last executing test programs: 2m11.633332126s ago: executing program 4 (id=216): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000140)=0x7, 0x9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x8, 0x0, 0x1, 0x2c43, 0x9fe, 0x2800000000000, 0x0, 0x8006, 0x0, 0x2902, 0x20, 0x800ffffffff, 0x8, 0x0, 0x8000000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, 0x1ff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000920000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d}, 0x94) 2m11.397263128s ago: executing program 4 (id=219): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x20000600}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003401300000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x1002, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x4ac8}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="010026bd6e00fbdbdf250200000014000680080006000b00140005000200030000004800060200000008000300ac1114bb080006000d00000008000700", @ANYRES32, @ANYRES8=r4, @ANYBLOB="0500020002000000080006"], 0xcc}, 0x1, 0x0, 0x0, 0x20000091}, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @multicast1}, &(0x7f00000004c0)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4000001) 2m11.316346173s ago: executing program 4 (id=221): unshare(0x62000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x9, 0x9, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x20, 0x1, 0x37d040a5, 0x7fe}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000900)={r0, 0x0, 0x400041, &(0x7f0000000400)={@_ha_fsid={[0xc, 0x7]}, {0x0, 0x4cfb, 0x3, 0x7}}, 0x9, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x20}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d00000001000000580a00000600000000100000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000000000000200"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x102000, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)}, {0x0}], 0x2}, 0x10049014) r9 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000280)={r8, r9}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000001d80), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 2m10.991431119s ago: executing program 4 (id=225): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x102008, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x9}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4000000000000, 0x189482) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1a0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0x0, 0xff000000, 0xff000000]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="98b1b368fac9"}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0xd}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x11c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_vlan={0xc4, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4d2}]}, {0x7d, 0x6, "dfcbe56315373395564dd53dac806cb38e1f7fea5713ff518cdde6e8611a50e6682d3078bc3f3c3acd4e05285258f39f0396baca278ff66b4acdc2a9dbac14df80630c12cb17b37ef3b5d4e99fbe2d65ec4cd41ca6b1d7963ab5c0beb1d1ee078a959b754477f944a73c0e7696ba5710f06c234da2ba72d035"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x3c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "9787c29d6ac649e7ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00300000421004002800128008000100070069001c00028008000600030008000400ac1e010108000500ffffffff1400030069705f76746930000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) sendto(r4, &(0x7f0000000bc0)="120000001200e7ef007b00000000000000a13995755c4dfd2fe5a5bb9c2537f428826595d6654f5ba6797a052128e7816034680df740e12c6ca58ff6085bc365eec4ff39602182146ef2b7f1335e744a39f73197a92adf880e1aee55298608df4251793f7757cc9aafad99467ebc13a3009501ec39e5c5690ca5d8595823af63dd63dd4bcedb1ed361342297f89bba1437150c475ae3d39ac46fb1c1f1b9f94a64c9eda79e9f3000bc8b39ccecb7947ecfa78ae505d1b16f39c9534656c94a1c4c094a7b33942be469ce1263de0cfff5d7904e34ede2b53c", 0xd8, 0x20040880, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r6 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x9000) fallocate(r6, 0x0, 0x0, 0x8800000) connect$unix(0xffffffffffffffff, &(0x7f0000004700)=@file={0x1, './file1\x00'}, 0x6e) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xe, 0x3, 0x11, 0x5, 0x0, 0x2, 0x42010, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x83, 0x0, @perf_config_ext={0x3, 0x3}, 0x10001, 0x0, 0x1, 0x5, 0xfffffffffffffff0, 0x8, 0x7, 0x0, 0x7, 0x0, 0x81}, r8, 0xc, r0, 0x8) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r7, &(0x7f0000001400)=""/4076, 0xfffffeea) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/105, 0x69}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000980)=""/49, 0x31}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000800)=""/166, 0xa6}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0x1a000}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m10.457417337s ago: executing program 4 (id=233): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) r1 = socket(0x10, 0x803, 0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) readv(r2, 0x0, 0x0) 2m9.733156784s ago: executing program 4 (id=239): lgetxattr(&(0x7f0000000140)='.\x00', &(0x7f0000000980)=@random={'btrfs.', '\x8b\xfb\x88\x03b\xdfY\xdc\xe7\x86U\xd9<\x00\xf1:\x18\x86\x82d4\xe6\xc5q-2\xa2(\xc2\x85\x9f\xf1\xbd\xb5\x13X\x1aq\x93\x93J\x9e\xff\xd0\x8d`\xf8\xc1G&'}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a2, &(0x7f00000003c0)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQFNGVzc6mabpbN2k3W7O/H8zu+85M5nnfmX3e7AwzbAB963D9JY14KiLOJxHDG5YNRLbwcGO91ZWl4t2VpWIStdqFX5JIIuLOylKxuX6SvR+IiOWI+H9EfJOPOJqub3JPs1BdWJwaL5dLs1l9ZG768kh1YfHYpenxydJkaebEiy+dOn3y1NjxsY3NvVvbWMtvra/Xfrz+7rXvXrl5/dPPDi0X3x9P4kwMZcs29uNxauyTfJzZNP9kN4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6DO9I8oItqgxG1dRuKQB9IJD30qeb3gPr5b3Paye8ft842TkDqcVdXlorvRDP+QOPaROxdOzfZ/2ty35lJ/Xzz4E42lF1p+WpEjA4MPPj5T7LP3/aNPo4G0lVfn20cqAePf7o+/kSL8Weoee30ETXHv9Vs/FttET/XZvw732GMP17/6aO28a8OxtMt4yfr8ZMW8dOIeLPD+Dde+/J0u2W1jyOOROv4TcnDrw+PXLxULo02XlvG+OrIoZfb9z9if5v4jWu2e9casrH/e7I2pR32/4tvP39m+SHxn3/24ce/1f7fFxHvdRj/P3c+ebXdsltXk9v1bwFbPf5J5ONmh/FfOHP4h6zoqiEAAAAAAAAAADxG6dq9bElaWC+naaHQeIb3v7E/LVeqc0cvVuZnJhr3vB2MfNq802q4UU/q9bHsftxm/fim+olcFjC3b61eKFbKEz3uOwAAAAAAAAAAAAAAAAAAADwpDmx6/v+33Nrz/5t/rhrYrdr/5Dew28l/6F/353/Ss3YAO8//f+hbNfkP/Uv+Q/+S/9C/5D/0L/kP/Uv+Q/+S/wAAAAAAAAAAAAAAAAAAAAAAAAAA0BXnz52rT7W7K0vFen1iYGF+qvLWsYlSdaowPV8sFCuzlwuTlcpkuVQoVqb/bntJpXJ5NGbmr4zMlapzI9WFxTemK/Mzzd8ULeW73iMAAAAAAAAAAAAAAAAAAAD45xlam5K0EJFv1NO0UIj4V0QcTCK5eKlcGo2If0fE97n8YL0+1utGAwAAAAAAAAAAAAAAAAAAwC5TXVicGi+XS7PdKwxkoboYovPCwFZWjojlRwn6e61Wu39OfYtb3k4+24E93nW7o5B7Mj6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qXsP/Xb6F392t0EAAAAAAAAAAAAAAAAAAADQl9Kfk4ioT0eGnxvavHRPsppbe4+It29c+ODK+Nzc7Fh9/u31+XMfZvOP96L9QKeaeZpGRD2PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHuqC4tT4+VyaXabhcEO1ul1HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2468AAAD//3+o0IY=") r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000a00)='./file0/file0\x00', 0x288042, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbc7, &(0x7f00000017c0)="$eJzs3M1vE2caAPBnJo7zuSSsVrsLWmkjrdhd7WpNIIiV6AV6rtpK7aFH0sRBUcxHk1RqIg6B3tseqqoHpIo/oVLv5dJTpR7ooaV/AaqKKtRegIOr8UdwcWxCsD0Bfj/0Zt533rGf58mQzDuSJwG8sGayL2nEoYg4m0RMNfanEVGs9UYjturH3b97eSFrSVSrb/ycRBIR9+5eXmi+V9LYTjQGoxFx8+Uk/vh+e9y1jc2V+UqlvNoYH10/f+no2sbm/5bPz58rnytfODH3/xNzJ+fmeljr7Utvf/q3b1/959XrH8y+9smBr5M4HZONudY6emUmZra/J60KETHf62A5GWrU01pnUsgxIQAAukpb1nB/jqkYioeLt6n46rtckwMAAAB6ojoUUQUAAACec4n7fwAAAHjONT8HcO/u5YVmy/cTCYN150xETNfrbz7fXJ8pxFZtOxrDETH+SxKtj7Um9Zc9tZks0hfflLMWfXoOuZutKxHx153Of1L7N117iru9/jQiZnsQf+aR8X6qf6t2jjvXf7oH8fOuH4AX040z9QtZ+/Uv3V7/xA7Xv8IO1669yPv611z/3W9b/z2sf6jD+u/1XcY4/OA/NzvNta7/3vrwh8UsfrZ9qqKewJ0rEYcLO9WfbNefdKj/7C5jTCzcvtZpLqs/q7fZBl1/9XrEkdpqrr3+pqTb3yc6urRcKc/Wv+7w/hsnu8dvPf9Zy+I37wUGITv/47G3839plzGm//LToU5zj68//bGYvFnrFRt73ptfX189FlFMXmnff7x7Ls1jmu+R1f/vf3T/+d+p/ux3wlbj+5D977nS2Gbjq4/EnDhy/PO9199fWf2Lezz/H+0yxmdfXnun01ze9QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwbEgjYjKStLTdT9NSKWIiIv4U42nl4tr6f5cuvnthMZuLmI7hdGm5Up6NiKn6OMnGx2r9h+Pjj4znIuJgRHw8NVYblxYuVhbzLh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBtExExGUlaiog0In6dStNSKe+sAAAAgJ6bzjsBAAAAoO863/8XB5oHAAAA0D9t9/+F341GB5kLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz6WDf79xK4mIrVNjtZYpNuaGc80M6Ld0d4eN9zsPYPCG8k4AyE2hpV+tVqtP8NKXin3IBxgc9/hA8pj50Y4zIz3PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID961+HbtxKImLr1FitZYqNueFcMwP6Lc07ASA3Q90mk8fuAJ5hhbwTAHLjHh+or+wfVOva50c7vnLkqaMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OyYrLUkLUVEWuunaakU8YeImI7hZGm5Up6NiAMR8f3U8Eg2PpZ30gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTc2sbmynylUl7V2QedYkTsgzR0etAZi4HFGmv8MHc4ZqTzVJdOzr+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxdrG5sp8pVJeXcs7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvaxubK/OVSnm1j528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BQAA//8TFgfP") r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/54, 0x36) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket(0x9, 0x80000, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r5, @ANYRES64=r3, @ANYRES8=r6, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8000c61) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff1, 0x6}, {0xd, 0xa}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000002, 0x5, 0x4}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r11, &(0x7f00000001c0), &(0x7f0000000a80)=@buf="4e5c2ecb67d648fe4c2dbf5368cc37f40c86292f88921162b41dbd6ff20a3342f14f4cae522677bbe842b283a721576602598b959fd21288e7c44a9ecd4ef14d3ad79d7aca0518849da6d78ce149c675c563a632a173a91d55ac730ba9652c2bcadfad9a208e35896a8a6f42c5f5ef8cd1132163b816441f7a00efcaed0c42c0d42d8ca5b8acf200a73c9d2a1ea55275d98ef3df0e89d3971e565980f0fa5f02a386acf554bf25a69c634e44a1c62b3d2f83338c4897226096bbc8dbab62855dedac6eeaf4dee86152444ff1e6bec6883f46b68b609db627e63b59367ce7aef5fb54688f", 0x1}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) 2m9.670374538s ago: executing program 32 (id=239): lgetxattr(&(0x7f0000000140)='.\x00', &(0x7f0000000980)=@random={'btrfs.', '\x8b\xfb\x88\x03b\xdfY\xdc\xe7\x86U\xd9<\x00\xf1:\x18\x86\x82d4\xe6\xc5q-2\xa2(\xc2\x85\x9f\xf1\xbd\xb5\x13X\x1aq\x93\x93J\x9e\xff\xd0\x8d`\xf8\xc1G&'}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a2, &(0x7f00000003c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000a00)='./file0/file0\x00', 0x288042, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbc7, &(0x7f00000017c0)="$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") r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/54, 0x36) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket(0x9, 0x80000, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r5, @ANYRES64=r3, @ANYRES8=r6, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8000c61) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff1, 0x6}, {0xd, 0xa}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000002, 0x5, 0x4}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r11, &(0x7f00000001c0), &(0x7f0000000a80)=@buf="4e5c2ecb67d648fe4c2dbf5368cc37f40c86292f88921162b41dbd6ff20a3342f14f4cae522677bbe842b283a721576602598b959fd21288e7c44a9ecd4ef14d3ad79d7aca0518849da6d78ce149c675c563a632a173a91d55ac730ba9652c2bcadfad9a208e35896a8a6f42c5f5ef8cd1132163b816441f7a00efcaed0c42c0d42d8ca5b8acf200a73c9d2a1ea55275d98ef3df0e89d3971e565980f0fa5f02a386acf554bf25a69c634e44a1c62b3d2f83338c4897226096bbc8dbab62855dedac6eeaf4dee86152444ff1e6bec6883f46b68b609db627e63b59367ce7aef5fb54688f", 0x1}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) 11.591830231s ago: executing program 1 (id=1158): perf_event_open(&(0x7f0000000680)={0xee82829fd60330cd, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="f79b76b1a967f903", 0x8}, {&(0x7f00000029c0)="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", 0x658}], 0x2) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}}, 0x0) write$cgroup_type(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85080000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffa, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00&\x00'/28], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) getdents64(r2, &(0x7f0000000200)=""/184, 0xb8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) fcntl$setflags(r6, 0x2, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) 9.505108628s ago: executing program 1 (id=1173): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54010000100001002dbd700000000000ff020000000000000013000000000001ac141411000000000000000000000000fffeecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d532000000ffffffff000000000000000000000000fefffffffffffffffeffffffffffffff090000000000000000000000000000000000000000000000feffffffffffffff00000000000000000900000000000000fdffffffffffffff0408400000000000090000000000000092020000000000000000b01c050000000000000000000000000000000a0002002c00000000000000580002006362632863616d656c6c696129"], 0x154}}, 0x44050) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x154, 0x0, &(0x7f0000001580)="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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfa1d}, 0x50) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2c101) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYBLOB="b1ce"], 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xf3}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4a9]}]}, 0x9c}}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54010000100001002dbd700000000000ff020000000000000013000000000001ac141411000000000000000000000000fffeecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d532000000ffffffff000000000000000000000000fefffffffffffffffeffffffffffffff090000000000000000000000000000000000000000000000feffffffffffffff00000000000000000900000000000000fdffffffffffffff0408400000000000090000000000000092020000000000000000b01c050000000000000000000000000000000a0002002c00000000000000580002006362632863616d656c6c696129"], 0x154}}, 0x44050) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x154, 0x0, &(0x7f0000001580)="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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfa1d}, 0x50) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2c101) (async) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) (async) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYBLOB="b1ce"], 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xf3}}, './file0\x00'}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4a9]}]}, 0x9c}}, 0x0) (async) 9.149859357s ago: executing program 1 (id=1175): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) getrlimit(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000808) 5.536305644s ago: executing program 0 (id=1198): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close(r0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000980)={0x0, 0x1000, "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"}, &(0x7f00000019c0)=0x1008) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001a00)={r2, 0x5}, &(0x7f0000001a40)=0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0000000001000008111c000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xec8}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0xa5, 0x8, 0x24, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80, 0x8, 0xe, 0xa0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000440)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0x1018, &(0x7f0000002500)=""/4105, 0x0, 0x68, '\x00', r7}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000004280)='./file0\x00', 0x0, 0x21) lseek(r8, 0xff, 0x1) getdents64(r8, 0xfffffffffffffffe, 0x29) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.329566875s ago: executing program 0 (id=1199): unshare(0x62000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x9, 0x9, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x20, 0x1, 0x37d040a5, 0x7fe}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000900)={r0, 0x0, 0x400041, &(0x7f0000000400)={@_ha_fsid={[0xc, 0x7]}, {0x0, 0x4cfb, 0x3, 0x7}}, 0x9, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x20}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d00000001000000580a00000600000000100000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000000000000200"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x102000, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)}, {0x0}], 0x2}, 0x10049014) r10 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000280)={r9, r10}) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 5.22158177s ago: executing program 3 (id=1200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x18, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x4, 