last executing test programs: 4m8.421317546s ago: executing program 1 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x2ac}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x200052, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x6b7, 0x0) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) 4m8.16869029s ago: executing program 1 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@errors_remount}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$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") 4m7.639027394s ago: executing program 1 (id=576): socket$rds(0x15, 0x5, 0x0) r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x2ac}, &(0x7f0000000440)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) 4m7.458528291s ago: executing program 1 (id=578): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r3 = syz_io_uring_setup(0x1d22, &(0x7f0000000380)={0x0, 0x80fe, 0x1000, 0x2, 0x158}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r8, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x4, 0x5, 0xa, 0x20, 0xfffffffffffffff7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x109}}}, &(0x7f0000000300)='syzkaller\x00', 0xfffffffc, 0xb, &(0x7f0000000340)=""/11, 0x41000, 0x50, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x8, 0x682, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8], 0x0, 0x10, 0x1}, 0x94) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (rerun: 64) open_by_handle_at(r10, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0xc}}, 0x5c5c01) (async) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r9, &(0x7f0000001040)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2) close(0x3) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) (async) io_uring_enter(r3, 0x4ffe, 0x32c9, 0x45, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r3, 0x30b6, 0x78b3, 0x20, &(0x7f0000000100)={[0x4]}, 0x8) (rerun: 64) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0}) 4m7.107827817s ago: executing program 1 (id=581): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) recvmmsg(r0, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x1, 0x22, 0x0) writev(r1, 0x0, 0x0) syz_io_uring_setup(0x6741, 0x0, &(0x7f0000000300)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) semget$private(0x0, 0x3, 0x0) semget$private(0x0, 0x1, 0x1a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 4m6.62856033s ago: executing program 1 (id=589): add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0xe, 0x6, 0x3, 0x401, 0x57, "06000000000800"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x20, 0x8, 0x3, 0x9, 0x3}}) 4m6.590984103s ago: executing program 32 (id=589): add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0xe, 0x6, 0x3, 0x401, 0x57, "06000000000800"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x20, 0x8, 0x3, 0x9, 0x3}}) 3m17.442772098s ago: executing program 5 (id=1116): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}, {}, [], {{}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x28}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3m17.414522592s ago: executing program 5 (id=1117): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200033f", @ANYRESHEX], 0xe0, 0x4000000}}], 0x2, 0x800) 3m17.336497258s ago: executing program 5 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01feffff7f0000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m17.276483567s ago: executing program 5 (id=1122): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r1, 0x0) read$rfkill(r1, &(0x7f0000000080), 0x27031bb3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f00000006c0)='./file2\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000a80)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x9}}, {@resgid={'resgid', 0x3d, r4}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}], [{@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, ',.!!^},%:+}.'}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r1, 0x20, &(0x7f0000000140)={&(0x7f0000000740)=""/240, 0xf0, 0x0, &(0x7f0000000940)=""/159, 0x9f}}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) tkill(r6, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) tkill(r6, 0xe) ptrace$peeksig(0x4209, r6, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r5, 0x303, 0x80000001, 0x25dfdbfd, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000895}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x3690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x1c243, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m16.424123312s ago: executing program 5 (id=1147): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x96, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500600601fe8000000000000000000000000000bbfe8000000000000000000200000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000"], 0x0) 3m16.195100721s ago: executing program 5 (id=1150): r0 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000004b80), r0) 3m16.176893048s ago: executing program 33 (id=1150): r0 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000004b80), r0) 2m28.707957487s ago: executing program 0 (id=1585): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x4a350000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xc) fchdir(r1) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xe4, 0x17, 0xa, 0xe84, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0x14, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x0, 0x1, 'syz1\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x744, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x76}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x558, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x54c, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}]}, {0x354, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa8, 0x2, "66e1ae9e4e87df8c71edfe84de51732b684b504f4d8db5f9fe6c9f6852e7b8a44628e404169163dc7e678317757c38d4d84dcc01a480b0d7cf499fe19adaa46278302db85d4243d0b54ef3c556afeb183ed559b24e4d6d1d562e2c42aad45061ec8f44eeae84c728118f9fca2ffb17bc31939cfcd7413b3687b38c941eb22e4beecfa1daab8d5e63d486686ecc4b87474ebb9197a6415c3eca8f83ee73e31c53b3839fc0"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x401}, @NL80211_PKTPAT_PATTERN={0xde, 0x2, "e1a463f66f068ae5487e7dff4a64b7b275198c7ad78e996d4ec028e02444c6d75d892d7f38f304b71f6e6ea7dddc649f8d345f637736dabec44912c82848d4db3d9b93407e36142ecc127a31efaf091bb7fcff3194aa239eb1b01cb8ca5601cf37af8f9e080e7fff96e222e6ae6ae1e8c3ef5149451b394c3ef70cd929137b2f535eb6af7bb7530552d4eccdaa2a8ceafb0176be20966484754b1fe9fdc51b030fc2a21c2962fafdc588e8633d27a40c973f79b79e39495a91db2b581c4e400242832e70c3ffc39f66a2b52b1dc649cd477a651e408654f7a7cf"}, @NL80211_PKTPAT_PATTERN={0xe3, 0x2, "d83c3081f7a5469c587e7362a0f1b2ad867a0bffcbeebe60f80c434debc3f9aeb265c62344298451fe091cf51c12c1cb96488045ec6cb6597be31e7862d2d2cd944418fd6d56b922b991670c6de640b2fc4263323f2697a60eb7ab078963d950f1061fd352ccbf3967f2e75377303962ba564766dc823aa95b58ddb3b3a93f62d5a19148423aa7db7ffdb11d75978c1b39a02b450968d90cf58b8a220361e1e259c45104d2148a0462c1996da2287dea08a7bf37597433bf4daa17b647f53814de00e998eb267777b189f085caab64698bef4e130a28e6d84e39b350af8e77"}, @NL80211_PKTPAT_PATTERN={0x28, 0x2, "3da19c424980728101535693a55fadd74717391b9e778e78e9c7ee4ef7513468e068eed2"}, @NL80211_PKTPAT_PATTERN={0x10, 0x2, "25211b0de6cfea6a9c4c4496"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}, @NL80211_PKTPAT_PATTERN={0x91, 0x2, "d8b2e4f4b44d16c54d88b80f980dd17e08f97801d40caa2e0d4803ad7d5bf2a8ed83d6c5866e41d8b5c8ff7de6f358812ec2c3140b8a2a0a5e8a2924cc192c1fd571c77b8006d36b41a71d0a1b071d4cb66d67678227d95828186a5bb57b611b69d7dca7f59ba7ddd6623b6feaa5671f63390d20f87a633267ff67016e16b828c93badd24e4e758ac2b57603bb"}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_PATTERN={0xbf, 0x2, "dccc7b9b191a8e57228a287dbb711f62bb90763ae1eb967e935d89e0934e23a986fc30a6b54a54da652a4c690e086b21b804d3c3efc4b672cbcc64dd3af1352f93798c1ce8c4383748c9e8302535a7d4d9dc063c4074ab369b7752c24361a18a7e1c33f32c61ea51d776835a560342e213d286571272f0bf8f4d70a8a461d78a6110e385ba8c739f92c9721d04e1a478a77aac0461fe574c1c80240d17cd77f62284d7d631df4f63fff6197a8922c8885468e8a0638763382223c0"}, @NL80211_PKTPAT_MASK={0xfe, 0x1, "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"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x34, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x79c, 0xc1, 0x8}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x401}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x190, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x17c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x4}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xf}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xeb}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xb4, 0x6, "5d6d6ce4a9e653cd5694fc31998efbcd87ac5ea8893c41e7d88bb18c1ff6802dfd1da7e42f6d5a1fbc782711ee6673ede558bda865ef49bf9f9eb09a05d7722405d577342a05c4af9f8a1ec9dafebb0d722d8bf40a706cb97887bb1ca42ffcfd970e2cbbf60e7c705ac7586b3b109079cb4e006ad3318424c7bb136762a21eaa21cd9c2d651fb4aaa12d2321554114abd2a21d4e47d760f6f73feae01bfb53de47abf30cd1b1a67abdc5d6b16ff70cf3"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x89, 0x6, "2b6bd17f32fc55c3a536ca8f50c167899f4f6df0e02d8197b7ba316a590fa437ecf7786b43b880c014a39325fea0ade62b2de1601492d03bd8fa739734f1f06ade7dddcbb80d73cbb76a0f8c9aa29346d06039bdb60cd04191314ff664a5b5a33cac00dd5aa88ae57c888a9d8fe9bfd4a0f43f5e06f5c69d939cb60cd77f6ce36818063bd8"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xc4e4, 0x0, 0xf1a}}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x744}, 0x1, 0x0, 0x0, 0xc880}, 0x57ea400ed51ebe63) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 2m28.115688909s ago: executing program 0 (id=1602): socket$kcm(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46fb6) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xdb) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) 2m28.031483314s ago: executing program 0 (id=1604): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc000000000000007b508c414e9d576477a8ca47748ae693204b7d83d092f8de2b98dbec72bc2e499ddc1bc2d716001f0ebd44129b33c09bf48a02288db10153676e39678d4c772c2ab90557483ef59ea0cfcaed7c5b3aa669254efbd0f371ef727df2a8ccde"], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 2m27.960441141s ago: executing program 0 (id=1606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000010000000000000000850000002f0000001801000020786c2500000248002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 2m26.930701394s ago: executing program 0 (id=1610): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) clock_adjtime(0x0, &(0x7f0000000040)={0xe4a7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x7, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x3) write$ppp(r3, &(0x7f00000008c0)='\x00', 0x1) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@bh}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000300)='.