.520947][T27486] EXT4-fs (loop7): Block reservation details [ 1029.539737][T27486] EXT4-fs (loop7): i_reserved_data_blocks=660 [ 1029.611387][ T4454] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 656 with max blocks 4 with error 28 [ 1029.818258][T27508] loop1: detected capacity change from 0 to 512 [ 1029.973600][T27508] EXT4-fs (loop1): 1 orphan inode deleted [ 1029.995069][T27508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.108136][T27529] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4466'. [ 1030.442103][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.569688][T27544] loop1: detected capacity change from 0 to 512 [ 1030.602924][T27550] netlink: 'syz.7.4468': attribute type 4 has an invalid length. [ 1030.655417][T27544] EXT4-fs (loop1): 1 orphan inode deleted [ 1030.685761][T27544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.785730][T27554] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4469'. [ 1030.836710][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.908818][ T28] audit: type=1400 audit(1774398635.409:1668): avc: denied { append } for pid=27553 comm="syz.2.4469" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1030.960952][ T28] audit: type=1400 audit(1774398635.409:1669): avc: denied { read } for pid=27553 comm="syz.2.4469" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1031.395627][ T28] audit: type=1400 audit(1774398635.409:1670): avc: denied { open } for pid=27553 comm="syz.2.4469" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1031.419544][ T28] audit: type=1400 audit(1774398635.899:1671): avc: denied { unmount } for pid=18413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1031.439434][T27592] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.4476'. [ 1031.590334][T27596] Set syz1 is full, maxelem 65536 reached [ 1031.612471][T27594] loop2: detected capacity change from 0 to 512 [ 1031.764432][T27594] EXT4-fs (loop2): 1 orphan inode deleted [ 1032.025476][T27622] 9p: Bad value for 'wfdno' [ 1032.154819][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4480'. [ 1032.511196][T27635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4479'. [ 1032.601577][T27651] netlink: 'syz.1.4483': attribute type 4 has an invalid length. [ 1032.833348][T27667] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.4487'. [ 1032.887404][T27662] loop1: detected capacity change from 0 to 512 [ 1032.937065][T27664] loop7: detected capacity change from 0 to 512 [ 1032.941860][T27672] FAULT_INJECTION: forcing a failure. [ 1032.941860][T27672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.962342][T27672] CPU: 0 UID: 0 PID: 27672 Comm: syz.2.4488 Tainted: G W syzkaller #0 PREEMPT(full) [ 1032.962395][T27672] Tainted: [W]=WARN [ 1032.962402][T27672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1032.962424][T27672] Call Trace: [ 1032.962431][T27672] [ 1032.962438][T27672] __dump_stack+0x1d/0x30 [ 1032.962480][T27672] dump_stack_lvl+0x95/0xd0 [ 1032.962501][T27672] dump_stack+0x15/0x1b [ 1032.962520][T27672] should_fail_ex+0x263/0x280 [ 1032.962566][T27672] should_fail+0xb/0x20 [ 1032.962592][T27672] should_fail_usercopy+0x1a/0x20 [ 1032.962615][T27672] _copy_from_user+0x1c/0xb0 [ 1032.962717][T27672] sctp_setsockopt+0x164/0xea0 [ 1032.962737][T27672] sock_common_setsockopt+0x69/0x80 [ 1032.962824][T27672] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1032.962915][T27672] __sys_setsockopt+0x184/0x200 [ 1032.962942][T27672] __x64_sys_setsockopt+0x64/0x80 [ 1032.962967][T27672] x64_sys_call+0x2327/0x3020 [ 1032.963100][T27672] do_syscall_64+0x12c/0x370 [ 1032.963194][T27672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.963218][T27672] RIP: 0033:0x7effcaf8c799 [ 1032.963234][T27672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.963293][T27672] RSP: 002b:00007effc99c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1032.963346][T27672] RAX: ffffffffffffffda RBX: 00007effcb206090 RCX: 00007effcaf8c799 [ 1032.963431][T27672] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 1032.963443][T27672] RBP: 00007effc99c6090 R08: 000000000000009c R09: 0000000000000000 [ 1032.963455][T27672] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1032.963468][T27672] R13: 00007effcb206128 R14: 00007effcb206090 R15: 00007ffd4489a408 [ 1032.963487][T27672] [ 1033.031732][T27662] EXT4-fs (loop1): 1 orphan inode deleted [ 1033.232139][T27664] EXT4-fs (loop7): 1 orphan inode deleted [ 1033.468144][T27696] loop1: detected capacity change from 0 to 512 [ 1033.551692][T27696] EXT4-fs (loop1): 1 orphan inode deleted [ 1033.634166][T27707] loop9: detected capacity change from 0 to 512 [ 1033.648496][T27711] loop8: detected capacity change from 0 to 512 [ 1033.655753][T27707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1033.666019][T27711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1033.691792][T27707] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.4491: iget: bad i_size value: 38620345925642 [ 1033.708374][T27711] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4492: iget: bad i_size value: 38620345925642 [ 1033.726910][T27711] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1033.727005][T27707] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1033.727156][T27711] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4492: couldn't read orphan inode 15 (err -117) [ 1033.736435][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1033.736452][ C1] EXT4-fs (loop8): initial error at time 1774398638: ext4_orphan_get:1391: inode 15 [ 1033.736484][ C1] EXT4-fs (loop8): last error at time 1774398638: ext4_orphan_get:1391: inode 15 [ 1033.781142][T27711] loop8: lost filesystem error report for type 5 error -117 [ 1033.794248][T27707] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4491: couldn't read orphan inode 15 (err -117) [ 1033.801769][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1033.801789][ C1] EXT4-fs (loop9): initial error at time 