last executing test programs: 5m44.274188088s ago: executing program 2 (id=81): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000140)=0x5, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3, @ANYBLOB="029000000080040008000a00", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000, 0x0, &(0x7f0000000100)=""/13, 0xd}, &(0x7f0000000200)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x20, &(0x7f00000002c0)={&(0x7f0000004780)=@newtaction={0xd8, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0xc4, 0x1, [@m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x27d, 0x20000000}}]}, {0x4}, {0xc, 0x3}, {0xc}}}, @m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3cd, 0x0, {0x0, 0x2, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) 5m43.908201973s ago: executing program 2 (id=84): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) sendmmsg$inet(r0, &(0x7f0000001740), 0x0, 0x2090) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x40010, r0, 0x1000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x44000) perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffeae, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x13a01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0xc12f, 0x4}, 0x102802, 0x0, 0x0, 0x8, 0x1000, 0x7fff, 0x7ffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefbffffffffffc, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) futex(0x0, 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1cb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, &(0x7f0000000080)) socket(0x10, 0x803, 0x0) 5m43.50089107s ago: executing program 2 (id=90): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000002080)={0xac0, 0x92, 0x2f}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000100)) ftruncate(r0, 0xff) 5m43.210977322s ago: executing program 2 (id=94): prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x116200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000910000000000000095000009a91d4e4a69271a0000000000f268635def6c436fb80919fd68cb90e24c9ff4b660aba6806c26af16f4be979530803358ce20dc097e3e729d769201681b2686dfc74424d501aee61d397d80f7aa188360308fed7ade94e56bbbf2113ac2dfd625c31b3099f61faf3fe272e20ec07e8dee396ba0b28f05e0c6d9ee4cff759bd2745d13513b39c62c3cc2b3e63e52c26642eb01f709fb2d0fe634b1dc"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_gettime(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040844}, 0x8880) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r3 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) socket$unix(0x1, 0x2, 0x0) 5m42.886598196s ago: executing program 2 (id=97): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x247, &(0x7f0000000880)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd70c648ea6d5e206510052f91b07500fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000c4fe8200736f777263655f6d61635f6973006d756c746963617374000500830000000000080001007063690011000200303030303a30303a31302e10000000001c008200736f757263655f6d61635f6973746963617374000500830000000000080001007063690011000200303030300100000000000000000000001c008200736f757263655f6d61635f69735f6d756c746963617374"], 0xd8}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x2, 0x82, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="280000003701000205000000000000000900000000000000", @ANYRES32=r4, @ANYBLOB="0a0073797a6b616c6c6672003a5a9bcbe760b9"], 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5m42.604097818s ago: executing program 2 (id=102): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5m42.603900498s ago: executing program 32 (id=102): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m9.844773062s ago: executing program 3 (id=1873): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84a, 0x2, @perf_config_ext={0xffffffff, 0xe094}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = dup2(r1, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0xf5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1d, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffcd5e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x96, 0x2, 0xf, 0xff, 0x48000000}, @map_idx={0x18, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000000)='syzkaller\x00', 0xfffffff7, 0x81, &(0x7f00000002c0)=""/129, 0x41100, 0x21, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000080)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x5, 0x3, 0xfffffff9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3], &(0x7f00000003c0)=[{0x4, 0x4, 0x7, 0xa}, {0x3, 0x5, 0x401, 0x5}], 0x10, 0x5}, 0x94) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) unshare(0x600) r7 = socket(0x11, 0x2, 0x0) setsockopt(r7, 0x107, 0x7, &(0x7f0000001e80)="11106e00", 0x4) 1m8.934171708s ago: executing program 3 (id=1886): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) signalfd(r0, &(0x7f00000001c0)={[0x9]}, 0x8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x80b40, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x3c, 0x21, 0xa, 0x1e, 0x3, 0x4, 0x2, 0x14, 0xffffffffffffffff}) 1m8.869623415s ago: executing program 3 (id=1888): ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8055b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x3403, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 1m8.836758867s ago: executing program 3 (id=1889): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f00000007c0)={0x1a4, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000242ab00b32f4e27246164e16772a5cf2409a309c7e2493471ac850f52a2497f4e213c7a03a852aa5f1239a043066320571169e51cb56"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x0, 0x2, [@broadcast, @broadcast]}) ioctl$TCGETA(r2, 0x5405, &(0x7f00000001c0)) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "9dbd8d", 0x18, 0x6, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0xfffd, 0x0, 0x1, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x4e22, 0x4e24}}}}}}}}, 0x0) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x4) getpgrp(r4) r5 = signalfd4(r1, &(0x7f0000000040)={[0x1]}, 0x8, 0x100800) ioctl$VT_WAITACTIVE(r5, 0x5607) 1m8.033899576s ago: executing program 3 (id=1892): mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a", 0x23}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4000) ioctl$TCFLSH(0xffffffffffffffff, 0x40085500, 0x100000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00", 0x1b) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 1m6.869813549s ago: executing program 3 (id=1901): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0xffffffff, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8010) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r1, 0x0, 0xffff, 0x2) 1m6.869620549s ago: executing program 33 (id=1901): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0xffffffff, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8010) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r1, 0x0, 0xffff, 0x2) 3.819098613s ago: executing program 5 (id=2506): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x3, 0x7fffffffffffffff}) 3.662203489s ago: executing program 5 (id=2507): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x380}, {&(0x7f00000000c0)=""/88, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x305}, &(0x7f0000000140), &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0xffff02c8, @remote, 0x7}}, [0x1, 0x5, 0x1, 0x94, 0x0, 0x8000000000000001, 0x8, 0xc8, 0xb, 0xffffffffffffffff, 0x0, 0x7, 0x2, 0x4, 0x7fff]}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x6b396000) r2 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) read(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) chdir(&(0x7f0000000040)='./file0\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x100, 0x1e2) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000380)={0x9, 0x0, 0x5fe, 0xa, 0xdae}) 2.578607849s ago: executing program 0 (id=2510): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fchmod(r0, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x18c, 0xa, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x15}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x101}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x200}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40085) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r6 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r7 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x3, 0x3da}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000040)=[r6, r7], 0x2) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r8, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.522562867s ago: executing program 5 (id=2513): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.269674883s ago: executing program 0 (id=2521): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) close_range(r0, r0, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x401, 0x8) 2.198867388s ago: executing program 0 (id=2522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 2.197912718s ago: executing program 0 (id=2523): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x8, 0x200000005c832, 0xffffffffffffffff, 0xe51000) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x100000000000020c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x800) r2 = msgget(0x3, 0x2) msgrcv(r2, &(0x7f00000001c0)={0x0, ""/211}, 0xdb, 0x3, 0x1000) recvmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/38, 0x26}], 0x1}, 0x10040) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x401) 1.937310983s ago: executing program 1 (id=2527): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x4000010, 0xffffffffffffffff, 0x10000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0xa5, 0x6a, {{0x38, 0x4, 0x1, 0x4, 0xe0, 0x67, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x15}, {[@ssrr={0x89, 0x13, 0x88, [@multicast2, @multicast2, @multicast2, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0xce, 0x3, 0xa, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xff}, {@multicast2, 0x3}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x101}]}, @cipso={0x86, 0xd, 0x3, [{0x1, 0x5, "53d890"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x44, 0x97, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4}, {@multicast1}, {@multicast1, 0x2}, {@loopback}, {@rand_addr=0x64010101, 0x32cf}, {@multicast2, 0x7}, {@empty, 0x8}]}, @rr={0x7, 0x1b, 0xa5, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @loopback, @multicast2]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x9, [0x401, 0x1, 0x2, 0xe7f]}, @noop]}}}}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x10, 0x0, 0x400000000000000b, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0xc38}, 0x102a80, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x100000020000006}, 0x0, 0x0, r0, 0x3) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x24, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa007ca, &(0x7f00000003c0)={[{@grpjquota}, {@grpid}, {}, {@nodelalloc}, {@dioread_nolock}, {@noinit_itable}]}, 0x0, 0x497, &(0x7f0000000800)="$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") close_range(r2, 0xffffffffffffffff, 0x0) 1.700157112s ago: executing program 6 (id=2530): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x73, 0x73, 0x4, [@float={0xa, 0x0, 0x0, 0x10, 0xe}, @fwd={0xf}, @ptr={0x5}, @datasec={0xb, 0x3, 0x0, 0xf, 0x3, [{0x3, 0x85f, 0x5}, {0x2, 0x400, 0xd33a}, {0x5, 0x9, 0x40}], "a35ed4"}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @float={0x10, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2f, 0x2e]}}, &(0x7f00000005c0)=""/154, 0x90, 0x9a, 0x1, 0x505, 0x10000}, 0x28) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x50, r4, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) gettid() r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_clone(0x1101091, 0x0, 0x2d, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', r2, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000cc9051540af94a37e96da0f0afaab058c211e4e6420108b53c96c04fa799e9963dd20039d8006763884aa8619549182fa4ecaf810ffe089375b6dd9ea7bb704cd3d8958757f82d562007c033c663456220b66f1b9b2c78d92d419db6845403efeb1bb2e8a4101e7f6157b7e60d50390bde2d8781e0e5c3410b07474f700584eeff3d909f07113e8513db78fcde0d8c1a849ec452276189e1328a4a0bb8c844c43f3701967c98ddfa42374b5f506a210806d0143f546364660046d2d9d072929db57c47adf5c8e6ea1103d4bf8e786dec39d2496f141b2efa742742941d267bf610dca947148ce75e2f78f5a03aa574450c36846fc6912d85", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4009}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000feb000/0x14000)=nil) write$cgroup_pressure(r7, &(0x7f0000000140)={'some'}, 0x2f) sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0500000074000000240097dc00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r8}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r8, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r10, r10) 1.699210842s ago: executing program 1 (id=2531): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="f21aa1c74abec0041470afabecfe0029bd700013b97b24dfc92728c8e3d00d5eb35d27f417a3c0d23ab3fdbcfded89c6effd89227c6df48b2d27a9d6a1905891ea1a3a171cda3bb2eb04a7c4f9d7781bcb02e3340077c63b597bb6f8ff05b0a999fcaa4a446ec9c1aca5cac27faf402d273770e39a99f984ca7d5a15b6e4df6ebd9ce2cb814300ad2da2ecb1"], 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048"], 0xb8}}, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42042, 0x14a) fallocate(r5, 0x10, 0xed6, 0x8001) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x9a0, 0x9, 0x8000000000003, 0x0, 0x8, 0x3, 0x2, 0x0, 0x4}) r8 = getpgid(0x0) syz_pidfd_open(r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000c40)={0x2000000b}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000100)=0xb8) 1.621499925s ago: executing program 6 (id=2532): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2014, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000400000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x6012}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) finit_module(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.584616357s ago: executing program 6 (id=2533): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) 1.574196485s ago: executing program 5 (id=2534): mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4000) ioctl$TCFLSH(0xffffffffffffffff, 0x40085500, 0x100000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002", 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 1.449756919s ago: executing program 1 (id=2535): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x8000000, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) 1.449297599s ago: executing program 6 (id=2536): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70a000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2) 1.31883413s ago: executing program 0 (id=2538): mknodat$loop(0xffffffffffffffff, 0x0, 0xac82, 0x0) creat(0x0, 0x70) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, 0x0, 0x8400) getpid() write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000ae1000/0x3000)=nil, 0x3000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000000000000000000000700"], 0x18}}], 0x1, 0x44008004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10011, &(0x7f0000000100)={[{@noinit_itable}, {@nogrpid}, {@grpjquota}, {@bh}, {@nogrpid}, {@noload}], [], 0x2c}, 0x84, 0x4d0, &(0x7f00000026c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) 1.119091068s ago: executing program 5 (id=2541): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@noauto_da_alloc}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000009c0)={0x9, 0x3fffffffc00, 0x5, 0x87f, 0x1, 0x0, [{0x30000000000, 0x9, 0x0, '\x00', 0xc82}]}) 1.064394036s ago: executing program 1 (id=2542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffe87}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xda19}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000041) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x942}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4040041) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044810) (async) r4 = open(&(0x7f0000000500)='./file0\x00', 0x4200, 0xc2) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x140f, 0x8, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) getpeername$packet(r4, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r5, r4, 0x4, 0x4, 0x4}, 