\x00', 0x880f9, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r4 = socket(0x2d, 0x2, 0x0) capset(0x0, 0x0) bind$xdp(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xa418be, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={r6, 0x1}, &(0x7f00000000c0)=0x8) 2m26.672481867s ago: executing program 0 (id=1618): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="f600", 0x2}], 0x1, 0x0, 0x1500}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d40)="504fd84e46c1819f771555bb3dbd485672d2ba0e9572e3ee66ef94536a7dfd0082883c5bd7fcb4e185c0cd7967b8616cc0446a181b1528f750b94e39b3a39c177446c9d7d9f2ff6922899e853818a3e80b2fd38f5e782b6b42c95104fd111ddce1505140ac49ae419e6264054d2cc0853c21ee312b754d0701db", 0x7a}, {&(0x7f00000003c0)="5238e95e63ee39039afbdcc3623762630b41620ad9c3ba2e00e019dd2a6d12b41daf39e8a94ebfb013cd351ea18c923617691c1ff8a55cafd19518d9ba95411af2f1bfa8d10cde6696d503887396d47677c9c8d2197e677aca63c919ba13cd532d707f0cc3c03813e4b03eb3bee052f4410191b5c81e4aff290bce080945cc24f16b3da715a177e3b1c5dafc5d15a50802013c63f017086b240b1e50875cf19e5fd0d1536d00510e64a5b59840872f76d1fc28de642110d1706588a9c0062b77494b9694de0ddca71fe6561f3c6500a792c25148622cef830dc029c43c817c3a01ad50", 0xe3}, {&(0x7f0000000500)="23355c484a99f50fe80290dad71777c07547ba6775a98ce83fd6c7031048db3f6cc0829e59806f8b94c170faf06472d63b65d24f52ef895f5bfb0b98cebbd1a6d72b1b", 0x43}, {&(0x7f0000000600)="9e1d7cffeebcc56f4a1cd2cebf23c21f5951c799bf8c8d62efca81f675745d0f6114880da308a45e71eb6d09080cd8a7a6afc5912915b9a1575c0ba983d07725aa072d2ad688e93c6073c1", 0x4b}, {&(0x7f0000000780)="1c5f4bb563d6ef2ffbb46cb2b02454214c50a988a9cd0d8b4ec20810aca4b2efa0acccf7f1ae615e5a985b570424d4421f111a30122bed", 0x37}], 0x5}}], 0x3, 0x2090) 2m24.521129795s ago: executing program 2 (id=1651): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, 0x0) 2m24.475500107s ago: executing program 2 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x11, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000520000007b0000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000002800aaff0200"/51], 0xffe) 2m24.316466458s ago: executing program 2 (id=1653): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x8, 0x3, 0x8, 0x0, 0x3, 0x3481, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x200, 0x4, 0xa884, 0x9, 0x3, 0x0, 0xe29, 0x0, 0x3, 0x0, 0x100000001}, r0, 0x0, r1, 0x1) pipe2(&(0x7f0000000180), 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030400190100ffffff0700000000d38bcaa037baf16cd319ff6b948f1c823e0942c6cb311884df238cd1c43f660e35e949ecbcf0ba", @ANYRES32=0x0, @ANYBLOB="1502000000100000240012800b00010062726964676500001400028005000700f400000006000600888d0000"], 0x44}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) 2m24.309341437s ago: executing program 2 (id=1654): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a11ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1a, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x8e, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xfffffffffffffffe}, 0x8424, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) splice(r2, 0x0, r1, 0x0, 0x400009, 0x4) fcntl$setpipe(r1, 0x407, 0x69e) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x24, 0x37, 0x1, {0x0, 0x3, 0x1b, r3, 0x6, '%)/..)'}}, 0x24) gettid() socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000000)=0xfffffff6, 0x4) write(r4, &(0x7f00000003c0)="240000005a001f001007f3f9002304000a04f511ff0cae9b020100020800038005000000e9094c804a171bd5d28122597513f5148754e760d8a4f9a0df3ae65fa395c058dd15f9359eac99f6ee482dfed0d9dd8d7458fd9ffabcff974fd4b901887512caace7a836cc11832c9ae987739a9cbedd9190e39ec2c46a155d4e0664576e83a07c8a90c71ea3127e565857dcc8a38a3ff72687e507e0fefc0c504eed792733a91811e37b8b7a938ea11465804d34", 0xb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c66d8eac613cc5, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) open_tree(r0, &(0x7f0000000080)='./file1\x00', 0x89980) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000000)=""/34) ptrace$pokeuser(0x6, r7, 0x358, 0xfffffffffffffff8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000003, 0x1}) 2m23.947981071s ago: executing program 2 (id=1660): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}, {}, [], {{}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x28}}}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m23.617106931s ago: executing program 2 (id=1664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xb4}}, 0x10000000) 2m23.581733875s ago: executing program 34 (id=1664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xb4}}, 0x10000000) 2m11.660117107s ago: executing program 35 (id=1618): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="f600", 0x2}], 0x1, 0x0, 0x1500}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d40)="504fd84e46c1819f771555bb3dbd485672d2ba0e9572e3ee66ef94536a7dfd0082883c5bd7fcb4e185c0cd7967b8616cc0446a181b1528f750b94e39b3a39c177446c9d7d9f2ff6922899e853818a3e80b2fd38f5e782b6b42c95104fd111ddce1505140ac49ae419e6264054d2cc0853c21ee312b754d0701db", 0x7a}, {&(0x7f00000003c0)="5238e95e63ee39039afbdcc3623762630b41620ad9c3ba2e00e019dd2a6d12b41daf39e8a94ebfb013cd351ea18c923617691c1ff8a55cafd19518d9ba95411af2f1bfa8d10cde6696d503887396d47677c9c8d2197e677aca63c919ba13cd532d707f0cc3c03813e4b03eb3bee052f4410191b5c81e4aff290bce080945cc24f16b3da715a177e3b1c5dafc5d15a50802013c63f017086b240b1e50875cf19e5fd0d1536d00510e64a5b59840872f76d1fc28de642110d1706588a9c0062b77494b9694de0ddca71fe6561f3c6500a792c25148622cef830dc029c43c817c3a01ad50", 0xe3}, {&(0x7f0000000500)="23355c484a99f50fe80290dad71777c07547ba6775a98ce83fd6c7031048db3f6cc0829e59806f8b94c170faf06472d63b65d24f52ef895f5bfb0b98cebbd1a6d72b1b", 0x43}, {&(0x7f0000000600)="9e1d7cffeebcc56f4a1cd2cebf23c21f5951c799bf8c8d62efca81f675745d0f6114880da308a45e71eb6d09080cd8a7a6afc5912915b9a1575c0ba983d07725aa072d2ad688e93c6073c1", 0x4b}, {&(0x7f0000000780)="1c5f4bb563d6ef2ffbb46cb2b02454214c50a988a9cd0d8b4ec20810aca4b2efa0acccf7f1ae615e5a985b570424d4421f111a30122bed", 0x37}], 0x5}}], 0x3, 0x2090) 1m57.176349494s ago: executing program 6 (id=1901): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd70000705df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1m56.160826499s ago: executing program 6 (id=1910): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) 1m56.040483717s ago: executing program 6 (id=1914): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x105241, 0x10, 0x2e}, 0x18) renameat2(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SET_NAME(0x45, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) fcntl$dupfd(r3, 0x406, r3) 1m55.181225871s ago: executing program 6 (id=1923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008810) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000400)={r2, r3/1000+10000}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=@newtfilter={0x58, 0x2c, 0xd27, 0x1070bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf4d6, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4ef3}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f0000000240)) socket$inet(0x2, 0xa, 0x1) r10 = socket$inet(0x2, 0x80000, 0xffff46c4) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000380)=0xe8) r12 = syz_io_uring_setup(0x132d, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000980)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid={'resgid', 0x3d, r9}}, {@resuid={'resuid', 0x3d, r11}}, {@nombcache}, {@noblock_validity}, {@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a2, &(0x7f00000004c0)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox7jZltBtI00E+4KNIp4EKehZPIr+BeJFBFFPgifBkycpFM2lrafI7M4k2U02bZJNtnY/H9js88w8O/N8d+aZeeZ5NgF0rKHsTxKxOyJ+jYiBWra+wFDt7eb85dKt+culJBYWXv0jqZa7MX+5VBQtPrcrzwynEen7Sb6TejMXLp6ZqFTK5/P86OzZvjw5cbp8unxu/PjxY0fHnnpy/ImWxJnFdePgO9OHDrzw+tWXSievvvHDl1l9d+frl8exTr+MNlkxlAX+50JV47pHNrizu9WeZemku40VYV268ldPtf0PRFcsHbyBeP69tlYO2FLZvamv+eq5BeAelkS7awC0R3Gj3znfVcqegVc+Bw9sZfej7a4/E5E98mRx38xftTXdkeZlehqeb1tpKCJOzv31afaKzY1DAADckQ9Ln5zojYhLt754Met7LPX20u7/Vt9/q/7dm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9VnZ/0mvbXKTa8r6f0/nc1v1/b+i9xeDXXluTzX+nuTUVKV8JP9OhqOnL8uPrbGPb577+aNm65b3/7JXtv+iL5jX41p3wwDd5MTsRLVT2gLX34042J0kK+NPFmcCkog4EBEH17fpvUVi6tHPDzUrdPv419CCeaaFz7Lw5rLjPxcN8ReS2vzkm6MzFy4+PnW2cX5ytD8q5SOjxVmx0o8/ffBKs/3X4u/Pc6vHv2PzYTZ1vVx7X3b8l61dbANL87Uzrd3/Bs//tDd5rTrP3Jsve3tidvb8WERvcqKar1s+vvTZIl+Uz87/4cOrt/99+Wey439fRGQn8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/rdAFv/kqte/xfN/MKk7/utPdJ357qtm+7+z43+smhrOl1Svfw2Shvxq1emO6Gus4Ga/PwAAAPgnSKu/gU/SkcV0mo6M1H7Dvz92ppXpmdnHTk2/dW6y9lv5wehJi5GugXw8tDJVKY8lc/kWa+Oj4/lYcTFeejQfN/64a0c1P1Karky2OXbodLuatP/M713trh2wxeqnl4oJ4PHetlQG2GaN8+hpffbKy+FiAPcq/68Nnes27T/drnoA28/9HzrXau3/SkPeXADcm9z/oXNp/9Ch0m9XXfz1tlcEaAf3f+hIm/m//i1M9N8d1WhPYrsPSqyrcBSJtO1fVKsS/XFXVGPjiUt5a27lltt8YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiRvwMAAP//6zPa6w==") r13 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) prlimit64(r13, 0xa, &(0x7f0000000480)={0x80, 0x3}, &(0x7f0000000a80)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) 1m54.720317247s ago: executing program 6 (id=1928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000a00000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m54.308397692s ago: executing program 6 (id=1937): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x8, 0x4, 0x7, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x8, 0x40, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86, 0x88be, 0x40000000, {{0x0, 0x1, 0xc}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'syztnl1\x00', &(0x7f00000007c0)={'sit0\x00', r0, 0xff10, 0x700, 0x4d8, 0x6, {{0x28, 0x4, 0x0, 0x2d, 0xa0, 0x67, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@cipso={0x86, 0x42, 0x2, [{0x6, 0xc, "16fe89dd7ad7953f1c7c"}, {0x7, 0x10, "d8699b845928b497713f68ef652d"}, {0x7, 0xa, "90d8076b8871b2d6"}, {0x0, 0xe, "c08f34f33b5577bea4ea102d"}, {0x0, 0x8, "f787045d1d88"}]}, @timestamp={0x44, 0x28, 0x7d, 0x0, 0xb, [0xffffffff, 0x1, 0x10000, 0x1, 0x1, 0x80000000, 0x4, 0xe, 0xce]}, @cipso={0x86, 0x1d, 0x1, [{0x0, 0xb, "a059b20ef2d115b269"}, {0x5, 0x9, "b7c83528c5be50"}, {0x0, 0x3, "be"}]}, @generic={0x83, 0x2}, @end]}}}}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) 1m54.272473866s ago: executing program 36 (id=1937): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x8, 0x4, 0x7, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x8, 0x40, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86, 0x88be, 0x40000000, {{0x0, 0x1, 0xc}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'syztnl1\x00', &(0x7f00000007c0)={'sit0\x00', r0, 0xff10, 0x700, 0x4d8, 0x6, {{0x28, 0x4, 0x0, 0x2d, 0xa0, 0x67, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@cipso={0x86, 0x42, 0x2, [{0x6, 0xc, "16fe89dd7ad7953f1c7c"}, {0x7, 0x10, "d8699b845928b497713f68ef652d"}, {0x7, 0xa, "90d8076b8871b2d6"}, {0x0, 0xe, "c08f34f33b5577bea4ea102d"}, {0x0, 0x8, "f787045d1d88"}]}, @timestamp={0x44, 0x28, 0x7d, 0x0, 0xb, [0xffffffff, 0x1, 0x10000, 0x1, 0x1, 0x80000000, 0x4, 0xe, 0xce]}, @cipso={0x86, 0x1d, 0x1, [{0x0, 0xb, "a059b20ef2d115b269"}, {0x5, 0x9, "b7c83528c5be50"}, {0x0, 0x3, "be"}]}, @generic={0x83, 0x2}, @end]}}}}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) 5.446431955s ago: executing program 7 (id=2965): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x40000) 5.146368312s ago: executing program 7 (id=2967): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000010000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00170000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 3.17059285s ago: executing program 7 (id=2978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000031c00", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.047984207s ago: executing program 9 (id=2999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016800800", @ANYRES64], 0x38}, 0x1, 0xb000000}, 0x10) 2.000522667s ago: executing program 8 (id=3000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000070000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) 2.000160547s ago: executing program 8 (id=3002): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f0000000000000000"], 0x54}}, 0x200040c4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1.972301701s ago: executing program 4 (id=3003): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031200004d8a0400140012800b0001006970766c616e00120400328008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="de4ce25b728ba604660053b2686d7d5ba28c6f99ca8fd22d8aded159f0c23fb1e2919778a8b865"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) 1.963465259s ago: executing program 9 (id=3004): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x18, 0x830d}, 0x100148, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1.134594537s ago: executing program 8 (id=3006): kexec_load(0xcfd, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000480)='z', 0x1, 0x0, 0x1000}], 0x0) kexec_load(0xcfd, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000480)='z', 0x1, 0x0, 0x1000}], 0x0) (async) 1.072327733s ago: executing program 9 (id=3007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r5, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in6=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0xfffffffc, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.069905783s ago: executing program 8 (id=3008): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000008004500002800000000000000ffffffff0d00907808000000000000000000000000000000000000000094ca141223f2ad194b1066dc03e4b9b37460e8ba836826354308fc086a2ddb489e5019dbe9f23db13c10d873abcf4aa21cf1bf4851f9ff31d1ae278b62da8a8bc22542ae8ded79d08c545b9f031653b071b6876789"], 0x0) 1.05558228s ago: executing program 4 (id=3009): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000003090001006d61726b000000000900020073797a32000000000900010073797a31"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt(r2, 0x200000000114, 0x2720, 0x0, &(0x7f0000000400)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x0, 0xa7e, 0x70}, 0x2c) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x1000000000000003, 0x1) open$dir(0x0, 0x11980, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x28, 0x6c}, {@loopback, 0x4e22, 0x0, 0x9, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 943.498487ms ago: executing program 4 (id=3010): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) 858.663069ms ago: executing program 4 (id=3011): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYBLOB="0000000000000000000000000000000000000000bb243d373123c6a50ef2ca7bc8c8e1f2507962c968"], 0x50) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) 784.107514ms ago: executing program 8 (id=3013): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x202580, 0xb8) name_to_handle_at(r0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x8, 0x8}, 0x6, 0x5}}, &(0x7f0000000140), 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000c00)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@block={'block', 0x3d, 0x400}}, {@hide}, {@map_off}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@unhide}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa0e, &(0x7f00000001c0)="$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") r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r2}, 0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000300)={[{@dioread_lock}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$eJzs3LtvHNUaAPBvxs887eRG99487o0hICwCduwESEEBCKQ0ICQoQmkcE4U4CUqMRKKIGIRCifgLAiUSEhUNFUgIAQ0gWuhRpAi5iaFAi87ujL221/b6FZPs7yft7jmzZ+bMNzNn5+ycnQ2gZfWlpyxie0T8EhE9tezcAn21l+mpq6N/TF0dzaJSeen3rFru9tTV0bJoOd+2ItOfR+TvZbG/Qb2XLl85OzI+PnaxyA9OnHtj8NLlK4+eOTdyeuz02Pnh48ePHR164vHhx5qK49oy76e4bu97+8KBvSde+fD50Uq8+t2naX23F+/Xx1HT21S9iyu3RqVqdnpn9fnBNS79n2ZHXTpr38QVYUXaIiLtro5q+++JtpjdeT3x3Lszma83aQWBDZPOTbsWTG0rXvPi7AXcmzJtHFpUecZP33/Lx53sf2y2W0+n57Fq/NPF44cXatsmT99le2vf2NvmzZcXr/9usMzuVL42Q6Vnmfq3R8TJyT9vpEc0vA6xhKzpkgAAM75M/Z9HGvX/8jl9m53FGEpvRByOiN0R8a+I2DPTE4r4T0T8d4X1983LL+z//LRlhYtckdT/e7IY2yoftXfKuLKZ3I5q/B3Za2fGx44U26Q/OrpSfmiJOr569ucPFnuvr67/lx6p/rIvWKzHzfbuufOcGpkYWUPIc9x6J2Jfe6P4s5mRgLQF9kbEvlUsP22zMw9/ciCld25b+P7y8S8iKwYu1qjyccRDtf0/GfPir6sq1bTY+ORgd4yPHRksj4qFvv/x+ov1+Y669Jz4u5uLqXu1wTaQ9v/Wecd/bflF/HlR4bzx2skV1HH91/cXjWpO/G1xY3oqi5PFwmtjivnN9q6I2DK72dLx35m9XE13FtPeGpmYuDgU0VlMmDN9eLa+Ml+WT/H3H2rc/ndH/PVRMd/+iEgH8f8i4v8RcbBY9/si4v6IOLRE/N8+88DrS2+hVRz/6yTFf6rh59/M8d+b1Y/XryLRdvabLxarv6nPv65j1VR/MaWZz79mV3At2w4AAADuFnl1DDrLB8p03cWpPbE1H79waeJwX7x5/lRtrLo3OvLySldP3fXQoeLacJkfTunO2fzRiNhV/aXRlmp+YPTC+I7NDByo3qtTtv+uYtrAQO31t/k/egHuPSsaR6v/0dlnn6//ygB3lPs1oXVp/9C6tH9oXdo/tK5G7f9axPQmrApwhzV3/q+43RzuQfr/0Lq0f2hds+3fL/6ghSy8Jb78u5XV3Ok/m9h9Yk2zb3ii0rMhS55c+VxtGxRp1P1px+KFs4hYXRWRL12mMy5f6V6ncNIZaqky5U0rTS8wX7bMU8ttlo41/SdGShwsEl0R0exc15rYp+t3/CSZy34AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBd7e8AAAD//1I03Cw=") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@init_itable}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x47a, &(0x7f0000000580)="$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") sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0500000074003a91bdfaa1d100004300000002000000040866aafcef04b10000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000001080)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x100040, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) truncate(0x0, 0x3000000) mmap(&(0x7f00001c5000/0x3000)=nil, 0x3000, 0x27ffff7, 0x4012011, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r8, 0x10, 0x6, 0x10001) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 783.982734ms ago: executing program 4 (id=3014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0xa000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 746.913526ms ago: executing program 3 (id=3015): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x47c}}, {@noinit_itable}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@nodelalloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 734.072483ms ago: executing program 4 (id=3016): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f0000000000000000080003"], 0x54}}, 0x200040c4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 665.977289ms ago: executing program 7 (id=3017): socket$kcm(0xa, 0x5, 0x0) unlink(0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000000005add6abf5a13142cd5f58542d01877807f0500000075fcb21dfa706cf5170114a22469f2ef998ad22036b9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000800000000000004000000000000000263c0000000000"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=winnt,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c636865636b3d7374726963742c00af88bb8e3852d55717e1aa4e123607336ea9458685020d57fb528b988b3d89ab2a8107828c3355e7a9ee581fd87eeb243136968ab52bafaa69c9df351fbd7fed042ed913f5cdd236068ef946ce3693d20d942284177ba683798f02a777753bdf18cadfd0b54fbddca9ac235c7f0d8d2e4993c22c29c4e9b03021adc00b761a670d9b65a40530357b6d6184bfb689e5a471243a6937a553f4a39e7fc29e"], 0x11, 0x305, &(0x7f0000002480)="$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") openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0xc0041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 588.958393ms ago: executing program 9 (id=3018): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x40000) (fail_nth: 8) 313.155175ms ago: executing program 3 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000fed9df2501000000052002000a00000014000700ff00000000000000000000000080000108000b004f17daf7496abe463b8275490d8cdfe0acec643bfe72728dad31254fd5ffba9099b05640a2efef1890781349bb380e61f52a152d98df1a902e899a85e57047c28b5fbc7aab0a511bc3017fd16aa7c7d647369aa0bf493304fc25d39d44fc1be1292f20e6f11e2b", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) 301.090653ms ago: executing program 9 (id=3020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2b, 'pids'}]}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000002840)=ANY=[@ANYRES32=r5, @ANYRES64=r2, @ANYRES8=r2, @ANYRES32=r3, @ANYRESDEC=r3, @ANYBLOB="36ca42b13ea9b4429f14e47f1b444abeb1d3c219f324197adba014f0681543f102164bb81601c84a31d664f46a37bdec490fefe4774086aa629c0d4db8137bbec85211578578b1efa741761ad14b31110246fb99547608bbf5b828ddd751625b8e1e44ef85d2845a5f778bd75a952d636a86b4edd1e003900fe5438d99105bbf7a9db207aea5f5e7f8e0c3c182a7254861108b529805d5a61bd71027956b6e9f98e3b3936f7cd54421b45fd8b9671134e8ca7aef0e70dde59e48d58a37b2d7c1bf55638ecad17ae5eef94f10186b68016eb85f08c75e61435ac2269ff305beeab568fb5942a0a08c80a2e173fa937bd69d732203aacdc0ef85551214ec55b7df41ea1ec1fbabb050a0f329ef6b545b6f1ed7861b673f038b0edce4d1cc97ab1e2975b9eab52dde3577441832f50dc027321355f6546bcc81f5ca3222106a4595546c8d50cd76940188b110e0c75c941068fe48c56439ba253e767d26e01f1f6932cda99844c3c706b009b2d848dc8a3250fbdc9110e72914fd213e024461dabc2d419dce6d487ce1dccc8feb51e8f762e49c2ba14118710d9770da5f38a02c29a2cd94003f3d93c7b156c6355eb9cbdd1444534b47f3250890ae346a21f2492e47caab9af28a26d4abb1751364543d800978a990baffe4c0a005895584bc79ec75e8d31e3209503ff8e0b54ddc4fc5c2542f147506486051b4b34b103a9c4bf6d1ea5dda001298380cfc5fa82174846e44d90a875a9d9ece08fbf5344c5f64476889f16413a5f0dd5ba50f156030d0bbd4d2c6eeac66523d3a05ff1b0bc8c32475ebe3aec3b38479672bf44e64bc816cfd5629932b4dd048207da51b50c39fcadaaab0866f187b593922f5986b2aded03cf5e69cbc5e3ea2a6c5f91aee8cce8c499cb3f292d9325aeb6115a839024e23cc1d25140ff3f2de7eea1a48fecda7bfb4f6f4b119f307194f0e8babaa6ab12f6f9d66e97648f88980da339d87c01559fc5933d81dcc4d84801b858fff4f56b3b5fbb77d7af61a35baee3e0f24c014b81dbb805835afe6dda064c70cfcaa04dafc013a6c2407b06c1609074bb94aef5da607c383f2db8c8106148b05774bd134c04cd96b4adef83680e187965af83643c4a767d559d5828dc7570b0d9fb461d300c792b8c375e84ba08244021b1f1a8624cf2c098e4df2d3e01c79faae869f619898ef8e7b83a20ace7a3fe0a41c9bc2561c17253fdb9d703c4a6d106fac33bda260c617c672a38a351ef4c13016490746f6e09cca9b93b5e7bff8ee28afb301a09f93075d5f5b27251d8426127f97a290596ef38aa4f57b8f8ecae2a493dd0fbdfdbc58ead418458fcc356bcbc9d3e4fc1936abac3d4fa99232b27b7a11f36655d8ea44c047e04aa6be1ec9f0d90b84f553ca25c6f6d8f70249d990f71b22f954495dc170a7bc7e4d7bc3ffac29d4a7a891017aa9b7cf62c2dd3f6604852804a2f9530b7617e31c303a7eadf7c07a18fe6ce6ccf670b3a4e8f6f5ebeb98783fbb6d3722d43d95239350ac90ca18a0d7bbd3e6c5c214b5e12b55d02152e0e26fb538443251ee9fa6862c2db396fa7d714bf672f0a014bcae072d226155288adf9b60a472c2dda9a56c317eb970d4f49b4793c5dabcb750ff30443354f200d21dda0ce48d021dd9cebbe6da03b7ecd428ec834d56bae2d8c253196ce8e294eb95f9b9ec99405bed15f835a91ba6445db7ba6d842b70662d52688565a096aa9a10dae3b6f309ebdff66f8b4da107499d3c0209ca7d1df3a2ccacbc6657cc3efdd8a21b68da19b8d557e11c92d85d9edbd7ef48fa77b578c10c8cd8276d695e5844450f7a77c3a2414f3cf57bc6261ade245dd5d271d7c49c6338b5c97efd4e743014b6e960c311a66d92270519abff5096fb3bc66dd1ba1b36875a5ca93acff39dd8f63f0acd7280cbeb33a0896c413e887679bb360ede70a5bb1231a5ff682e3dbd2462bdcf994a3d8f8ec47c598c6b4e860335fd47456a70fd783f1e6ed1a7f463d94b884fa502f18274464e740c86f6ec061673daf5f0b9eb34e1898a574d6cc0dc11c9da5deca73c93fa11057e5642b110de2b75decc295f664519c7d901001880854a9e14f163705c4695b7dfb1e006ba7f818e9ca1c6b5677a7550ba4a3ddb951128dc781ac7ea30e279d763e18d31100ef37e0e3365e5abff376b3bae99d4aba0e44bcebe51d9c144f2373d43555d7bba27b5124cd382ef70f5d71a8034fc471993b8b80f4222567fba5708d26984dedcaf579b08a8b76cb7fd35cef9a5df59fd37158e3868b14a5a09d30f769c2fda71e9c29dd442a92a99a50e9445e182c984324ef2faa0e039bf296679812da9a3f1592e823d3333847aaf15d2cc27bcbe250a3bdd68fdc1aa080a360fa862c7499f0d9c04862e465296982f567c3c2e31386762799b77e618e8778307c8986332cdb2dd960bf3d45ef45039905ef2a35582a1091f84385bde20b5edbb744894dd5b4202ee1421a8a4b139968afd8bedeb47829e676b5cad8f6b326224e337c129eccc0ab53b6ee15619c50ec2f8db471eaa4f4f6b242c9a8fc7a57bc9f2680759d7114b792026d63e62db9dd24d1d38136fc3139509bb5fd090783f7557823dc7c537865a84bbfe88ae4bf955e17484ecb9f5682cf2e9c54a44159c10a5e8edd9d0b2afd69ac541d8b8c4682b53bbabaa52348b03ed113724f0c0bfedb8a2b6543a5bf6ea553356aab7bc77daaa95e49304b46ad4f0cf5a399e26af6668c763832cf7c55614ef571e5343d92aad815807546c801cd07162e7dc02da6edef2b5ea684645d21f578917bee7e0b24485bdc6f09c4b28d39a8298db4ddca5dfe5f5d952cae6739081b19afc8f8795afd822df65abe704df9696eff325461c80ea91035e22778f2156918e19f58aaf91a313d3f2c729f75c7801db671e446504aaeb264a202e1b948493dfa98e7e7cc90be88ca375263cdd91831dd319bb4eb254d8b894fe5fb45cbe23d945e13389b233184ef0a1afa1226eece10285afdbe3128592e038039c91d895c481af504aa97a948ebd1c806d27738686cbf001ab80b13765d20747d7d66f00a81ac8db4021b5ead0e7f314052d788ad5650fc549432e74c1435b4f727da83c1236d3f4a90b472060ba4185febfc53ab12826534fc6dc5cc9f11709555f7a9bfc8ceb961f4f60bc391cb6384073ff904940246161e0ee29ae1f1e1f895b071ffc48f120a8cd9ba31be38da74e71512bbaa5339f30f77722c1ed02af6e3326e92c88237cc258af1bca6bc09b1306086f7a069dfd5248f4d6e185cf5e34eb31d6f52ca1afa257a7ff6ec7533fb254f062b495974af3c55de844cfa5633a5d8536355669a3b8daa03f203b3366cb11094e8e0ca80516c0745c051afb57eb0f03c505a71047a8b62a3130e22fa328c92b675c6afc7943b2b0d36c9f0895a194feb2e96169c24ec9b9c5a728e59c5093363f9121593d32c35f7daf076e4d98c12c0138205e65a6bec71b2db6ac87415c43f28027d2e49a92f920f1136a1720c3009ef3769052a70b7186aefe7c1bf666969e8cbc4cd94