1774398638: ext4_orphan_get:1391: inode 15 [ 1033.801827][ C1] EXT4-fs (loop9): last error at time 1774398638: ext4_orphan_get:1391: inode 15 [ 1033.839254][T27707] loop9: lost filesystem error report for type 5 error -117 [ 1033.852215][T27732] loop2: detected capacity change from 0 to 512 [ 1033.871799][T27727] Set syz1 is full, maxelem 65536 reached [ 1033.878429][T27732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1033.885012][T27734] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4492: bg 0: block 5: invalid block bitmap [ 1033.888943][T27732] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4494: iget: bad i_size value: 38620345925642 [ 1033.912257][T27732] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1033.912480][T27732] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4494: couldn't read orphan inode 15 (err -117) [ 1033.921694][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1033.921712][ C1] EXT4-fs (loop2): initial error at time 1774398638: ext4_orphan_get:1391: inode 15 [ 1033.921737][ C1] EXT4-fs (loop2): last error at time 1774398638: ext4_orphan_get:1391: inode 15 [ 1033.927026][T27738] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4491: bg 0: block 5: invalid block bitmap [ 1033.945484][T27732] loop2: lost filesystem error report for type 5 error -117 [ 1033.954264][T27734] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 688 with error 28 [ 1033.960174][T27738] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1148 with error 28 [ 1033.995344][T27734] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1033.995344][T27734] [ 1034.026100][T27738] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1034.026100][T27738] [ 1034.026276][T27734] EXT4-fs (loop8): Total free blocks count 0 [ 1034.045314][T27734] EXT4-fs (loop8): Free/Dirty block details [ 1034.046179][T27738] EXT4-fs (loop9): Total free blocks count 0 [ 1034.051419][T27734] EXT4-fs (loop8): free_blocks=0 [ 1034.062487][T27734] EXT4-fs (loop8): dirty_blocks=688 [ 1034.068924][T27740] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4494: bg 0: block 5: invalid block bitmap [ 1034.068944][T27738] EXT4-fs (loop9): Free/Dirty block details [ 1034.069264][T27740] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1276 with error 28 [ 1034.082087][T27738] EXT4-fs (loop9): free_blocks=0 [ 1034.087312][T27734] EXT4-fs (loop8): Block reservation details [ 1034.099696][T27740] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1034.099696][T27740] [ 1034.104683][T27734] EXT4-fs (loop8): i_reserved_data_blocks=688 [ 1034.110804][T27740] EXT4-fs (loop2): Total free blocks count 0 [ 1034.122315][T27738] EXT4-fs (loop9): dirty_blocks=1764 [ 1034.137906][T27738] EXT4-fs (loop9): Block reservation details [ 1034.143972][T27738] EXT4-fs (loop9): i_reserved_data_blocks=1764 [ 1034.146672][T27740] EXT4-fs (loop2): Free/Dirty block details [ 1034.193222][T27740] EXT4-fs (loop2): free_blocks=0 [ 1034.198620][T27740] EXT4-fs (loop2): dirty_blocks=1324 [ 1034.199920][ T1364] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 1148 with max blocks 616 with error 28 [ 1034.203969][T27740] EXT4-fs (loop2): Block reservation details [ 1034.203981][T27740] EXT4-fs (loop2): i_reserved_data_blocks=1324 [ 1034.229311][ T1364] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1034.229311][ T1364] [ 1034.303249][T27756] netlink: 'syz.8.4495': attribute type 4 has an invalid length. [ 1034.355588][ T2024] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1276 with max blocks 48 with error 28 [ 1034.368328][ T2024] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1034.368328][ T2024] [ 1034.462885][T27765] loop8: detected capacity change from 0 to 2048 [ 1034.614101][T27782] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.4502'. [ 1034.656445][T27785] FAULT_INJECTION: forcing a failure. [ 1034.656445][T27785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.669871][T27785] CPU: 0 UID: 0 PID: 27785 Comm: syz.8.4503 Tainted: G W syzkaller #0 PREEMPT(full) [ 1034.669929][T27785] Tainted: [W]=WARN [ 1034.669934][T27785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1034.669945][T27785] Call Trace: [ 1034.669950][T27785] [ 1034.669957][T27785] __dump_stack+0x1d/0x30 [ 1034.669981][T27785] dump_stack_lvl+0x95/0xd0 [ 1034.670001][T27785] dump_stack+0x15/0x1b [ 1034.670067][T27785] should_fail_ex+0x263/0x280 [ 1034.670096][T27785] should_fail+0xb/0x20 [ 1034.670112][T27785] should_fail_usercopy+0x1a/0x20 [ 1034.670133][T27785] _copy_from_user+0x1c/0xb0 [ 1034.670234][T27785] sctp_setsockopt+0x164/0xea0 [ 1034.670252][T27785] sock_common_setsockopt+0x69/0x80 [ 1034.670271][T27785] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1034.670367][T27785] __sys_setsockopt+0x184/0x200 [ 1034.670458][T27785] __x64_sys_setsockopt+0x64/0x80 [ 1034.670484][T27785] x64_sys_call+0x2327/0x3020 [ 1034.670504][T27785] do_syscall_64+0x12c/0x370 [ 1034.670580][T27785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.670599][T27785] RIP: 0033:0x7f3575b9c799 [ 1034.670615][T27785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.670632][T27785] RSP: 002b:00007f35745ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1034.670713][T27785] RAX: ffffffffffffffda RBX: 00007f3575e15fa0 RCX: 00007f3575b9c799 [ 1034.670727][T27785] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 1034.670740][T27785] RBP: 00007f35745ef090 R08: 0000000000000008 R09: 0000000000000000 [ 1034.670753][T27785] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1034.670789][T27785] R13: 00007f3575e16038 R14: 00007f3575e15fa0 R15: 00007ffd1546cea8 [ 1034.670808][T27785] [ 1034.813988][T27768] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4496'. [ 1035.045397][T27791] loop8: detected capacity change from 0 to 512 [ 1035.118726][T27796] loop7: detected capacity change from 0 to 2048 [ 1035.134845][T27796] EXT4-fs: Ignoring removed i_version option [ 