0x50) (async) getsockname$packet(r4, &(0x7f0000000740), &(0x7f0000000780)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000800), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000b00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x264, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cef25e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16d8893f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22927c8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46db43a0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25be7864}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bef2e3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6796dcdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2472018b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23c58448}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x637445f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb534f20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aba4b4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a648f12}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2205c577}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7774c0e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aef0c3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13a88d67}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5c110f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45ac136e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x494c9f7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a9f8c8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c672844}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39b62e50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a17}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) r8 = dup(r0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x88, 0x1403, 0x2, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) r9 = getpid() perf_event_open(&(0x7f0000000cc0)={0x0, 0x80, 0x3, 0x0, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x10000, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5bc5, 0x8}, 0x0, 0x5, 0x1, 0x7, 0x4, 0x47, 0x9, 0x0, 0x7, 0x0, 0xfffffffffffffffe}, r9, 0x8, 0xffffffffffffffff, 0x8) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x88, 0x464, 0x100, 0x70bd2d, 0x25dfdbfe, "6856551feb144dc77879a7441aedd76215c4a47f3aefc576fc9e0f219583138dbeaf56483cb870ee472af6242632b5fd23b4878c4a7d68fd87001435d0db7b0090eb95332cf346a57ea0c473cabbfbd56428e24b779eab4dcfd724192fe88d2f0c3ece2bc6a5750f940e0719fa67f8b0624033c869", ["", "", "", "", "", "", ""]}, 0x88}, 0x1, 0x0, 0x0, 0x20000}, 0x48811) (async) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ec0), 0x30000, 0x0) sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xc4, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa4}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffff62f}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x29}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x32}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2}, 0x400c049) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001100), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, r12, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), r10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc1}]}, 0x1c}}, 0xaa4e0640e3d0bd4) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x44, r12, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:v4l_device_t:s0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000080) 923.419996ms ago: executing program 1 (id=2544): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 692.635427ms ago: executing program 5 (id=2545): r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000340)=""/154, &(0x7f0000000080)=0x9a) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstopts={{0x18, 0x29, 0x32}}], 0x18}, 0x20048855) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = signalfd(r0, &(0x7f0000000540)={[0x8]}, 0x8) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f00000023c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x6f4}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000adc0000000b0a010200000000000000000700000158000980540002802400168008000140000000010800014000000003080001408000000008000140000000092c0001800800014000000003080001400000000908000140337252d10800014080000001080001400000000d08000c400000000860001180090001006c617374000000005000028008000140ffffffff0c00024000000000000000010c000240000000000000000208000140000000010c00024000000000000080010c00024000000000301bc5750c000240ffffffffffff80000800044000000002140000001100010000000000000000000700000a"], 0x104}}, 0x40040011) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r0], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40014) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x2c020400) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@private1, 0x18}) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) ioctl$sock_bt_hci(r6, 0x400448cc, 0x0) 403.559046ms ago: executing program 0 (id=2546): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0x6}, 0x14, 0x1ff, 0x2, 0x0, 0x2, 0x7575, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b7000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) syz_read_part_table(0x1056, &(0x7f0000001080)="$eJzsz7GpwlAcxeHz3n15WklG0NrGFWKrbSqXcATBRWwsdDGnECWEIBlARPi+6h74ceEfPupntB5JpsM4lXFUhqKzue8nyWG+yLH5fX3Q1Dmvl5nVya7b21UuzX+quspfX9zapH+Xkvb6ztsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fs8AwAA///TrQug") ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008044) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x3, 0x0) r4 = dup3(r2, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f00000001c0)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x4}, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/196, 0xc4}], 0x1, 0x8, 0x6b8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 333.853031ms ago: executing program 6 (id=2547): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00022bbd7000fcdbdf25520000000c0099000000000006000000"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 332.137241ms ago: executing program 6 (id=2548): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fb, &(0x7f0000002440)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x258}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) read$eventfd(r0, &(0x7f0000000180), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) splice(r5, 0x0, r7, 0x0, 0x408cd, 0xc) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) statx(r5, &(0x7f0000000140)='./file1/file0\x00', 0x6000, 0x200, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r8, 0x0, 0x0, 0x1001ed) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x16a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r10, 0x6, 0x12, &(0x7f0000000140)=0xfb78, 0x4) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) 211.244825ms ago: executing program 4 (id=2549): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001100)={0xf4, 0x9, 0x8, "01e6fd7331f1fcfb6d6b3c58c6b4e24707229ad717ac26b9b6e666a8c8ea1ba0e4ac58b556518dc881f2c863fefbfc24a9d6ceebcf759220a37bc0f0b55daea901fbbab8ecf9719429e6b05a909ce7a201bc0781dea350ec5597384fcf43ae945eed4adcd2a35774c17c923662abac6719ab82d48bf4292f0842ae509e52747a717b63de80506840fb6ec2d78cee846632a5b0bf4b59551eb89fecb13f9765c26c14691e629a35d8cb7011c98e6d0b5412c5245647e39c547617bdde751bec2bab4cc653387504135711ef748f4562b192dda98f02e2c252bfc812529471bf6907a6e338fb0e64f3c374471425bd7ae62fba00bf"}) 195.795941ms ago: executing program 4 (id=2550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 170.061216ms ago: executing program 4 (id=2551): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x7, 0x0) 105.833722ms ago: executing program 4 (id=2552): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x14b042, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0x80000001, 0x1, 0x1}) 105.442072ms ago: executing program 4 (id=2553): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket(0x2, 0x3, 0x67) sendto$unix(r0, 0x0, 0x0, 0x41, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 98.950321ms ago: executing program 4 (id=2554): r0 = fsmount(0xffffffffffffffff, 0x0, 0x6) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x800000001ff, 0x2) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$inet6(0xa, 0x805, 0x0) 0s ago: executing program 1 (id=2555): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): speed/duplex [ 348.749864][T10931] can0: slcan on ttyS3. [ 348.772305][T10927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e118, mo2=0002] [ 348.787635][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 348.791059][T10927] System zones: 1-12 [ 348.802687][T10927] EXT4-fs (loop5): orphan cleanup on readonly fs [ 348.811943][T10927] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 33619980: comm syz.5.2085: invalid block [ 348.824524][T10927] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 348.827520][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 348.843173][ C1] EXT4-fs (loop5): initial error at time 1772263202: ext4_get_branch:178: inode 13: block 33619980 [ 348.853884][ C1] EXT4-fs (loop5): last error at time 1772263202: ext4_get_branch:178: inode 13: block 33619980 [ 348.871405][T10927] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2085: invalid indirect mapped block 1819239214 (level 1) [ 348.886656][T10927] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 348.888260][T10930] can0 (unregistered): slcan off ttyS3. [ 348.911962][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 348.953850][T10927] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2085: bg 0: block 361: padding at end of block bitmap is not set [ 348.970028][T10927] loop5: lost filesystem error report for type 5 error -117 [ 348.971789][T10927] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 348.995384][T10927] loop5: lost filesystem error report for type 5 error -117 [ 348.996838][T10927] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2085: attempt to clear invalid blocks 33619980 len 1 [ 349.020801][T10927] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 349.027587][T10927] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2085: invalid indirect mapped block 1819239214 (level 0) [ 349.054576][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 349.071190][T10927] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 349.072888][T10927] EXT4-fs (loop5): 1 truncate cleaned up [ 349.107402][T10927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 349.177590][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 349.261247][T10966] loop4: detected capacity change from 0 to 512 [ 349.301122][T10966] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.4.2090: corrupted xattr block 95: invalid header [ 349.337645][T10966] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 349.349815][T10966] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2090: bg 0: block 7: invalid block bitmap [ 349.358990][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 349.359012][ C0] EXT4-fs (loop4): initial error at time 1772263202: ext4_expand_extra_isize_ea:2808: inode 11 [ 349.359060][ C0] EXT4-fs (loop4): last error at time 1772263202: ext4_expand_extra_isize_ea:2808: inode 11 [ 349.384600][ T3850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.388512][T10966] loop4: lost filesystem error report for type 5 error -117 [ 349.424058][T10966] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 349.467562][T10966] loop4: lost filesystem error report for type 5 error -117 [ 349.467830][T10966] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2970: inode #11: comm syz.4.2090: corrupted xattr block 95: invalid header [ 349.603465][T10966] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 349.603744][T10966] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 349.628597][T10985] syz1: rxe_newlink: already configured on syz_tun [ 349.643119][T10966] EXT4-fs (loop4): 1 orphan inode deleted [ 349.650959][T10985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.659072][T10966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.679799][T10985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.736847][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.103389][T10990] loop1: detected capacity change from 0 to 512 [ 350.159024][T10990] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 350.186831][T10990] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2099: invalid indirect mapped block 2683928664 (level 1) [ 350.212953][T10990] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 350.227161][T10990] EXT4-fs (loop1): Remounting filesystem read-only [ 350.236355][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 350.236379][ C0] EXT4-fs (loop1): initial error at time 1772263203: ext4_free_branches:1023: inode 13 [ 350.236420][ C0] EXT4-fs (loop1): last error at time 1772263203: ext4_free_branches:1023: inode 13 [ 350.269702][T10990] EXT4-fs (loop1): 1 truncate cleaned up [ 350.275831][T10990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.013785][T11003] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2102'. [ 352.131858][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 352.131873][ T28] audit: type=1326 audit(1772263205.603:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e6bc799 code=0x7ffc0000 [ 352.179793][ T28] audit: type=1326 audit(1772263205.633:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f199e6bc799 code=0x7ffc0000 [ 352.237563][ T28] audit: type=1326 audit(1772263205.633:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e6bc799 code=0x7ffc0000 [ 352.275009][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.285990][ T28] audit: type=1326 audit(1772263205.633:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e6bc799 code=0x7ffc0000 [ 352.392085][ T28] audit: type=1326 audit(1772263205.823:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 352.416155][ T28] audit: type=1326 audit(1772263205.823:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 352.440498][ T28] audit: type=1326 audit(1772263205.823:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 352.456326][T11013] lo speed is unknown, defaulting to 1000 [ 352.468279][T11022] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 352.472081][T11020] rdma_rxe: rxe_newlink: failed to add syz_tun [ 352.482969][ T28] audit: type=1326 audit(1772263205.823:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 352.520065][ T28] audit: type=1326 audit(1772263205.823:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 352.597168][ T28] audit: type=1326 audit(1772263205.823:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 352.603164][T11031] netlink: 'syz.1.2113': attribute type 10 has an invalid length. [ 352.640427][T11033] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2114'. [ 352.779832][T11031] bond1: option mode: unable to set because the bond device has slaves [ 352.802008][T11031] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 353.068085][ T8370] net_ratelimit: 32 callbacks suppressed [ 353.068190][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 353.219370][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 353.377825][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 353.727577][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 353.867810][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 353.895848][T11051] lo speed is unknown, defaulting to 1000 [ 353.916989][T11059] xt_hashlimit: size too large, truncated to 1048576 [ 353.997701][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 354.107591][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 354.227820][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 354.351227][T11066] rdma_rxe: rxe_newlink: failed to add syz_tun [ 354.357615][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 354.378077][T11068] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2126'. [ 354.404356][T11065] loop6: detected capacity change from 0 to 4096 [ 354.477666][ T30] bond3: (slave macvlan3): failed to get link speed/duplex [ 354.530726][T11078] loop6: detected capacity change from 0 to 512 [ 354.593816][T11078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.606594][T11078] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.758825][T11092] loop1: detected capacity change from 0 to 128 [ 354.792063][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.792066][T11092] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.818848][T11092] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.906552][T11099] rdma_rxe: rxe_newlink: failed to add syz_tun [ 354.967486][T11102] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2138'. [ 355.042330][T11092] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2134'. [ 355.059536][T11092] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2134'. [ 355.131154][T11111] can0: slcan on ttyS3. [ 355.188221][T11110] can0 (unregistered): slcan off ttyS3. [ 355.997842][ T10] page_pool_release_retry() stalled pool shutdown: id 35, 102 inflight 180 sec [ 356.026733][T11124] xt_CT: No such helper "snmp_trap" [ 356.165460][T11129] tipc: Started in network mode [ 356.176440][T11129] tipc: Node identity 4, cluster identity 4711 [ 356.195002][T11129] tipc: Node number set to 4 [ 356.324713][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.356903][T11147] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2149'. [ 356.388588][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.401843][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.527963][T11166] can0: slcan on ttyS3. [ 356.578548][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 