fc206b5f79513a18e74c9aa4806b7fe0cf6c5822d6289f31058b640be22f8588870301ecf12a8e3bb3ec9707ffe7e5e4cb1507f762e6e1f80e0960dc52f62925ab50e9a8411b193ba6a901f2d62e64f42d805bbc67dd1f732cf6dc9b24308478e874d805238adc7cf34068a5f431c2cfacce83d4eefb7aa43d1f374295b9c8624a26ca49e42b3c38821a2986784965797bad4474ecd43f2b36310df2d24eb764c52a1517b50104a38ac5d0b11ebe979424e9b3d77e1c5447332181b86031cb775a2a1725aa58899f80eb610857254e2f065dbad6d51b70f7007ad0e03bdd03948b9445afb65ba491919f2087330781c8e142687de0d93d73f944a866ae3773bd35843d758b54554f266673fb854978cfa05acd69deba919cf06fe9f0f58cb01423a6b86c588b1fc71b895c8769116a163d09191d91198a6a281797b98a651ce24290e1a708e38c37efa7c929ab1c581e2bb7147b63a4af107bafbd96051c347303001b4dae59d5a5339ef6912a463b115292b6964dfe0fc382160c03092e24c2371eeaa2b519f25de69ba1ffd4dd75edfd4be360f5fdec6ca90901c9f0581e9a08c90b5cd1e2b77dde43a060bced38ecdf4511018ce8fc29f280f11a0a836dd3fa037df0c1d4500a2f8684d71efa7d49215e2c1ad8d0c53aa025d451c2d776aa364c2e1c768a8a21f73ccb2b6140578f073ea743c2a09e21344814e7270a9bbcf3ee79327e7a3356c3e4633e8d3a5c6058c1eebff3e5195e728a6f8601291ca4f59835bde0b3941dafb0736bf6ebd72c00a55983c7210f358b4ab15f04976b0335df082a44329b969a3206cf128f8f9da96afbc18eda92f2a1599084fe78a1543e97069dccadcd965d16543df1850cf3ef5b32f1663d9aeb3097aad8b0bfcec214548fb7b0cc39b3b0191dfbeaef02ffe74f165d89a701f067477804e5fdf3213ed6e4248c0f298315ab0bd7e8654c4c1a54757339f165e474aaeed4a141661161b75a348c6955ff6a5b36f54bcd430a927de85cec3c888d1956d92a90d76cb77ffb98004605194744d9bc5c9b3850f2477ac10af0b5b5c063052f9d6a18a52ca91c565c44d75428f7050933a5ce9ec0a6a7c5f74ec2c16678459cc36048b1b68a6fe789087d74aa49e382c6ab4f5822f2b07f0ac951ba949870a0bf48fa7062c046451fef7bb290d4abc1e46686604c55ae4cf8f381a694db42a8b4f6864cc511d6d08715e419b969155525de774851bf0c00d5485e3abe06470759cab1a920aa97c79b8c8604a6648d2f13fa2ac60bcb2d7210c14b3661db47d2986107d15580c8e61f3115def1a8307113214e1c2ed8535257d92b2fa532d34100f42ce85f4c359213cd0fa699836b4c191aec52b8b4184d98328c3ce805766e3023709f8a297d109d76de9a6f18cb56adf816c569f3635c9dfe2271b24056a3aca4b9c259bb52c7a2edb83394140365dc8aa3058471ca2dd345410156b9f81f13b7139298d414a897cb9edce0ed0d2cbbcded91e304b68ab069ddb824c01e3555ae21f98e7f10dcf5955383a1c1539c020fa08977a1678a17b08d9ce6e8f992f8eef243543aded0bb7326d87a794e7125ef52e69586f096c46c3f328c43c8ab564eeb1c4df9e4b9e198dc7bda6e79a30e3591eda9d6042b9ebc8bbb8fe115ec33ab553e0bdad357b6536cd1c093d206e527f0957ab08c8a74f9d408805b48b56f8bc2a25ab5eee11ef596b17cbb97114285f120c7ba8f37084157fae7312e340cc8d9ae771d33d00e646c4fed012362492f366076d93fcaaa3488df01b680d04cabfb380430e787e89d27b5876d5c3e9c11f0f5ecbe20c5f194439ca83ef2d8171de0b4673bcc0eaa4cab407ba1e0ed6ae10a1e3506bc7184c4442bf647c637cd933a9501deacb6c0c573150cfe8c7ad08dff1440f9302bcdab5b13e6a6e0f1062ab4dd3293f7c3deef14a693fbf22d48b78dc2ea0bf0c62f8e348d50b00611e16ea10970f57e899f41e0e98c6fc68f56a5971e1f0e68ef83434361044b1f38fc08b604adf01b141b0a7f2c903ba30a42ca0b9183ba17cc4b47f9f1bd133c870d7b64b5b7519113a059039d6195a06e93e6d4245156b6c4397d3044b7b3c2e0dc042f21cb6f721ab38e560e6f7460322e279ed569a48f54a1599ace1b34d3cbd350f08bf14fcf5f0bb0137a773237a3f19ab81a0057833f5103bccce85aae5d22b8fa404222503b28a197324bd66a7c5bac3094b3c290c3dbeefe6413f930edd75ed", @ANYRES8=r6], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_SETFSUUID(r10, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "e9aec4948650d5f86e4f17bf4a0c9cc8"}) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r8, 0x8943, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x20902}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @multicast1}]}}}]}, 0x38}}, 0xc0) 208.804283ms ago: executing program 3 (id=3021): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x80c0) 117.192184ms ago: executing program 3 (id=3022): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) 117.075935ms ago: executing program 3 (id=3023): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000008004500002800000000000000ffffffff0d00907808000000000000000000000000000000000000000094ca141223f2ad194b1066dc03e4b9b37460e8ba836826354308fc086a2ddb489e5019dbe9f23db13c10d873abcf4aa21cf1bf4851f9ff31d1ae278b62da8a8bc22542ae8ded79d08c545b9f031653b071b6876789"], 0x0) 115.741944ms ago: executing program 7 (id=3024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000b000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 91.633879ms ago: executing program 9 (id=3025): setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) (async) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) accept$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) (async) accept$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r9, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r9, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0x6}, 0x0, 0x0, 0x10000, 0xc, 0x0, 0x2f6fbf41, 0x0, 0x0, 0x1, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x25, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$eJzs3E1rK1UYwPEnk5cmKW2yEEVBetCNboY2uhaDtCAGLG0jtoIwbScaMiYlE1oixbYrt+LeleCidNldQf0C3bjTjRt33Qgu7ELvXOatnby1aW5K7m3/Pyhzcs55kjNzTsozQ2YuPv3uq1rF1itGS7S0kpiIyKVIXjQJxYKt5pVTEnUoiaD0UbFUWlxRaqm49k5BKTU79/PefiZoPJuS8/znF38X/jp/+fzViydrX1ZtVbVVvdFShtps/NkyNi1TbVftmq7UsmUatqmqddts+u0Nv71iNXZ22sqob89kd5qmbSuj3lY1s61aDdVqtpXxhVGtK13X1UxWcJvy8cqKURwxeGvMg8E9aTaLRlxEMj0t5eOJDAgAAExUd/6vuSn9nfL/t6f/+f311fUNmfXyf7ezn/8nZW//5I1fW9OfnM4G+f9Zql/+/+4f/nt15P9pERkl//9B7pD/92ZEj0v5ODnpIeBZzaV6qmIdr9z8Pxt8fz1Hn53MewXyfwAAAAAAAAAAAAAAAAAAAAAAXgSXjpNzHCcXbsO/61sIgtd4kAbN/5SIpN3Zd5j/h2x1fUPS3o177hxb3+6Wd8v+1m393/GJKfOSk/+89RDWieOEdx4pV15+sQ6C+IPdctxrKVakKpaYsiA5yXfHO87Sh6XFBeUL4q9uU8pG4wuSk5f6xxc644PPT8lbb0bidcnJb1vSEEu2vXV9Hf/NglIffFzqis94/QAAAAAAeAh0daXv+buuD2r3nzJSrHiXiQZcH/DPr+f7np8ncq8lJr33AAAAAAA8Dnb765phWWbzhkJGbu8zeiExXOdUV03yps7xyB4OO56UdyFDZFCfeJ8jpkm0j9taM34c8qh2FMIfUnQ0pYPK0Q5vuP9jm6/DaI0mQ0Qlugc/51aoO376UbAjVzXhZaPUgOMsy73vo3WshM6jmhzben7l+5/+Hd8X5L3TcAXc3vkoUpMces1blpnuXnVe4YbHQmtj+K8DAAAAYBKuk/6w5v1oc2wigwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JG5l0f6dRUmvY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8+JpAAAA///vv/C6") (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r10, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x2, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r11}}, 0x18) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) 49.41766ms ago: executing program 3 (id=3026): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0}, 0x20) (fail_nth: 2) 455.6µs ago: executing program 8 (id=3027): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000fe800000000000000000000000000529ac1414bb00000000000000000000000000000bc5ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000080000000000000000000000000000000000000000000000000000000000000001000000000000000900000000000000800000000000000000000000000000000000000000000000010000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ac14143b0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000002b00000000000000fe800000000000000000000000000000000000000003000000080000000000000000001020010000000000000000000000000001000004d43200000000000000000000000000000000000000000000000000800003000000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0) 0s ago: executing program 7 (id=3028): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x47c}}, {@noinit_itable}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000000000000500000008000300392b"], 0x38}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) kernel console output (not intermixed with test programs): ed capacity change from 0 to 1024 [ 283.084275][T12774] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.091435][ T7246] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.126445][T12772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.139161][T12768] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.2611: mark_inode_dirty error [ 283.196882][T12778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.215185][ T28] audit: type=1326 audit(1772481958.579:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 283.220779][T12772] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.261749][ T7246] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.264446][T12768] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.2611: corrupted inode contents [ 283.270177][ T7246] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.301820][ T28] audit: type=1326 audit(1772481958.579:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 283.332420][T12772] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:105: comm syz.7.2612: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 283.333416][ T28] audit: type=1326 audit(1772481958.579:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bd048cfce code=0x7ffc0000 [ 283.370473][ T28] audit: type=1326 audit(1772481958.579:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bd048cfce code=0x7ffc0000 [ 283.397222][T12768] EXT4-fs error (device loop9): ext4_truncate:4587: inode #15: comm syz.9.2611: mark_inode_dirty error [ 283.420616][ T28] audit: type=1326 audit(1772481958.579:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bd048cfce code=0x7ffc0000 [ 283.439002][T12768] EXT4-fs error (device loop9) in ext4_setattr:5983: Corrupt filesystem [ 283.444781][ T28] audit: type=1326 audit(1772481958.579:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bd048cfce code=0x7ffc0000 [ 283.476437][ T28] audit: type=1326 audit(1772481958.579:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bd048cfce code=0x7ffc0000 [ 283.477004][ T9339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.500325][ T28] audit: type=1326 audit(1772481958.579:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bd048cfce code=0x7ffc0000 [ 283.533178][ T28] audit: type=1326 audit(1772481958.619:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bd048cfce code=0x7ffc0000 [ 283.556808][ T28] audit: type=1326 audit(1772481958.619:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bd048cfce code=0x7ffc0000 [ 283.580823][ T28] audit: type=1326 audit(1772481958.619:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.8.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bd048cfce code=0x7ffc0000 [ 283.692432][T12785] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 283.702390][T12785] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 283.712310][T12785] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 283.732030][T12785] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: inode #5: comm syz.4.2616: unexpected bad inode w/o EXT4_IGET_BAD [ 283.745306][T12785] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 283.745478][T12785] EXT4-fs (loop4): no journal found [ 283.754628][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 283.754657][ C0] EXT4-fs (loop4): initial error at time 1772481959: ext4_get_journal_inode:5863: inode 5 [ 283.754689][ C0] EXT4-fs (loop4): last error at time 1772481959: ext4_get_journal_inode:5863: inode 5 [ 283.772468][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.776537][T12785] EXT4-fs (loop4): can't get journal size [ 283.803255][T12785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.836183][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.837996][ T3798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.822197][ T9745] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.842008][T12802] set_capacity_and_notify: 3 callbacks suppressed [ 285.842055][T12802] loop4: detected capacity change from 0 to 512 [ 287.077180][T12790] pimreg3: entered allmulticast mode [ 287.811747][T12802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.2621: corrupted inode contents [ 287.844955][T12802] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 287.845146][T12802] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #3: comm syz.4.2621: mark_inode_dirty error [ 287.854333][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 287.854355][ C0] EXT4-fs (loop4): initial error at time 1772481963: ext4_do_update_inode:5569: inode 3 [ 287.854400][ C0] EXT4-fs (loop4): last error at time 1772481963: ext4_do_update_inode:5569: inode 3 [ 288.072633][T12802] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 288.073133][T12802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.2621: corrupted inode contents [ 288.173995][T12802] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 288.175942][T12802] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.2621: mark_inode_dirty error [ 288.196408][T12802] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 288.196862][T12802] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2621: Failed to acquire dquot type 0 [ 288.274548][T12802] loop4: lost filesystem error report for type 5 error -117 [ 288.291726][T12812] loop9: detected capacity change from 0 to 4096 [ 288.307553][T12802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.2621: corrupted inode contents [ 288.343604][T12802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 288.345596][T12812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.348546][T12802] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.2621: mark_inode_dirty error [ 288.364973][T12812] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.386455][T12802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 288.390220][T12802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.2621: corrupted inode contents [ 288.440809][T12816] loop7: detected capacity change from 0 to 512 [ 288.444539][T12822] loop3: detected capacity change from 0 to 1024 [ 288.453825][T12802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 288.454155][T12802] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2621: mark_inode_dirty error [ 288.478959][T12802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 288.479496][T12802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.2621: corrupted inode contents [ 288.502926][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 288.502942][ T28] audit: type=1400 audit(1772481963.869:4987): avc: denied { watch watch_reads } for pid=12811 comm="syz.9.2623" path="/" dev="ramfs" ino=42016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 288.519985][T12802] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 288.532476][T12802] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 288.532891][T12812] netlink: 'syz.9.2623': attribute type 21 has an invalid length. [ 288.542118][T12802] loop4: lost filesystem error report for type 5 error -117 [ 288.558759][T12802] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.2621: corrupted inode contents [ 288.561403][T12812] netlink: 120 bytes leftover after parsing attributes in process `syz.9.2623'. [ 288.567719][T12816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.592650][T12802] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.2621: mark_inode_dirty error [ 288.620815][T12802] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 288.621168][T12822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.629961][T12816] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.654524][T12802] loop4: lost filesystem error report for type 5 error -117 [ 288.662987][T12802] EXT4-fs (loop4): 1 truncate cleaned up [ 288.678464][T12816] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:105: comm syz.7.2624: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 288.679896][T12802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.706255][T12802] ext4 filesystem being mounted at /558/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.718261][ T9339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.755569][ T3798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.791973][T12829] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.801983][T12829] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.821800][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.895292][T12833] loop3: detected capacity change from 0 to 256 [ 288.903604][T12829] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.913510][T12829] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.924128][T12833] msdos: Unknown parameter 'n' [ 288.934630][ T28] audit: type=1400 audit(1772481964.299:4988): avc: denied { map } for pid=12832 comm="syz.3.2630" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 288.969100][T12835] batadv_slave_1: entered promiscuous mode [ 288.977460][T12835] sch_tbf: peakrate 4294959103 is lower than or equals to rate 16517373851444205497 ! [ 288.995790][T12834] batadv_slave_1: left promiscuous mode [ 289.066003][T12836] loop9: detected capacity change from 0 to 164 [ 289.296173][T12829] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.358167][T12829] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.487106][T12842] loop4: detected capacity change from 0 to 1756 [ 289.506360][T12829] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.552189][ T28] audit: type=1400 audit(1772481964.909:4989): avc: denied { getopt } for pid=12841 comm="syz.4.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.600454][T12829] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.878767][T12848] loop4: detected capacity change from 0 to 1024 [ 289.934742][T12848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.959531][ T7248] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.086972][ T7248] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.117065][ T7248] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.715706][T12854] loop3: detected capacity change from 0 to 164 [ 290.743677][ T7248] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.866471][T12854] pimreg3: entered allmulticast mode [ 291.045532][ T7248] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.075349][T12858] loop9: detected capacity change from 0 to 512 [ 291.092326][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.111392][ T7248] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.148019][ T7248] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.203439][ T7248] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.212178][T12858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.263752][T12858] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.279444][T12846] loop8: detected capacity change from 0 to 512 [ 291.433838][T12856] EXT4-fs error (device loop9): ext4_validate_inode_bitmap:105: comm syz.9.2638: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 291.458606][T12867] netlink: 'syz.7.2641': attribute type 21 has an invalid length. [ 291.469795][T12869] loop4: detected capacity change from 0 to 512 [ 291.496653][T12867] netlink: 'syz.7.2641': attribute type 4 has an invalid length. [ 291.535848][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.553930][T12869] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2642: inode has both inline data and extents flags [ 291.579425][T12869] fserror_report: 2 callbacks suppressed [ 291.579439][T12869] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.591335][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 291.606924][ C1] EXT4-fs (loop4): initial error at time 1772481966: ext4_orphan_get:1391: inode 15 [ 291.616348][ C1] EXT4-fs (loop4): last error at time 1772481966: ext4_orphan_get:1391: inode 15 [ 291.627943][T12869] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2642: couldn't read orphan inode 15 (err -117) [ 291.640025][T12869] loop4: lost filesystem error report for type 5 error -117 [ 291.640661][T12869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.016096][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.047198][T12875] loop4: detected capacity change from 0 to 1024 [ 292.058576][T12875] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 292.068072][T12875] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 292.077965][T12875] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2644: Failed to acquire dquot type 0 [ 292.089468][T12875] loop4: lost filesystem error report for type 5 error -117 [ 292.091338][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 292.091932][T12875] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, [ 292.098685][ C0] EXT4-fs (loop4): initial error at time 1772481967: ext4_acquire_dquot:7001 [ 292.105131][T12875] inode 13: [ 292.112682][ C0] [ 292.112691][ C0] EXT4-fs (loop4): last error at time 1772481967: ext4_acquire_dquot:7001 [ 292.121603][T12875] block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 292.161779][T12879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2645'. [ 292.170868][T12879] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 292.199516][T12875] EXT4-fs (loop4): 1 truncate cleaned up [ 292.211737][T12875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.227074][T12875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.361837][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 292.410571][T12902] loop9: detected capacity change from 0 to 512 [ 292.410946][T12903] loop4: detected capacity change from 0 to 1024 [ 292.428948][T12902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.467541][T12902] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.491492][T12903] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 292.541863][T12904] loop8: detected capacity change from 0 to 2048 [ 292.548647][T12903] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 292.601674][T12903] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 292.622160][T12903] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: inode #5: comm syz.4.2655: unexpected bad inode w/o EXT4_IGET_BAD [ 292.651465][T12903] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 292.651758][T12903] EXT4-fs (loop4): no journal found [ 292.666106][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 292.666127][ C0] EXT4-fs (loop4): initial error at time 1772481968: ext4_get_journal_inode:5863: inode 5 [ 292.666161][ C0] EXT4-fs (loop4): last error at time 1772481968: ext4_get_journal_inode:5863: inode 5 [ 292.754175][T12904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.766937][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.786607][T12903] EXT4-fs (loop4): can't get journal size [ 292.806897][T12903] EXT4-fs (loop4): failed to initialize system zone (-117) [ 292.830570][T12906] loop7: detected capacity change from 0 to 512 [ 292.837859][T12903] EXT4-fs (loop4): mount failed [ 293.032280][T12920] sch_tbf: peakrate 4294959103 is lower than or equals to rate 16517373851444205497 ! [ 293.102067][T12927] xt_hashlimit: size too large, truncated to 1048576 [ 293.175253][ T9745] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 293.228127][ T9745] CPU: 0 UID: 0 PID: 9745 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 293.228237][ T9745] Tainted: [W]=WARN [ 293.228245][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.228259][ T9745] Call Trace: [ 293.228268][ T9745] [ 293.228332][ T9745] __dump_stack+0x1d/0x30 [ 293.228370][ T9745] dump_stack_lvl+0x95/0xd0 [ 293.228396][ T9745] dump_stack+0x15/0x1b [ 293.228475][ T9745] dump_header+0x80/0x240 [ 293.228507][ T9745] oom_kill_process+0x295/0x350 [ 293.228567][ T9745] out_of_memory+0x97d/0xb80 [ 293.228592][ T9745] try_charge_memcg+0x62e/0xa10 [ 293.228639][ T9745] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 293.228677][ T9745] __swap_cache_prepare_and_add+0x386/0x530 [ 293.228760][ T9745] swap_cache_alloc_folio+0xa2/0x120 [ 293.228863][ T9745] swap_cluster_readahead+0x36b/0x3d0 [ 293.228893][ T9745] swapin_readahead+0xde/0x840 [ 293.229002][ T9745] ? __rcu_read_unlock+0x4e/0x70 [ 293.229021][ T9745] ? __perf_event_task_sched_in+0xa65/0xad0 [ 293.229042][ T9745] ? __list_add_valid_or_report+0x38/0xe0 [ 293.229068][ T9745] ? xfd_validate_state+0x45/0xf0 [ 293.229102][ T9745] ? __rcu_read_unlock+0x4e/0x70 [ 293.229120][ T9745] ? swap_cache_get_folio+0x26f/0x280 [ 293.229144][ T9745] do_swap_page+0x309/0x2210 [ 293.229245][ T9745] ? __schedule+0x93c/0xd40 [ 293.229266][ T9745] ? __rcu_read_lock+0x36/0x50 [ 293.229284][ T9745] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 