1035.164259][T27796] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.191625][T27791] EXT4-fs (loop8): 1 orphan inode deleted [ 1035.211645][T27796] netlink: zone id is out of range [ 1035.216915][T27796] netlink: zone id is out of range [ 1035.280220][T27796] netlink: zone id is out of range [ 1035.289545][T27796] netlink: zone id is out of range [ 1035.353930][T27796] netlink: zone id is out of range [ 1035.397463][T27796] netlink: zone id is out of range [ 1035.409454][T27796] netlink: zone id is out of range [ 1035.421178][T27796] netlink: zone id is out of range [ 1035.451429][T27833] netlink: 'syz.2.4510': attribute type 4 has an invalid length. [ 1035.513334][T27842] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4512'. [ 1035.535703][T27842] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4512'. [ 1035.583090][T27845] loop2: detected capacity change from 0 to 164 [ 1036.853879][T27884] loop8: detected capacity change from 0 to 512 [ 1036.902565][T27884] EXT4-fs (loop8): 1 orphan inode deleted [ 1036.977858][T27909] netlink: 'syz.9.4524': attribute type 4 has an invalid length. [ 1037.297060][T27932] loop8: detected capacity change from 0 to 1024 [ 1037.334298][T27932] EXT4-fs: test_dummy_encryption option not supported [ 1037.364469][T27918] loop2: detected capacity change from 0 to 512 [ 1037.433118][T27938] net_ratelimit: 122 callbacks suppressed [ 1037.433137][T27938] Set syz1 is full, maxelem 65536 reached [ 1037.638205][T27965] loop8: detected capacity change from 0 to 512 [ 1037.677558][T27938] Set syz1 is full, maxelem 65536 reached [ 1037.806380][T27965] EXT4-fs (loop8): 1 orphan inode deleted [ 1037.820672][T27965] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.855039][T27965] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1037.887279][ T4442] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1037.950326][T27918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1038.006236][ T4442] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:27: Failed to release dquot type 1 [ 1038.087856][T27918] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4528: iget: bad i_size value: 38620345925642 [ 1038.266196][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4526'. [ 1038.291321][T27918] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1038.293676][T27918] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4528: couldn't read orphan inode 15 (err -117) [ 1038.302864][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1038.302907][ C0] EXT4-fs (loop2): initial error at time 1774398642: ext4_orphan_get:1391: inode 15 [ 1038.302929][ C0] EXT4-fs (loop2): last error at time 1774398642: ext4_orphan_get:1391: inode 15 [ 1038.432453][T27918] loop2: lost filesystem error report for type 5 error -117 [ 1039.319640][T27929] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4528: bg 0: block 5: invalid block bitmap [ 1039.362500][T28013] netlink: 'syz.8.4542': attribute type 4 has an invalid length. [ 1039.462260][T27929] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 536 with error 28 [ 1039.573614][T27929] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1039.573614][T27929] [ 1039.583851][T27929] EXT4-fs (loop2): Total free blocks count 0 [ 1039.589930][T27929] EXT4-fs (loop2): Free/Dirty block details [ 1039.595935][T27929] EXT4-fs (loop2): free_blocks=0 [ 1039.619600][T27929] EXT4-fs (loop2): dirty_blocks=536 [ 1039.625104][T27929] EXT4-fs (loop2): Block reservation details [ 1039.674195][T28018] loop1: detected capacity change from 0 to 512 [ 1039.693291][T28018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1039.707307][T27929] EXT4-fs (loop2): i_reserved_data_blocks=536 [ 1039.721719][T28018] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4543: iget: bad i_size value: 38620345925642 [ 1039.738706][T28018] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1039.739042][T28018] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4543: couldn't read orphan inode 15 (err -117) [ 1039.748219][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1039.748236][ C0] EXT4-fs (loop1): initial error at time 1774398644: ext4_orphan_get:1391: inode 15 [ 1039.748259][ C0] EXT4-fs (loop1): last error at time 1774398644: ext4_orphan_get:1391: inode 15 [ 1039.785239][T28018] loop1: lost filesystem error report for type 5 error -117 [ 1039.805053][T28031] loop7: detected capacity change from 0 to 512 [ 1039.849354][T28025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4543: bg 0: block 5: invalid block bitmap [ 1039.920762][T28025] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1039.961729][T28031] EXT4-fs (loop7): 1 orphan inode deleted [ 1040.044871][T28025] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1040.044871][T28025] [ 1040.077180][T28025] EXT4-fs (loop1): Total free blocks count 0 [ 1040.079699][T28040] Set syz1 is full, maxelem 65536 reached [ 1040.106093][T28025] EXT4-fs (loop1): Free/Dirty block details [ 1040.147461][T28025] EXT4-fs (loop1): free_blocks=0 [ 1040.199596][T28025] EXT4-fs (loop1): dirty_blocks=3148 [ 1040.219834][T28025] EXT4-fs (loop1): Block reservation details [ 1040.237651][T28025] EXT4-fs (loop1): i_reserved_data_blocks=3148 [ 1040.280400][T28024] Set syz1 is full, maxelem 65536 reached [ 1040.305963][T28098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4553'. [ 1040.352589][ T2024] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1096 with error 28 [ 1040.365745][ T2024] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1040.365745][ T2024] [ 1040.422739][ T28] audit: type=1400 audit(1774398644.929:1672): avc: denied { create } for pid=28107 comm="syz.1.4554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1040.593834][T28113] loop1: detected capacity change from 0 to 2048 [ 1040.637689][ T28] audit: type=1326 audit(1774398645.139:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28107 comm="syz.1.4554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147535c799 