356.596500][T11158] netlink: 'syz.5.2146': attribute type 4 has an invalid length. [ 356.605293][T11164] can0 (unregistered): slcan off ttyS3. [ 356.638786][T11176] loop4: detected capacity change from 0 to 512 [ 356.655678][T11168] loop0: detected capacity change from 0 to 512 [ 356.673447][T11176] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 356.706206][T11176] EXT4-fs (loop4): 1 truncate cleaned up [ 356.712565][T11176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.726239][T11168] EXT4-fs: Ignoring removed bh option [ 356.842902][T11168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e118, mo2=0002] [ 356.851475][T11168] System zones: 1-12 [ 356.857304][T11168] EXT4-fs (loop0): orphan cleanup on readonly fs [ 356.874884][T11168] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.2151: invalid block [ 356.888704][T11168] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 356.913229][T11168] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2151: invalid indirect mapped block 1819239214 (level 1) [ 356.923159][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 356.923309][ C1] EXT4-fs (loop0): initial error at time 1772263210: ext4_get_branch:178: inode 13: block 33619980 [ 356.923540][ C1] EXT4-fs (loop0): last error at time 1772263210: ext4_get_branch:178: inode 13: block 33619980 [ 357.128792][T11184] lo speed is unknown, defaulting to 1000 [ 357.266100][T11169] loop5: detected capacity change from 0 to 512 [ 357.305657][T11168] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 357.310077][T11168] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2151: bg 0: block 361: padding at end of block bitmap is not set [ 357.337942][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.365733][T11168] loop0: lost filesystem error report for type 5 error -117 [ 357.368479][T11168] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 357.376765][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.406567][T11169] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.2146: inode #0: comm syz.5.2146: iget: illegal inode # [ 357.416263][T11186] xt_hashlimit: size too large, truncated to 1048576 [ 357.429846][T11168] loop0: lost filesystem error report for type 5 error -117 [ 357.432099][T11168] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2151: attempt to clear invalid blocks 33619980 len 1 [ 357.461389][T11189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.475614][T11169] loop5: lost filesystem error report for type 5 error -117 [ 357.477221][T11169] EXT4-fs (loop5): get orphan inode failed [ 357.484579][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 357.484607][ C1] EXT4-fs (loop5): initial error at time 1772263210: ext4_init_orphan_info:583 [ 357.484637][ C1] EXT4-fs (loop5): last error at time 1772263210: ext4_init_orphan_info:583 [ 357.550847][T11168] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 357.554217][T11168] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2151: invalid indirect mapped block 1819239214 (level 0) [ 357.563434][T11189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.595856][T11169] EXT4-fs (loop5): mount failed [ 357.599346][T11189] netlink: 'syz.1.2156': attribute type 12 has an invalid length. [ 357.637672][T11168] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 357.674649][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.676089][T11168] EXT4-fs (loop0): 1 truncate cleaned up [ 357.758430][T11191] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 357.815218][T11168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 357.836571][T11200] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2160'. [ 358.002145][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 358.002209][ T28] audit: type=1400 audit(1772263211.473:3234): avc: denied { setopt } for pid=11203 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 358.048347][T11206] loop5: detected capacity change from 0 to 128 [ 358.067718][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.117576][ T28] audit: type=1400 audit(1772263211.583:3235): avc: denied { setopt } for pid=11203 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.157790][ T12] net_ratelimit: 22 callbacks suppressed [ 358.157808][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 358.360419][T11215] can0: slcan on ttyS3. [ 358.417213][T11217] -1: renamed from syzkaller0 [ 358.718558][T11214] can0 (unregistered): slcan off ttyS3. [ 358.724371][T11242] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 358.732263][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 358.833086][T11256] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2172'. [ 358.867586][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 358.938496][ T28] audit: type=1400 audit(1772263212.413:3236): avc: denied { create } for pid=11264 comm="syz.6.2174" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.038816][ T40] bond3: (slave macvlan3): failed to get link speed/duplex [ 359.057867][ T28] audit: type=1400 audit(1772263212.483:3237): avc: denied { write } for pid=11264 comm="syz.6.2174" name="file2" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.080790][ T28] audit: type=1400 audit(1772263212.483:3238): avc: denied { open } for pid=11264 comm="syz.6.2174" path="/41/file2" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.082941][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2176'. [ 359.103690][ T28] audit: type=1400 audit(1772263212.483:3239): avc: denied { ioctl } for pid=11264 comm="syz.6.2174" path="/41/file2" dev="tmpfs" ino=239 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.345546][ T40] bond3: (slave macvlan3): failed to get link speed/duplex [ 359.487653][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 359.634715][ T28] audit: type=1400 audit(1772263212.493:3240): avc: denied { unlink } for pid=10134 comm="syz-executor" name="file2" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.657829][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 359.777727][ T30] bond3: (slave macvlan3): failed to get link speed/duplex [ 359.831188][ T28] audit: type=1326 audit(1772263212.533:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.1.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 359.887731][ T40] bond3: (slave macvlan3): failed to get link speed/duplex [ 359.980229][ T28] audit: type=1326 audit(1772263212.533:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.1.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 360.018283][ T30] bond3: (slave macvlan3): failed to get link speed/duplex [ 360.154306][T11282] loop1: detected capacity change from 0 to 512 [ 360.170065][ T28] audit: type=1326 audit(1772263212.553:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.1.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 360.215370][T11282] EXT4-fs (loop1): blocks per group (8192) and clusters per group (2304) inconsistent [ 360.260849][T11285] x_tables: duplicate underflow at hook 3 [ 360.385562][T11287] syzkaller0: entered promiscuous mode [ 360.404068][T11287] syzkaller0: entered allmulticast mode [ 360.540556][T11292] loop6: detected capacity change from 0 to 1024 [ 360.579877][T11290] can0: slcan on ttyS3. [ 360.593534][T11292] EXT4-fs: Ignoring removed bh option [ 360.616866][T11292] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 360.638286][T11289] can0 (unregistered): slcan off ttyS3. [ 360.681480][T11292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.744244][T11306] loop5: detected capacity change from 0 to 512 [ 360.747782][T11292] EXT4-fs error (device loop6): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.6.2182: path /45/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 360.780076][T11303] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 360.804596][T11292] EXT4-fs (loop6): Remounting filesystem read-only [ 360.805207][T11306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.859095][T11320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2187'. [ 360.868410][T11306] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.899317][T11323] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2186'. [ 360.917907][T11306] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.939058][T11323] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2186'. [ 360.975055][T11323] netlink: 'syz.0.2186': attribute type 5 has an invalid length. [ 360.993896][T11320] netlink: 'syz.4.2187': attribute type 10 has an invalid length. [ 361.012377][T11320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.027976][T11323] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2186'. [ 361.029753][T11320] team0: Device bond0 failed to register rx_handler [ 361.151308][T11318] loop0: detected capacity change from 0 to 512 [ 361.161710][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.172407][T11318] EXT4-fs: Ignoring removed nobh option [ 361.214269][T11318] EXT4-fs (loop0): orphan cleanup on readonly fs [ 361.230440][T11318] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2186: EA inode hash validation failed [ 361.246332][T11318] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 361.270040][T11318] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2186: corrupted inode contents [ 361.282972][T11318] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.283725][T11318] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.2186: mark_inode_dirty error [ 361.296791][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 361.296888][ C0] EXT4-fs (loop0): initial error at time 1772263214: ext4_do_update_inode:5569: inode 15 [ 361.297115][ C0] EXT4-fs (loop0): last error at time 1772263214: ext4_do_update_inode:5569: inode 15 [ 361.352697][T11318] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.389755][T11318] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2186: corrupted inode contents [ 361.428112][T11318] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.429543][T11318] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2186: mark_inode_dirty error [ 361.467954][T11318] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.483980][T11318] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.2186: mark inode dirty (error -117) [ 361.509541][T11318] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.510347][T11318] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 361.531114][T11318] EXT4-fs (loop0): 1 orphan inode deleted [ 361.544253][T11318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 361.587834][T11352] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2191'. [ 361.597589][T11352] netlink: 'syz.6.2191': attribute type 9 has an invalid length. [ 361.605524][T11352] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2191'. [ 361.614639][T11352] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2191'. [ 362.390417][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.574539][T11361] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 363.221426][ T40] net_ratelimit: 15 callbacks suppressed [ 363.221513][ T40] bond3: (slave macvlan3): failed to get link speed/duplex [ 363.361204][T11370] syzkaller1: entered promiscuous mode [ 363.396799][T11370] syzkaller1: entered allmulticast mode [ 363.457560][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 363.567708][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 363.577368][T11369] loop6: detected capacity change from 0 to 8192 [ 363.586433][T11373] loop0: detected capacity change from 0 to 8192 [ 363.654675][T11377] FAULT_INJECTION: forcing a failure. [ 363.654675][T11377] name failslab, interval 1, probability 0, space 0, times 0 [ 363.668409][T11377] CPU: 1 UID: 0 PID: 11377 Comm: syz.4.2200 Tainted: G W syzkaller #0 PREEMPT(full) [ 363.668473][T11377] Tainted: [W]=WARN [ 363.668479][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.668515][T11377] Call Trace: [ 363.668523][T11377] [ 363.668532][T11377] __dump_stack+0x1d/0x30 [ 363.668562][T11377] dump_stack_lvl+0x95/0xd0 [ 363.668583][T11377] dump_stack+0x15/0x1b [ 363.668606][T11377] should_fail_ex+0x263/0x280 [ 363.668667][T11377] should_failslab+0x8c/0xb0 [ 363.668689][T11377] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 363.668713][T11377] ? __alloc_skb+0x2d6/0x690 [ 363.668738][T11377] __alloc_skb+0x2d6/0x690 [ 363.668801][T11377] ? __alloc_skb+0x200/0x690 [ 363.668871][T11377] netlink_ack+0xfd/0x500 [ 363.668953][T11377] netlink_rcv_skb+0x192/0x220 [ 363.668976][T11377] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 363.669047][T11377] nfnetlink_rcv+0x167/0x1720 [ 363.669066][T11377] ? xas_load+0x413/0x430 [ 363.669125][T11377] ? xas_load+0x413/0x430 [ 363.669151][T11377] ? __rcu_read_unlock+0x4e/0x70 [ 363.669169][T11377] ? xa_load+0xb1/0xe0 [ 363.669260][T11377] ? __account_obj_stock+0x211/0x350 [ 363.669295][T11377] ? obj_cgroup_charge_account+0x122/0x1a0 [ 363.669317][T11377] ? should_fail_ex+0x30/0x280 [ 363.669416][T11377] ? __rcu_read_unlock+0x4e/0x70 [ 363.669438][T11377] ? avc_has_perm_noaudit+0xab/0x130 [ 363.669459][T11377] ? _raw_spin_lock_bh+0x56/0xb0 [ 363.669501][T11377] ? _raw_spin_unlock_bh+0x18/0x20 [ 363.669525][T11377] ? selinux_nlmsg_lookup+0x99/0x890 [ 363.669554][T11377] ? __rcu_read_unlock+0x33/0x70 [ 363.669570][T11377] ? __netlink_lookup+0x276/0x2b0 [ 363.669606][T11377] netlink_unicast+0x5c0/0x690 [ 363.669631][T11377] netlink_sendmsg+0x5c8/0x6f0 [ 363.669699][T11377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.669726][T11377] ____sys_sendmsg+0x5af/0x600 [ 363.669793][T11377] ___sys_sendmsg+0x195/0x1e0 [ 363.669825][T11377] __x64_sys_sendmsg+0xd4/0x160 [ 363.669856][T11377] x64_sys_call+0x194c/0x3020 [ 363.669883][T11377] do_syscall_64+0x12c/0x370 [ 363.669948][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.669972][T11377] RIP: 0033:0x7f8b9e39c799 [ 363.669987][T11377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.670002][T11377] RSP: 002b:00007f8b9cdb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.670043][T11377] RAX: ffffffffffffffda RBX: 00007f8b9e616180 RCX: 00007f8b9e39c799 [ 363.670059][T11377] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 000000000000000a [ 363.670074][T11377] RBP: 00007f8b9cdb5090 R08: 0000000000000000 R09: 0000000000000000 [ 363.670101][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.670115][T11377] R13: 00007f8b9e616218 R14: 00007f8b9e616180 R15: 00007ffed658c7d8 [ 363.670209][T11377] [ 363.967102][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 364.079539][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 364.199555][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 364.309635][ T30] bond3: (slave macvlan3): failed to get link speed/duplex [ 364.356118][T11381] xt_CT: No such helper "snmp_trap" [ 364.386982][T11386] loop4: detected capacity change from 0 to 512 [ 364.412598][T11387] loop1: detected capacity change from 0 to 512 [ 364.421260][T11386] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 364.440907][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 364.447672][T11386] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2203: invalid indirect mapped block 2683928664 (level 1) [ 364.463910][T11386] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.464172][T11386] EXT4-fs (loop4): Remounting filesystem read-only [ 364.473963][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 364.473984][ C0] EXT4-fs (loop4): initial error at time 1772263217: ext4_free_branches:1023: inode 13 [ 364.474009][ C0] EXT4-fs (loop4): last error at time 1772263217: ext4_free_branches:1023: inode 13 [ 364.474146][T11387] EXT4-fs (loop1): 1 truncate cleaned up [ 364.511058][T11388] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2204'. [ 364.512884][T11387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.551751][T11388] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2204'. [ 364.553887][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 364.553916][ T28] audit: type=1400 audit(1772263218.023:3281): avc: denied { rename } for pid=11384 comm="syz.1.2205" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.567728][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 364.568274][ T28] audit: type=1400 audit(1772263218.043:3282): avc: denied { unlink } for pid=11384 comm="syz.1.2205" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.591451][T11386] EXT4-fs (loop4): 1 truncate cleaned up [ 364.639865][T11388] netlink: 'syz.6.2204': attribute type 5 has an invalid length. [ 364.648895][T11387] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2205: bg 0: block 465: padding at end of block bitmap is not set [ 364.663740][T11387] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 364.665251][T11386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.691861][ T28] audit: type=1400 audit(1772263218.163:3283): avc: denied { checkpoint_restore } for pid=11396 comm="syz.0.2207" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 364.693432][T11388] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2204'. [ 364.726315][T11387] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2205: invalid indirect mapped block 234881024 (level 0) [ 364.747719][T11395] loop6: detected capacity change from 0 to 512 [ 364.767620][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 364.787476][T11395] EXT4-fs: Ignoring removed nobh option [ 364.835051][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.844654][T11395] EXT4-fs (loop6): orphan cleanup on readonly fs [ 364.858082][T11395] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2204: EA inode hash validation failed [ 364.878550][T11395] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2204: corrupted inode contents [ 364.891706][T11395] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 364.897519][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 364.913240][ C0] EXT4-fs (loop6): initial error at time 1772263218: ext4_do_update_inode:5569: inode 15 [ 364.923117][ C0] EXT4-fs (loop6): last error at time 1772263218: ext4_do_update_inode:5569: inode 15 [ 364.958905][T11395] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.2204: mark_inode_dirty error [ 365.119188][T11395] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 365.119503][T11395] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2204: corrupted inode contents [ 365.160843][ T28] audit: type=1326 audit(1772263218.583:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.5.