0x122}]}, 0x18}}, 0x0) 5.145378524s ago: executing program 3 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) recvmmsg(r3, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000004000)}, 0x3}], 0x1, 0x101, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, @perf_bp={0x0, 0x1}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 5.097738826s ago: executing program 0 (id=1202): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x5, 0x22f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x22, 0x35, 0x4d, 0xff, 0x19d2, 0x79, 0x944b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21d, 0x2, 0x1, 0x8, 0x0, 0x0, "", [{{0x9, 0x4, 0xd8, 0x6, 0x9, 0xff, 0xff, 0xff, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x903, 0x4, 0x5, 0x8}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x1000, 0x2, "a1"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x5, 0x2, [0x7, 0x8], 0x6}]}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0xe, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xee, 0x6}, @generic={0x95, 0x22, "2e7d480736185e42ff25af4fc7407fdf58b3cd1a79b32936a9e420c76d9e2d02f14bbcf3f99826cabe83de6f01fcf8d2b3f3e5e53567cd9ee98c74f3928482ab916987cc1e2332737d0c4c9b04b77228139efd5da9dc2bb85e3506aa2b30056524568b49cb60a6dbba2155559217d6ca59199aa9cce324a953ec005c590519681d2e5ec6155d718b8e820710708f1693527510"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3}, @generic={0x1e, 0x1, "524e9bfc2fe26d0c163a9909de6ac0fa580ca571f0bc4d073fb00de2"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x2a, 0xfe}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0xea, 0xa, 0xd}}, {{0x9, 0x5, 0x0, 0x7886bb01d9fa53c8, 0x21577a76cbfe4f35, 0xb3, 0x83, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x3, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xd1a}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x7f, 0x82, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0xfb, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x96, 0x8}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x1, 0x4, 0x4}}]}}, {{0x9, 0x4, 0x42, 0x6, 0x8, 0x77, 0x4, 0x77, 0x2, [], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0xba, 0x66, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x100}, @generic={0x33, 0x30, "1d97263e363d552ac7033d273f5cb8d68b538a97f3a033f69d874f2bf7e40a151bf9b3a5648484b8530202461bf6a3d319"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x4, 0xc, 0x2}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x8, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x8, 0x9, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x3d, 0x3, 0x8}}, {{0x9, 0x5, 0x9, 0x4, 0x1ff, 0x3, 0x6, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xe, 0x3, 0x5, [@generic={0x25, 0x6, "b416ae7b1587b59420afb0c02865859de67f9d563be8e7d5e730f5c7db18a585bb6493"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x6, 0x9, 0x80}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0x0, 0x5, 0x57, 0xff, 0x7}, 0x3a, &(0x7f0000000180)={0x5, 0xf, 0x3a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0xf3, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x3, 0xff65}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x0, 0xff00, 0x6, [0x3f00, 0xcf, 0xffc0c7, 0xff0000, 0xff3f00, 0xc011]}]}, 0x9, [{0x3, &(0x7f0000000680)=@string={0x3, 0x3, "0e"}}, {0x66, &(0x7f00000006c0)=@string={0x66, 0x3, "c78d0f5222ea01a862cfcbeef2387a8bba982cfd743da482eddee8cc30267eaf9d90f531b47a5491e64a4bf4bc2d986df44e88a9b96ac0621bb42ac5bcf5ce2f5f292d8e4396d680fdafdd8eda3bab288f63305288fc3c662b38931f7c1b7c9ffc515087"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0xa6, &(0x7f0000000800)=@string={0xa6, 0x3, "ab73ddb90a7f1c77ae9799ff1067e00c6e2b888d193969d952c41f5a916595f47016ec580e92cea5987fedd4c2fd470c8cc9aefca8af964adadec2ae363fd00bd416fe4a05af59947920b36d3973b6762b4181418cea43b95531f283375974bc58517a147be90a02eb774e9b1e75833996f09036cc53f4dc897bb317e20bf9f9d0d9437957fdb4461216d7a17fa3394d7381ce92d1daedac63b4d332a3eb897c5c2d18fd"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x83e}}, {0xaa, &(0x7f0000000900)=@string={0xaa, 0x3, "974bc9c5b53d29ee7884f626f1583bf58b6ba9436b699632181dbc2a7a6137c7ee2018d71a834da9d56be96f1fe951c8e689475b2ad32ae342eb1c13a24f857b0dfc786015f94dbfae281e1888b947b4d921150624e38ffb11c5a619ab405a311da0312e414c9d7306f3cb0689e0595254e72120ece139c9b67c968b9589a0336e491784bc92d6670f8fec9e5e8649c83e7e3cebe44981fbbb18e3c239b2ae8262450f7bbed2dc84"}}, {0x51, &(0x7f00000009c0)=@string={0x51, 0x3, "9d20f981e221337c7528e7de11ac852fd9ce12b51c5dd676ee804e925237ea20ec46f837cd9ae59a6791a9194b35afaccdf83d3bdf3147df2aed5651424bd45b273014cacee3077dfbc4442cbc66be"}}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x15, 0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000d80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b00)={0x218, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x9d}]}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_IE={0x1bf, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xb, 0x7c, 0x7}}, @sec_chan_ofs={0x3e, 0x1}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xf, 0x6, @broadcast, 0xff, @value=@broadcast, 0x6f53, 0x4, @broadcast, 0x3e38}}, @measure_req={0x26, 0x6a, {0x9, 0x50, 0x5, "ac6aae4cb6de023aa3300616946ec282cb09b6e508bc26e712400bad1e345384017b968e4afedc83f80de3e6ec9d031151de7b4d8f8481cf72f5b80ecfdea7400b4f2593683f7d995daee9f535a295a12e67e30869f06c6ead575dffcf861808000323e01a5282"}}, @fast_bss_trans={0x37, 0xc5, {0x7, 0x4, "82b2c4e821d7b9be6e614010359540bf", "b49214d7fa9f50e21818154192ab6b3c2b12223225ac3124cae9ba44dc02f94c", "4ebdc67202b2e448cbcd5d17874ce1b80b257375300d37b09c5c0a8d8b913579", [{0x2, 0xf, "3523ad4d5a7708b74462e49b850d61"}, {0x4, 0x1c, "efaf6d9ed30657644666b4a0832473063f6fb0c1d6495f04631523b1"}, {0x4, 0x1d, "1489cd5790867f957ed02ec590b7c7dd0b9a50c648bb6fccb5d3b09e92"}, {0x1, 0x23, "46b9f567ba4796946f004821cc9c4e2914cf14017331562fc85f89613fcc9abc4f1d8f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @tim={0x5, 0x4d, {0xb, 0x71, 0x1, "c36ccd1495be6ee1c27bb5b3f9a4130e2e0a00b9369b3766a90a8de17225b0565803b6050ebd45f15e1d7f7bf9bc117ba5672f6e127fccc82c544fef0d1364eec7b81b4f787cf8c1faa4"}}, @challenge={0x10, 0x1, 0xf8}, @dsss={0x3, 0x1, 0xae}]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100000, {0x7ff, 0x9, 0x2, 0x4}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xd, {0xed9, 0x4, 0x3ff, 0xfff9}}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x218}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 4.079648519s ago: executing program 3 (id=1204): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xbf4, 0x6, 0x5}, {0x8ba, 0x0, 0x8, 0x5}, {0x240, 0xff, 0x64, 0x6}]}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff7]}, 0x8, 0x80000) close(0x3) inotify_init1(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) 3.986420824s ago: executing program 0 (id=1205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r1 = socket(0x22, 0x802, 0x0) dup(r1) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xc}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000040), 0x6) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004704002c00650000042190780a010132ac14140c83028606000000024e214e2204519078089cc7e80394125f"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffff25d8, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) 3.66633189s ago: executing program 1 (id=1208): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000080)={0x20, r6, 0x219, 0x70bd2b, 0x25dfdbfa, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getchain={0x24, 0x66, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5809f5d7d942e353, 0xfff1}, {0xc, 0x1}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x80) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000040)=0x7) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) 3.406353924s ago: executing program 5 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x18, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x4, 0x122}]}, 0x18}}, 0x0) 3.293004469s ago: executing program 5 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004850) 3.073535881s ago: executing program 3 (id=1214): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x20000600}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003401300000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x1002, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x4ac8}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010026bd6e00fbdbdf250200000014000680080006000b00140005000200030000004800060200000008000300ac1114bb080006000d00000008000700", @ANYRES32, @ANYRES8=r4, @ANYBLOB="0500020002000000080006"], 0xcc}, 0x1, 0x0, 0x0, 0x20000091}, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @multicast1}, &(0x7f00000004c0)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x4000001) 2.883845281s ago: executing program 5 (id=1216): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x4000, &(0x7f0000000180)={[{@data_journal}], [{@seclabel}]}, 0x1, 0x51b, &(0x7f0000000c40)="$eJzs3V1rXGkdAPD/mWSyaZs1WRWpC+4u7kq7aGeSjbsbRfoColcFtd7XmExCyCQTMpPahKIp3nkjiKjgB/BG8AMI0o8gQkHvRUUp2uql9siZOYN5mUmGZpKpk98PnpznOW//5znknDkvD+cEcG69FRE3I2IkIt6NiMl8fCFPsdtK2XzPnj5YyFISaXrn70kk+bj2urLyaERcyhcbj4hvfDXi28nhuPXtndX5arWymZfLjbWNcn1759rK2vxyZbmyPjs788Hch3Pvz02nuRO1cyoirn/5Lz/54S++cv03n/vOH+/+7ep3s2p96ROtekfEwokCdNFad7G5LdqybbR5GsEGJGtPcWTQtQAAoBfZOf5HI+LTzfP/yRhpns0BAAAAwyS9MRH/TiJSAAAAYGgVImIikkIp7wswEYVCqdTqw/vxuFio1uqNzy7VttYXs2kRU1EsLK1UK9N5X+GpKCZZeSbvY9suv3egPBsRr0XEjycvNMulhVp1cdA3PwAAAOCcuPTm/uv/f00WmnkAAABgyEx1LQAAAADDwiU/AAAADL+erv8fn349AAAAgFPxtdu3s5S2v+O9eG97a7V279pipb5aWttaKC3UNjdKy7XacvOdfWvHra9a+8HG52N96365Uak3yvXtnbtrta31xt2VfZ/ABgAAAM7Qa28++kMSEbtfvNBMkb8HEGCfPw+6AkA/jQy6AsDAjA66AsDAFI+dwxEChl1yzPTDnXda9wrjt6dTHwAAoP+ufPLw8/+xfNrx9waA/2f6+gDA+ePpHpxfxRftAXi53zUBBuUjrcEr3aZ3fXlHD8//W/cY0vSFKgYAAPTNRDMlhVJ+nj4RhUKpFPFq87MAxWRppVqZzq8Pfj9ZfCUrzzSXTI7tMwwAAAAAAAAAAAAAAAAAAAAAAAAAtKRpEikAAAAw1CIKf02ab/OPuDL5zsT+uwMHvvr18zs/vT/faGzORIwl/5jMRo1FRONn+fj3Up8EAAAAgJdA6zo9H84MujYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADJtnTx8stNNZxn1yKx52jj8a483heBQj4uI/kxjds1wSESN9iL+bRb/cKX4Sz9M0ncpr0Sn+hVOOPxUR3eIXIuJSH+LDefboVkTc7LT/FeKt5rDz/jeap5N6cqu5k3eM3z7+jXQ5/rx6oNzN649/Ve4a/2HE66Odjz/t+Ekr/r4QWeHtHtv4rW/u7HScsGeVneLvjVVurG2U69s711bW5pcry5X12dmZD+Y+nHt/brq8tFKt5H87hvnRp379/Kj2X+wSf2p/+w9t/3d6an0a/3l8/+nHWoVip/hX3+78+3u5S/xC/tv3mTyfTb/Szu+28nu98cvfvXFU+xe7tH/8mPZf7an98YV3v/79P3WccmhrAABnob69szpfrVY2j8iM9zDPGWduvBzV6GMmXo5qnHUmO8fMMun3Wv+PJ1vhCRc/lElPsvho9KEaY4f205F40RUmEbvZunr8hwQAAIbM/076j3qCBAAAAAAAAAAAAAAAAAAAAJymE762raeZD8bcHUxTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACO9N8AAAD///r+0SQ=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file1/file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x44800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x4c, r6, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x8000) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4840) syz_emit_ethernet(0x26, &(0x7f0000000040)={@remote, @random="041460736144", @val={@val={0x88a8, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@can={0xc, {{0x4, 0x1}, 0x0, 0x4, 0x0, 0x0, "1eeba36e67d78391"}}}}, &(0x7f0000000080)={0x0, 0x3, [0x67b, 0xfca, 0x4e, 0x46a]}) 2.740327919s ago: executing program 1 (id=1217): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x20000600}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003401300000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x1002, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x4ac8}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010026bd6e00fbdbdf250200000014000680080006000b00140005000200030000004800060200000008000300ac1114bb080006000d00000008000700", @ANYRES32, @ANYRES8=r4, @ANYBLOB="0500020002000000080006"], 0xcc}, 0x1, 0x0, 0x0, 0x20000091}, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @multicast1}, &(0x7f00000004c0)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x4000001) 2.348326249s ago: executing program 3 (id=1218): perf_event_open(&(0x7f0000000680)={0xee82829fd60330cd, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="f79b76b1a967f903", 0x8}, {&(0x7f00000029c0)="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", 0x658}], 0x2) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}}, 0x0) write$cgroup_type(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="850800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffa, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00&\x00'/28], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) getdents64(r2, &(0x7f0000000200)=""/184, 0xb8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) fcntl$setflags(r6, 0x2, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) 2.31864114s ago: executing program 1 (id=1219): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) getrlimit(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000808) 2.170071738s ago: executing program 5 (id=1220): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000580)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000062c0)="f33199e97a7aeef35558eee84e4831917699c77cf87d7c520e8395020c848ade06b3a40793b3df05434d5c9e94f305ef9474172d3a95537a6d6cad110c94976199031d3c3204a1c89b12bafa7dc06d86606aa40f74b1e85e56355829284ba17b73828ede2c522b9765c1d83f59f66b7cf0eeb849e3c89a6d7fec35d1d5fe4f5ae16803bb29505730cb9f80b93cb7e6c8b59906d1c68c374a30dcc653f7628b452853deafa605526752355a04996bd39c437ac2c7b6da72fcde0a0e1656bed39c01b4ab98b39d2cdc4bc3d5c82d387828861e4e8d93c9083a8da84bd2", 0xfffffffffffffdd3, 0x1000c095, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00f6bf00", @ANYRES16=r2, @ANYBLOB="00012dbd70000000000101000000"], 0x14}, 0x1, 0xff07, 0x0, 0x4000080}, 0x2000010) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xb17a92d00ce19ce3) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "3b0db5", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @loopback, @private2}}}}}}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) close_range(r3, r3, 0x0) 1.289446313s ago: executing program 5 (id=1222): statx(0xffffffffffffffff, 0x0, 0x100, 0x8, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x4f, 0x1}}], 0x18}, 0x4000080) sched_setscheduler(0x0, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x20008051) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0xffffeffc, 0x8}]}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6808c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb, 0xfffffffffffffffd}, 0xc0c8, 0x0, 0x0, 0x5, 0x9, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000200)={0x2449920400000000, 0x110000002000005, 0x1}) 1.224568737s ago: executing program 2 (id=1223): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1) (fail_nth: 3) 1.219959117s ago: executing program 0 (id=1224): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.137433291s ago: executing program 2 (id=1225): unshare(0x62000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x9, 0x9, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x20, 0x1, 0x37d040a5, 0x7fe}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000900)={r0, 0x0, 0x400041, &(0x7f0000000400)={@_ha_fsid={[0xc, 0x7]}, {0x0, 0x4cfb, 0x3, 0x7}}, 0x9, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x20}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d00000001000000580a00000600000000100000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000000000000200"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x102000, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)}, {0x0}], 0x2}, 0x10049014) r10 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000280)={r9, r10}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.034640517s ago: executing program 2 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004850) 940.110121ms ago: executing program 2 (id=1227): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 865.134065ms ago: executing program 0 (id=1228): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/102379, 0x18feb, 0x94d) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r5}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000007, 0xc4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffff, r5}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x8, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875300bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306002050000000000020000ecff27b0f604ffff00"}}) 765.430441ms ago: executing program 2 (id=1229): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x20000600}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003401300000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x1002, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x4ac8}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010026bd6e00fbdbdf250200000014000680080006000b00140005000200030000004800060200000008000300ac1114bb080006000d00000008000700", @ANYRES32, @ANYRES8=r4, @ANYBLOB="0500020002000000080006"], 0xcc}, 0x1, 0x0, 0x0, 0x20000091}, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @multicast1}, &(0x7f00000004c0)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4000001) 590.564069ms ago: executing program 2 (id=1230): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x4000, &(0x7f0000000180)={[{@data_journal}], [{@seclabel}]}, 0x1, 0x51b, &(0x7f0000000c40)="$eJzs3V1rXGkdAPD/mWSyaZs1WRWpC+4u7kq7aGeSjbsbRfoColcFtd7XmExCyCQTMpPahKIp3nkjiKjgB/BG8AMI0o8gQkHvRUUp2uql9siZOYN5mUmGZpKpk98PnpznOW//5znknDkvD+cEcG69FRE3I2IkIt6NiMl8fCFPsdtK2XzPnj5YyFISaXrn70kk+bj2urLyaERcyhcbj4hvfDXi28nhuPXtndX5arWymZfLjbWNcn1759rK2vxyZbmyPjs788Hch3Pvz02nuRO1cyoirn/5Lz/54S++cv03n/vOH+/+7ep3s2p96ROtekfEwokCdNFad7G5LdqybbR5GsEGJGtPcWTQtQAAoBfZOf5HI+LTzfP/yRhpns0BAAAAwyS9MRH/TiJSAAAAYGgVImIikkIp7wswEYVCqdTqw/vxuFio1uqNzy7VttYXs2kRU1EsLK1UK9N5X+GpKCZZeSbvY9suv3egPBsRr0XEjycvNMulhVp1cdA3PwAAAOCcuPTm/uv/f00WmnkAAABgyEx1LQAAAADDwiU/AAAADL+erv8fn349AAAAgFPxtdu3s5S2v+O9eG97a7V279pipb5aWttaKC3UNjdKy7XacvOdfWvHra9a+8HG52N96365Uak3yvXtnbtrta31xt2VfZ/ABgAAAM7Qa28++kMSEbtfvNBMkb8HEGCfPw+6AkA/jQy6AsDAjA66AsDAFI+dwxEChl1yzPTDnXda9wrjt6dTHwAAoP+ufPLw8/+xfNrx9waA/2f6+gDA+ePpHpxfxRftAXi53zUBBuUjrcEr3aZ3fXlHD8//W/cY0vSFKgYAAPTNRDMlhVJ+nj4RhUKpFPFq87MAxWRppVqZzq8Pfj9ZfCUrzzSXTI7tMwwAAAAAAAAAAAAAAAAAAAAAAAAAtKRpEikAAAAw1CIKf02ab/OPuDL5zsT+uwMHvvr18zs/vT/faGzORIwl/5jMRo1FRONn+fj3Up8EAAAAgJdA6zo9H84MujYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADJtnTx8stNNZxn1yKx52jj8a483heBQj4uI/kxjds1wSESN9iL+bRb/cKX4Sz9M0ncpr0Sn+hVOOPxUR3eIXIuJSH+LDefboVkTc7LT/FeKt5rDz/jeap5N6cqu5k3eM3z7+jXQ5/rx6oNzN649/Ve4a/2HE66Odjz/t+Ekr/r4QWeHtHtv4rW/u7HScsGeVneLvjVVurG2U69s711bW5pcry5X12dmZD+Y+nHt/brq8tFKt5H87hvnRp379/Kj2X+wSf2p/+w9t/3d6an0a/3l8/+nHWoVip/hX3+78+3u5S/xC/tv3mTyfTb/Szu+28nu98cvfvXFU+xe7tH/8mPZf7an98YV3v/79P3WccmhrAABnob69szpfrVY2j8iM9zDPGWduvBzV6GMmXo5qnHUmO8fMMun3Wv+PJ1vhCRc/lElPsvho9KEaY4f205F40RUmEbvZunr8hwQAAIbM/076j3qCBAAAAAAAAAAAAAAAAAAAAJymE762raeZD8bcHUxTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACO9N8AAAD///r+0SQ=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file1/file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x44800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x4c, r6, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x8000) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4840) syz_emit_ethernet(0x26, &(0x7f0000000040)={@remote, @random="041460736144", @val={@val={0x88a8, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@can={0xc, {{0x4, 0x1}, 0x0, 0x4, 0x0, 0x0, "1eeba36e67d78391"}}}}, &(0x7f0000000080)={0x0, 0x3, [0x67b, 0xfca, 0x4e, 0x46a]}) 165.539392ms ago: executing program 5 (id=1231): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) close(r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20044100) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 0s ago: executing program 3 (id=1232): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) fallocate(r1, 0x0, 0x0, 0x8800000) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="a26445710dc906582a4fd9a136fdbd715351632f4a2d00a420f887c123750ab204964edaf9be9766134c3f0a34de256ac1790ca13a3844b6bc2e15a0f441aaaf8163", 0x42) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x100, 0x4, 0x21c30312, 0x6, 0x8, 0x3, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x7, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x3, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x5, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=@getpolicy={0x654, 0x15, 0x100, 0x70bd2b, 0x25dfdbfb, {{@in6=@local, @in6=@mcast2, 0x4e22, 0x1, 0x4e21, 0x8, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xee01}, 0x6e6bb8, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xa}, @algo_comp={0x7c, 0x3, {{'lzjh\x00'}, 0x1a0, "0f7c95da13933d970d007acbce874bc080d7cf86593b8339deca23f353bd03879ca427d2a740deae9dc04bf5bfe09f97fb81c7b3"}}, @replay_thresh={0x8, 0xb, 0x75fe}, @extra_flags={0x8, 0x18, 0xffffff80}, @algo_crypt={0x139, 0x2, {{'xts-serpent-avx2\x00'}, 0x788, "e40ad1f5a0d134091f78bb19a482548abe1fd5028c44b80bc6dca3492e401b163996f827921debe3f1bf8cb4f4ad1ea730ed994112efba7c31109e9d942129bf654cf299bdc4913f509e19e5539b02ab17adde5795e60dd1d6923bcb7c3fc5d1fc2d7e967c9ae439837a353a749f6ef932541302e23aff0a88a1f0fc85b0754dc77a1a1c4b7d7790a7563f2f6e8387dce3eac4470cca982ff994c44d7ff46c5580dedaa60eba22a27e491e72e71aeadaee14e5ace3b32236b8aa6cafe49d3b95240ea8aba2fd560a099ae3a90464e0e4ae27e931cc850946e21e05bf3473245f9f575c9ce17825183fcd11f5ab655a7fa0"}}, @algo_crypt={0x433, 0x2, {{'xts-aes-neonbs\x00'}, 0x1f58, "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"}}]}, 0x654}}, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) kernel console output (not intermixed with test programs): 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.945912][ T5545] RSP: 002b:00007fe577f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 118.945984][ T5545] RAX: ffffffffffffffda RBX: 00007fe579795fa0 RCX: 00007fe57951c819 [ 118.945998][ T5545] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 118.946011][ T5545] RBP: 00007fe577f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.946073][ T5545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.946086][ T5545] R13: 00007fe579796038 R14: 00007fe579795fa0 R15: 00007ffdeafb6308 [ 118.946105][ T5545] [ 119.151869][ T5530] FAT-fs (loop1): Directory bread(block 64) failed [ 119.182037][ T5530] FAT-fs (loop1): Directory bread(block 65) failed [ 119.226905][ T5530] FAT-fs (loop1): Directory bread(block 66) failed [ 119.266360][ T5530] FAT-fs (loop1): Directory bread(block 67) failed [ 119.303607][ T5530] FAT-fs (loop1): Directory bread(block 68) failed [ 119.351647][ T5530] FAT-fs (loop1): Directory bread(block 69) failed [ 119.397020][ T5530] FAT-fs (loop1): Directory bread(block 70) failed [ 119.440212][ T5552] loop3: detected capacity change from 0 to 128 [ 119.485194][ T5552] loop3: detected capacity change from 0 to 512 [ 119.497330][ T5530] FAT-fs (loop1): Directory bread(block 71) failed [ 119.510031][ T5552] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.510332][ T5552] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 119.621867][ T5552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e028, mo2=0002] [ 119.622745][ T5530] FAT-fs (loop1): Directory bread(block 72) failed [ 119.641336][ T5552] System zones: 1-12 [ 119.641452][ T5552] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.641611][ T5552] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.541: bg 0: block 361: padding at end of block bitmap is not set [ 119.641673][ T5552] loop3: lost filesystem error report for type 5 error -117 [ 119.643266][ T5552] EXT4-fs (loop3): Remounting filesystem read-only [ 119.643649][ T5552] EXT4-fs (loop3): 1 truncate cleaned up [ 119.644324][ T5552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 119.648905][ T5552] netlink: 56 bytes leftover after parsing attributes in process `syz.3.541'. [ 119.648930][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 119.648948][ T5552] netlink: 43 bytes leftover after parsing attributes in process `syz.3.541'. [ 119.648965][ T5552] netlink: 'syz.3.541': attribute type 3 has an invalid length. [ 119.649023][ T5552] netlink: 43 bytes leftover after parsing attributes in process `syz.3.541'. [ 119.686481][ T28] audit: type=1400 audit(1776854977.691:785): avc: denied { read } for pid=5554 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.689563][ T5555] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 119.689563][ T5555] program syz.0.553 not setting count and/or reply_len properly [ 119.832024][ T5560] loop0: detected capacity change from 0 to 1024 [ 119.934661][ T5560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 119.934784][ T5560] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.938457][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 3) [ 119.938808][ T5560] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 119.938837][ T5560] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.938837][ T5560] [ 119.939553][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.939848][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.940009][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.940236][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.940560][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.940706][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.940859][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.941049][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.941315][ T5560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.545: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.138857][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 121.138952][ T5530] FAT-fs (loop1): Directory bread(block 73) failed [ 121.192246][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 121.234647][ T30] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.234647][ T30] [ 121.256524][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 121.286304][ T30] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.286304][ T30] [ 121.314256][ T3320] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 121.342132][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.446544][ T28] audit: type=1400 audit(1776854979.529:786): avc: denied { setopt } for pid=5577 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.535887][ T5573] syz_tun: entered allmulticast mode [ 121.551482][ T28] audit: type=1400 audit(1776854979.634:787): avc: denied { write } for pid=5577 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.606880][ T28] audit: type=1400 audit(1776854979.697:788): avc: denied { accept } for pid=5577 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.651012][ T5570] syz_tun: left allmulticast mode [ 121.752177][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 121.818152][ T5579] loop0: detected capacity change from 0 to 1024 [ 122.037980][ T5602] x_tables: duplicate underflow at hook 2 [ 122.081952][ T5579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.217797][ T5579] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.546: bad entry in directory: directory entry overrun - offset=16, inode=327694, rec_len=1024, size=56 fake=0 [ 122.366417][ T5609] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 122.500120][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.551022][ T5604] loop1: detected capacity change from 0 to 512 [ 122.593606][ T5604] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 122.662423][ T5604] EXT4-fs (loop1): 1 truncate cleaned up [ 122.697426][ T5604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.723896][ T28] audit: type=1400 audit(1776854980.872:789): avc: denied { setattr } for pid=5603 comm="syz.1.556" path="/107/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.764282][ T28] audit: type=1400 audit(1776854980.893:790): avc: denied { rename } for pid=5603 comm="syz.1.556" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.787531][ T28] audit: type=1400 audit(1776854980.914:791): avc: denied { rename } for pid=5603 comm="syz.1.556" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.813593][ T5614] sctp: [Deprecated]: syz.0.558 (pid 5614) Use of int in max_burst socket option. [ 122.813593][ T5614] Use struct sctp_assoc_value instead [ 122.953713][ T5620] loop3: detected capacity change from 0 to 164 [ 123.060790][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.068535][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 123.120918][ T28] audit: type=1400 audit(1776854981.292:792): avc: denied { sqpoll } for pid=5626 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.190759][ T28] audit: type=1400 audit(1776854981.355:793): avc: denied { remount } for pid=5632 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 123.290351][ T5645] netlink: 6 bytes leftover after parsing attributes in process `syz.3.566'. [ 123.345261][ T5644] syz_tun: entered allmulticast mode [ 123.399712][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 123.408947][ T5654] loop1: detected capacity change from 0 to 512 [ 123.415939][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.416152][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.416796][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 123.434305][ T5632] syz_tun: left allmulticast mode [ 123.452838][ T5654] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 123.471313][ T5654] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 123.481747][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.493659][ T5654] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.568: bad orphan inode 4 [ 123.504456][ T5654] loop1: lost filesystem error report for type 5 error -117 [ 123.504702][ T5654] EXT4-fs (loop1): 1 orphan inode deleted [ 123.512233][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 123.512260][ C0] EXT4-fs (loop1): initial error at time 1776854981: ext4_orphan_get:1423 [ 123.512286][ C0] EXT4-fs (loop1): last error at time 1776854981: ext4_orphan_get:1423 [ 123.547574][ T5652] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.554757][ T28] audit: type=1400 audit(1776854981.733:794): avc: denied { create } for pid=5650 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.579984][ T5654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.604163][ T28] audit: type=1400 audit(1776854981.733:795): avc: denied { write } for pid=5650 comm="syz.0.570" path="socket:[12834]" dev="sockfs" ino=12834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.733358][ T5662] loop3: detected capacity change from 0 to 164 [ 124.851385][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.862221][ T5678] geneve2: entered promiscuous mode [ 124.870449][ T5678] geneve2: entered allmulticast mode [ 124.902844][ T5683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.579'. [ 125.213874][ T5694] netlink: zone id is out of range [ 125.564107][ T5704] loop1: detected capacity change from 0 to 1024 [ 125.572826][ T5699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 125.654048][ T5704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.671025][ T5704] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.685728][ T5704] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 3) [ 125.703156][ T5704] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 125.716003][ T5704] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.716003][ T5704] [ 125.727233][ T5704] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 1) [ 125.774945][ T5704] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 1) [ 125.849651][ T5703] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 1) [ 125.908355][ T5704] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 1) [ 125.965368][ T5703] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.006759][ T5704] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.039104][ T5703] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.056127][ T5715] netlink: 'syz.3.588': attribute type 3 has an invalid length. [ 126.074273][ T5715] netlink: 'syz.3.588': attribute type 7 has an invalid length. [ 126.088126][ T5704] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.104470][ T5715] netlink: 198320 bytes leftover after parsing attributes in process `syz.3.588'. [ 126.118667][ T5703] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.586: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.180925][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.582'. [ 126.309420][ T5720] loop0: detected capacity change from 0 to 512 [ 126.329211][ T5720] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 126.368370][ T5720] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 126.386620][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.396752][ T5720] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.590: bad orphan inode 4 [ 126.416052][ T5720] loop0: lost filesystem error report for type 5 error -117 [ 126.416412][ T5720] EXT4-fs (loop0): 1 orphan inode deleted [ 126.423800][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 126.423824][ C0] EXT4-fs (loop0): initial error at time 1776854984: ext4_orphan_get:1423 [ 126.423857][ C0] EXT4-fs (loop0): last error at time 1776854984: ext4_orphan_get:1423 [ 126.471563][ T5689] bridge_slave_1 (unregistering): left allmulticast mode [ 126.480629][ T5720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.494881][ T5689] bridge_slave_1 (unregistering): left promiscuous mode [ 126.504082][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.526061][ T28] audit: type=1326 audit(1776854984.862:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.3.