code=0x0 [ 1040.638233][T28118] loop7: detected capacity change from 0 to 512 [ 1040.734532][T28118] EXT4-fs (loop7): 1 orphan inode deleted [ 1040.776988][T28154] netlink: 'syz.2.4556': attribute type 4 has an invalid length. [ 1041.159723][T28174] loop2: detected capacity change from 0 to 512 [ 1041.236201][T28174] EXT4-fs (loop2): 1 orphan inode deleted [ 1041.249329][T28174] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.271225][T28174] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1041.704632][T28179] loop1: detected capacity change from 0 to 512 [ 1041.893799][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4557'. [ 1041.925188][T28179] EXT4-fs (loop1): 1 orphan inode deleted [ 1041.959803][T28179] EXT4-fs mount: 33 callbacks suppressed [ 1041.959842][T28179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.018039][T16943] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1042.073541][T16943] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 1042.506587][T18413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.535631][T19239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.768172][T28208] loop1: detected capacity change from 0 to 512 [ 1042.789559][T28208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1042.888116][T28215] loop2: detected capacity change from 0 to 512 [ 1042.999894][T28215] EXT4-fs (loop2): 1 orphan inode deleted [ 1043.012566][T28215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.027549][ T4454] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1043.040706][T28215] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.071428][T28215] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1043.127988][T28208] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4561: iget: bad i_size value: 38620345925642 [ 1043.179182][ T4454] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:33: Failed to release dquot type 1 [ 1043.272173][T28208] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1043.273325][T28208] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4561: couldn't read orphan inode 15 (err -117) [ 1043.282646][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1043.282668][ C0] EXT4-fs (loop1): initial error at time 1774398647: ext4_orphan_get:1391: inode 15 [ 1043.282712][ C0] EXT4-fs (loop1): last error at time 1774398647: ext4_orphan_get:1391: inode 15 [ 1043.375199][T28224] loop8: detected capacity change from 0 to 512 [ 1043.594207][T28224] EXT4-fs (loop8): 1 orphan inode deleted [ 1043.600462][T28224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.680270][T28231] loop7: detected capacity change from 0 to 512 [ 1043.690881][T28208] loop1: lost filesystem error report for type 5 error -117 [ 1043.696843][T28208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.740912][T28231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1043.771168][T28231] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.4565: iget: bad i_size value: 38620345925642 [ 1043.851027][T28231] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1043.853824][T28242] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4561: bg 0: block 5: invalid block bitmap [ 1043.863021][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1043.863043][ C0] EXT4-fs (loop7): initial error at time 1774398648: ext4_orphan_get:1391: inode 15 [ 1043.863086][ C0] EXT4-fs (loop7): last error at time 1774398648: ext4_orphan_get:1391: inode 15 [ 1043.910418][T28231] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4565: couldn't read orphan inode 15 (err -117) [ 1043.924211][T28231] loop7: lost filesystem error report for type 5 error -117 [ 1043.924788][T28231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.947754][T28242] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1044.062343][T28231] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4565: bg 0: block 5: invalid block bitmap [ 1044.074754][T28242] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1044.074754][T28242] [ 1044.101167][T28242] EXT4-fs (loop1): Total free blocks count 0 [ 1044.107642][T28231] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1392 with error 28 [ 1044.124606][T28242] EXT4-fs (loop1): Free/Dirty block details [ 1044.130590][T28242] EXT4-fs (loop1): free_blocks=0 [ 1044.150059][T28242] EXT4-fs (loop1): dirty_blocks=5424 [ 1044.156975][T28231] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1044.156975][T28231] [ 1044.175656][T28242] EXT4-fs (loop1): Block reservation details [ 1044.185746][T28231] EXT4-fs (loop7): Total free blocks count 0 [ 1044.191910][T28242] EXT4-fs (loop1): i_reserved_data_blocks=5424 [ 1044.208378][T28231] EXT4-fs (loop7): Free/Dirty block details [ 1044.223015][T28231] EXT4-fs (loop7): free_blocks=0 [ 1044.233159][T28231] EXT4-fs (loop7): dirty_blocks=1392 [ 1044.248765][T28231] EXT4-fs (loop7): Block reservation details [ 1044.258917][T28231] EXT4-fs (loop7): i_reserved_data_blocks=1392 [ 1044.272349][T18413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.297727][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.363231][T28253] loop8: detected capacity change from 0 to 512 [ 1044.374380][T16951] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1044.404976][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.416361][T28253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1044.441555][T28253] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4567: iget: bad i_size value: 38620345925642 [ 1044.475791][T28253] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1044.475981][T28253] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4567: couldn't read orphan inode 15 (err -117) [ 1044.485221][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1044.485247][ C0] EXT4-fs (loop8): initial error at time 1774398648: ext4_orphan_get:1391: inode 15 [ 1044.485281][ C0] EXT4-fs (loop8): last error at time 1774398648: ext4_orphan_get:1391: inode 15 [ 1044.528230][T28258] loop7: detected capacity change from 0 to 512 [ 1044.558979][T28258] EXT4-fs (loop7): 1 orphan inode deleted [ 1044.576018][T28258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.609531][T28253] loop8: lost filesystem error report for type 5 error -117 [ 1044.610173][T28253] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.712093][T19674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.753025][T28283] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4567: bg 0: block 5: invalid block bitmap [ 1044.787438][T28283] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1764 with error 28 [ 1044.813852][T28279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1044.840952][T28279] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.4570: iget: bad i_size value: 38620345925642 [ 1044.854020][T28279] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1044.854229][T28279] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4570: couldn't read orphan inode 15 (err -117) [ 1044.863380][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1044.863401][ C0] EXT4-fs (loop7): initial error at time 1774398649: ext4_orphan_get:1391: inode 15 [ 1044.863446][ C0] EXT4-fs (loop7): last error at time 1774398649: ext4_orphan_get:1391: inode 15 [ 1044.894377][T28271] Set syz1 is full, maxelem 65536 reached [ 1044.905695][T28283] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1044.905695][T28283] [ 1044.917256][T28279] loop7: lost filesystem error report for type 5 error -117 [ 1044.917860][T28279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.949166][T28283] EXT4-fs (loop8): Total free blocks count 0 [ 1044.958303][T28283] EXT4-fs (loop8): Free/Dirty block details [ 1044.968847][T28283] EXT4-fs (loop8): free_blocks=0 [ 1044.974156][T28283] EXT4-fs (loop8): dirty_blocks=1764 [ 1044.979668][T28283] EXT4-fs (loop8): Block reservation details [ 1044.987867][T28283] EXT4-fs (loop8): i_reserved_data_blocks=1764 [ 1045.049866][T28321] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4570: bg 0: block 5: invalid block bitmap [ 1045.064266][T28321] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 740 with error 28 [ 1045.076968][T28321] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1045.076968][T28321] [ 1045.107214][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.109375][T28271] Set syz1 is full, maxelem 65536 reached [ 1045.117728][T28321] EXT4-fs (loop7): Total free blocks count 0 [ 1045.154982][ T28] audit: type=1400 audit(1774398649.659:1674): avc: denied { listen } for pid=28327 comm="syz.8.4575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1045.169685][T28321] EXT4-fs (loop7): Free/Dirty block details [ 1045.213590][T28321] EXT4-fs (loop7): free_blocks=0 [ 1045.264479][T28321] EXT4-fs (loop7): dirty_blocks=772 [ 1045.287702][T28321] EXT4-fs (loop7): Block reservation details [ 1045.297035][T28321] EXT4-fs (loop7): i_reserved_data_blocks=772 [ 1045.331116][T28372] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4584'. [ 1045.895872][ T4462] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 740 with max blocks 32 with error 28 [ 1045.937334][T28418] set_capacity_and_notify: 1 callbacks suppressed [ 1045.937361][T28418] loop2: detected capacity change from 0 to 128 [ 1046.031530][T28418] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 1046.113827][T28435] netlink: 'syz.2.4596': attribute type 6 has an invalid length. [ 1046.141018][T28435] netlink: 'syz.2.4596': attribute type 7 has an invalid length. [ 1046.149291][T28435] netlink: 'syz.2.4596': attribute type 8 has an invalid length. [ 1046.157622][T28444] loop8: detected capacity change from 0 to 256 [ 1046.164800][T28444] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1046.261831][ T3485] kernel read not supported for file /630/syscall (pid: 3485 comm: kworker/1:5) [ 1046.296418][T28464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.312541][T28464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.323164][T28464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1046.599430][T28485] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4610'. [ 1046.919699][T28508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1046.929589][T28508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1047.051919][ T28] audit: type=1400 audit(1774398651.559:1675): avc: denied { mount } for pid=28515 comm="syz.1.4616" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1047.447452][ T28] audit: type=1400 audit(1774398651.949:1676): avc: denied { unmount } for pid=19239 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1047.525881][T28541] loop8: detected capacity change from 0 to 512 [ 1048.200057][ T3820] bridge_slave_1: left allmulticast mode [ 1048.213328][ T3820] bridge_slave_1: left promiscuous mode [ 1048.227259][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.246046][ T3820] bridge_slave_0: left allmulticast mode [ 1048.269043][ T3820] bridge_slave_0: left promiscuous mode [ 1048.275284][T28597] loop2: detected capacity change from 0 to 512 [ 1048.286995][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.309601][ T28] audit: type=1400 audit(1774398652.809:1677): avc: denied { append } for pid=28595 comm="syz.2.4634" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1048.481861][ T3820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.503341][ T3820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.528759][ T3820] bond0 (unregistering): Released all slaves [ 1048.595379][ T3820] hsr_slave_0: left promiscuous mode [ 1048.611207][ T3820] hsr_slave_1: left promiscuous mode [ 1048.621487][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.642370][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.781234][ T3820] team0 (unregistering): Port device team_slave_1 removed [ 1048.794563][T28637] loop2: detected capacity change from 0 to 8192 [ 1048.813151][ T3820] team0 (unregistering): Port device team_slave_0 removed [ 