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e6bc799 code=0x7ffc0000 [ 365.345242][T11408] loop1: detected capacity change from 0 to 512 [ 365.368480][T11395] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 365.373632][ T28] audit: type=1326 audit(1772263218.583:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.5.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f199e6bc799 code=0x7ffc0000 [ 365.376927][T11395] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.2204: mark_inode_dirty error [ 365.382902][ T28] audit: type=1326 audit(1772263218.583:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.5.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e6bc799 code=0x7ffc0000 [ 365.419680][T11408] EXT4-fs: Ignoring removed nobh option [ 365.419927][T11408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 365.444672][ T28] audit: type=1326 audit(1772263218.583:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.5.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e6bc799 code=0x7ffc0000 [ 365.444715][T11395] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 365.489589][T11395] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.2204: mark inode dirty (error -117) [ 365.512016][T11395] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 365.512157][T11395] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 365.579439][T11395] EXT4-fs (loop6): 1 orphan inode deleted [ 365.580369][T11408] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 365.586561][T11395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 365.612242][T11408] EXT4-fs (loop1): 1 truncate cleaned up [ 365.618505][T11408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.399204][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.471531][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.100851][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.501092][T11443] loop6: detected capacity change from 0 to 512 [ 367.512542][T11443] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 367.549097][T11439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2218'. [ 367.653689][T11437] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 367.703350][ T28] audit: type=1326 audit(1772263221.163:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.4.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e39c799 code=0x7ffc0000 [ 367.776272][ T28] audit: type=1326 audit(1772263221.193:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.4.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e39c799 code=0x7ffc0000 [ 367.864608][ T28] audit: type=1326 audit(1772263221.193:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.4.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8b9e39c799 code=0x7ffc0000 [ 367.939479][T11459] loop5: detected capacity change from 0 to 512 [ 367.953114][T11459] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 367.962649][T11459] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2225: invalid indirect mapped block 2683928664 (level 1) [ 367.981859][T11462] loop4: detected capacity change from 0 to 256 [ 368.007873][T11459] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 368.017568][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 368.024805][T11462] FAT-fs (loop4): Directory bread(block 64) failed [ 368.026958][ C0] EXT4-fs (loop5): initial error at time 1772263221: ext4_free_branches:1023: inode 13 [ 368.044800][T11462] FAT-fs (loop4): Directory bread(block 65) failed [ 368.049958][ C0] EXT4-fs (loop5): last error at time 1772263221: ext4_free_branches:1023: inode 13 [ 368.086494][T11464] loop1: detected capacity change from 0 to 1024 [ 368.093190][T11459] EXT4-fs (loop5): Remounting filesystem read-only [ 368.100018][T11459] EXT4-fs (loop5): 1 truncate cleaned up [ 368.105780][T11462] FAT-fs (loop4): Directory bread(block 66) failed [ 368.142893][T11464] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.150825][T11459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.168332][T11462] FAT-fs (loop4): Directory bread(block 67) failed [ 368.186777][T11462] FAT-fs (loop4): Directory bread(block 68) failed [ 368.193742][T11462] FAT-fs (loop4): Directory bread(block 69) failed [ 368.205433][T11462] FAT-fs (loop4): Directory bread(block 70) failed [ 368.216725][T11464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 368.237598][T11462] FAT-fs (loop4): Directory bread(block 71) failed [ 368.247869][T11464] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.262453][T11462] FAT-fs (loop4): Directory bread(block 72) failed [ 368.271136][T11462] FAT-fs (loop4): Directory bread(block 73) failed [ 368.290371][T11464] EXT4-fs (loop1): shut down requested (2) [ 368.290766][T11464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 368.290811][T11464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 368.302174][ T8370] net_ratelimit: 26 callbacks suppressed [ 368.302190][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 368.303179][T11464] syzkaller1: entered promiscuous mode [ 368.303196][T11464] syzkaller1: entered allmulticast mode [ 368.307563][T11464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 368.307638][T11464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 368.307659][T11464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 368.307744][T11464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 368.307830][T11464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 368.307849][T11464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 368.333661][T11462] ip6tnl0: left promiscuous mode [ 368.333682][T11462] ip6tnl0: left allmulticast mode [ 368.345387][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2229'. [ 368.345417][T11473] netlink: 'syz.6.2229': attribute type 5 has an invalid length. [ 368.345429][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2229'. [ 368.367988][T11462] bond0: (slave syz_tun): Releasing backup interface [ 368.370706][T11462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.384217][T11473] geneve2: entered promiscuous mode [ 368.516321][T11473] geneve2: entered allmulticast mode [ 368.531942][ T40] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 45665 - 0 [ 368.540953][ T40] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 45665 - 0 [ 368.550371][ T40] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 45665 - 0 [ 368.559429][ T40] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 45665 - 0 [ 368.580496][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2230'. [ 368.589939][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 368.603786][T11478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.616131][T11478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.631186][T11480] loop1: detected capacity change from 0 to 512 [ 368.640286][T11478] bond0 (unregistering): Released all slaves [ 368.659829][T11480] EXT4-fs (loop1): 1 truncate cleaned up [ 368.677542][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 368.695685][T11480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.767601][T11480] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2231: bg 0: block 465: padding at end of block bitmap is not set [ 368.787758][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 368.820217][T11480] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 368.829242][T11480] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2231: invalid indirect mapped block 234881024 (level 0) [ 368.888198][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.921150][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 368.997727][T11494] loop1: detected capacity change from 0 to 128 [ 369.037903][T11494] msdos: Unknown parameter 'Ş2%€¤9Äsk' [ 369.043692][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 369.150800][T11496] loop1: detected capacity change from 0 to 128 [ 369.177244][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 369.187035][T11496] FAT-fs (loop1): bogus number of FAT sectors [ 369.193359][T11496] FAT-fs (loop1): Can't find a valid FAT filesystem [ 369.249789][T11496] syzkaller0: entered promiscuous mode [ 369.259025][T11496] syzkaller0: entered allmulticast mode [ 369.317591][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 369.344061][T11498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.368531][T11498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.428605][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 369.477127][ T3850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.511215][T11514] loop0: detected capacity change from 0 to 512 [ 369.521627][T11514] EXT4-fs (loop0): 1 truncate cleaned up [ 369.528493][T11514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.540553][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 369.549503][T11514] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2245: bg 0: block 465: padding at end of block bitmap is not set [ 369.564184][T11514] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 369.573117][T11514] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2245: invalid indirect mapped block 234881024 (level 0) [ 369.595538][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.643543][T11519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2247'. [ 369.656161][T11519] loop0: detected capacity change from 0 to 1024 [ 369.669707][T11519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.685171][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 369.685203][ T28] audit: type=1400 audit(1772263223.153:3313): avc: denied { write } for pid=11518 comm="syz.0.2247" name="file3" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 369.713555][ T28] audit: type=1400 audit(1772263223.153:3314): avc: denied { rename } for pid=11518 comm="syz.0.2247" name="file3" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 369.735486][ T28] audit: type=1400 audit(1772263223.153:3315): avc: denied { reparent } for pid=11518 comm="syz.0.2247" name="file3" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 369.779886][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.913574][ T28] audit: type=1400 audit(1772263223.383:3316): avc: denied { read } for pid=11528 comm="syz.6.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 369.968597][T11534] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2250'. [ 370.283814][ T28] audit: type=1326 audit(1772263223.753:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.1.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 370.311843][ T28] audit: type=1326 audit(1772263223.753:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.1.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 370.336376][ T28] audit: type=1326 audit(1772263223.783:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.1.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 370.360093][ T28] audit: type=1326 audit(1772263223.783:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.1.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 370.384931][ T28] audit: type=1326 audit(1772263223.783:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.1.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 370.467820][T11549] set_capacity_and_notify: 1 callbacks suppressed [ 370.467956][T11549] loop6: detected capacity change from 0 to 512 [ 370.484744][T11549] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 371.101942][ T28] audit: type=1400 audit(1772263224.573:3322): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 371.128509][T11558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.144196][T11558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.369746][T11560] FAULT_INJECTION: forcing a failure. [ 371.369746][T11560] name failslab, interval 1, probability 0, space 0, times 0 [ 371.384467][T11560] CPU: 1 UID: 0 PID: 11560 Comm: syz.1.2260 Tainted: G W syzkaller #0 PREEMPT(full) [ 371.384567][T11560] Tainted: [W]=WARN [ 371.384573][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.384584][T11560] Call Trace: [ 371.384591][T11560] [ 371.384598][T11560] __dump_stack+0x1d/0x30 [ 371.384625][T11560] dump_stack_lvl+0x95/0xd0 [ 371.384714][T11560] dump_stack+0x15/0x1b [ 371.384799][T11560] should_fail_ex+0x263/0x280 [ 371.384820][T11560] should_failslab+0x8c/0xb0 [ 371.384902][T11560] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 371.384921][T11560] ? __alloc_skb+0x2d6/0x690 [ 371.384942][T11560] __alloc_skb+0x2d6/0x690 [ 371.384960][T11560] ? __alloc_skb+0x200/0x690 [ 371.385010][T11560] netlink_alloc_large_skb+0xbf/0xf0 [ 371.385036][T11560] netlink_sendmsg+0x40c/0x6f0 [ 371.385072][T11560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.385159][T11560] ____sys_sendmsg+0x5af/0x600 [ 371.385198][T11560] ___sys_sendmsg+0x195/0x1e0 [ 371.385293][T11560] __x64_sys_sendmsg+0xd4/0x160 [ 371.385323][T11560] x64_sys_call+0x194c/0x3020 [ 371.385349][T11560] do_syscall_64+0x12c/0x370 [ 371.385368][T11560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.385409][T11560] RIP: 0033:0x7fc68bacc799 [ 371.385423][T11560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.385441][T11560] RSP: 002b:00007fc68a51f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.385484][T11560] RAX: ffffffffffffffda RBX: 00007fc68bd45fa0 RCX: 00007fc68bacc799 [ 371.385499][T11560] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 371.385546][T11560] RBP: 00007fc68a51f090 R08: 0000000000000000 R09: 0000000000000000 [ 371.385561][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.385575][T11560] R13: 00007fc68bd46038 R14: 00007fc68bd45fa0 R15: 00007ffd7d415f38 [ 371.385675][T11560] [ 371.762954][T11566] loop1: detected capacity change from 0 to 8192 [ 371.827934][T11568] loop0: detected capacity change from 0 to 4096 [ 372.012754][T11576] loop5: detected capacity change from 0 to 1024 [ 372.051494][T11576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.075866][T11583] FAULT_INJECTION: forcing a failure. [ 372.075866][T11583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.127615][T11583] CPU: 1 UID: 0 PID: 11583 Comm: syz.0.2268 Tainted: G W syzkaller #0 PREEMPT(full) [ 372.127646][T11583] Tainted: [W]=WARN [ 372.127652][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.127663][T11583] Call Trace: [ 372.127671][T11583] [ 372.127679][T11583] __dump_stack+0x1d/0x30 [ 372.127781][T11583] dump_stack_lvl+0x95/0xd0 [ 372.127800][T11583] dump_stack+0x15/0x1b [ 372.127818][T11583] should_fail_ex+0x263/0x280 [ 372.127856][T11583] should_fail+0xb/0x20 [ 372.127874][T11583] should_fail_usercopy+0x1a/0x20 [ 372.127944][T11583] _copy_from_user+0x1c/0xb0 [ 372.127966][T11583] ___sys_sendmsg+0xc1/0x1e0 [ 372.128002][T11583] __x64_sys_sendmsg+0xd4/0x160 [ 372.128032][T11583] x64_sys_call+0x194c/0x3020 [ 372.128138][T11583] do_syscall_64+0x12c/0x370 [ 372.128159][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.128244][T11583] RIP: 0033:0x7fbe61c2c799 [ 372.128258][T11583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.128273][T11583] RSP: 002b:00007fbe60687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.128292][T11583] RAX: ffffffffffffffda RBX: 00007fbe61ea5fa0 RCX: 00007fbe61c2c799 [ 372.128313][T11583] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 372.128326][T11583] RBP: 00007fbe60687090 R08: 0000000000000000 R09: 0000000000000000 [ 372.128339][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.128352][T11583] R13: 00007fbe61ea6038 R14: 00007fbe61ea5fa0 R15: 00007ffcedccc268 [ 372.128371][T11583] [ 372.321819][T11576] lo speed is unknown, defaulting to 1000 [ 372.379113][T11591] uprobe: syz.6.2271:11591 failed to unregister, leaking uprobe [ 372.418359][T11596] loop0: detected capacity change from 0 to 1024 [ 372.435116][T11598] loop1: detected capacity change from 0 to 4096 [ 372.474300][T11596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.522067][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.550506][T11608] loop6: detected capacity change from 0 to 512 [ 372.595895][T11613] FAULT_INJECTION: forcing a failure. [ 372.595895][T11613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.619598][T11608] EXT4-fs (loop6): 1 truncate cleaned up [ 372.625703][T11608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.647169][ T3507] IPVS: starting estimator thread 0... [ 372.708118][T11613] CPU: 1 UID: 0 PID: 11613 Comm: syz.0.2277 Tainted: G W syzkaller #0 PREEMPT(full) [ 372.708152][T11613] Tainted: [W]=WARN [ 372.708158][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.708219][T11613] Call Trace: [ 372.708224][T11613] [ 372.708232][T11613] __dump_stack+0x1d/0x30 [ 372.708314][T11613] dump_stack_lvl+0x95/0xd0 [ 372.708333][T11613] dump_stack+0x15/0x1b [ 372.708350][T11613] should_fail_ex+0x263/0x280 [ 372.708370][T11613] should_fail+0xb/0x20 [ 372.708431][T11613] should_fail_usercopy+0x1a/0x20 [ 372.708451][T11613] _copy_from_user+0x1c/0xb0 [ 372.708531][T11613] ___sys_recvmsg+0xaa/0x3b0 [ 372.708565][T11613] do_recvmmsg+0x1ef/0x560 [ 372.708591][T11613] ? fput+0x8f/0xc0 [ 372.708611][T11613] __x64_sys_recvmmsg+0xe5/0x170 [ 372.708660][T11613] x64_sys_call+0x80f/0x3020 [ 372.708747][T11613] do_syscall_64+0x12c/0x370 [ 372.708770][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.708797][T11613] RIP: 0033:0x7fbe61c2c799 [ 372.708811][T11613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.708826][T11613] RSP: 002b:00007fbe60687028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 372.708848][T11613] RAX: ffffffffffffffda RBX: 00007fbe61ea5fa0 RCX: 00007fbe61c2c799 [ 372.708938][T11613] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000003 [ 372.708950][T11613] RBP: 00007fbe60687090 R08: 0000000000000000 R09: 0000000000000000 [ 372.708963][T11613] R10: 0000004c42bb4f92 R11: 0000000000000246 R12: 0000000000000001 [ 372.709026][T11613] R13: 00007fbe61ea6038 R14: 00007fbe61ea5fa0 R15: 00007ffcedccc268 [ 372.709047][T11613] [ 372.937769][T11615] IPVS: using max 3072 ests per chain, 153600 per kthread [ 372.945921][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.119443][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2286'. [ 373.174258][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2286'. [ 373.204565][T11590] lo speed is unknown, defaulting to 1000 [ 373.255268][T11634] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2287'. [ 373.338169][ T1742] net_ratelimit: 27 callbacks suppressed [ 373.338193][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 373.416833][T11638] loop6: detected capacity change from 0 to 4096 [ 373.480837][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 373.510628][T11642] netlink: 'syz.6.2291': attribute type 21 has an invalid length. [ 373.538651][T11644] netlink: 'syz.4.2292': attribute type 10 has an invalid length. [ 373.541059][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2291'. [ 373.574767][T11644] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 373.614311][T11650] bond3: option mode: unable to set because the bond device has slaves [ 373.638215][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 373.729462][ T3850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.747546][ T40] bond3: (slave macvlan3): failed to get link speed/duplex [ 373.821821][T11662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.832702][T11662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.138134][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 374.249005][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 374.351028][T11653] loop1: detected capacity change from 0 to 8192 [ 374.378876][ T40] bond3: (slave macvlan3): failed to get link speed/duplex [ 374.402208][T11669] loop0: detected capacity change from 0 to 4096 [ 374.487833][ T40] bond3: (slave macvlan3): failed to get link speed/duplex [ 374.518652][T11679] EXT4-fs (loop1): 1 truncate cleaned up [ 374.527059][T11679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.564159][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.617788][ T40] bond3: (slave macvlan3): failed to get link speed/duplex [ 374.653402][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 374.723748][T11694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.733184][T11694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.757697][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 374.930137][T11696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 374.957930][T11696] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2313: bg 0: block 393: padding at end of block bitmap is not set [ 374.990537][T11696] loop1: lost filesystem error report for type 5 error -117 [ 374.990753][T11696] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 374.998656][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 374.998684][ C1] EXT4-fs (loop1): initial error at time 1772263228: ext4_validate_block_bitmap:441 [ 374.998706][ C1] EXT4-fs (loop1): last error at time 1772263228: ext4_validate_block_bitmap:441 [ 375.036068][T11696] loop1: lost filesystem error report for type 5 error -117 [ 375.036391][T11696] EXT4-fs (loop1): 2 truncates cleaned up [ 375.073178][T11696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.087473][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 375.096094][ T28] audit: type=1400 audit(1772263228.553:3341): avc: denied { link } for pid=11695 comm="syz.1.2313" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 375.140071][ T28] audit: type=1400 audit(1772263228.563:3342): avc: denied { unlink } for pid=11695 comm="syz.1.2313" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 375.185919][ T28] audit: type=1400 audit(1772263228.563:3343): avc: denied { mounton } for pid=11695 comm="syz.1.2313" path="/458/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 375.259359][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.322691][ T28] audit: type=1400 audit(1772263228.793:3344): avc: denied { write } for pid=11712 comm="syz.5.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.479489][T11725] set_capacity_and_notify: 3 callbacks suppressed [ 375.479505][T11725] loop5: detected capacity change from 0 to 4096 [ 376.098658][T11741] loop6: detected capacity change from 0 to 512 [ 376.146984][T11741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.281287][T11741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 376.316631][T11736] loop5: detected capacity change from 0 to 512 [ 376.325357][T11741] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 376.388989][T11741] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2331: Allocating blocks 41-42 which overlap fs metadata [ 376.414100][T11739] loop4: detected capacity change from 0 to 512 [ 376.424352][T11746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.435049][T11736] EXT4-fs: Ignoring removed bh option [ 376.454818][T11746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.467610][T11741] loop6: lost filesystem error report for type 5 error -117 [ 376.467745][T11741] EXT4-fs (loop6): Remounting filesystem read-only [ 376.481647][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 376.481677][ C1] EXT4-fs (loop6): initial error at time 1772263229: ext4_mb_mark_diskspace_used:4222 [ 376.481701][ C1] EXT4-fs (loop6): last error at time 1772263229: ext4_mb_mark_diskspace_used:4222 [ 376.520348][T11739] EXT4-fs: Ignoring removed bh option [ 376.532436][T11746] netlink: 'syz.1.2333': attribute type 3 has an invalid length. [ 376.567568][T11746] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2333'. [ 376.594309][T11739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e118, mo2=0002] [ 376.603608][T11736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e118, mo2=0002] [ 376.619011][T11741] Quota error (device loop6): write_blk: dquota write failed [ 376.644797][T11746] loop1: detected capacity change from 0 to 4096 [ 376.657577][T11741] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 376.667141][T11739] System zones: 1-12 [ 376.671795][T11736] System zones: 1-12 [ 376.676394][T11736] EXT4-fs (loop5): orphan cleanup on readonly fs [ 376.705195][T11741] Quota error (device loop6): write_blk: dquota write failed [ 376.715958][T11746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.741210][T11739] EXT4-fs (loop4): orphan cleanup on readonly fs [ 376.750845][T11741] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 376.789054][ T28] audit: type=1326 audit(1772263230.253:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 376.812927][T11741] EXT4-fs (loop6): 1 truncate cleaned up [ 376.823510][T11741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.840710][T11739] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2330: invalid indirect mapped block 1819239214 (level 1) [ 376.859760][T11736] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 33619980: comm syz.5.2329: invalid block [ 376.893296][ T28] audit: type=1326 audit(1772263230.253:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 376.947585][T11736] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 376.952385][T11736] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2329: invalid indirect mapped block 1819239214 (level 1) [ 376.962087][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 376.962129][ C1] EXT4-fs (loop5): initial error at time 1772263230: ext4_get_branch:178: inode 13: block 33619980 [ 376.962579][ C1] EXT4-fs (loop5): last error at time 1772263230: ext4_get_branch:178: inode 13: block 33619980 [ 377.012381][T11739] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 377.017587][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 377.033261][ C1] EXT4-fs (loop4): initial error at time 1772263230: ext4_free_branches:1023: inode 13 [ 377.042919][ C1] EXT4-fs (loop4): last error at time 1772263230: ext4_free_branches:1023: inode 13 [ 377.083670][T11739] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2330: bg 0: block 361: padding at end of block bitmap is not set [ 377.107024][T11736] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 377.115646][T11736] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2329: bg 0: block 361: padding at end of block bitmap is not set [ 377.129580][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.158835][T11739] loop4: lost filesystem error report for type 5 error -117 [ 377.160041][T11739] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 377.185026][T11756] loop0: detected capacity change from 0 to 4096 [ 377.191742][T11739] loop4: lost filesystem error report for type 5 error -117 [ 377.197924][T11736] loop5: lost filesystem error report for type 5 error -117 [ 377.198309][T11739] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2330: attempt to clear invalid blocks 33619980 len 1 [ 377.198362][T11739] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 377.199938][T11739] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2330: invalid indirect mapped block 1819239214 (level 0) [ 377.223261][T11736] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 377.257778][T11739] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 377.301023][T11736] loop5: lost filesystem error report for type 5 error -117 [ 377.314986][T11739] EXT4-fs (loop4): 1 truncate cleaned up [ 377.330506][T11736] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2329: attempt to clear invalid blocks 33619980 len 1 [ 377.341802][T11739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 377.357374][T11736] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 377.363269][T11736] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2329: invalid indirect mapped block 1819239214 (level 0) [ 377.363377][T11736] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 377.366715][T11736] EXT4-fs (loop5): 1 truncate cleaned up [ 377.371642][T11736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 377.380654][T11761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2337'. [ 377.534838][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.565145][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.588017][ T3850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.706170][T11778] xt_CT: No such helper "snmp_trap" [ 377.883401][T11795] xt_hashlimit: size too large, truncated to 1048576 [ 377.916535][T11797] netlink: 'syz.4.2348': attribute type 10 has an invalid length. [ 377.938234][T11797] bond3: option mode: unable to set because the bond device has slaves [ 377.957641][T11797] bond3: (slave macvlan4): Error -98 calling set_mac_address [ 378.447603][ T137] net_ratelimit: 29 callbacks suppressed [ 378.447621][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 378.529001][T11805] loop0: detected capacity change from 0 to 512 [ 378.537881][T11805] EXT4-fs: Ignoring removed nobh option [ 378.565385][T11805] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 378.575398][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 378.707618][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 378.733657][T11805] EXT4-fs (loop0): 1 truncate cleaned up [ 378.739954][T11805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.773832][T11817] netlink: 'syz.6.2355': attribute type 2 has an invalid length. [ 378.802978][T11817] netlink: 'syz.6.2355': attribute type 8 has an invalid length. [ 378.817704][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 378.842217][T11817] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2355'. [ 378.938265][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 378.963298][T11818] loop1: detected capacity change from 0 to 512 [ 379.005040][T11818] EXT4-fs: Ignoring removed bh option [ 379.065364][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 379.076216][T11818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e118, mo2=0002] [ 379.225049][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 379.232729][T11818] System zones: 1-12 [ 379.243045][T11818] EXT4-fs (loop1): orphan cleanup on readonly fs [ 379.257613][T11818] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.2353: invalid block [ 379.271111][T11818] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 379.273829][T11818] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2353: invalid indirect mapped block 1819239214 (level 1) [ 379.284060][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 379.284167][ C1] EXT4-fs (loop1): initial error at time 1772263232: ext4_get_branch:178: inode 13: block 33619980 [ 379.284686][ C1] EXT4-fs (loop1): last error at time 1772263232: ext4_get_branch:178: inode 13: block 33619980 [ 379.339354][T11818] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 379.343134][T11818] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2353: bg 0: block 361: padding at end of block bitmap is not set [ 379.376437][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 379.383951][T11818] loop1: lost filesystem error report for type 5 error -117 [ 379.385926][T11818] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 379.405397][T11818] loop1: lost filesystem error report for type 5 error -117 [ 379.407320][T11818] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2353: attempt to clear invalid blocks 33619980 len 1 [ 379.431280][T11818] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 379.435649][T11818] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2353: invalid indirect mapped block 1819239214 (level 0) [ 379.470356][T11818] EXT4-fs (loop1): 1 truncate cleaned up [ 379.487289][T11818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 379.500493][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 379.551503][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.554344][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.617635][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 379.669591][T11841] xt_hashlimit: size too large, truncated to 1048576 [ 379.841226][T11845] loop4: detected capacity change from 0 to 512 [ 379.853120][T11845] EXT4-fs (loop4): 1 orphan inode deleted [ 379.870103][T11845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.897667][T11848] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2366'. [ 379.936203][T11848] loop5: detected capacity change from 0 to 256 [ 379.976156][T11848] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.031195][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.207467][T11875] FAULT_INJECTION: forcing a failure. [ 380.207467][T11875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.228713][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.1.2374 Tainted: G W syzkaller #0 PREEMPT(full) [ 380.228748][T11875] Tainted: [W]=WARN [ 380.228755][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.228767][T11875] Call Trace: [ 380.228775][T11875] [ 380.228782][T11875] __dump_stack+0x1d/0x30 [ 380.228809][T11875] dump_stack_lvl+0x95/0xd0 [ 380.228869][T11875] dump_stack+0x15/0x1b [ 380.228890][T11875] should_fail_ex+0x263/0x280 [ 380.228923][T11875] should_fail+0xb/0x20 [ 380.228943][T11875] should_fail_usercopy+0x1a/0x20 [ 380.228967][T11875] _copy_from_user+0x1c/0xb0 [ 380.228993][T11875] bpf_test_init+0xb9/0x130 [ 380.229034][T11875] bpf_prog_test_run_flow_dissector+0x12c/0x360 [ 380.229086][T11875] ? kstrtouint+0x76/0xc0 [ 380.229149][T11875] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 380.229220][T11875] bpf_prog_test_run+0x204/0x340 [ 380.229239][T11875] __sys_bpf+0x52e/0x7e0 [ 380.229264][T11875] __x64_sys_bpf+0x41/0x50 [ 380.229297][T11875] x64_sys_call+0x10cb/0x3020 [ 380.229381][T11875] do_syscall_64+0x12c/0x370 [ 380.229403][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.229426][T11875] RIP: 0033:0x7fc68bacc799 [ 380.229448][T11875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.229467][T11875] RSP: 002b:00007fc68a51f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.229551][T11875] RAX: ffffffffffffffda RBX: 00007fc68bd45fa0 RCX: 00007fc68bacc799 [ 380.229567][T11875] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 380.229580][T11875] RBP: 00007fc68a51f090 R08: 0000000000000000 R09: 0000000000000000 [ 380.229631][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.229644][T11875] R13: 00007fc68bd46038 R14: 00007fc68bd45fa0 R15: 00007ffd7d415f38 [ 380.229665][T11875] [ 380.479880][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 380.479951][ T28] audit: type=1400 audit(1772263233.953:3368): avc: denied { create } for pid=11881 comm="syz.1.