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0834d3c819 code=0x0 [ 127.564216][ T5710] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 128.183174][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 128.245915][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.245915][ T36] [ 128.314412][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 128.328725][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.328725][ T36] [ 128.339496][ T3328] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 128.351997][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.352927][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.379982][ T28] audit: type=1400 audit(1776854986.804:797): avc: denied { listen } for pid=5736 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.449619][ T5745] loop1: detected capacity change from 0 to 512 [ 128.462592][ T5744] netlink: 'syz.5.597': attribute type 1 has an invalid length. [ 128.482876][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'. [ 128.525247][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 128.539886][ T5745] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 128.546845][ T5745] EXT4-fs (loop1): mount failed [ 128.721199][ T5739] loop3: detected capacity change from 0 to 512 [ 128.822245][ T5739] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #17: comm syz.3.595: corrupted in-inode xattr: overlapping e_value [ 128.848148][ T5739] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 128.848452][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 128.864886][ C1] EXT4-fs (loop3): initial error at time 1776854987: ext4_iget_extra_inode:5128: inode 17 [ 128.875902][ C1] EXT4-fs (loop3): last error at time 1776854987: ext4_iget_extra_inode:5128: inode 17 [ 128.908851][ T5739] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.595: couldn't read orphan inode 17 (err -117) [ 128.973951][ T5739] loop3: lost filesystem error report for type 5 error -117 [ 128.978482][ T5739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.148563][ T28] audit: type=1400 audit(1776854987.623:798): avc: denied { getopt } for pid=5767 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.233097][ T28] audit: type=1400 audit(1776854987.686:799): avc: denied { ioctl } for pid=5736 comm="syz.3.595" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 129.338439][ T5766] netlink: 'syz.0.601': attribute type 3 has an invalid length. [ 129.381883][ T5766] netlink: 'syz.0.601': attribute type 7 has an invalid length. [ 129.414933][ T5766] netlink: 198320 bytes leftover after parsing attributes in process `syz.0.601'. [ 129.501529][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.550720][ T5781] loop1: detected capacity change from 0 to 512 [ 129.579740][ T5781] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 129.607212][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 129.616730][ T5781] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 129.644065][ T5781] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.605: bad orphan inode 4 [ 129.688470][ T5781] loop1: lost filesystem error report for type 5 error -117 [ 129.688652][ T5781] EXT4-fs (loop1): 1 orphan inode deleted [ 129.696423][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 129.696446][ C1] EXT4-fs (loop1): initial error at time 1776854988: ext4_orphan_get:1423 [ 129.696488][ C1] EXT4-fs (loop1): last error at time 1776854988: ext4_orphan_get:1423 [ 129.789200][ T5781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.794774][ T5790] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 130.128458][ T5804] loop3: detected capacity change from 0 to 512 [ 130.167901][ T5804] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 130.175217][ T5804] EXT4-fs (loop3): mount failed [ 130.631441][ T5813] FAULT_INJECTION: forcing a failure. [ 130.631441][ T5813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.668186][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: syz.0.617 Tainted: G W syzkaller #0 PREEMPT(full) [ 130.668225][ T5813] Tainted: [W]=WARN [ 130.668233][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 130.668246][ T5813] Call Trace: [ 130.668314][ T5813] [ 130.668323][ T5813] __dump_stack+0x1d/0x30 [ 130.668382][ T5813] dump_stack_lvl+0x95/0xd0 [ 130.668410][ T5813] dump_stack+0x15/0x1b [ 130.668436][ T5813] should_fail_ex+0x263/0x280 [ 130.668496][ T5813] should_fail+0xb/0x20 [ 130.668582][ T5813] should_fail_usercopy+0x1a/0x20 [ 130.668614][ T5813] _copy_from_user+0x1c/0xb0 [ 130.668638][ T5813] ___sys_sendmsg+0xc1/0x1e0 [ 130.668763][ T5813] __x64_sys_sendmsg+0xd4/0x160 [ 130.668832][ T5813] x64_sys_call+0x194c/0x3020 [ 130.668861][ T5813] do_syscall_64+0x12c/0x3b0 [ 130.668892][ T5813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.668999][ T5813] RIP: 0033:0x7fe57951c819 [ 130.669017][ T5813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.669034][ T5813] RSP: 002b:00007fe577f6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.669057][ T5813] RAX: ffffffffffffffda RBX: 00007fe579795fa0 RCX: 00007fe57951c819 [ 130.669073][ T5813] RDX: 00000000040408c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 130.669195][ T5813] RBP: 00007fe577f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.669236][ T5813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.669247][ T5813] R13: 00007fe579796038 R14: 00007fe579795fa0 R15: 00007ffdeafb6308 [ 130.669269][ T5813] [ 130.927658][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.975227][ T5818] sctp: [Deprecated]: syz.2.619 (pid 5818) Use of int in max_burst socket option deprecated. [ 130.975227][ T5818] Use struct sctp_assoc_value instead [ 132.735809][ T5831] loop3: detected capacity change from 0 to 128 [ 133.108106][ T5851] loop0: detected capacity change from 0 to 164 [ 133.320692][ T5856] loop3: detected capacity change from 0 to 512 [ 133.420950][ T5856] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.629: corrupted in-inode xattr: invalid ea_ino [ 133.435761][ T5856] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.436140][ T5856] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.629: couldn't read orphan inode 15 (err -117) [ 133.446453][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 133.446486][ C0] EXT4-fs (loop3): initial error at time 1776854992: ext4_iget_extra_inode:5128: inode 15 [ 133.446512][ C0] EXT4-fs (loop3): last error at time 1776854992: ext4_iget_extra_inode:5128: inode 15 [ 133.493291][ T5856] loop3: lost filesystem error report for type 5 error -117 [ 133.494267][ T5856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.526559][ T5856] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.629: deleted inode referenced: 15 [ 133.562569][ T5856] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 133.580533][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 133.595087][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 133.608381][ T5856] vlan2: entered promiscuous mode [ 133.614590][ T5856] bridge0: entered promiscuous mode [ 133.652041][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.703717][ T5869] loop3: detected capacity change from 0 to 512 [ 133.732791][ T5869] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 133.765048][ T5869] EXT4-fs (loop3): mount failed [ 134.339128][ T28] audit: type=1400 audit(1776854993.073:800): avc: denied { mount } for pid=5881 comm="syz.2.636" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 134.505643][ T5891] loop1: detected capacity change from 0 to 128 [ 134.623611][ T28] audit: type=1400 audit(1776854993.356:801): avc: denied { bind } for pid=5896 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.922453][ T5909] netlink: 'syz.3.642': attribute type 10 has an invalid length. [ 135.160356][ T5909] team0: Failed to send options change via netlink (err -105) [ 135.180935][ T5909] team0: Port device dummy0 added [ 136.293657][ T5909] syz.3.642 (5909) used greatest stack depth: 8576 bytes left [ 136.478397][ T5929] loop1: detected capacity change from 0 to 512 [ 136.542867][ T5929] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 136.579421][ T5929] EXT4-fs (loop1): mount failed [ 136.799495][ T5936] loop0: detected capacity change from 0 to 1024 [ 136.923171][ T5944] netlink: zone id is out of range [ 136.982495][ T28] audit: type=1400 audit(1776854995.823:802): avc: denied { bind } for pid=5934 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.204112][ T28] audit: type=1400 audit(1776854995.834:803): avc: denied { write } for pid=5942 comm="syz.5.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.700707][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.737865][ T5936] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.780444][ T5936] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 3) [ 137.823874][ T5936] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 137.842191][ T5936] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.842191][ T5936] [ 137.881148][ T5963] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 1) [ 137.901605][ T5935] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 1) [ 137.918159][ T5963] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 1) [ 137.936387][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.665'. [ 137.966073][ T5935] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 1) [ 137.987221][ T5963] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.003875][ T5935] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.022090][ T5963] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.038244][ T5935] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.092842][ T5963] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.653: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.148853][ T5976] netlink: zone id is out of range [ 138.268491][ T5982] loop3: detected capacity change from 0 to 1024 [ 138.293886][ T5982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.348048][ T5988] loop1: detected capacity change from 0 to 512 [ 138.379576][ T5988] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 138.419461][ T5988] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 138.439765][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 138.446344][ C1] EXT4-fs (loop1): initial error at time 1776920545: mb_free_blocks:2049: inode 11: block 64 [ 138.456836][ C1] EXT4-fs (loop1): last error at time 1776920545: mb_free_blocks:2049: inode 11: block 64 [ 138.474195][ T5988] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.671: corrupted inode contents [ 138.487540][ T5988] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.487903][ T5988] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #11: comm syz.1.671: mark_inode_dirty error [ 138.547777][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.549448][ T5988] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.565347][ T5988] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.671: invalid indirect mapped block 1 (level 1) [ 138.591917][ T5988] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.592144][ T5988] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.671: corrupted inode contents [ 138.752805][ T5988] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.772833][ T5988] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 138.796374][ T28] audit: type=1400 audit(1776920545.644:804): avc: denied { create } for pid=5993 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 138.839488][ T5988] loop1: lost filesystem error report for type 5 error -117 [ 138.843055][ T5988] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.671: corrupted inode contents [ 138.951659][ T5988] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.952015][ T5988] EXT4-fs error (device loop1): ext4_truncate:4690: inode #11: comm syz.1.671: mark_inode_dirty error [ 139.028360][ T5988] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 139.062648][ T28] audit: type=1400 audit(1776920546.032:805): avc: denied { create } for pid=5999 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.097153][ T5988] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 139.109727][ T5988] loop1: lost filesystem error report for type 5 error -117 [ 139.110089][ T5988] EXT4-fs (loop1): 1 truncate cleaned up [ 139.137983][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.162963][ T28] audit: type=1400 audit(1776920546.127:806): avc: denied { getopt } for pid=5999 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.189282][ T5988] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz.1.671: path /129/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 139.238745][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.368941][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 139.421592][ T6012] netlink: zone id is out of range [ 139.656795][ T3938] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 139.681752][ T6023] loop3: detected capacity change from 0 to 1024 [ 139.684575][ T3938] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.684575][ T3938] [ 139.725288][ T3938] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 139.767020][ T6023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.767866][ T3938] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.767866][ T3938] [ 140.022338][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.060767][ T3320] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 140.101012][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.429137][ T28] audit: type=1326 audit(1776920547.460:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524a7c819 code=0x7ffc0000 [ 140.521546][ T28] audit: type=1326 audit(1776920547.460:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524a7c819 code=0x7ffc0000 [ 140.559047][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 140.578413][ T28] audit: type=1326 audit(1776920547.460:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524a7c819 code=0x7ffc0000 [ 140.644941][ T28] audit: type=1326 audit(1776920547.460:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524a7c819 code=0x7ffc0000 [ 140.686888][ T28] audit: type=1326 audit(1776920547.460:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524a7c819 code=0x7ffc0000 [ 140.728825][ T28] audit: type=1326 audit(1776920547.460:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fe524a7c819 code=0x7ffc0000 [ 140.747808][ T6032] netem: change failed [ 140.763590][ T28] audit: type=1326 audit(1776920547.460:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524a7c819 code=0x7ffc0000 [ 140.794280][ T28] audit: type=1326 audit(1776920547.460:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524a7c819 code=0x7ffc0000 [ 140.825057][ T6052] netlink: zone id is out of range [ 140.865148][ T28] audit: type=1326 audit(1776920547.460:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524a7c819 code=0x7ffc0000 [ 140.905030][ T6054] loop3: detected capacity change from 0 to 164 [ 140.927344][ T6056] netlink: zone id is out of range [ 141.351983][ T6079] loop1: detected capacity change from 0 to 512 [ 141.354667][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 141.362740][ T6079] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 141.405245][ T6079] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 141.417197][ T6079] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.700: bad orphan inode 4 [ 141.429931][ T6079] loop1: lost filesystem error report for type 5 error -117 [ 141.430455][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 141.444599][ C1] EXT4-fs (loop1): initial error at time 1776953322: ext4_orphan_get:1423 [ 141.453264][ C1] EXT4-fs (loop1): last error at time 1776953322: ext4_orphan_get:1423 [ 141.462955][ T6079] EXT4-fs (loop1): 1 orphan inode deleted [ 141.469303][ T6079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.542098][ T6086] netlink: zone id is out of range [ 141.636593][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 141.650934][ T6094] netlink: zone id is out of range [ 141.659502][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 141.674153][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'. [ 141.707200][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.725098][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.763731][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.812285][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.873570][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.709'. [ 