293.229375][ T9745] handle_mm_fault+0xb40/0x3020 [ 293.229402][ T9745] ? vma_start_read+0x1c7/0x2c0 [ 293.229474][ T9745] do_user_addr_fault+0x62f/0x1050 [ 293.229503][ T9745] ? trace_page_fault_user+0x1f/0xe0 [ 293.229543][ T9745] exc_page_fault+0x62/0xa0 [ 293.229568][ T9745] asm_exc_page_fault+0x26/0x30 [ 293.229617][ T9745] RIP: 0033:0x7f2bd0487917 [ 293.229633][ T9745] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 293.229649][ T9745] RSP: 002b:00007ffef85aa310 EFLAGS: 00010202 [ 293.229666][ T9745] RAX: 0000000000000000 RBX: 0000555568cdf500 RCX: 00007f2bd0487917 [ 293.229739][ T9745] RDX: 00007ffef85aa350 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.229817][ T9745] RBP: 00007ffef85aa3bc R08: 0000000000000000 R09: 0000000000000000 [ 293.229828][ T9745] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 293.229840][ T9745] R13: 00000000000927c0 R14: 00000000000478f4 R15: 00007ffef85aa410 [ 293.229856][ T9745] [ 293.324909][ T9745] memory: usage 247088kB, limit 307200kB, failcnt 761 [ 293.557781][ T9745] memory+swap: usage 127868kB, limit 9007199254740988kB, failcnt 0 [ 293.587437][ T9745] kmem: usage 116128kB, limit 9007199254740988kB, failcnt 0 [ 293.595216][ T9745] Memory cgroup stats for /syz8: [ 293.595391][ T9745] cache 8192 [ 293.603959][ T9745] rss 0 [ 293.606817][ T9745] shmem 0 [ 293.609782][ T9745] mapped_file 0 [ 293.614049][ T9745] dirty 0 [ 293.617148][ T9745] writeback 0 [ 293.620532][ T9745] workingset_refault_anon 391 [ 293.625462][ T9745] workingset_refault_file 0 [ 293.630038][ T9745] swap 1261568 [ 293.633998][ T9745] swapcached 8175616 [ 293.637982][ T9745] pgpgin 73036 [ 293.641576][ T9745] pgpgout 73031 [ 293.645317][ T9745] pgfault 82657 [ 293.648969][ T9745] pgmajfault 155 [ 293.653182][ T9745] inactive_anon 0 [ 293.656828][ T9745] active_anon 12288 [ 293.660696][ T9745] inactive_file 0 [ 293.664622][ T9745] active_file 8192 [ 293.668386][ T9745] unevictable 0 [ 293.672237][ T9745] hierarchical_memory_limit 314572800 [ 293.677777][ T9745] hierarchical_memsw_limit 9223372036854771712 [ 293.684267][ T9745] total_cache 8192 [ 293.688090][ T9745] total_rss 0 [ 293.691625][ T9745] total_shmem 0 [ 293.695134][ T9745] total_mapped_file 0 [ 293.699235][ T9745] total_dirty 0 [ 293.719552][ T9745] total_writeback 0 [ 293.729633][ T9745] total_workingset_refault_anon 391 [ 293.739719][ T9745] total_workingset_refault_file 0 [ 293.768405][ T9745] total_swap 1261568 [ 293.772546][ T9745] total_swapcached 8175616 [ 293.777052][ T9745] total_pgpgin 73036 [ 293.783227][ T9745] total_pgpgout 73031 [ 293.787250][ T9745] total_pgfault 82657 [ 293.799881][ T9745] total_pgmajfault 155 [ 293.804881][ T9745] total_inactive_anon 0 [ 293.809367][ T9745] total_active_anon 12288 [ 293.814493][T12951] loop7: detected capacity change from 0 to 512 [ 293.816257][ T9745] total_inactive_file 0 [ 293.850008][ T9745] total_active_file 8192 [ 293.855015][ T9745] total_unevictable 0 [ 293.860893][ T9745] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2648,pid=12888,uid=0 [ 293.878840][ T9745] Memory cgroup out of memory: OOM victim 12888 (syz.8.2648) is already exiting. Skip killing the task [ 293.879001][T12951] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2669: inode has both inline data and extents flags [ 293.908917][T12951] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 293.909454][ T9745] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.918870][T12952] loop9: detected capacity change from 0 to 512 [ 293.934219][T12951] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2669: couldn't read orphan inode 15 (err -117) [ 293.946144][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 293.946167][ C0] EXT4-fs (loop7): initial error at time 1772481969: ext4_orphan_get:1391: inode 15 [ 293.946202][ C0] EXT4-fs (loop7): last error at time 1772481969: ext4_orphan_get:1391: inode 15 [ 293.971414][T12951] loop7: lost filesystem error report for type 5 error -117 [ 293.986494][T12951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.987906][T12952] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.044700][T12952] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.115851][ T9339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.125302][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.170728][T12966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.185603][T12966] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2672: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 294.244848][T12968] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2675: inode has both inline data and extents flags [ 294.277248][T12961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.301508][T12968] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.303957][T12968] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2675: couldn't read orphan inode 15 (err -117) [ 294.313178][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 294.313197][ C1] EXT4-fs (loop8): initial error at time 1772481969: ext4_orphan_get:1391: inode 15 [ 294.313232][ C1] EXT4-fs (loop8): last error at time 1772481969: ext4_orphan_get:1391: inode 15 [ 294.361043][T12978] netlink: 'syz.9.2674': attribute type 2 has an invalid length. [ 294.376919][T12980] netlink: 'syz.9.2674': attribute type 2 has an invalid length. [ 294.386117][T12970] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 294.386993][T12976] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2674'. [ 294.400801][T12970] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #13: comm syz.7.2673: iget: bad i_size value: 12154757448730 [ 294.422011][T12961] EXT4-fs (loop4): resizing filesystem from 64 to 2 blocks [ 294.429363][T12961] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 294.441563][T12980] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2674'. [ 294.449519][T12970] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 294.450836][T12970] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2673: couldn't read orphan inode 13 (err -117) [ 294.450878][T12968] loop8: lost filesystem error report for type 5 error -117 [ 294.460018][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 294.460041][ C1] EXT4-fs (loop7): initial error at time 1772481969: ext4_orphan_get:1391: inode 13 [ 294.495027][ C1] EXT4-fs (loop7): last error at time 1772481969: ext4_orphan_get:1391: inode 13 [ 294.506283][T12970] loop7: lost filesystem error report for type 5 error -117 [ 294.522138][T12970] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.545726][T12968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.649290][ T9339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.658969][ T9745] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.797017][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.810734][T12992] FAULT_INJECTION: forcing a failure. [ 294.810734][T12992] name failslab, interval 1, probability 0, space 0, times 0 [ 294.851410][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.871394][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.7.2682 Tainted: G W syzkaller #0 PREEMPT(full) [ 294.871462][T12992] Tainted: [W]=WARN [ 294.871468][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.871480][T12992] Call Trace: [ 294.871487][T12992] [ 294.871495][T12992] __dump_stack+0x1d/0x30 [ 294.871527][T12992] dump_stack_lvl+0x95/0xd0 [ 294.871615][T12992] dump_stack+0x15/0x1b [ 294.871637][T12992] should_fail_ex+0x263/0x280 [ 294.871666][T12992] should_failslab+0x8c/0xb0 [ 294.871690][T12992] kmem_cache_alloc_noprof+0x66/0x400 [ 294.871715][T12992] ? alloc_empty_file+0x76/0x200 [ 294.871759][T12992] alloc_empty_file+0x76/0x200 [ 294.871781][T12992] path_openat+0x65/0x2050 [ 294.871841][T12992] ? refill_obj_stock+0x246/0x400 [ 294.871905][T12992] ? obj_cgroup_charge_account+0xba/0x1a0 [ 294.871930][T12992] ? should_fail_ex+0x30/0x280 [ 294.871954][T12992] ? __rcu_read_unlock+0x4e/0x70 [ 294.871979][T12992] ? avc_has_perm_noaudit+0xab/0x130 [ 294.872019][T12992] do_file_open+0x16c/0x290 [ 294.872097][T12992] io_openat2+0x2d8/0x470 [ 294.872127][T12992] io_openat+0x1b/0x30 [ 294.872150][T12992] __io_issue_sqe+0xfd/0x2d0 [ 294.872185][T12992] io_issue_sqe+0x206/0xc00 [ 294.872218][T12992] ? io_openat_prep+0x252/0x2a0 [ 294.872241][T12992] io_submit_sqes+0x7fb/0x1270 [ 294.872273][T12992] __se_sys_io_uring_enter+0x1c9/0xf50 [ 294.872309][T12992] ? __fget_files+0x184/0x1c0 [ 294.872337][T12992] ? mutex_unlock+0x4e/0x90 [ 294.872384][T12992] ? fput+0x8f/0xc0 [ 294.872408][T12992] __x64_sys_io_uring_enter+0x78/0x90 [ 294.872439][T12992] x64_sys_call+0x1e16/0x3020 [ 294.872466][T12992] do_syscall_64+0x12c/0x370 [ 294.872559][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.872581][T12992] RIP: 0033:0x7fdd1a7ac799 [ 294.872600][T12992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.872622][T12992] RSP: 002b:00007fdd19207028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 294.872647][T12992] RAX: ffffffffffffffda RBX: 00007fdd1aa25fa0 RCX: 00007fdd1a7ac799 [ 294.872733][T12992] RDX: 000000000000addf RSI: 0000000000003518 RDI: 0000000000000003 [ 294.872747][T12992] RBP: 00007fdd19207090 R08: 0000000000000000 R09: 0000000000000000 [ 294.872763][T12992] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 294.872802][T12992] R13: 00007fdd1aa26038 R14: 00007fdd1aa25fa0 R15: 00007ffe011abc38 [ 294.872893][T12992] [ 294.929095][T12998] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 294.929123][T12998] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 294.929249][T12998] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 294.930059][T12998] EXT4-fs error (device loop8): ext4_get_journal_inode:5863: inode #5: comm syz.8.2683: unexpected bad inode w/o EXT4_IGET_BAD [ 294.930155][T12998] loop8: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 294.930263][T12998] EXT4-fs (loop8): no journal found [ 294.930279][T12998] EXT4-fs (loop8): can't get journal size [ 294.930960][T12998] EXT4-fs (loop8): failed to initialize system zone (-117) [ 294.931046][T12998] EXT4-fs (loop8): mount failed [ 294.931361][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 294.931398][ C1] EXT4-fs (loop8): initial error at time 1772481970: ext4_get_journal_inode:5863: inode 5 [ 294.931427][ C1] EXT4-fs (loop8): last error at time 1772481970: ext4_get_journal_inode:5863: inode 5 [ 294.941369][T12308] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 294.988058][T13000] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2681'. [ 295.164025][T13002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.164094][T13002] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.187556][T13009] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2687'. [ 295.224849][T13010] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.2686: inode has both inline data and extents flags [ 295.224881][T13010] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.225195][T13010] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2686: couldn't read orphan inode 15 (err -117) [ 295.225308][T13010] loop9: lost filesystem error report for type 5 error -117 [ 295.225820][T13010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.230624][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.256160][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.473901][T13012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13012 comm=syz.8.2688 [ 295.679658][T13015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.712131][ T3798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.723144][T13015] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.759770][T13027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.781665][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2694'. [ 295.966131][T13027] vlan0: entered allmulticast mode [ 296.089713][T13042] set_capacity_and_notify: 10 callbacks suppressed [ 296.089844][T13042] loop9: detected capacity change from 0 to 164 [ 296.162211][ T28] audit: type=1400 audit(1772481971.479:4990): avc: denied { relabelfrom } for pid=13025 comm="syz.4.