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 380.548770][ T28] audit: type=1400 audit(1772263234.023:3369): avc: denied { bind } for pid=11881 comm="syz.1.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 380.672319][T11887] loop4: detected capacity change from 0 to 512 [ 380.684729][T11887] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 381.268263][T11890] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 381.274958][T11890] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.294005][T11890] vhci_hcd vhci_hcd.0: Device attached [ 381.350044][T11898] loop5: detected capacity change from 0 to 512 [ 381.382236][T11898] EXT4-fs (loop5): 1 truncate cleaned up [ 381.409510][T11898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.436440][ T28] audit: type=1400 audit(1772263234.903:3370): avc: denied { listen } for pid=11881 comm="syz.1.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.467631][ T961] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 381.480244][T11898] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2380: bg 0: block 465: padding at end of block bitmap is not set [ 381.557599][ T961] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 381.604755][ T3850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.620431][T11902] netlink: 'syz.6.2381': attribute type 4 has an invalid length. [ 381.660806][T11893] vhci_hcd: connection reset by peer [ 381.684944][T11902] loop6: detected capacity change from 0 to 512 [ 381.696487][ T12] vhci_hcd vhci_hcd.1: stop threads [ 381.828032][ T12] vhci_hcd vhci_hcd.1: release socket [ 381.839432][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 381.870590][T11902] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2381: corrupted inode contents [ 382.129741][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2382'. [ 382.260072][T11902] fserror_report: 1 callbacks suppressed [ 382.260086][T11902] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 382.306578][T11902] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 382.315762][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 382.315780][ C0] EXT4-fs (loop6): initial error at time 1772263235: ext4_do_update_inode:5569: inode 15 [ 382.315817][ C0] EXT4-fs (loop6): last error at time 1772263235: ext4_do_update_inode:5569: inode 15 [ 382.410603][T11902] loop6: lost filesystem error report for type 5 error -117 [ 382.416387][T11902] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2381: corrupted inode contents [ 382.435702][T11902] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 382.436022][T11902] EXT4-fs error (device loop6): ext4_evict_inode:303: inode #15: comm syz.6.2381: mark_inode_dirty error [ 382.456743][T11902] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 382.457089][T11902] EXT4-fs (loop6): 1 orphan inode deleted [ 382.473453][T11902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.536835][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.593471][ T28] audit: type=1326 audit(1772263236.063:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e39c799 code=0x7ffc0000 [ 382.645225][ T28] audit: type=1326 audit(1772263236.063:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e39c799 code=0x7ffc0000 [ 382.674797][T11926] xt_hashlimit: size too large, truncated to 1048576 [ 382.677902][ T28] audit: type=1326 audit(1772263236.093:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8b9e39c799 code=0x7ffc0000 [ 382.721150][ T28] audit: type=1326 audit(1772263236.103:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e39c799 code=0x7ffc0000 [ 382.745510][ T28] audit: type=1326 audit(1772263236.103:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e39c799 code=0x7ffc0000 [ 382.787084][T11935] loop1: detected capacity change from 0 to 512 [ 382.795311][T11935] EXT4-fs (loop1): 1 truncate cleaned up [ 382.801555][T11935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.816817][T11935] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2392: bg 0: block 465: padding at end of block bitmap is not set [ 382.868651][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.953837][T11950] loop1: detected capacity change from 0 to 512 [ 382.968058][T11950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 382.986433][T11950] EXT4-fs (loop1): 1 truncate cleaned up [ 383.048260][T11950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.097254][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.222155][ T28] audit: type=1326 audit(1772263236.673:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 383.248426][ T28] audit: type=1326 audit(1772263236.693:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bacc799 code=0x7ffc0000 [ 383.463562][T11982] loop1: detected capacity change from 0 to 512 [ 383.488172][T11982] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 383.508923][T11982] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 383.518215][T11982] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2412: bad orphan inode 4 [ 383.527968][ T12] net_ratelimit: 27 callbacks suppressed [ 383.527991][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 383.528398][T11982] loop1: lost filesystem error report for type 5 error -117 [ 383.543496][T11982] EXT4-fs (loop1): 1 orphan inode deleted [ 383.550818][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 383.550837][ C1] EXT4-fs (loop1): initial error at time 1772263237: ext4_orphan_get:1417 [ 383.550878][ C1] EXT4-fs (loop1): last error at time 1772263237: ext4_orphan_get:1417 [ 383.580415][T11982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.678458][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 383.782796][T11997] loop6: detected capacity change from 0 to 1024 [ 383.787580][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 383.798817][T11997] EXT4-fs: inline encryption not supported [ 383.815352][T11998] xt_CT: No such helper "snmp_trap" [ 383.836344][T11997] EXT4-fs: Ignoring removed nobh option [ 383.853803][T11997] EXT4-fs: Ignoring removed bh option [ 383.875048][T11997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.922847][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.930040][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2420'. [ 383.931971][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 384.067140][T12019] loop0: detected capacity change from 0 to 512 [ 384.073940][T12019] EXT4-fs: Ignoring removed nobh option [ 384.080783][T12019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 384.090951][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 384.103518][T12019] EXT4-fs (loop0): 1 truncate cleaned up [ 384.117909][T12019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.217656][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 384.271304][T12028] loop4: detected capacity change from 0 to 512 [ 384.286922][T12028] EXT4-fs: Ignoring removed bh option [ 384.316306][T12028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e118, mo2=0002] [ 384.338567][T12028] System zones: 1-12 [ 384.346872][T12028] EXT4-fs (loop4): orphan cleanup on readonly fs [ 384.358144][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 384.371537][T12028] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2425: invalid indirect mapped block 1819239214 (level 1) [ 384.477633][T12028] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 384.478035][T12028] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2425: bg 0: block 361: padding at end of block bitmap is not set [ 384.501549][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 384.501572][ C1] EXT4-fs (loop4): initial error at time 1772263237: ext4_free_branches:1023: inode 13 [ 384.501601][ C1] EXT4-fs (loop4): last error at time 1772263237: ext4_free_branches:1023: inode 13 [ 384.527547][T12028] loop4: lost filesystem error report for type 5 error -117 [ 384.546161][T12028] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 384.572161][T12028] loop4: lost filesystem error report for type 5 error -117 [ 384.582986][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 384.589508][T12028] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2425: attempt to clear invalid blocks 33619980 len 1 [ 384.611236][T12028] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 384.611564][T12028] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2425: invalid indirect mapped block 1819239214 (level 0) [ 384.635037][T12028] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 384.647894][T12028] EXT4-fs (loop4): 1 truncate cleaned up [ 384.675126][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.683621][T12028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 384.699259][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.708357][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 384.818813][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 384.919347][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.146041][T12054] loop5: detected capacity change from 0 to 1024 [ 385.163114][T12054] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.201487][T12054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 385.217720][T12054] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.271197][T12054] EXT4-fs (loop5): shut down requested (2) [ 385.293364][T12054] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 385.330009][T12054] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 385.340180][T12060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.351960][T12060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.366709][T12054] syzkaller1: entered promiscuous mode [ 385.372873][T12054] syzkaller1: entered allmulticast mode [ 385.458297][ T3850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 385.606369][T12065] EXT4-fs: Ignoring removed nobh option [ 385.657902][T12065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 385.688909][T12065] EXT4-fs (loop1): 1 truncate cleaned up [ 385.695040][T12065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.807112][T12071] set_capacity_and_notify: 1 callbacks suppressed [ 385.807207][T12071] loop6: detected capacity change from 0 to 512 [ 385.823752][T12071] EXT4-fs: Ignoring removed nobh option [ 385.857279][T12071] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 385.896061][T12071] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2443: attempt to clear invalid blocks 1 len 1 [ 385.931649][T12071] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 385.931861][T12071] EXT4-fs (loop6): Remounting filesystem read-only [ 385.941079][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 385.941100][ C1] EXT4-fs (loop6): initial error at time 1772263239: ext4_clear_blocks:876: inode 13 [ 385.941146][ C1] EXT4-fs (loop6): last error at time 1772263239: ext4_clear_blocks:876: inode 13 [ 385.949063][T12074] xt_CT: No such helper "snmp_trap" [ 385.955096][T12071] EXT4-fs (loop6): 1 truncate cleaned up [ 385.984766][T12071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.010157][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.064616][T12079] FAULT_INJECTION: forcing a failure. [ 386.064616][T12079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.102632][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 386.102647][ T28] audit: type=1400 audit(1772263239.573:3391): avc: denied { write } for pid=12081 comm="syz.6.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 386.119148][T12079] CPU: 1 UID: 0 PID: 12079 Comm: syz.4.2444 Tainted: G W syzkaller #0 PREEMPT(full) [ 386.119275][T12079] Tainted: [W]=WARN [ 386.119282][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.119295][T12079] Call Trace: [ 386.119302][T12079] [ 386.119311][T12079] __dump_stack+0x1d/0x30 [ 386.119337][T12079] dump_stack_lvl+0x95/0xd0 [ 386.119359][T12079] dump_stack+0x15/0x1b [ 386.119389][T12079] should_fail_ex+0x263/0x280 [ 386.119411][T12079] should_fail+0xb/0x20 [ 386.119429][T12079] should_fail_usercopy+0x1a/0x20 [ 386.119451][T12079] _copy_from_user+0x1c/0xb0 [ 386.119555][T12079] ___sys_sendmsg+0xc1/0x1e0 [ 386.119592][T12079] __x64_sys_sendmsg+0xd4/0x160 [ 386.119621][T12079] x64_sys_call+0x194c/0x3020 [ 386.119651][T12079] do_syscall_64+0x12c/0x370 [ 386.119671][T12079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.119693][T12079] RIP: 0033:0x7f8b9e39c799 [ 386.119710][T12079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.119803][T12079] RSP: 002b:00007f8b9cdf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.119823][T12079] RAX: ffffffffffffffda RBX: 00007f8b9e615fa0 RCX: 00007f8b9e39c799 [ 386.119837][T12079] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000017 [ 386.119916][T12079] RBP: 00007f8b9cdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 386.119950][T12079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.119961][T12079] R13: 00007f8b9e616038 R14: 00007f8b9e615fa0 R15: 00007ffed658c7d8 [ 386.119977][T12079] [ 386.390336][T12091] loop0: detected capacity change from 0 to 1024 [ 386.430225][T12091] EXT4-fs: Ignoring removed mblk_io_submit option [ 386.460750][T12091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 386.480615][T12091] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.513468][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.535210][ T28] audit: type=1326 audit(1772263240.003:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.6.2453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde60fec799 code=0x0 [ 386.565155][T12091] EXT4-fs (loop0): shut down requested (2) [ 386.571569][T12091] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 386.587570][T12091] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 386.597659][ T961] usb 3-1: enqueue for inactive port 0 [ 386.603131][ T961] usb 3-1: enqueue for inactive port 0 [ 386.614254][T12091] syzkaller1: entered promiscuous mode [ 386.621505][T12091] syzkaller1: entered allmulticast mode [ 386.677662][ T961] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 386.726940][T12107] loop6: detected capacity change from 0 to 512 [ 386.733695][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 387.147192][T12119] netlink: 'syz.0.2460': attribute type 4 has an invalid length. [ 387.228134][T12119] loop0: detected capacity change from 0 to 512 [ 387.287467][T12119] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2460: corrupted inode contents [ 387.416446][T12119] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 387.416848][T12119] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 387.426096][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 387.426114][ C0] EXT4-fs (loop0): initial error at time 1772263240: ext4_do_update_inode:5569: inode 15 [ 387.426152][ C0] EXT4-fs (loop0): last error at time 1772263240: ext4_do_update_inode:5569: inode 15 [ 387.756531][T12125] netlink: 'syz.6.2462': attribute type 21 has an invalid length. [ 387.787666][T12125] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2462'. [ 387.827364][T12119] loop0: lost filesystem error report for type 5 error -117 [ 387.827620][T12119] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2460: corrupted inode contents [ 387.871037][T12128] netlink: 'syz.6.2462': attribute type 39 has an