142.095041][ T6129] IPVS: stopping backup sync thread 5609 ... [ 142.118175][ T6128] loop3: detected capacity change from 0 to 512 [ 142.207233][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.219103][ T6128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.285832][ T6128] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.435561][ T6128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.001364][ T6150] loop0: detected capacity change from 0 to 1024 [ 143.066480][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 143.233261][ T6153] loop3: detected capacity change from 0 to 1024 [ 143.270026][ T6153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.306280][ T6153] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.359148][ T6153] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 3) [ 143.402983][ T6153] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 143.441423][ T6153] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.441423][ T6153] [ 143.473559][ T6158] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.522124][ T6152] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.570036][ T6158] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.613695][ T6152] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.669193][ T6158] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.723189][ T6152] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.770069][ T6158] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.824799][ T6152] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.871610][ T6158] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.721: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.028636][ T6150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.042421][ T6150] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.074561][ T6150] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 3) [ 144.128330][ T6150] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 144.171099][ T6150] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.171099][ T6150] [ 144.182615][ T6177] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.201989][ T6177] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.222883][ T6149] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.256013][ T6149] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.271036][ T6149] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.285920][ T6177] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.316654][ T6177] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.334372][ T6177] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.359477][ T6177] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.981261][ T6189] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 145.816862][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 145.831157][ T49] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.831157][ T49] [ 145.845783][ T3325] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 145.880341][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.948028][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 145.983386][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 145.983386][ T36] [ 146.029610][ T3320] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 146.059838][ T28] kauditd_printk_skb: 280 callbacks suppressed [ 146.059854][ T28] audit: type=1400 audit(1776986101.383:1096): avc: denied { connect } for pid=6211 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.076631][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.090951][ T6212] netlink: 48 bytes leftover after parsing attributes in process `syz.2.739'. [ 146.225293][ T6219] loop0: detected capacity change from 0 to 512 [ 146.252856][ T6219] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 146.303835][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 146.315798][ T6219] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 146.336086][ T6219] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.741: bad orphan inode 4 [ 146.353379][ T6219] loop0: lost filesystem error report for type 5 error -117 [ 146.353664][ T6219] EXT4-fs (loop0): 1 orphan inode deleted [ 146.361240][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 146.361267][ C0] EXT4-fs (loop0): initial error at time 1776986101: ext4_orphan_get:1423 [ 146.361307][ C0] EXT4-fs (loop0): last error at time 1776986101: ext4_orphan_get:1423 [ 146.433133][ T6219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.454718][ T6226] loop1: detected capacity change from 0 to 512 [ 146.487780][ T6226] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 146.523310][ T6226] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 146.533980][ T6226] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.743: bad orphan inode 4 [ 146.546608][ T6226] loop1: lost filesystem error report for type 5 error -117 [ 146.546857][ T6226] EXT4-fs (loop1): 1 orphan inode deleted [ 146.560040][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 146.560061][ C0] EXT4-fs (loop1): initial error at time 1776986101: ext4_orphan_get:1423 [ 146.560090][ C0] EXT4-fs (loop1): last error at time 1776986101: ext4_orphan_get:1423 [ 146.614333][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.766465][ T6238] loop3: detected capacity change from 0 to 128 [ 147.202644][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.356463][ T6238] syz.3.748: attempt to access beyond end of device [ 147.356463][ T6238] loop3: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 147.373237][ T6238] syz.3.748: attempt to access beyond end of device [ 147.373237][ T6238] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 147.391983][ T6238] syz.3.748: attempt to access beyond end of device [ 147.391983][ T6238] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 147.406977][ T6238] syz.3.748: attempt to access beyond end of device [ 147.406977][ T6238] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 147.424428][ T6238] syz.3.748: attempt to access beyond end of device [ 147.424428][ T6238] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 147.439450][ T6238] syz.3.748: attempt to access beyond end of device [ 147.439450][ T6238] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 147.454990][ T6238] syz.3.748: attempt to access beyond end of device [ 147.454990][ T6238] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 147.470679][ T6238] syz.3.748: attempt to access beyond end of device [ 147.470679][ T6238] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 147.486209][ T6238] syz.3.748: attempt to access beyond end of device [ 147.486209][ T6238] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 147.501402][ T6238] syz.3.748: attempt to access beyond end of device [ 147.501402][ T6238] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 147.590178][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.931908][ T6266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.756'. [ 147.991439][ T6271] loop1: detected capacity change from 0 to 512 [ 148.015953][ T6271] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.036648][ T6271] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 148.050349][ T6271] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 148.071556][ T6271] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.758: Failed to acquire dquot type 1 [ 148.084372][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 148.085453][ T6271] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 148.093075][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 148.093096][ C1] EXT4-fs (loop1): last error at time 1777018877: ext4_acquire_dquot:7034 [ 148.124667][ T6271] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 148.236787][ T6271] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.758: Failed to acquire dquot type 1 [ 148.253865][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 148.268652][ T6271] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.758: bg 0: block 248: padding at end of block bitmap is not set [ 148.624063][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 148.624647][ T6271] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 148.690011][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 148.690599][ T6271] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 148.720519][ T6271] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 148.756296][ T6271] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.758: Failed to acquire dquot type 1 [ 148.771153][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 148.771857][ T6271] EXT4-fs (loop1): 1 orphan inode deleted [ 148.791393][ T6271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.884870][ T6271] syzkaller0: entered promiscuous mode [ 148.895934][ T6271] syzkaller0: entered allmulticast mode [ 148.962614][ T6271] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 149.008260][ T28] audit: type=1400 audit(1777018878.471:1097): avc: denied { remount } for pid=6269 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 149.060179][ T6271] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 149.085795][ T6285] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 149.494307][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.683726][ T28] audit: type=1400 audit(1777018879.175:1098): avc: denied { connect } for pid=6292 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.829881][ T6299] loop3: detected capacity change from 0 to 512 [ 149.885669][ T6299] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 149.907850][ T6299] EXT4-fs (loop3): mount failed [ 151.672250][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 151.690779][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.708696][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.716733][ T3375] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.752920][ T6333] fido_id[6333]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.518889][ T6365] loop1: detected capacity change from 0 to 1024 [ 152.693716][ T6365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.364232][ T6365] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.491571][ T6365] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 3) [ 153.512838][ T6365] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 153.531058][ T6365] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.531058][ T6365] [ 153.548727][ T6379] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.571118][ T6379] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.589014][ T6379] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.628642][ T6364] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.666364][ T6379] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.715438][ T6379] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.771793][ T6380] loop3: detected capacity change from 0 to 8192 [ 153.778884][ T6364] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.815027][ T6379] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.853641][ T6364] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.787: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.937637][ T6380] loop3: p1 < > p2 p4 < p5 > [ 153.984326][ T6380] loop3: partition table partially beyond EOD, truncated [ 154.043694][ T6380] loop3: p1 start 134217728 is beyond EOD, truncated [ 154.125406][ T6380] loop3: p2 size 591360 extends beyond EOD, truncated [ 154.179141][ T6380] loop3: p5 size 591360 extends beyond EOD, truncated [ 156.239200][ T68] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 156.277955][ T68] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.277955][ T68] [ 156.302298][ T3328] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 156.319166][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.318060][ T6436] netlink: 'syz.3.806': attribute type 13 has an invalid length. [ 158.036505][ T6445] loop3: detected capacity change from 0 to 164 [ 158.837381][ T6434] loop0: detected capacity change from 0 to 2048 [ 159.050469][ T6470] loop3: detected capacity change from 0 to 512 [ 159.073364][ T6470] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 159.252454][ T6470] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 159.268649][ T6470] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.818: bad orphan inode 4 [ 159.306490][ T6470] loop3: lost filesystem error report for type 5 error -117 [ 159.306683][ T6470] EXT4-fs (loop3): 1 orphan inode deleted [ 159.314446][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 159.314468][ C1] EXT4-fs (loop3): initial error at time 1777018889: ext4_orphan_get:1423 [ 159.314495][ C1] EXT4-fs (loop3): last error at time 1777018889: ext4_orphan_get:1423 [ 159.338355][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.362732][ T6470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.679238][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.031062][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 160.044285][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.105655][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.258543][ T28] audit: type=1400 audit(1777018890.283:1099): avc: denied { write } for pid=6505 comm="syz.0.830" path="socket:[14292]" dev="sockfs" ino=14292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 160.345826][ T6503] loop3: detected capacity change from 0 to 512 [ 160.400335][ T6503] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.829: corrupted inode contents [ 160.422254][ T6503] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 160.423683][ T6503] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.829: mark_inode_dirty error [ 160.441451][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 160.452581][ C0] EXT4-fs (loop3): initial error at time 1777018890: ext4_do_update_inode:5690: inode 16 [ 160.462626][ C0] EXT4-fs (loop3): last error at time 1777018890: ext4_do_update_inode:5690: inode 16 [ 160.465393][ T6503] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 160.482976][ T6503] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.829: corrupted inode contents [ 160.548570][ T6503] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 160.548752][ T6503] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.829: mark_inode_dirty error [ 160.608874][ T6503] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 160.609202][ T6503] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.829: corrupted inode contents [ 160.650806][ T6503] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 160.652455][ T6503] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 160.674876][ T6503] loop3: lost filesystem error report for type 5 error -117 [ 160.675101][ T6503] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.829: corrupted inode contents [ 160.719097][ T6503] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 160.719314][ T6503] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.829: mark_inode_dirty error [ 160.765327][ T6503] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 160.765554][ T6503] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 160.793756][ T6503] loop3: lost filesystem error report for type 5 error -117 [ 160.797086][ T6503] EXT4-fs (loop3): 1 truncate cleaned up [ 160.820156][ T6503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.833533][ T6503] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.850242][ T852] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 160.879423][ T852] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 160.896998][ T28] audit: type=1400 audit(1777018890.955:1100): avc: denied { read } for pid=6502 comm="syz.3.829" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 161.162954][ T6527] netlink: zone id is out of range [ 161.891680][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.225463][ T6547] loop3: detected capacity change from 0 to 512 [ 162.262072][ T6547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.314693][ T6547] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.843: invalid block [ 162.328341][ T6547] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.330347][ T6547] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.843: invalid indirect mapped block 4294967295 (level 1) [ 162.340585][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 162.340738][ C0] EXT4-fs (loop3): initial error at time 1777018892: ext4_get_branch:178: inode 11: block 4294967295 [ 162.340948][ C0] EXT4-fs (loop3): last error at time 1777018892: ext4_get_branch:178: inode 11: block 4294967295 [ 162.392386][ T6547] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.394094][ T6547] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.843: invalid