1048.831403][T28637] vfat: Unknown parameter '`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 1048.991653][T28666] loop7: detected capacity change from 0 to 512 [ 1049.131783][T28561] chnl_net:caif_netlink_parms(): no params data found [ 1049.210280][T28561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.217637][T28561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.225213][T28561] bridge_slave_0: entered allmulticast mode [ 1049.232134][T28561] bridge_slave_0: entered promiscuous mode [ 1049.238825][T28561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.240587][ T3820] IPVS: stop unused estimator thread 0... [ 1049.246187][T28561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.259164][T28561] bridge_slave_1: entered allmulticast mode [ 1049.265927][T28561] bridge_slave_1: entered promiscuous mode [ 1049.295301][T28647] chnl_net:caif_netlink_parms(): no params data found [ 1049.306892][T28561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.317579][T28561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.366892][T28561] team0: Port device team_slave_0 added [ 1049.378617][T28561] team0: Port device team_slave_1 added [ 1049.410816][T28647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.418629][T28647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.426162][T28647] bridge_slave_0: entered allmulticast mode [ 1049.433457][T28647] bridge_slave_0: entered promiscuous mode [ 1049.440434][T28561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.447517][T28561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.474804][T28561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.488737][T28561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.495915][T28561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.521016][ T28] audit: type=1400 audit(1774398654.019:1678): avc: denied { unmount } for pid=20561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1049.522416][T28561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.564016][T28647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.571453][T28647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.578825][T28647] bridge_slave_1: entered allmulticast mode [ 1049.585845][T28647] bridge_slave_1: entered promiscuous mode [ 1049.626942][T28647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.638708][T28995] loop2: detected capacity change from 0 to 128 [ 1049.653983][T28647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.684053][T28561] hsr_slave_0: entered promiscuous mode [ 1049.690431][T28561] hsr_slave_1: entered promiscuous mode [ 1049.696656][T28561] debugfs: 'hsr0' already exists in 'hsr' [ 1049.702425][T28561] Cannot create hsr debugfs directory [ 1049.721306][T28647] team0: Port device team_slave_0 added [ 1049.728217][T28647] team0: Port device team_slave_1 added [ 1049.773464][T28647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.780762][T28647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.809842][T28647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.848840][T28647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.856332][T28647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.882733][T28647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.301071][T28647] hsr_slave_0: entered promiscuous mode [ 1050.335663][T28647] hsr_slave_1: entered promiscuous mode [ 1050.365874][T28647] debugfs: 'hsr0' already exists in 'hsr' [ 1050.385880][T28647] Cannot create hsr debugfs directory [ 1050.460341][T29229] loop8: detected capacity change from 0 to 164 [ 1050.472539][T29229] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1050.490092][T29229] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1050.515007][T29229] rock: directory entry would overflow storage [ 1050.529138][T29229] rock: sig=0x4f50, size=4, remaining=3 [ 1050.553322][T28561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1050.560316][T29229] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1050.585924][T28561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1050.609309][T28561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1050.633192][T28561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1050.822647][T28561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.864421][T28561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.908276][T28647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1050.941078][T28647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1050.987521][T16951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.994602][T16951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.034938][T28647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1051.185242][T16951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.192344][T16951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.224919][T28561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1051.235548][T28561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1051.288037][T28647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1051.353381][T16943] bridge_slave_1: left allmulticast mode [ 1051.359941][T16943] bridge_slave_1: left promiscuous mode [ 1051.366492][T16943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.375560][T16943] bridge_slave_0: left allmulticast mode [ 1051.381826][T16943] bridge_slave_0: left promiscuous mode [ 1051.387512][T16943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.443244][T16943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.452851][T16943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.462125][T16943] bond0 (unregistering): Released all slaves [ 1051.498583][T16943] hsr_slave_0: left promiscuous mode [ 1051.504709][T16943] hsr_slave_1: left promiscuous mode [ 1051.510557][T16943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.518208][T16943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.612569][T16943] team0 (unregistering): Port device team_slave_1 removed [ 