invalid length. [ 387.907779][T12119] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 387.908711][T12128] hsr_slave_1 (unregistering): left promiscuous mode [ 387.924844][T12119] EXT4-fs error (device loop0): ext4_evict_inode:303: inode #15: comm syz.0.2460: mark_inode_dirty error [ 387.966742][T12119] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 387.966927][T12119] EXT4-fs (loop0): 1 orphan inode deleted [ 388.008131][T12119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.118666][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.394524][T12145] loop6: detected capacity change from 0 to 1024 [ 388.425585][T12145] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.469133][T12145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 388.497729][T12145] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.547734][ T1742] net_ratelimit: 29 callbacks suppressed [ 388.547770][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 388.560765][T12155] loop0: detected capacity change from 0 to 512 [ 388.570296][T12145] EXT4-fs (loop6): shut down requested (2) [ 388.577952][T12155] EXT4-fs: Ignoring removed nobh option [ 388.588117][T12155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 388.617476][T12145] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 388.629605][T12155] EXT4-fs (loop0): 1 truncate cleaned up [ 388.635595][T12155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.670845][ T40] bond3: (slave macvlan3): failed to get link speed/duplex [ 388.693229][T12145] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 388.759975][T12162] syzkaller1: entered promiscuous mode [ 388.786998][T12162] syzkaller1: entered allmulticast mode [ 388.815390][T12145] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 388.824556][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 388.877697][T12145] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 388.904764][T12145] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 389.000953][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 389.107914][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 389.127838][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 389.164690][T12168] netlink: 'syz.6.2474': attribute type 4 has an invalid length. [ 389.185257][T12168] loop6: detected capacity change from 0 to 512 [ 389.247554][T12168] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2474: corrupted inode contents [ 389.252395][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 389.274491][T12168] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.274714][T12168] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 389.283875][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 389.283900][ C0] EXT4-fs (loop6): initial error at time 1772263242: ext4_do_update_inode:5569: inode 15 [ 389.283934][ C0] EXT4-fs (loop6): last error at time 1772263242: ext4_do_update_inode:5569: inode 15 [ 389.318355][T12168] loop6: lost filesystem error report for type 5 error -117 [ 389.347830][T12168] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2474: corrupted inode contents [ 389.387665][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 389.419291][T12172] loop4: detected capacity change from 0 to 512 [ 389.436692][T12168] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.436933][T12168] EXT4-fs error (device loop6): ext4_evict_inode:303: inode #15: comm syz.6.2474: mark_inode_dirty error [ 389.467243][T12172] EXT4-fs (loop4): 1 truncate cleaned up [ 389.476966][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.496829][T12172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.515887][T12168] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.516150][T12168] EXT4-fs (loop6): 1 orphan inode deleted [ 389.531148][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 389.545833][T12172] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2476: bg 0: block 465: padding at end of block bitmap is not set [ 389.555862][T12168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.603987][T10134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.617266][T12177] loop0: detected capacity change from 0 to 512 [ 389.641569][T12177] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2477: inode has both inline data and extents flags [ 389.655099][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 389.663596][T12177] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.663776][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.669199][T12177] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2477: couldn't read orphan inode 15 (err -117) [ 389.681867][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 389.681884][ C1] EXT4-fs (loop0): initial error at time 1772263243: ext4_orphan_get:1391: inode 15 [ 389.681913][ C1] EXT4-fs (loop0): last error at time 1772263243: ext4_orphan_get:1391: inode 15 [ 389.719643][T12177] loop0: lost filesystem error report for type 5 error -117 [ 389.720332][T12177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.751851][T12182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.760527][T12182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.807551][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 389.827067][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.198936][T12193] xt_CT: No such helper "snmp_trap" [ 390.244989][T12198] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 390.283978][T12205] FAULT_INJECTION: forcing a failure. [ 390.283978][T12205] name failslab, interval 1, probability 0, space 0, times 0 [ 390.296676][T12205] CPU: 0 UID: 0 PID: 12205 Comm: syz.5.2486 Tainted: G W syzkaller #0 PREEMPT(full) [ 390.296711][T12205] Tainted: [W]=WARN [ 390.296719][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.296814][T12205] Call Trace: [ 390.296820][T12205] [ 390.296828][T12205] __dump_stack+0x1d/0x30 [ 390.296909][T12205] dump_stack_lvl+0x95/0xd0 [ 390.296933][T12205] dump_stack+0x15/0x1b [ 390.296955][T12205] should_fail_ex+0x263/0x280 [ 390.296978][T12205] should_failslab+0x8c/0xb0 [ 390.297073][T12205] kmem_cache_alloc_noprof+0x66/0x400 [ 390.297143][T12205] ? sctp_get_port_local+0x438/0xae0 [ 390.297167][T12205] sctp_get_port_local+0x438/0xae0 [ 390.297191][T12205] sctp_do_bind+0x398/0x4b0 [ 390.297218][T12205] sctp_connect_new_asoc+0x153/0x3a0 [ 390.297241][T12205] sctp_sendmsg+0xfff/0x1d60 [ 390.297279][T12205] ? selinux_socket_sendmsg+0x192/0x1c0 [ 390.297304][T12205] ? __pfx_sctp_sendmsg+0x10/0x10 [ 390.297335][T12205] inet_sendmsg+0xc5/0xd0 [ 390.297362][T12205] ____sys_sendmsg+0x53a/0x600 [ 390.297408][T12205] ___sys_sendmsg+0x195/0x1e0 [ 390.297436][T12205] ? path_openat+0x1b01/0x2050 [ 390.297472][T12205] __sys_sendmmsg+0x185/0x320 [ 390.297573][T12205] __x64_sys_sendmmsg+0x57/0x70 [ 390.297707][T12205] x64_sys_call+0x27aa/0x3020 [ 390.297796][T12205] do_syscall_64+0x12c/0x370 [ 390.297888][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.297911][T12205] RIP: 0033:0x7f199e6bc799 [ 390.297929][T12205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.297945][T12205] RSP: 002b:00007f199d10f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 390.297963][T12205] RAX: ffffffffffffffda RBX: 00007f199e935fa0 RCX: 00007f199e6bc799 [ 390.297975][T12205] RDX: 0000000000000002 RSI: 00002000000006c0 RDI: 0000000000000003 [ 390.298065][T12205] RBP: 00007f199d10f090 R08: 0000000000000000 R09: 0000000000000000 [ 390.298079][T12205] R10: 931766f6319eed40 R11: 0000000000000246 R12: 0000000000000001 [ 390.298158][T12205] R13: 00007f199e936038 R14: 00007f199e935fa0 R15: 00007ffeef9a97a8 [ 390.298251][T12205] [ 390.619956][T12207] loop5: detected capacity change from 0 to 512 [ 390.654282][T12207] EXT4-fs: Ignoring removed nobh option [ 390.687609][T12207] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 390.735909][T12207] EXT4-fs (loop5): 1 truncate cleaned up [ 390.743563][T12207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.789357][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'. [ 390.807784][ T28] audit: type=1400 audit(1772263244.223:3393): avc: denied { write } for pid=12208 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 390.828376][T12216] EXT4-fs (loop4): 1 truncate cleaned up [ 390.834557][T12216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.847324][T12219] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 390.886162][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'. [ 390.896528][T12219] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 390.896585][T12219] EXT4-fs: failed to create workqueue [ 390.909916][T12216] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2490: bg 0: block 465: padding at end of block bitmap is not set [ 390.938005][T12220] gretap0: entered promiscuous mode [ 390.954598][T12219] EXT4-fs (loop1): mount failed [ 390.963485][T12220] gretap0: left promiscuous mode [ 391.143797][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.329737][T12235] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2494'. [ 391.459582][ T28] audit: type=1400 audit(1772263244.923:3394): avc: denied { shutdown } for pid=12227 comm="syz.6.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 391.521934][T12238] set_capacity_and_notify: 2 callbacks suppressed [ 391.521950][T12238] loop4: detected capacity change from 0 to 512 [ 391.537872][T12232] 9pnet: p9_errstr2errno: server reported unknown error ile1 [ 391.582331][T12238] vfat: Unknown parameter '˙˙˙˙˙˙˙˙01777777777777777777777˙˙' [ 391.686606][ T3850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.771799][ T28] audit: type=1326 audit(1772263245.243:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12239 comm="syz.0.2497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe61c2c799 code=0x0 [ 391.796210][T12238] loop4: detected capacity change from 0 to 128 [ 391.819394][ T28] audit: type=1400 audit(1772263245.293:3396): avc: denied { ioctl } for pid=12245 comm="syz.1.2499" path="socket:[38059]" dev="sockfs" ino=38059 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 391.847238][T12238] vfat: Unknown parameter 'shortname˝winnt' [ 391.878237][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.886827][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.899907][T12240] loop0: detected capacity change from 0 to 128 [ 391.912915][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 391.920894][T12240] FAT-fs (loop0): Filesystem has been set read-only [ 391.930227][T12240] bio_check_eod: 32 callbacks suppressed [ 391.930244][T12240] syz.0.2497: attempt to access beyond end of device [ 391.930244][T12240] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 391.950767][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2501'. [ 391.953579][ T28] audit: type=1400 audit(1772263245.323:3397): avc: denied { write } for pid=12245 comm="syz.1.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 391.979479][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 391.988636][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 391.997066][T12240] syz.0.2497: attempt to access beyond end of device [ 391.997066][T12240] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 392.012333][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 392.021024][T12240] syz.0.2497: attempt to access beyond end of device [ 392.021024][T12240] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 392.035023][ T28] audit: type=1400 audit(1772263245.363:3398): avc: denied { ioctl } for pid=12239 comm="syz.0.2497" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 392.070180][T12255] syz.0.2497: attempt to access beyond end of device [ 392.070180][T12255] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 392.084155][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 392.093449][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 392.101670][T12255] syz.0.2497: attempt to access beyond end of device [ 392.101670][T12255] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 392.116153][T12239] syz.0.2497: attempt to access beyond end of device [ 392.116153][T12239] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 392.132175][T12240] syz.0.2497: attempt to access beyond end of device [ 392.132175][T12240] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 392.185562][T12240] syz.0.2497: attempt to access beyond end of device [ 392.185562][T12240] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 392.199909][T12240] syz.0.2497: attempt to access beyond end of device [ 392.199909][T12240] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 392.213899][T12239] syz.0.2497: attempt to access beyond end of device [ 392.213899][T12239] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 392.235466][T12262] lo speed is unknown, defaulting to 1000 [ 392.961962][T12273] loop5: detected capacity change from 0 to 1024 [ 392.987981][T12273] EXT4-fs: Ignoring removed mblk_io_submit option [ 393.128712][T12273] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.158222][T12273] EXT4-fs (loop5): shut down requested (2) [ 393.177716][T12273] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 393.227138][T12273] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 393.581463][T12273] syzkaller1: entered promiscuous mode [ 393.586954][T12273] syzkaller1: entered allmulticast mode [ 393.594331][T12273] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 393.603411][T12273] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 393.614938][ T5662] net_ratelimit: 27 callbacks suppressed [ 393.614952][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 393.638143][T12273] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 393.767596][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 393.800406][T12286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2509'. [ 393.862419][ T28] audit: type=1326 audit(1772263247.333:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe61c2c799 code=0x7ffc0000 [ 393.888295][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 393.949617][ T28] audit: type=1326 audit(1772263247.363:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe61c2c799 code=0x7ffc0000 [ 393.989983][T12301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.004661][ T28] audit: type=1326 audit(1772263247.363:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe61c2c799 code=0x7ffc0000 [ 394.028363][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 394.044172][T12301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.055894][ T28] audit: type=1326 audit(1772263247.363:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe61c2c799 code=0x7ffc0000 [ 394.080016][ T28] audit: type=1326 audit(1772263247.363:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.0.