indirect mapped block 4294967295 (level 1) [ 162.420714][ T6547] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.424638][ T6547] EXT4-fs (loop3): 2 truncates cleaned up [ 162.453157][ T6547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.533241][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.572452][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 163.044445][ T6565] netlink: zone id is out of range [ 163.056257][ T28] audit: type=1400 audit(1777018893.223:1101): avc: denied { map } for pid=6560 comm="syz.0.848" path="socket:[16442]" dev="sockfs" ino=16442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 163.124969][ T28] audit: type=1400 audit(1777018893.254:1102): avc: denied { accept } for pid=6560 comm="syz.0.848" path="socket:[16442]" dev="sockfs" ino=16442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 163.134987][ T6569] loop0: detected capacity change from 0 to 512 [ 163.220058][ T6569] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 163.309984][ T6569] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 163.364672][ T6569] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.851: bad orphan inode 4 [ 163.437179][ T6569] loop0: lost filesystem error report for type 5 error -117 [ 163.437819][ T6569] EXT4-fs (loop0): 1 orphan inode deleted [ 163.445578][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 163.445605][ C0] EXT4-fs (loop0): initial error at time 1777018893: ext4_orphan_get:1423 [ 163.445642][ C0] EXT4-fs (loop0): last error at time 1777018893: ext4_orphan_get:1423 [ 163.668524][ T6569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.712447][ T6585] hub 9-0:1.0: USB hub found [ 163.723125][ T6585] hub 9-0:1.0: 8 ports detected [ 163.790627][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.936630][ T6593] loop3: detected capacity change from 0 to 1024 [ 163.945839][ T6591] netlink: zone id is out of range [ 163.964832][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 163.996735][ T6593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.062286][ T6593] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.121261][ T6593] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 3) [ 164.161533][ T6593] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 164.205683][ T6593] EXT4-fs (loop3): This should not happen!! Data will be lost [ 164.205683][ T6593] [ 164.230260][ T6603] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.261415][ T6603] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.292444][ T6603] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.307806][ T6603] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.323339][ T6592] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.348925][ T6592] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.369210][ T6603] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.399456][ T6592] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.438510][ T6592] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.455702][ T6606] netlink: zone id is out of range [ 164.534110][ T6613] loop0: detected capacity change from 0 to 1024 [ 164.651186][ T6613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.993386][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.704661][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.869'. [ 166.367829][ T6647] loop0: detected capacity change from 0 to 8192 [ 166.462944][ T6647] loop0: p1 < > p2 p4 < p5 > [ 166.517184][ T3938] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 166.535736][ T6656] netlink: zone id is out of range [ 166.536547][ T6647] loop0: partition table partially beyond EOD, [ 166.552771][ T3938] EXT4-fs (loop3): This should not happen!! Data will be lost [ 166.552771][ T3938] [ 166.574092][ T6647] truncated [ 166.584712][ T6647] loop0: p1 start 134217728 is beyond EOD, truncated [ 166.605201][ T3325] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 166.628135][ T6647] loop0: p2 size 591360 extends beyond EOD, truncated [ 166.637335][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.710428][ T6647] loop0: p5 size 591360 extends beyond EOD, truncated [ 168.785562][ T6688] hub 9-0:1.0: USB hub found [ 168.797563][ T6688] hub 9-0:1.0: 8 ports detected [ 168.908224][ T6698] netlink: zone id is out of range [ 169.063535][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 169.083056][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.097991][ T35] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.140880][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.192060][ T6702] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.855270][ T6716] loop3: detected capacity change from 0 to 1024 [ 169.945167][ T6716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 169.983144][ T6716] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.036454][ T6716] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 3) [ 170.139128][ T6716] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 170.247577][ T6716] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.247577][ T6716] [ 170.332079][ T6727] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.454636][ T6715] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.529331][ T6715] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.585016][ T6727] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.632661][ T6727] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.660000][ T6715] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.687207][ T6727] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.710699][ T6732] loop0: detected capacity change from 0 to 1024 [ 170.717822][ T6715] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.733234][ T6727] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.891: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.750071][ T6732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.770394][ T28] audit: type=1400 audit(1777018901.318:1103): avc: denied { listen } for pid=6733 comm="syz.1.896" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.943951][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.051669][ T6750] netlink: zone id is out of range [ 171.188968][ T6752] loop0: detected capacity change from 0 to 512 [ 171.237256][ T6752] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 171.282254][ T6752] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 171.329630][ T6752] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.901: bad orphan inode 4 [ 171.362594][ T6752] loop0: lost filesystem error report for type 5 error -117 [ 171.364829][ T6752] EXT4-fs (loop0): 1 orphan inode deleted [ 171.372776][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 171.372804][ C1] EXT4-fs (loop0): initial error at time 1777018901: ext4_orphan_get:1423 [ 171.372832][ C1] EXT4-fs (loop0): last error at time 1777018901: ext4_orphan_get:1423 [ 171.467863][ T6752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.088761][ T6779] loop1: detected capacity change from 0 to 1024 [ 172.180659][ T6779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.450388][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.781770][ T3938] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 172.799448][ T3938] EXT4-fs (loop3): This should not happen!! Data will be lost [ 172.799448][ T3938] [ 172.810968][ T3325] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 172.827159][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.936526][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.989844][ T6804] loop0: detected capacity change from 0 to 1024 [ 173.023789][ T6804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.036804][ T6804] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.054811][ T6804] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 3) [ 173.070236][ T6804] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 173.122685][ T6804] EXT4-fs (loop0): This should not happen!! Data will be lost [ 173.122685][ T6804] [ 173.164053][ T6808] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.234052][ T6802] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.264350][ T6808] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.281774][ T6802] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.296664][ T6802] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.313156][ T28] audit: type=1400 audit(1777018903.974:1104): avc: denied { create } for pid=6797 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 173.334308][ T6808] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.385327][ T6808] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.407432][ T6802] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.434111][ T6808] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.915: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.928070][ T6823] netlink: zone id is out of range [ 174.021450][ T6825] loop1: detected capacity change from 0 to 1024 [ 174.069533][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.105105][ T6825] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.123849][ T6825] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 3) [ 174.143901][ T6825] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 174.180105][ T6825] EXT4-fs (loop1): This should not happen!! Data will be lost [ 174.180105][ T6825] [ 174.244455][ T6824] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.324621][ T6832] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.387404][ T6824] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.413831][ T6832] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.470492][ T6824] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.496695][ T6832] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.527621][ T6824] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.564928][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 174.567345][ T28] audit: type=1400 audit(1777018905.297:1105): avc: denied { read open } for pid=6837 comm="syz.3.928" path="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.605924][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 174.605924][ T36] [ 174.607994][ T6832] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.636219][ T6839] SET target dimension over the limit! [ 174.650586][ T3320] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 174.655565][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 174.670109][ T6824] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.924: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.691761][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.025953][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 175.418066][ T6857] veth1_macvtap: left promiscuous mode [ 175.453371][ T6857] macsec0: entered promiscuous mode [ 175.636414][ T6860] netlink: zone id is out of range [ 176.096921][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 176.116404][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 176.116404][ T36] [ 176.172577][ T3328] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 176.197996][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.229746][ T28] audit: type=1400 audit(1777018907.051:1106): avc: denied { bind } for pid=6882 comm="syz.5.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.269118][ T6873] FAULT_INJECTION: forcing a failure. [ 176.269118][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 176.340643][ T6886] loop3: detected capacity change from 0 to 2048 [ 176.353411][ T6873] CPU: 1 UID: 0 PID: 6873 Comm: syz.3.939 Tainted: G W syzkaller #0 PREEMPT(full) [ 176.353445][ T6873] Tainted: [W]=WARN [ 176.353530][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 176.353542][ T6873] Call Trace: [ 176.353550][ T6873] [ 176.353559][ T6873] __dump_stack+0x1d/0x30 [ 176.353591][ T6873] dump_stack_lvl+0x95/0xd0 [ 176.353618][ T6873] dump_stack+0x15/0x1b [ 176.353684][ T6873] should_fail_ex+0x263/0x280 [ 176.353806][ T6873] should_failslab+0x8c/0xb0 [ 176.353829][ T6873] kmem_cache_alloc_noprof+0x66/0x3f0 [ 176.353854][ T6873] ? taskstats_exit+0x297/0x6b0 [ 176.353883][ T6873] taskstats_exit+0x297/0x6b0 [ 176.353970][ T6873] do_exit+0x41f/0x1530 [ 176.354000][ T6873] ? __x64_sys_exit+0x11/0x20 [ 176.354028][ T6873] __x64_sys_exit+0x1f/0x20 [ 176.354056][ T6873] x64_sys_call+0x301d/0x3020 [ 176.354080][ T6873] do_syscall_64+0x12c/0x3b0 [ 176.354107][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.354176][ T6873] RIP: 0033:0x7f0834d3c819 [ 176.354197][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.354216][ T6873] RSP: 002b:00007f083378f028 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 176.354317][ T6873] RAX: ffffffffffffffda RBX: 00007f0834fb5fa0 RCX: 00007f0834d3c819 [ 176.354334][ T6873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 176.354348][ T6873] RBP: 00007f083378f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.354360][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.354517][ T6873] R13: 00007f0834fb6038 R14: 00007f0834fb5fa0 R15: 00007ffcd43c3b98 [ 176.354539][ T6873] [ 176.686853][ T6886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.845116][ T6899] netlink: zone id is out of range [ 177.234836][ T6920] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 177.244539][ T6920] netlink: 152 bytes leftover after parsing attributes in process `syz.0.954'. [ 177.308704][ T6925] loop0: detected capacity change from 0 to 1024 [ 177.322491][ T6925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.394655][ T6895] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 177.424347][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.506323][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.566794][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 177.584133][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 177.604812][ T6934] netlink: 'syz.3.958': attribute type 15 has an invalid length. [ 177.619960][ T6934] netlink: 'syz.3.958': attribute type 18 has an invalid length. [ 177.716518][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 177.941854][ T6948] loop3: detected capacity change from 0 to 1024 [ 177.961075][ T6948] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 178.041538][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'. [ 178.065623][ T6958] FAULT_INJECTION: forcing a failure. [ 178.065623][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 178.080004][ T6955] loop3: detected capacity change from 0 to 512 [ 178.110310][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.1.969 Tainted: G W syzkaller #0 PREEMPT(full) [ 178.110436][ T6958] Tainted: [W]=WARN [ 178.110444][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 178.110459][ T6958] Call Trace: [ 178.110473][ T6958] [ 178.110482][ T6958] __dump_stack+0x1d/0x30 [ 178.110517][ T6958] dump_stack_lvl+0x95/0xd0 [ 178.110581][ T6958] dump_stack+0x15/0x1b [ 178.110615][ T6958] should_fail_ex+0x263/0x280 [ 178.110713][ T6958] should_failslab+0x8c/0xb0 [ 178.110733][ T6958] __kmalloc_noprof+0xb8/0x4d0 [ 178.110759][ T6958] ? bpf_test_init+0x86/0x130 [ 178.110793][ T6958] bpf_test_init+0x86/0x130 [ 178.110855][ T6958] bpf_prog_test_run_flow_dissector+0x12c/0x360 [ 178.110890][ T6958] ? kstrtouint+0x76/0xc0 [ 178.110918][ T6958] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 178.111013][ T6958] bpf_prog_test_run+0x204/0x340 [ 178.111042][ T6958] __sys_bpf+0x52e/0x7e0 [ 178.111077][ T6958] __x64_sys_bpf+0x41/0x50 [ 178.111101][ T6958] x64_sys_call+0x10cb/0x3020 [ 178.111128][ T6958] do_syscall_64+0x12c/0x3b0 [ 178.111229][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.111255][ T6958] RIP: 0033:0x7fe524a7c819 [ 178.111274][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.111291][ T6958] RSP: 002b:00007fe5234d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.111345][ T6958] RAX: ffffffffffffffda RBX: 00007fe524cf5fa0 RCX: 00007fe524a7c819 [ 178.111396][ T6958] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 178.111411][ T6958] RBP: 00007fe5234d7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.111427][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.111440][ T6958] R13: 00007fe524cf6038 R14: 00007fe524cf5fa0 R15: 00007ffd9602d3f8 [ 178.111459][ T6958] [ 178.334799][ T28] audit: type=1400 audit(1777018909.245:1107): avc: denied { create } for pid=6957 comm="syz.1.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 178.357026][ T28] audit: type=1400 audit(1777018909.255:1108): avc: denied { associate } for pid=6957 comm="syz.1.969" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 178.380671][ T28] audit: type=1400 audit(1777018909.255:1109): avc: denied { setopt } for pid=6957 comm="syz.1.