1051.624076][T16943] team0 (unregistering): Port device team_slave_0 removed [ 1051.664687][T28561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.731188][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4664'. [ 1051.745387][T29310] chnl_net:caif_netlink_parms(): no params data found [ 1051.838890][T28647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.883593][T28561] veth0_vlan: entered promiscuous mode [ 1051.891491][T28561] veth1_vlan: entered promiscuous mode [ 1051.903001][T29310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.917619][T29310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.953356][T29310] bridge_slave_0: entered allmulticast mode [ 1051.960107][T29310] bridge_slave_0: entered promiscuous mode [ 1051.969675][T28647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.000957][T29310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.008128][T29310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.031138][T29310] bridge_slave_1: entered allmulticast mode [ 1052.037738][T29310] bridge_slave_1: entered promiscuous mode [ 1052.071656][T16943] IPVS: stop unused estimator thread 0... [ 1052.084930][T29310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.107688][T29564] bridge0: left promiscuous mode [ 1052.114550][T29564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.122863][T29564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.132405][T29564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1052.149958][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.157121][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.166708][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.173765][ T3816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.186491][T29310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.206809][T28561] veth0_macvtap: entered promiscuous mode [ 1052.219751][T28561] veth1_macvtap: entered promiscuous mode [ 1052.245973][T29310] team0: Port device team_slave_0 added [ 1052.253628][T29310] team0: Port device team_slave_1 added [ 1052.284254][T28561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.302702][T29626] loop2: detected capacity change from 0 to 164 [ 1052.315422][T29310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.324222][T29310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.350741][T29626] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1052.370960][T29310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.405926][T28561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.423705][T29310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.430655][T29310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.458555][T29310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.553389][ T4439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.565573][ T4439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.615642][ T4439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.624524][ T4439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.668280][T29310] hsr_slave_0: entered promiscuous mode [ 1052.677133][T29310] hsr_slave_1: entered promiscuous mode [ 1052.692270][T29310] debugfs: 'hsr0' already exists in 'hsr' [ 1052.698003][T29310] Cannot create hsr debugfs directory [ 1052.759980][T28647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.848100][T29816] loop0: detected capacity change from 0 to 128 [ 1052.922703][T29816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1052.995714][T29570] chnl_net:caif_netlink_parms(): no params data found [ 1053.074458][T29570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.081792][T29570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.089181][T29570] bridge_slave_0: entered allmulticast mode [ 1053.096178][T29570] bridge_slave_0: entered promiscuous mode [ 1053.108523][T29570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.116601][T29570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.124392][T29570] bridge_slave_1: entered allmulticast mode [ 1053.138123][T29570] bridge_slave_1: entered promiscuous mode [ 1053.150710][T28647] veth0_vlan: entered promiscuous mode [ 1053.182631][T29570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.192996][T28647] veth1_vlan: entered promiscuous mode [ 1053.201561][T29570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.230655][ T4462] ================================================================== [ 1053.238738][ T4462] BUG: KCSAN: data-race in alloc_pid / copy_process [ 1053.245320][ T4462] [ 1053.247624][ T4462] read-write to 0xffffffff86c5ffa8 of 4 bytes by task 4439 on cpu 0: [ 1053.255751][ T4462] alloc_pid+0x651/0x940 [ 1053.259988][ T4462] copy_process+0xf37/0x20b0 [ 1053.264565][ T4462] kernel_clone+0x16b/0x5d0 [ 1053.269052][ T4462] user_mode_thread+0x9c/0xd0 [ 1053.273720][ T4462] call_usermodehelper_exec_work+0x41/0x160 [ 1053.279601][ T4462] process_scheduled_works+0x513/0xa10 [ 1053.285070][ T4462] worker_thread+0x58a/0x780 [ 1053.289675][ T4462] kthread+0x22a/0x280 [ 1053.293731][ T4462] ret_from_fork+0x150/0x360 [ 1053.298317][ T4462] ret_from_fork_asm+0x1a/0x30 [ 1053.303096][ T4462] [ 1053.305420][ T4462] read to 0xffffffff86c5ffa8 of 4 bytes by task 4462 on cpu 1: [ 1053.312967][ T4462] copy_process+0x187f/0x20b0 [ 1053.317633][ T4462] kernel_clone+0x16b/0x5d0 [ 1053.322119][ T4462] user_mode_thread+0x9c/0xd0 [ 1053.326953][ T4462] call_usermodehelper_exec_work+0x41/0x160 [ 1053.332847][ T4462] process_scheduled_works+0x513/0xa10 [ 1053.338313][ T4462] worker_thread+0x58a/0x780 [ 1053.342893][ T4462] kthread+0x22a/0x280 [ 1053.346976][ T4462] ret_from_fork+0x150/0x360 [ 1053.351563][ T4462] ret_from_fork_asm+0x1a/0x30 [ 1053.356310][ T4462] [ 1053.358612][ T4462] value changed: 0x8000016f -> 0x80000170 [ 1053.364303][ T4462] [ 1053.366607][ T4462] Reported by Kernel Concurrency Sanitizer on: [ 1053.372734][ T4462] CPU: 1 UID: 0 PID: 4462 Comm: kworker/u8:37 Tainted: G W syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1053.383917][ T4462] Tainted: [W]=WARN [ 1053.387723][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1053.397759][ T4462] Workqueue: events_unbound call_usermodehelper_exec_work [ 1053.404884][ T4462] ================================================================== [ 1053.416328][T29570] team0: Port device team_slave_0 added [ 1053.423097][T29570] team0: Port device team_slave_1 added [ 1053.476756][T28647] veth0_macvtap: entered promiscuous mode [ 1053.998620][T16951] bridge_slave_1: left allmulticast mode [ 1054.005115][T16951] bridge_slave_1: left promiscuous mode [ 1054.010791][T16951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.025214][T16951] bridge_slave_0: left allmulticast mode [ 1054.031021][T16951] bridge_slave_0: left promiscuous mode [ 1054.038293][T16951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.122738][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.132269][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.141839][T16951] bond0 (unregistering): Released all slaves [ 1054.206087][T16951] hsr_slave_0: left promiscuous mode [ 1054.212191][T16951] hsr_slave_1: left promiscuous mode [ 1054.218439][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.228027][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.269173][T16951] team0 (unregistering): Port device team_slave_1 removed [ 1054.280787][T16951] team0 (unregistering): Port device team_slave_0 removed [ 1054.535825][T16951] IPVS: stop unused estimator thread 0... [ 1055.351512][T16951] bridge_slave_1: left allmulticast mode [ 1055.357171][T16951] bridge_slave_1: left promiscuous mode [ 1055.363300][T16951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.371382][T16951] bridge_slave_0: left allmulticast mode [ 1055.377061][T16951] bridge_slave_0: left promiscuous mode [ 1055.383040][T16951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.391643][T16951] bridge_slave_1: left allmulticast mode [ 1055.397339][T16951] bridge_slave_1: left promiscuous mode [ 1055.403604][T16951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.411685][T16951] bridge_slave_0: left allmulticast mode [ 1055.420973][T16951] bridge_slave_0: left promiscuous mode [ 1055.426650][T16951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.435004][T16951] bridge_slave_1: left allmulticast mode [ 1055.440672][T16951] bridge_slave_1: left promiscuous mode [ 1055.446905][T16951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.454703][T16951] bridge_slave_0: left allmulticast mode [ 1055.460364][T16951] bridge_slave_0: left promiscuous mode [ 1055.466661][T16951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.573384][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.584316][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.594318][T16951] bond0 (unregistering): Released all slaves [ 1055.692896][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.703231][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.712861][T16951] bond0 (unregistering): Released all slaves [ 1055.743225][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.753050][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.762432][T16951] bond0 (unregistering): Released all slaves [ 1055.808670][T16951] hsr_slave_0: left promiscuous mode [ 1055.814819][T16951] hsr_slave_1: left promiscuous mode [ 1055.820440][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.828355][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.839170][T16951] hsr_slave_0: left promiscuous mode [ 1055.845114][T16951] hsr_slave_1: left promiscuous mode [ 1055.851247][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.858880][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.871608][T16951] veth0_macvtap: left promiscuous mode [ 1055.877259][T16951] veth1_vlan: left promiscuous mode [ 1055.883459][T16951] veth0_vlan: left promiscuous mode [ 1055.962710][T16951] team0 (unregistering): Port device team_slave_1 removed [ 1055.972966][T16951] team0 (unregistering): Port device team_slave_0 removed [ 1056.040015][T16951] team0 (unregistering): Port device team_slave_1 removed [ 1056.049603][T16951] team0 (unregistering): Port device team_slave_0 removed [ 1056.078761][T16951] team0 (unregistering): Port device team_slave_1 removed [ 1056.088091][T16951] team0 (unregistering): Port device team_slave_0 removed [ 1056.686105][T16951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.743999][T16951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.784425][T16951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.836101][T16951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.905772][T16951] bridge_slave_1: left allmulticast mode [ 1056.912316][T16951] bridge_slave_1: left promiscuous mode [ 1056.918063][T16951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.928752][T16951] bridge_slave_0: left allmulticast mode [ 1056.934789][T16951] bridge_slave_0: left promiscuous mode [ 1056.940596][T16951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.043340][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.053818][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.063471][T16951] bond0 (unregistering): Released all slaves [ 1057.104688][T16951] hsr_slave_0: left promiscuous mode [ 1057.110331][T16951] hsr_slave_1: left promiscuous mode [ 1057.116024][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.123410][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.131097][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.138509][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.148788][T16951] veth1_macvtap: left promiscuous mode [ 1057.154520][T16951] veth0_macvtap: left promiscuous mode [ 1057.160015][T16951] veth1_vlan: left promiscuous mode [ 1057.165277][T16951] veth0_vlan: left promiscuous mode [ 1057.232250][T16951] team0 (unregistering): Port device team_slave_1 removed [ 1057.242572][T16951] team0 (unregistering): Port device team_slave_0 removed