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fbe61c2c799 code=0x7ffc0000 [ 394.151484][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 394.179932][T12312] netlink: 'syz.1.2520': attribute type 10 has an invalid length. [ 394.191724][T12312] bond1: option mode: unable to set because the bond device has slaves [ 394.210003][T12312] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 394.239201][T12310] netlink: 'syz.4.2515': attribute type 4 has an invalid length. [ 394.267877][ T8370] bond3: (slave macvlan3): failed to get link speed/duplex [ 394.304302][T12321] can0: slcan on ttyS3. [ 394.358225][T12321] can0 (unregistered): slcan off ttyS3. [ 394.377560][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 394.466142][T12337] netlink: 'syz.1.2527': attribute type 4 has an invalid length. [ 394.482469][T12337] loop1: detected capacity change from 0 to 512 [ 394.496878][T12337] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2527: corrupted inode contents [ 394.501324][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 394.509021][T12337] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 394.520560][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 394.537399][ C0] EXT4-fs (loop1): initial error at time 1772263247: ext4_do_update_inode:5569: inode 15 [ 394.547478][ C0] EXT4-fs (loop1): last error at time 1772263247: ext4_do_update_inode:5569 [ 394.547634][T12337] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 394.560796][T12337] loop1: lost filesystem error report for type 5 error -117 [ 394.565655][ C0] : inode 15 [ 394.572086][T12337] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2527: corrupted inode contents [ 394.573447][ C0] [ 394.577530][T12337] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 394.624282][T12337] EXT4-fs error (device loop1): ext4_evict_inode:303: inode #15: comm syz.1.2527: mark_inode_dirty error [ 394.648602][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 394.648966][T12337] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 394.656347][T12337] EXT4-fs (loop1): 1 orphan inode deleted [ 394.719010][T12356] xt_hashlimit: size too large, truncated to 1048576 [ 394.732855][T12358] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12358 comm=syz.1.2531 [ 394.757576][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 394.837713][T12358] loop1: detected capacity change from 0 to 1024 [ 394.865071][T12358] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 394.881869][T12369] netlink: 'syz.5.2534': attribute type 10 has an invalid length. [ 394.912573][T12369] bond2: option mode: unable to set because the bond device has slaves [ 394.928010][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 394.954006][T12375] FAULT_INJECTION: forcing a failure. [ 394.954006][T12375] name failslab, interval 1, probability 0, space 0, times 0 [ 394.972841][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 394.972841][ T12] [ 394.984769][T12369] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 394.992342][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 395.000711][T12375] CPU: 1 UID: 0 PID: 12375 Comm: syz.6.2536 Tainted: G W syzkaller #0 PREEMPT(full) [ 395.000914][T12375] Tainted: [W]=WARN [ 395.000921][T12375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.000934][T12375] Call Trace: [ 395.000941][T12375] [ 395.000950][T12375] __dump_stack+0x1d/0x30 [ 395.000977][T12375] dump_stack_lvl+0x95/0xd0 [ 395.001000][T12375] dump_stack+0x15/0x1b [ 395.001097][T12375] should_fail_ex+0x263/0x280 [ 395.001116][T12375] should_failslab+0x8c/0xb0 [ 395.001133][T12375] __kmalloc_cache_node_noprof+0x6b/0x480 [ 395.001159][T12375] ? __get_vm_area_node+0x106/0x1d0 [ 395.001219][T12375] __get_vm_area_node+0x106/0x1d0 [ 395.001240][T12375] __vmalloc_node_range_noprof+0x291/0x12b0 [ 395.001267][T12375] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 395.001326][T12375] ? selinux_file_open+0x2e6/0x330 [ 395.001351][T12375] ? __rcu_read_unlock+0x4e/0x70 [ 395.001373][T12375] ? avc_has_perm_noaudit+0xab/0x130 [ 395.001450][T12375] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 395.001475][T12375] __vmalloc_noprof+0xa4/0xf0 [ 395.001512][T12375] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 395.001545][T12375] bpf_prog_alloc_no_stats+0x47/0x390 [ 395.001595][T12375] ? bpf_prog_alloc+0x2a/0x150 [ 395.001611][T12375] bpf_prog_alloc+0x3c/0x150 [ 395.001626][T12375] bpf_prog_load+0x506/0x1140 [ 395.001726][T12375] ? security_bpf+0x2b/0x90 [ 395.001752][T12375] __sys_bpf+0x505/0x7e0 [ 395.001851][T12375] __x64_sys_bpf+0x41/0x50 [ 395.001907][T12375] x64_sys_call+0x10cb/0x3020 [ 395.001979][T12375] do_syscall_64+0x12c/0x370 [ 395.001999][T12375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.002018][T12375] RIP: 0033:0x7fde60fec799 [ 395.002106][T12375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.002121][T12375] RSP: 002b:00007fde5fa3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.002142][T12375] RAX: ffffffffffffffda RBX: 00007fde61265fa0 RCX: 00007fde60fec799 [ 395.002157][T12375] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 395.002168][T12375] RBP: 00007fde5fa3f090 R08: 0000000000000000 R09: 0000000000000000 [ 395.002211][T12375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.002221][T12375] R13: 00007fde61266038 R14: 00007fde61265fa0 R15: 00007fff6fc11478 [ 395.002260][T12375] [ 395.004183][T12375] syz.6.2536: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 395.009466][ T12] EXT4-fs (loop1): Free/Dirty block details [ 395.018977][T12375] ,cpuset=/,mems_allowed=0 [ 395.029070][ T12] EXT4-fs (loop1): free_blocks=20480 [ 395.029104][ T12] EXT4-fs (loop1): dirty_blocks=96 [ 395.029116][ T12] EXT4-fs (loop1): Block reservation details [ 395.029127][ T12] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 395.034144][T12375] CPU: 1 UID: 0 PID: 12375 Comm: syz.6.2536 Tainted: G W syzkaller #0 PREEMPT(full) [ 395.034174][T12375] Tainted: [W]=WARN [ 395.034181][T12375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.034233][T12375] Call Trace: [ 395.034240][T12375] [ 395.034247][T12375] __dump_stack+0x1d/0x30 [ 395.034273][T12375] dump_stack_lvl+0x95/0xd0 [ 395.034341][T12375] dump_stack+0x15/0x1b [ 395.034361][T12375] warn_alloc+0x145/0x1c0 [ 395.034389][T12375] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 395.034481][T12375] ? selinux_file_open+0x2e6/0x330 [ 395.034566][T12375] ? __rcu_read_unlock+0x4e/0x70 [ 395.034587][T12375] ? avc_has_perm_noaudit+0xab/0x130 [ 395.034650][T12375] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 395.034682][T12375] __vmalloc_noprof+0xa4/0xf0 [ 395.034715][T12375] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 395.034745][T12375] bpf_prog_alloc_no_stats+0x47/0x390 [ 395.034825][T12375] ? bpf_prog_alloc+0x2a/0x150 [ 395.034843][T12375] bpf_prog_alloc+0x3c/0x150 [ 395.034884][T12375] bpf_prog_load+0x506/0x1140 [ 395.034911][T12375] ? security_bpf+0x2b/0x90 [ 395.034940][T12375] __sys_bpf+0x505/0x7e0 [ 395.034965][T12375] __x64_sys_bpf+0x41/0x50 [ 395.035071][T12375] x64_sys_call+0x10cb/0x3020 [ 395.035096][T12375] do_syscall_64+0x12c/0x370 [ 395.035119][T12375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.035277][T12375] RIP: 0033:0x7fde60fec799 [ 395.035293][T12375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.035310][T12375] RSP: 002b:00007fde5fa3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.035401][T12375] RAX: ffffffffffffffda RBX: 00007fde61265fa0 RCX: 00007fde60fec799 [ 395.035415][T12375] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 395.035428][T12375] RBP: 00007fde5fa3f090 R08: 0000000000000000 R09: 0000000000000000 [ 395.035452][T12375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.035464][T12375] R13: 00007fde61266038 R14: 00007fde61265fa0 R15: 00007fff6fc11478 [ 395.035489][T12375] [ 395.035583][T12375] Mem-Info: [ 395.042674][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 395.044250][T12375] active_anon:10364 inactive_anon:1 isolated_anon:0 [ 395.044250][T12375] active_file:17068 inactive_file:13404 isolated_file:0 [ 395.044250][T12375] unevictable:0 dirty:331 writeback:0 [ 395.044250][T12375] slab_reclaimable:3785 slab_unreclaimable:92733 [ 395.044250][T12375] mapped:30366 shmem:914 pagetables:3682 [ 395.044250][T12375] sec_pagetables:0 bounce:0 [ 395.044250][T12375] kernel_misc_reclaimable:0 [ 395.044250][T12375] free:1781999 free_pcp:16914 free_cma:0 [ 395.048988][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 395.048988][ T12] [ 395.067754][T12375] Node 0 active_anon:41456kB inactive_anon:4kB active_file:68272kB inactive_file:53616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121464kB dirty:1324kB writeback:0kB shmem:3656kB kernel_stack:4240kB pagetables:14612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 395.229178][T12382] IPVS: Scheduler module ip_vs_ not found [ 395.231466][T12375] Node 0 [ 395.344957][T12389] loop0: detected capacity change from 0 to 512 [ 395.348679][T12375] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.369398][T12391] loop5: detected capacity change from 0 to 1024 [ 395.374959][T12375] lowmem_reserve[]: [ 395.427065][T12391] EXT4-fs: inline encryption not supported [ 395.510200][T12375] 0 [ 395.524972][T12389] EXT4-fs: Ignoring removed bh option [ 395.562236][T12375] 2879 7857 7857 [ 395.673189][T12389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e118, mo2=0002] [ 395.683420][T12375] Node 0 DMA32 free:2944668kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948192kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 395.725805][T12389] System zones: 1-12 [ 395.734596][T12375] lowmem_reserve[]: 0 0 4978 4978 [ 395.734785][T12389] EXT4-fs (loop0): orphan cleanup on readonly fs [ 395.746363][T12375] [ 395.750002][T12375] Node 0 Normal free:4163488kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57992kB inactive_anon:4kB active_file:68272kB inactive_file:53604kB unevictable:0kB writepending:1340kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:47500kB local_pcp:32016kB free_cma:0kB [ 395.783332][T12389] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2538: invalid indirect mapped block 1819239214 (level 1) [ 395.796661][T12375] lowmem_reserve[]: 0 0 0 0 [ 395.797399][T12389] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 395.802208][T12375] Node 0 [ 395.802799][T12389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2538: bg 0: block 361: padding at end of block bitmap is not set [ 395.813057][T12375] DMA: [ 395.816110][T12389] loop0: lost filesystem error report for type 5 error -117 [ 395.828917][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 395.828944][ C1] EXT4-fs (loop0): initial error at time 1772263249: ext4_free_branches:1023: inode 13 [ 395.828969][ C1] EXT4-fs (loop0): last error at time 1772263249: ext4_free_branches:1023: inode 13 [ 395.840465][T12375] 0*4kB [ 395.845778][T12389] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 395.855573][T12375] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 395.882081][T12389] loop0: lost filesystem error report for type 5 error -117 [ 395.887614][T12375] Node 0 [ 395.888392][T12389] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2538: attempt to clear invalid blocks 33619980 len 1 [ 395.894934][T12375] DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 6*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB [ 395.898268][T12389] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 395.911537][T12375] (M) [ 395.922271][T12389] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2538: invalid indirect mapped block 1819239214 (level 0) [ 395.931077][T12375] 3*1024kB [ 395.934111][T12389] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 395.947774][T12375] (M) 3*2048kB (M) 716*4096kB (M) = 2944668kB [ 395.965644][T12389] EXT4-fs (loop0): 1 truncate cleaned up [ 395.966100][T12375] Node 0 Normal: 2604*4kB (UM) 890*8kB (UM) 70*16kB (ME) 329*32kB (UME) 133*64kB (UME) 110*128kB (UME) 143*256kB (UME) 113*512kB (UME) 61*1024kB (UME) 51*2048kB (UME) 940*4096kB (UM) = 4163392kB [ 395.991857][T12375] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 396.001469][T12375] 35367 total pagecache pages [ 396.006265][T12375] 6 pages in swap cache [ 396.010557][T12375] Free swap = 124896kB [ 396.014874][T12375] Total swap = 124996kB [ 396.019592][T12375] 2097051 pages RAM [ 396.023394][T12375] 0 pages HighMem/MovableOnly [ 396.028203][T12375] 81603 pages reserved [ 396.124035][T12413] loop6: detected capacity change from 0 to 8192 [ 396.271972][T12414] loop0: detected capacity change from 0 to 8192 [ 396.281615][T12423] EXT4-fs (loop4): 1 truncate cleaned up [ 396.328218][T12414] loop0: p2 p3 p4[EZD] [ 396.342508][T12414] loop0: p3 start 331781 is beyond EOD, truncated [ 396.349327][T12414] loop0: p4 size 197376 extends beyond EOD, truncated [ 396.440414][T12431] netlink: 'syz.4.2554': attribute type 4 has an invalid length. [ 396.475373][T12413] ================================================================== [ 396.483481][T12413] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 396.490596][T12413] [ 396.492928][T12413] write to 0xffff88811cc4e6ce of 2 bytes by task 12434 on cpu 1: [ 396.500640][T12413] fat16_ent_put+0x28/0x60 [ 396.505161][T12413] fat_alloc_clusters+0x57b/0xc50 [ 396.510185][T12413] fat_get_block+0x258/0x5e0 [ 396.514775][T12413] __block_write_begin_int+0x400/0xf90 [ 396.520237][T12413] cont_write_begin+0x5fe/0x970 [ 396.525099][T12413] fat_write_begin+0x4f/0xe0 [ 396.529693][T12413] generic_perform_write+0x183/0x490 [ 396.534974][T12413] __generic_file_write_iter+0x9e/0x120 [ 396.540507][T12413] generic_file_write_iter+0x8d/0x310 [ 396.545867][T12413] vfs_write+0x5a6/0x9f0 [ 396.550107][T12413] ksys_write+0xdc/0x1a0 [ 396.554347][T12413] __x64_sys_write+0x40/0x50 [ 396.558945][T12413] x64_sys_call+0x27e1/0x3020 [ 396.563620][T12413] do_syscall_64+0x12c/0x370 [ 396.568204][T12413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.574101][T12413] [ 396.576418][T12413] read to 0xffff88811cc4e600 of 512 bytes by task 12413 on cpu 0: [ 396.584217][T12413] fat_mirror_bhs+0x1df/0x320 [ 396.588887][T12413] fat_alloc_clusters+0xb48/0xc50 [ 396.593896][T12413] fat_get_block+0x258/0x5e0 [ 396.598471][T12413] __block_write_begin_int+0x400/0xf90 [ 396.604004][T12413] cont_write_begin+0x5fe/0x970 [ 396.608843][T12413] fat_write_begin+0x4f/0xe0 [ 396.613419][T12413] cont_write_begin+0x1b0/0x970 [ 396.618258][T12413] fat_write_begin+0x4f/0xe0 [ 396.622836][T12413] generic_cont_expand_simple+0xb0/0x150 [ 396.628458][T12413] fat_cont_expand+0x3e/0x170 [ 396.633120][T12413] fat_fallocate+0x177/0x1c0 [ 396.637697][T12413] vfs_fallocate+0x3b6/0x450 [ 396.642274][T12413] __x64_sys_fallocate+0x7a/0xd0 [ 396.647199][T12413] x64_sys_call+0x298e/0x3020 [ 396.651865][T12413] do_syscall_64+0x12c/0x370 [ 396.656446][T12413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.662321][T12413] [ 396.664625][T12413] Reported by Kernel Concurrency Sanitizer on: [ 396.670762][T12413] CPU: 0 UID: 0 PID: 12413 Comm: syz.6.2548 Tainted: G W syzkaller #0 PREEMPT(full) [ 396.681692][T12413] Tainted: [W]=WARN [ 396.685486][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.695535][T12413] ================================================================== [ 396.743301][T12435] set_capacity_and_notify: 1 callbacks suppressed [ 396.743316][T12435] loop1: detected capacity change from 0 to 512 [ 396.773451][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 396.789338][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 396.834944][T12435] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2555: invalid indirect mapped block 256 (level 2) [ 396.903859][T12435] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 396.904153][T12435] EXT4-fs (loop1): 2 truncates cleaned up [ 396.913417][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 396.913443][ C0] EXT4-fs (loop1): initial error at time 1772263250: ext4_free_branches:1023: inode 11 [ 396.913474][ C0] EXT4-fs (loop1): last error at time 1772263250: ext4_free_branches:1023: inode 11 [ 397.050154][T12439] loop0: detected capacity change from 0 to 512 [ 397.071169][T12439] EXT4-fs: Ignoring removed bh option [ 397.138114][T12439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e118, mo2=0002] [ 397.157096][T12439] System zones: 1-12 [ 397.196999][T12439] EXT4-fs (loop0): orphan cleanup on readonly fs [ 397.210418][T12439] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2556: invalid indirect mapped block 1819239214 (level 1) [ 397.225555][T12439] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.226789][T12439] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2556: bg 0: block 361: padding at end of block bitmap is not set [ 397.236366][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 397.236476][ C1] EXT4-fs (loop0): initial error at time 1772263250: ext4_free_branches:1023: inode 13 [ 397.236646][ C1] EXT4-fs (loop0): last error at time 1772263250: ext4_free_branches:1023: inode 13 [ 397.282765][T12439] loop0: lost filesystem error report for type 5 error -117 [ 397.283446][T12439] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 397.300141][T12439] loop0: lost filesystem error report for type 5 error -117 [ 397.302112][T12439] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2556: attempt to clear invalid blocks 33619980 len 1 [ 397.323784][T12439] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.324750][T12439] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2556: invalid indirect mapped block 1819239214 (level 0) [ 397.348432][T12439] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.350300][T12439] EXT4-fs (loop0): 1 truncate cleaned up [ 398.618837][ T5662] net_ratelimit: 31 callbacks suppressed [ 398.618852][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 398.747612][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 398.857582][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 398.977616][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 399.087604][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 399.207567][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 399.317614][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 399.427557][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 399.537629][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 399.647582][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 403.657599][ T5662] net_ratelimit: 35 callbacks suppressed [ 403.657613][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 403.787586][ T137] bond3: (slave macvlan3): failed to get link speed/duplex [ 403.897588][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 404.007564][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 404.127715][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 404.237569][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 404.347559][ T5662] bond3: (slave macvlan3): failed to get link speed/duplex [ 404.457563][ T12] bond3: (slave macvlan3): failed to get link speed/duplex [ 404.567584][ T1742] bond3: (slave macvlan3): failed to get link speed/duplex [ 404.677650][ T137] bond3: (slave macvlan3): failed to get link speed/duplex