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 178.402474][ T6955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.445163][ T6955] EXT4-fs (loop3): 1 orphan inode deleted [ 178.451092][ T6955] EXT4-fs (loop3): 1 truncate cleaned up [ 178.457992][ T6955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.557996][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.769013][ T6983] loop1: detected capacity change from 0 to 1024 [ 178.791014][ T6985] loop0: detected capacity change from 0 to 512 [ 178.842719][ T6985] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 178.870152][ T6983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 178.898271][ T6985] EXT4-fs (loop0): mount failed [ 179.002658][ T6983] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.047810][ T6983] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 3) [ 179.134492][ T6983] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 179.153832][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 179.260805][ T6983] EXT4-fs (loop1): This should not happen!! Data will be lost [ 179.260805][ T6983] [ 179.367842][ T6998] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.445781][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.604122][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.656669][ T6998] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.697144][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.725037][ T28] audit: type=1400 audit(1777018910.715:1110): avc: denied { wake_alarm } for pid=7009 comm="syz.0.983" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.780809][ T6998] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.800408][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.818931][ T7006] veth1_macvtap: left promiscuous mode [ 179.844232][ T7006] macsec0: entered promiscuous mode [ 179.889531][ T6998] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.923887][ T7010] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 179.930704][ T7010] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 179.950551][ T6982] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.976: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.955262][ T7013] loop3: detected capacity change from 0 to 512 [ 179.988180][ T7010] vhci_hcd vhci_hcd.0: Device attached [ 179.997410][ T7013] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 180.011607][ T7014] vhci_hcd: connection closed [ 180.027260][ T36] vhci_hcd vhci_hcd.0: stop threads [ 180.051305][ T36] vhci_hcd vhci_hcd.0: release socket [ 180.060814][ T7013] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 180.070603][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 180.103762][ T7013] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.984: bad orphan inode 4 [ 180.149342][ T7013] loop3: lost filesystem error report for type 5 error -117 [ 180.149503][ T7013] EXT4-fs (loop3): 1 orphan inode deleted [ 180.157354][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 180.157379][ C0] EXT4-fs (loop3): initial error at time 1777018911: ext4_orphan_get:1423 [ 180.157404][ C0] EXT4-fs (loop3): last error at time 1777018911: ext4_orphan_get:1423 [ 180.284178][ T7013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.174863][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.650376][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 181.660571][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 181.731257][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.731257][ T36] [ 181.777911][ T3328] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 181.808004][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.849319][ T7064] netlink: 64 bytes leftover after parsing attributes in process `syz.5.998'. [ 181.874853][ T7066] FAULT_INJECTION: forcing a failure. [ 181.874853][ T7066] name failslab, interval 1, probability 0, space 0, times 0 [ 181.958761][ T7066] CPU: 1 UID: 0 PID: 7066 Comm: syz.3.999 Tainted: G W syzkaller #0 PREEMPT(full) [ 181.958835][ T7066] Tainted: [W]=WARN [ 181.958842][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.958854][ T7066] Call Trace: [ 181.958862][ T7066] [ 181.958872][ T7066] __dump_stack+0x1d/0x30 [ 181.958902][ T7066] dump_stack_lvl+0x95/0xd0 [ 181.958941][ T7066] dump_stack+0x15/0x1b [ 181.958998][ T7066] should_fail_ex+0x263/0x280 [ 181.959033][ T7066] should_failslab+0x8c/0xb0 [ 181.959066][ T7066] __kmalloc_noprof+0xb8/0x4d0 [ 181.959123][ T7066] ? security_sk_alloc+0x52/0x120 [ 181.959147][ T7066] security_sk_alloc+0x52/0x120 [ 181.959168][ T7066] sk_prot_alloc+0xc2/0x180 [ 181.959194][ T7066] sk_alloc+0x35/0x3e0 [ 181.959215][ T7066] ? inet6_create+0x3a4/0x870 [ 181.959283][ T7066] inet6_create+0x3bd/0x870 [ 181.959361][ T7066] __sock_create+0x2e4/0x580 [ 181.959383][ T7066] sock_create_kern+0x38/0x50 [ 181.959403][ T7066] mptcp_subflow_create_socket+0x84/0x520 [ 181.959439][ T7066] __mptcp_nmpc_sk+0xb5/0x3d0 [ 181.959459][ T7066] mptcp_listen+0xc0/0x570 [ 181.959485][ T7066] __x64_sys_listen+0x110/0x170 [ 181.959531][ T7066] x64_sys_call+0x1fbf/0x3020 [ 181.959636][ T7066] do_syscall_64+0x12c/0x3b0 [ 181.959718][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.959739][ T7066] RIP: 0033:0x7f0834d3c819 [ 181.959757][ T7066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.959776][ T7066] RSP: 002b:00007f083378f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 181.959845][ T7066] RAX: ffffffffffffffda RBX: 00007f0834fb5fa0 RCX: 00007f0834d3c819 [ 181.959860][ T7066] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: 0000000000000003 [ 181.959872][ T7066] RBP: 00007f083378f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.959884][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.959896][ T7066] R13: 00007f0834fb6038 R14: 00007f0834fb5fa0 R15: 00007ffcd43c3b98 [ 181.959914][ T7066] [ 183.050013][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 183.139253][ T28] audit: type=1400 audit(1777018914.274:1111): avc: denied { create } for pid=7117 comm="syz.1.1017" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 183.273704][ T28] audit: type=1400 audit(1777018914.358:1112): avc: denied { ioctl } for pid=7111 comm="syz.5.1015" path="socket:[17794]" dev="sockfs" ino=17794 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.419893][ T7129] loop0: detected capacity change from 0 to 1024 [ 183.488732][ T7129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.503107][ T7129] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.524331][ T28] audit: type=1400 audit(1777018914.705:1113): avc: denied { write } for pid=7128 comm="syz.0.1020" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.553208][ T7129] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 3) [ 183.593290][ T7129] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 183.611744][ T28] audit: type=1400 audit(1777018914.705:1114): avc: denied { open } for pid=7128 comm="syz.0.1020" path="/175/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.663882][ T28] audit: type=1400 audit(1777018914.862:1115): avc: denied { read } for pid=7128 comm="syz.0.1020" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.667545][ T7129] EXT4-fs (loop0): This should not happen!! Data will be lost [ 183.667545][ T7129] [ 183.697154][ T28] audit: type=1400 audit(1777018914.862:1116): avc: denied { map } for pid=7128 comm="syz.0.1020" path="/175/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.749113][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.785466][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.826738][ T28] audit: type=1400 audit(1777018915.030:1117): avc: denied { create } for pid=7142 comm="syz.5.1024" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 183.849504][ T7128] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.849659][ T7128] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.849905][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.850040][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.850243][ T7128] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.850538][ T7128] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.876760][ T28] audit: type=1400 audit(1777018915.072:1118): avc: denied { getopt } for pid=7142 comm="syz.5.1024" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.909832][ T7138] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1020: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.917484][ T28] audit: type=1400 audit(1777018915.072:1119): avc: denied { map } for pid=7142 comm="syz.5.1024" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.010974][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1024'. [ 184.031645][ T28] audit: type=1400 audit(1777018915.072:1120): avc: denied { read write } for pid=7142 comm="syz.5.1024" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.773977][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.776126][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 184.814959][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.838817][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.840236][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 184.869454][ T7163] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.226335][ T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.237969][ T35] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.249694][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.262220][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.271085][ T5849] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 185.286975][ T7181] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.293537][ T5849] EXT4-fs (loop0): This should not happen!! Data will be lost [ 185.293537][ T5849] [ 185.305941][ T3320] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 185.321031][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.369420][ T7187] loop0: detected capacity change from 0 to 1024 [ 185.397416][ T7187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.505891][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.382609][ T7219] loop1: detected capacity change from 0 to 1024 [ 186.435187][ T7219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.501773][ T7219] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.562555][ T7219] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 3) [ 186.622604][ T7219] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 186.646987][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 186.658488][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.669158][ T7219] EXT4-fs (loop1): This should not happen!! Data will be lost [ 186.669158][ T7219] [ 186.683605][ T35] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 186.695269][ T7218] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 1) [ 186.711454][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.725387][ T7229] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 1) [ 186.744489][ T7218] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 1) [ 186.760991][ T7229] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 1) [ 186.777572][ T7218] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 1) [ 186.794637][ T7233] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.801708][ T7229] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 1) [ 186.818049][ T7218] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 1) [ 186.835460][ T7229] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 1) [ 186.854202][ T7218] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.529430][ T7248] loop0: detected capacity change from 0 to 512 [ 187.555944][ T7248] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.593963][ T7248] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1060: corrupted in-inode xattr: e_value size too large [ 187.645314][ T7248] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.645578][ T7248] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1060: couldn't read orphan inode 15 (err -117) [ 187.655077][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 187.655100][ C1] EXT4-fs (loop0): initial error at time 1777019175: ext4_iget_extra_inode:5128: inode 15 [ 187.655130][ C1] EXT4-fs (loop0): last error at time 1777019175: ext4_iget_extra_inode:5128: inode 15 [ 187.728514][ T7248] loop0: lost filesystem error report for type 5 error -117 [ 187.729117][ T7248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.217206][ T68] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 188.232954][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.244310][ T68] EXT4-fs (loop1): This should not happen!! Data will be lost [ 188.244310][ T68] [ 188.263544][ T3328] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 188.277552][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.367725][ T7266] loop1: detected capacity change from 0 to 512 [ 188.392176][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 188.392193][ T28] audit: type=1400 audit(1777019175.824:1124): avc: denied { ioctl } for pid=7265 comm="syz.1.1066" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 188.425184][ T7266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1066'. [ 188.550062][ T7273] loop3: detected capacity change from 0 to 164 [ 188.569470][ T7273] iso9660: Unknown parameter '' [ 188.672014][ T7279] loop3: detected capacity change from 0 to 512 [ 188.860662][ T7279] loop3: detected capacity change from 0 to 128 [ 189.289707][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.307596][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.340659][ T7293] loop0: detected capacity change from 0 to 512 [ 189.364388][ T7293] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.390158][ T7293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002] [ 189.398911][ T7293] System zones: 1-12 [ 189.405567][ T7293] EXT4-fs (loop0): 1 truncate cleaned up [ 189.420755][ T7293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.437002][ T28] audit: type=1400 audit(1777019176.925:1125): avc: denied { create } for pid=7292 comm="syz.0.1074" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 189.480603][ T28] audit: type=1400 audit(1777019176.977:1126): avc: denied { read } for pid=7292 comm="syz.0.1074" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 189.997965][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.313065][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 190.670402][ T7325] loop3: detected capacity change from 0 to 1024 [ 190.763964][ T7325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.845881][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.856900][ T3551] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.883358][ T3551] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.898216][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.926258][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.965130][ T7332] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.000922][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.027923][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.061789][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1089'. [ 191.139315][ T7335] loop3: detected capacity change from 0 to 4096 [ 191.460840][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1095'. [ 191.598046][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 191.616279][ T28] audit: type=1400 audit(1777019179.220:1127): avc: denied { map } for pid=7358 comm="syz.0.1097" path="socket:[18694]" dev="sockfs" ino=18694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 192.110047][ T7373] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.139001][ T7373] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 192.166354][ T7373] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 192.191058][ T7373] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 192.293851][ T7379] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 192.325853][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1102'. [ 192.379395][ T7373] bond1: (slave gretap1): making interface the new active one [ 192.396055][ T7373] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 192.431035][ T7379] macvlan2: entered promiscuous mode [ 192.463813][ T7379] macvlan2: entered allmulticast mode [ 192.467655][ T3408] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 192.481823][ T7379] bond1: entered promiscuous mode [ 192.489342][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.498733][ T7379] gretap1: entered promiscuous mode [ 192.499574][ T7379] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.523270][ T3408] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.526187][ T7379] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 192.546641][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.584207][ T7390] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.602102][ T7379] bond1: left promiscuous mode [ 192.631912][ T7379] gretap1: left promiscuous mode [ 192.716677][ T7399] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1110'. [ 192.820147][ T7405] loop0: detected capacity change from 0 to 1024 [ 192.877996][ T7405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.972441][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.200276][ T3408] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 193.227356][ T7422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.232036][ T3408] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.279894][ T7422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.326504][ T7422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.386537][ T7428] netlink: 'syz.3.1117': attribute type 16 has an invalid length. [ 193.419870][ T7428] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1117'. [ 194.360296][ T7462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7462 comm=syz.0.1129 [ 194.517702][ T7459] loop0: detected capacity change from 0 to 1024 [ 194.556689][ T7459] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.586511][ T7459] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 194.607020][ T7459] EXT4-fs (loop0): orphan cleanup on readonly fs [ 194.617644][ T7459] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1129: Freeing blocks not in datazone - block = 0, count = 4096 [ 194.640250][ T7459] loop0: lost filesystem error report for type 5 error -117 [ 194.640575][ T7459] EXT4-fs (loop0): 1 orphan inode deleted [ 194.648194][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 194.648212][ C1] EXT4-fs (loop0): initial error at time 1777019182: ext4_free_blocks:6718 [ 194.648241][ C1] EXT4-fs (loop0): last error at time 1777019182: ext4_free_blocks:6718 [ 194.734000][ T7459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.801956][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.933943][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1133'. [ 195.057753][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 196.114934][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 196.221757][ T7518] loop0: detected capacity change from 0 to 512 [ 196.252327][ T7518] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 196.297896][ T7518] EXT4-fs (loop0): mount failed [ 198.615077][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 198.694876][ T7545] netlink: 'syz.0.1157': attribute type 2 has an invalid length. [ 198.717069][ T7545] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 198.738979][ T7545] loop0: detected capacity change from 0 to 512 [ 198.757238][ T7547] loop1: detected capacity change from 0 to 1024 [ 198.765592][ T7545] EXT4-fs: Ignoring removed i_version option [ 198.784358][ T7545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.813912][ T7545] EXT4-fs error (device loop0): __ext4_fill_super:5596: inode #2: comm syz.0.1157: invalid fast symlink length 4227924007 [ 198.828925][ T7545] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 198.829257][ T7545] EXT4-fs (loop0): get root inode failed [ 198.831924][ T7547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.838546][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 198.864694][ C1] EXT4-fs (loop0): initial error at time 1777019186: __ext4_fill_super:5596: inode 2 [ 198.874834][ C1] EXT4-fs (loop0): last error at time 1777019186: __ext4_fill_super:5596: inode 2 [ 198.875128][ T7547] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.886039][ T7545] EXT4-fs (loop0): mount failed [ 198.963223][ T7547] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 3) [ 199.007309][ T7547] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 199.047632][ T7547] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.047632][ T7547] [ 199.060870][ T28] audit: type=1400 audit(1777019187.107:1128): avc: denied { setopt } for pid=7544 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 199.061112][ T7554] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 1) [ 199.123494][ T7546] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 1) [ 199.152665][ T7554] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 1) [ 199.178040][ T7546] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 1) [ 199.203667][ T7554] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 1) [ 199.236937][ T7546] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 1) [ 199.261754][ T7554] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 1) [ 199.293734][ T7546] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 1) [ 199.319992][ T7554] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1158: lblock 3 mapped to illegal pblock 3 (length 1) [ 199.596944][ T7569] loop0: detected capacity change from 0 to 1024 [ 199.599420][ T7571] loop3: detected capacity change from 0 to 512 [ 199.610603][ T7569] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 199.610603][ T7569] [ 199.687655][ T7571] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 199.705894][ T7571] EXT4-fs (loop3): mount failed [ 200.329383][ T7569] loop0: detected capacity change from 0 to 512 [ 200.388310][ T28] audit: type=1400 audit(1777019188.502:1129): avc: denied { create } for pid=7576 comm="syz.3.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 200.586377][ T7569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.629114][ T7569] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.781654][ T7569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 200.811285][ T7569] EXT4-fs (loop0): failed to initialize system zone (-117) [ 200.828389][ T7569] EXT4-fs (loop0): mount failed [ 200.835395][ T3938] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 200.900589][ T3938] EXT4-fs (loop1): This should not happen!! Data will be lost [ 200.900589][ T3938] [ 200.923400][ T3328] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 200.945729][ T3328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.000563][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'. [ 201.029480][ T7569] loop0: detected capacity change from 0 to 128 [ 201.066581][ T7569] FAT-fs (loop0): error, clusters badly computed (1 != 163841) [ 201.077621][ T7569] FAT-fs (loop0): Filesystem has been set read-only [ 201.087891][ T7569] FAT-fs (loop0): error, clusters badly computed (2 != 163842) [ 201.114667][ T7569] FAT-fs (loop0): error, clusters badly computed (3 != 163843) [ 201.128379][ T7569] FAT-fs (loop0): error, clusters badly computed (4 != 163844) [ 201.136855][ T7569] FAT-fs (loop0): error, clusters badly computed (5 != 163845) [ 201.174814][ T7569] FAT-fs (loop0): error, clusters badly computed (6 != 163846) [ 201.192333][ T7624] coredump: 852(syz.2.1177): Core dump to core aborted: cannot preserve file permissions [ 201.224002][ T7569] FAT-fs (loop0): error, clusters badly computed (7 != 163847) [ 201.242182][ T7569] FAT-fs (loop0): error, clusters badly computed (8 != 163848) [ 201.270364][ T7569] FAT-fs (loop0): error, clusters badly computed (9 != 163849) [ 201.301931][ T7569] FAT-fs (loop0): error, clusters badly computed (10 != 163850) [ 202.682530][ T7648] loop3: detected capacity change from 0 to 1024 [ 202.754744][ T7648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.792960][ T7648] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.807584][ T7648] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.1184: lblock 3 mapped to illegal pblock 3 (length 3) [ 202.837403][ T7648] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 202.905953][ T7648] EXT4-fs (loop3): This should not happen!! Data will be lost [ 202.905953][ T7648] [ 202.932259][ T7660] loop0: detected capacity change from 0 to 512 [ 202.962096][ T7660] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1187: corrupted in-inode xattr: overlapping e_value [ 202.976890][ T7660] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.981659][ T7660] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1187: couldn't read orphan inode 15 (err -117) [ 202.991401][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 202.991422][ C0] EXT4-fs (loop0): initial error at time 1777019191: ext4_iget_extra_inode:5128: inode 15 [ 202.991461][ C0] EXT4-fs (loop0): last error at time 1777019191: ext4_iget_extra_inode:5128: inode 15 [ 203.031513][ T7660] loop0: lost filesystem error report for type 5 error -117 [ 203.033871][ T7660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.064467][ T49] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 203.103879][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 203.142000][ T49] EXT4-fs (loop3): This should not happen!! Data will be lost [ 203.142000][ T49] [ 203.167278][ T3325] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 203.190791][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.446823][ T7672] FAULT_INJECTION: forcing a failure. [ 203.446823][ T7672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.465502][ T7672] CPU: 0 UID: 0 PID: 7672 Comm: syz.3.1189 Tainted: G W syzkaller #0 PREEMPT(full) [ 203.465617][ T7672] Tainted: [W]=WARN [ 203.465627][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.465681][ T7672] Call Trace: [ 203.465690][ T7672] [ 203.465699][ T7672] __dump_stack+0x1d/0x30 [ 203.465734][ T7672] dump_stack_lvl+0x95/0xd0 [ 203.465757][ T7672] dump_stack+0x15/0x1b [ 203.465779][ T7672] should_fail_ex+0x263/0x280 [ 203.465861][ T7672] should_fail_alloc_page+0xf2/0x100 [ 203.465883][ T7672] __alloc_frozen_pages_noprof+0x108/0x350 [ 203.465917][ T7672] alloc_pages_mpol+0xb3/0x260 [ 203.466021][ T7672] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 203.466048][ T7672] handle_mm_fault+0x103e/0x2e70 [ 203.466135][ T7672] do_user_addr_fault+0x62f/0x1050 [ 203.466194][ T7672] ? irqentry_exit+0x40/0x5b0 [ 203.466213][ T7672] ? trace_page_fault_user+0x1f/0xa0 [ 203.466244][ T7672] exc_page_fault+0x62/0xa0 [ 203.466273][ T7672] asm_exc_page_fault+0x26/0x30 [ 203.466371][ T7672] RIP: 0033:0x7f0834bf3ae3 [ 203.466388][ T7672] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 203.466407][ T7672] RSP: 002b:00007f083374c470 EFLAGS: 00010202 [ 203.466436][ T7672] RAX: 0000000000004000 RBX: 00007f083374c530 RCX: 00007f082b32d000 [ 203.466517][ T7672] RDX: 00007f083374c6d0 RSI: 0000000000000000 RDI: 00007f083374c5d0 [ 203.466531][ T7672] RBP: 00000000000000e7 R08: 0000000000000009 R09: 00000000000001c8 [ 203.466544][ T7672] R10: 00000000000001d6 R11: 00007f083374c530 R12: 0000000000000001 [ 203.466556][ T7672] R13: 00007f0834df2600 R14: 000000000000000b R15: 00007f083374c5d0 [ 203.466579][ T7672] [ 203.466955][ T7672] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 203.712168][ T7672] loop3: detected capacity change from 0 to 512 [ 203.779941][ T7672] EXT4-fs (loop3): 1 orphan inode deleted [ 203.792450][ T7672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.808019][ T7672] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.838737][ T3938] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 203.955238][ T3938] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 204.076460][ T28] audit: type=1400 audit(1777019192.400:1130): avc: denied { ioctl } for pid=7659 comm="syz.0.1187" path="socket:[20001]" dev="sockfs" ino=20001 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 204.768655][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.859238][ T28] audit: type=1400 audit(1777019193.224:1131): avc: denied { write } for pid=7693 comm="syz.0.1198" path="socket:[20096]" dev="sockfs" ino=20096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.009153][ T28] audit: type=1400 audit(1777019193.340:1132): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 205.042903][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.270486][ T7703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.290253][ T7703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.244040][ T28] audit: type=1400 audit(1777019194.703:1133): avc: denied { mounton } for pid=7710 comm="syz.3.1204" path="/224/file0" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.344400][ T7713] loop0: detected capacity change from 0 to 512 [ 206.369918][ T7713] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 206.396183][ T7713] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 206.416759][ T7713] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1205: bad orphan inode 4 [ 206.446023][ T7713] loop0: lost filesystem error report for type 5 error -117 [ 206.446613][ T7713] EXT4-fs (loop0): 1 orphan inode deleted [ 206.454486][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 206.454525][ C0] EXT4-fs (loop0): initial error at time 1777019194: ext4_orphan_get:1423 [ 206.454546][ C0] EXT4-fs (loop0): last error at time 1777019194: ext4_orphan_get:1423 [ 206.519120][ T7713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.386581][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 207.781223][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 207.871377][ T7654] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 207.996470][ T7756] loop3: detected capacity change from 0 to 1024 [ 208.107895][ T7756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.154590][ T7756] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.176489][ T7756] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 3) [ 208.202832][ T7756] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 208.255559][ T7756] EXT4-fs (loop3): This should not happen!! Data will be lost [ 208.255559][ T7756] [ 208.288261][ T7765] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 1) [ 208.360263][ T7755] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 1) [ 208.413859][ T7765] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 1) [ 208.463701][ T7755] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 1) [ 208.482269][ T7765] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 1) [ 208.499426][ T7755] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 1) [ 208.550090][ T7765] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 1) [ 208.605237][ T7755] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 1) [ 208.645500][ T7755] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.1218: lblock 3 mapped to illegal pblock 3 (length 1) [ 209.080555][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.554842][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 210.317298][ T68] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 210.341117][ T68] EXT4-fs (loop3): This should not happen!! Data will be lost [ 210.341117][ T68] [ 210.364647][ T3325] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 210.389795][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.417537][ T3008] ================================================================== [ 210.425842][ T3008] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 210.434217][ T3008] [ 210.436543][ T3008] write to 0xffff888100613870 of 8 bytes by task 3312 on cpu 0: [ 210.444617][ T3008] dentry_unlink_inode+0x6a/0x290 [ 210.449745][ T3008] d_delete+0xc8/0xe0 [ 210.454166][ T3008] d_delete_notify+0x32/0x100 [ 210.459100][ T3008] vfs_unlink+0x289/0x490 [ 210.463600][ T3008] filename_unlinkat+0x1e2/0x410 [ 210.468768][ T3008] __se_sys_unlink+0x2b/0xe0 [ 210.473782][ T3008] __x64_sys_unlink+0x1f/0x30 [ 210.478643][ T3008] x64_sys_call+0x2eb6/0x3020 [ 210.483454][ T3008] do_syscall_64+0x12c/0x3b0 [ 210.488305][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.494800][ T3008] [ 210.497203][ T3008] read to 0xffff888100613870 of 8 bytes by task 3008 on cpu 1: [ 210.505078][ T3008] step_into_slowpath+0x12c/0x4c0 [ 210.510322][ T3008] path_lookupat+0x330/0x500 [ 210.515052][ T3008] filename_lookup+0x190/0x390 [ 210.519893][ T3008] do_readlinkat+0x74/0x2f0 [ 210.524484][ T3008] __x64_sys_readlink+0x47/0x60 [ 210.529692][ T3008] x64_sys_call+0x2b51/0x3020 [ 210.534400][ T3008] do_syscall_64+0x12c/0x3b0 [ 210.538982][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.545492][ T3008] [ 210.547828][ T3008] value changed: 0xffff88811bf96368 -> 0x0000000000000000 [ 210.555388][ T3008] [ 210.557790][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 210.564048][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 210.575177][ T3008] Tainted: [W]=WARN [ 210.579239][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.589580][ T3008] ================================================================== [ 210.701164][ T7805] loop3: detected capacity change from 0 to 1024 [ 210.771327][ T7805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.892279][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.