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 296.217341][T13046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2700'. [ 296.318066][ T28] audit: type=1400 audit(1772481971.479:4991): avc: denied { relabelto } for pid=13025 comm="syz.4.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 296.431690][T13048] loop3: detected capacity change from 0 to 512 [ 296.672185][T13054] loop8: detected capacity change from 0 to 2048 [ 296.860992][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.896637][ T9339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.950893][T13048] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2701: inode has both inline data and extents flags [ 296.978744][T13054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.053855][T13048] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.053962][T13048] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2701: couldn't read orphan inode 15 (err -117) [ 297.063228][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 297.063248][ C1] EXT4-fs (loop3): initial error at time 1772481972: ext4_orphan_get:1391: inode 15 [ 297.063294][ C1] EXT4-fs (loop3): last error at time 1772481972: ext4_orphan_get:1391: inode 15 [ 297.255766][T13048] loop3: lost filesystem error report for type 5 error -117 [ 297.256313][T13048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.349540][ T3798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.428972][T13071] FAULT_INJECTION: forcing a failure. [ 297.428972][T13071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.491471][T13071] CPU: 1 UID: 0 PID: 13071 Comm: syz.7.2708 Tainted: G W syzkaller #0 PREEMPT(full) [ 297.491509][T13071] Tainted: [W]=WARN [ 297.491518][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.491532][T13071] Call Trace: [ 297.491556][T13071] [ 297.491566][T13071] __dump_stack+0x1d/0x30 [ 297.491648][T13071] dump_stack_lvl+0x95/0xd0 [ 297.491675][T13071] dump_stack+0x15/0x1b [ 297.491701][T13071] should_fail_ex+0x263/0x280 [ 297.491728][T13071] should_fail+0xb/0x20 [ 297.491749][T13071] should_fail_usercopy+0x1a/0x20 [ 297.491800][T13071] _copy_from_iter+0xcf/0xea0 [ 297.491850][T13071] ? __alloc_skb+0x4f6/0x690 [ 297.491926][T13071] ? __alloc_skb+0x200/0x690 [ 297.491948][T13071] netlink_sendmsg+0x4ae/0x6f0 [ 297.492051][T13071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.492083][T13071] ____sys_sendmsg+0x5af/0x600 [ 297.492115][T13071] ___sys_sendmsg+0x195/0x1e0 [ 297.492148][T13071] __x64_sys_sendmsg+0xd4/0x160 [ 297.492296][T13071] x64_sys_call+0x194c/0x3020 [ 297.492397][T13071] do_syscall_64+0x12c/0x370 [ 297.492422][T13071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.492448][T13071] RIP: 0033:0x7fdd1a7ac799 [ 297.492466][T13071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.492483][T13071] RSP: 002b:00007fdd19207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.492503][T13071] RAX: ffffffffffffffda RBX: 00007fdd1aa25fa0 RCX: 00007fdd1a7ac799 [ 297.492550][T13071] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 297.492566][T13071] RBP: 00007fdd19207090 R08: 0000000000000000 R09: 0000000000000000 [ 297.492651][T13071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.492676][T13071] R13: 00007fdd1aa26038 R14: 00007fdd1aa25fa0 R15: 00007ffe011abc38 [ 297.492697][T13071] [ 297.746441][ T9745] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.789967][T13076] loop3: detected capacity change from 0 to 1764 [ 297.818185][T13076] iso9660: Unexpected value for 'showassoc' [ 297.830069][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2713'. [ 297.840794][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2711'. [ 297.903001][T13085] loop9: detected capacity change from 0 to 512 [ 297.930050][T13089] syzkaller0: entered promiscuous mode [ 297.947555][T13089] syzkaller0: entered allmulticast mode [ 297.982127][T13085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.009133][T13085] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.159184][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.208979][T13106] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2719'. [ 298.232644][T13106] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2719'. [ 298.326118][T13111] loop4: detected capacity change from 0 to 2048 [ 298.415066][T13111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.448667][T13111] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2720: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 298.602496][T13115] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 298.642240][T13118] loop9: detected capacity change from 0 to 164 [ 298.790223][T13118] pimreg: entered allmulticast mode [ 299.641709][T13140] loop3: detected capacity change from 0 to 512 [ 299.789597][T13148] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 299.840676][T13148] bond2 (unregistering): Released all slaves [ 299.994179][T13156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2733'. [ 300.011910][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 300.026599][T13154] netlink: 268 bytes leftover after parsing attributes in process `syz.8.2732'. [ 300.041441][T13156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2733'. [ 300.058170][T13154] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2732'. [ 300.186315][T13170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2735'. [ 300.285956][T13180] loop8: detected capacity change from 0 to 512 [ 300.302421][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 300.322438][T13174] xt_socket: unknown flags 0x48 [ 300.368411][T13187] xt_hashlimit: size too large, truncated to 1048576 [ 300.408226][T13191] loop4: detected capacity change from 0 to 164 [ 300.537060][T13202] xt_NFQUEUE: number of total queues is 0 [ 300.540716][T13198] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2748: inode has both inline data and extents flags [ 300.565591][T13198] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 300.565739][T13198] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2748: couldn't read orphan inode 15 (err -117) [ 300.574925][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 300.574948][ C1] EXT4-fs (loop8): initial error at time 1772481975: ext4_orphan_get:1391: inode 15 [ 300.574995][ C1] EXT4-fs (loop8): last error at time 1772481975: ext4_orphan_get:1391: inode 15 [ 300.612668][T13198] loop8: lost filesystem error report for type 5 error -117 [ 300.720550][T13207] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 300.775100][T13208] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2751: inode has both inline data and extents flags [ 300.824703][T13208] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 300.824835][T13208] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2751: couldn't read orphan inode 15 (err -117) [ 300.834070][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 300.834088][ C0] EXT4-fs (loop7): initial error at time 1772481976: ext4_orphan_get:1391: inode 15 [ 300.834114][ C0] EXT4-fs (loop7): last error at time 1772481976: ext4_orphan_get:1391: inode 15 [ 300.916639][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2754'. [ 300.928469][T13215] geneve1: entered promiscuous mode [ 300.960130][T13208] loop7: lost filesystem error report for type 5 error -117 [ 301.025530][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2757'. [ 301.109515][T13232] FAULT_INJECTION: forcing a failure. [ 301.109515][T13232] name failslab, interval 1, probability 0, space 0, times 0 [ 301.135875][T13232] CPU: 0 UID: 0 PID: 13232 Comm: syz.4.2760 Tainted: G W syzkaller #0 PREEMPT(full) [ 301.135910][T13232] Tainted: [W]=WARN [ 301.135917][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.135931][T13232] Call Trace: [ 301.135939][T13232] [ 301.135946][T13232] __dump_stack+0x1d/0x30 [ 301.136023][T13232] dump_stack_lvl+0x95/0xd0 [ 301.136087][T13232] dump_stack+0x15/0x1b [ 301.136109][T13232] should_fail_ex+0x263/0x280 [ 301.136133][T13232] should_failslab+0x8c/0xb0 [ 301.136232][T13232] kmem_cache_alloc_noprof+0x66/0x400 [ 301.136254][T13232] ? security_file_alloc+0x32/0xf0 [ 301.136306][T13232] security_file_alloc+0x32/0xf0 [ 301.136335][T13232] init_file+0x5b/0x1b0 [ 301.136362][T13232] alloc_empty_file+0x8b/0x200 [ 301.136385][T13232] path_openat+0x65/0x2050 [ 301.136435][T13232] ? __account_obj_stock+0x211/0x350 [ 301.136456][T13232] ? obj_cgroup_charge_account+0x122/0x1a0 [ 301.136517][T13232] ? should_fail_ex+0x30/0x280 [ 301.136541][T13232] ? __rcu_read_unlock+0x4e/0x70 [ 301.136567][T13232] ? avc_has_perm_noaudit+0xab/0x130 [ 301.136684][T13232] do_file_open+0x16c/0x290 [ 301.136729][T13232] io_openat2+0x2d8/0x470 [ 301.136757][T13232] io_openat+0x1b/0x30 [ 301.136782][T13232] __io_issue_sqe+0xfd/0x2d0 [ 301.136861][T13232] io_issue_sqe+0x206/0xc00 [ 301.136940][T13232] ? io_openat_prep+0x252/0x2a0 [ 301.137019][T13232] io_submit_sqes+0x7fb/0x1270 [ 301.137056][T13232] __se_sys_io_uring_enter+0x1c9/0xf50 [ 301.137084][T13232] ? __fget_files+0x184/0x1c0 [ 301.137106][T13232] ? mutex_unlock+0x4e/0x90 [ 301.137188][T13232] ? fput+0x8f/0xc0 [ 301.137265][T13232] __x64_sys_io_uring_enter+0x78/0x90 [ 301.137295][T13232] x64_sys_call+0x1e16/0x3020 [ 301.137334][T13232] do_syscall_64+0x12c/0x370 [ 301.137353][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.137386][T13232] RIP: 0033:0x7f81c118c799 [ 301.137404][T13232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.137487][T13232] RSP: 002b:00007f81bfbe7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 301.137507][T13232] RAX: ffffffffffffffda RBX: 00007f81c1405fa0 RCX: 00007f81c118c799 [ 301.137552][T13232] RDX: 000000000000addf RSI: 0000000000003518 RDI: 0000000000000003 [ 301.137568][T13232] RBP: 00007f81bfbe7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.137582][T13232] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 301.137595][T13232] R13: 00007f81c1406038 R14: 00007f81c1405fa0 R15: 00007ffc62a9b988 [ 301.137689][T13232] [ 301.142032][T13230] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.321249][T13236] set_capacity_and_notify: 6 callbacks suppressed [ 301.321267][T13236] loop3: detected capacity change from 0 to 512 [ 301.572493][T13243] loop8: detected capacity change from 0 to 512 [ 301.600674][T13243] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.613777][T13236] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.665370][T13236] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.2761: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 301.689820][T13243] EXT4-fs error (device loop8): ext4_validate_inode_bitmap:105: comm syz.8.2763: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 301.718638][T13243] FAULT_INJECTION: forcing a failure. [ 301.718638][T13243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.791700][T13247] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 301.796086][T13243] CPU: 0 UID: 0 PID: 13243 Comm: syz.8.2763 Tainted: G W syzkaller #0 PREEMPT(full) [ 301.796179][T13243] Tainted: [W]=WARN [ 301.796187][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.796199][T13243] Call Trace: [ 301.796206][T13243] [ 301.796215][T13243] __dump_stack+0x1d/0x30 [ 301.796266][T13243] dump_stack_lvl+0x95/0xd0 [ 301.796290][T13243] dump_stack+0x15/0x1b [ 301.796311][T13243] should_fail_ex+0x263/0x280 [ 301.796372][T13243] should_fail+0xb/0x20 [ 301.796392][T13243] should_fail_usercopy+0x1a/0x20 [ 301.796452][T13243] _copy_to_user+0x20/0xa0 [ 301.796480][T13243] simple_read_from_buffer+0xb5/0x130 [ 301.796503][T13243] proc_fail_nth_read+0x10e/0x150 [ 301.796532][T13243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.796562][T13243] vfs_read+0x1ab/0x7f0 [ 301.796592][T13243] ? __rcu_read_unlock+0x4e/0x70 [ 301.796646][T13243] ? __fget_files+0x184/0x1c0 [ 301.796670][T13243] ? mutex_lock+0x57/0x90 [ 301.796697][T13243] ksys_read+0xdc/0x1a0 [ 301.796742][T13243] __x64_sys_read+0x40/0x50 [ 301.796772][T13243] x64_sys_call+0x2886/0x3020 [ 301.796798][T13243] do_syscall_64+0x12c/0x370 [ 301.796819][T13243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.796885][T13243] RIP: 0033:0x7f2bd048cfce [ 301.796977][T13243] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.797096][T13243] RSP: 002b:00007f2bcef1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.797126][T13243] RAX: ffffffffffffffda RBX: 00007f2bcef1f6c0 RCX: 00007f2bd048cfce [ 301.797141][T13243] RDX: 000000000000000f RSI: 00007f2bcef1f0a0 RDI: 00000000000000ff [ 301.797154][T13243] RBP: 00007f2bcef1f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.797167][T13243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.797238][T13243] R13: 00007f2bd0746038 R14: 00007f2bd0745fa0 R15: 00007ffef85aa018 [ 301.797312][T13243] [ 301.847895][T13247] loop3: detected capacity change from 0 to 512 [ 302.110565][ T28] audit: type=1400 audit(1772481977.469:4992): avc: denied { mount } for pid=13262 comm="syz.7.2769" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 302.111142][T13258] xt_hashlimit: size too large, truncated to 1048576 [ 302.153755][T13247] ext4 filesystem being mounted at /561/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.193018][T13247] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.2764: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 302.234905][T13267] sctp: [Deprecated]: syz.8.2770 (pid 13267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.234905][T13267] Use struct sctp_sack_info instead [ 302.253265][ T28] audit: type=1400 audit(1772481977.619:4993): avc: denied { create } for pid=13268 comm="syz.7.2771" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.301511][ T28] audit: type=1400 audit(1772481977.619:4994): avc: denied { map } for pid=13268 comm="syz.7.2771" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.368968][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2773'. [ 302.374506][ T28] audit: type=1400 audit(1772481977.619:4995): avc: denied { read write } for pid=13268 comm="syz.7.2771" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.438169][T13278] loop7: detected capacity change from 0 to 1024 [ 302.462292][T13278] EXT4-fs: Ignoring removed orlov option [ 302.468860][T13278] EXT4-fs: Ignoring removed nobh option [ 302.475367][T13278] EXT4-fs warning (device loop7): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop7. [ 302.531559][ T28] audit: type=1400 audit(1772481977.669:4996): avc: denied { setopt } for pid=13266 comm="syz.8.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 302.614898][ T28] audit: type=1326 audit(1772481977.719:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764594c799 code=0x7ffc0000 [ 302.721477][ T28] audit: type=1326 audit(1772481977.719:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764594c799 code=0x7ffc0000 [ 302.867958][ T3392] IPVS: starting estimator thread 0... [ 303.031528][T13300] IPVS: using max 2640 ests per chain, 132000 per kthread [ 303.346075][T13308] FAULT_INJECTION: forcing a failure. [ 303.346075][T13308] name failslab, interval 1, probability 0, space 0, times 0 [ 303.607762][T13308] CPU: 0 UID: 0 PID: 13308 Comm: syz.9.2782 Tainted: G W syzkaller #0 PREEMPT(full) [ 303.607794][T13308] Tainted: [W]=WARN [ 303.607801][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.607816][T13308] Call Trace: [ 303.607823][T13308] [ 303.607830][T13308] __dump_stack+0x1d/0x30 [ 303.607878][T13308] dump_stack_lvl+0x95/0xd0 [ 303.607903][T13308] dump_stack+0x15/0x1b [ 303.607934][T13308] should_fail_ex+0x263/0x280 [ 303.607992][T13308] should_failslab+0x8c/0xb0 [ 303.608016][T13308] kmem_cache_alloc_noprof+0x66/0x400 [ 303.608105][T13308] ? do_getname+0x2e/0x1c0 [ 303.608127][T13308] do_getname+0x2e/0x1c0 [ 303.608152][T13308] user_path_at+0x28/0x100 [ 303.608184][T13308] __se_sys_mount+0x25b/0x2e0 [ 303.608223][T13308] __x64_sys_mount+0x67/0x80 [ 303.608243][T13308] x64_sys_call+0x2d61/0x3020 [ 303.608271][T13308] do_syscall_64+0x12c/0x370 [ 303.608295][T13308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.608400][T13308] RIP: 0033:0x7f5d72c7c799 [ 303.608419][T13308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.608441][T13308] RSP: 002b:00007f5d716cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 303.608525][T13308] RAX: ffffffffffffffda RBX: 00007f5d72ef5fa0 RCX: 00007f5d72c7c799 [ 303.608541][T13308] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 303.608554][T13308] RBP: 00007f5d716cf090 R08: 0000200000000340 R09: 0000000000000000 [ 303.608566][T13308] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 303.608580][T13308] R13: 00007f5d72ef6038 R14: 00007f5d72ef5fa0 R15: 00007ffcf2146648 [ 303.608678][T13308] [ 303.783859][ T28] audit: type=1326 audit(1772481977.719:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764594c799 code=0x7ffc0000 [ 303.807466][ T28] audit: type=1326 audit(1772481977.719:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764594c799 code=0x7ffc0000 [ 303.831243][ T28] audit: type=1326 audit(1772481977.719:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f764594c799 code=0x7ffc0000 [ 303.969744][T13313] loop9: detected capacity change from 0 to 4096 [ 304.006530][T13273] loop3: detected capacity change from 0 to 512 [ 304.062858][T13273] EXT4-fs: Ignoring removed bh option [ 304.097125][T13273] EXT4-fs: inline encryption not supported [ 304.116408][T13273] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.153154][T13273] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 304.168939][T13273] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2772: bg 0: block 248: padding at end of block bitmap is not set [ 304.190490][T13273] loop3: lost filesystem error report for type 5 error -117 [ 304.190708][T13273] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.2772: Failed to acquire dquot type 1 [ 304.198063][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 304.198080][ C0] EXT4-fs (loop3): last error at time 1772481979: ext4_validate_block_bitmap:441 [ 304.228387][T13273] loop3: lost filesystem error report for type 5 error -117 [ 304.237121][T13273] EXT4-fs (loop3): 1 truncate cleaned up [ 304.291011][T13330] loop4: detected capacity change from 0 to 512 [ 304.327179][T13330] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.337218][T13330] EXT4-fs (loop4): orphan cleanup on readonly fs [ 304.344196][T13330] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 304.360103][T13330] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2789: bg 0: block 248: padding at end of block bitmap is not set [ 304.378958][T13330] loop4: lost filesystem error report for type 5 error -117 [ 304.379150][T13330] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2789: Failed to acquire dquot type 1 [ 304.386498][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 304.386517][ C0] EXT4-fs (loop4): last error at time 1772481979: ext4_validate_block_bitmap:441 [ 304.413932][T13330] loop4: lost filesystem error report for type 5 error -117 [ 304.414442][T13330] EXT4-fs (loop4): 1 truncate cleaned up [ 304.790906][T13335] loop3: detected capacity change from 0 to 2048 [ 304.850257][T13335] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2791: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 305.254761][T13354] __nla_validate_parse: 26 callbacks suppressed [ 305.254781][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 305.969595][T13372] loop4: detected capacity change from 0 to 512 [ 306.097107][T13366] loop7: detected capacity change from 0 to 512 [ 306.224565][T13372] EXT4-fs: Ignoring removed bh option [ 306.230350][T13372] EXT4-fs: inline encryption not supported [ 306.237255][T13372] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.311597][T13372] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 306.352387][T13379] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2804'. [ 306.362886][T13374] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2803: bg 0: block 248: padding at end of block bitmap is not set [ 306.377298][T13372] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2801: bg 0: block 248: padding at end of block bitmap is not set [ 306.392557][T13379] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2804'. [ 306.401412][T13374] loop8: lost filesystem error report for type 5 error -117 [ 306.401565][T13372] loop4: lost filesystem error report for type 5 error -117 [ 306.408986][T13374] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.2803: Failed to acquire dquot type 1 [ 306.416366][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 306.416390][ C0] EXT4-fs (loop8): last error at time 1772481981: ext4_validate_block_bitmap:441 [ 306.454466][T13372] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2801: Failed to acquire dquot type 1 [ 306.465933][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 306.465971][ C0] EXT4-fs (loop4): last error at time 1772481981: ext4_validate_block_bitmap:441 [ 306.469325][T13374] loop8: lost filesystem error report for type 5 error -117 [ 306.482616][T13374] EXT4-fs (loop8): 1 truncate cleaned up [ 306.501999][T13374] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.511431][T13372] loop4: lost filesystem error report for type 5 error -117 [ 306.524168][T13372] EXT4-fs (loop4): 1 truncate cleaned up [ 306.545294][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2807'. [ 306.570052][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2807'. [ 306.622356][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2807'. [ 306.649184][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2807'. [ 306.658696][T13391] openvswitch: netlink: EtherType 0 is less than min 600 [ 306.714224][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2807'. [ 306.731436][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2807'. [ 306.807801][ T3815] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 306.819539][ T3815] loop8: lost filesystem error report for type 5 error -117 [ 306.842275][T13401] FAULT_INJECTION: forcing a failure. [ 306.842275][T13401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.870789][T13401] CPU: 1 UID: 0 PID: 13401 Comm: syz.3.2812 Tainted: G W syzkaller #0 PREEMPT(full) [ 306.870825][T13401] Tainted: [W]=WARN [ 306.870877][T13401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.870937][T13401] Call Trace: [ 306.870946][T13401] [ 306.870955][T13401] __dump_stack+0x1d/0x30 [ 306.870986][T13401] dump_stack_lvl+0x95/0xd0 [ 306.871012][T13401] dump_stack+0x15/0x1b [ 306.871033][T13401] should_fail_ex+0x263/0x280 [ 306.871054][T13401] should_fail+0xb/0x20 [ 306.871079][T13401] should_fail_usercopy+0x1a/0x20 [ 306.871104][T13401] _copy_from_iter+0xcf/0xea0 [ 306.871131][T13401] ? kmem_cache_alloc_node_noprof+0x20a/0x460 [ 306.871159][T13401] ? __alloc_skb+0x362/0x690 [ 306.871252][T13401] ? __alloc_skb+0x4f6/0x690 [ 306.871328][T13401] pfkey_sendmsg+0x126/0x9b0 [ 306.871362][T13401] ? avc_has_perm+0x101/0x190 [ 306.871408][T13401] ? selinux_socket_sendmsg+0x192/0x1c0 [ 306.871443][T13401] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 306.871520][T13401] ____sys_sendmsg+0x5af/0x600 [ 306.871561][T13401] ___sys_sendmsg+0x195/0x1e0 [ 306.871719][T13401] __x64_sys_sendmsg+0xd4/0x160 [ 306.871853][T13401] x64_sys_call+0x194c/0x3020 [ 306.871950][T13401] do_syscall_64+0x12c/0x370 [ 306.871970][T13401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.871991][T13401] RIP: 0033:0x7f764594c799 [ 306.872008][T13401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.872030][T13401] RSP: 002b:00007f764439f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.872072][T13401] RAX: ffffffffffffffda RBX: 00007f7645bc5fa0 RCX: 00007f764594c799 [ 306.872086][T13401] RDX: 00000000040408c0 RSI: 0000200000000440 RDI: 0000000000000003 [ 306.872099][T13401] RBP: 00007f764439f090 R08: 0000000000000000 R09: 0000000000000000 [ 306.872111][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.872124][T13401] R13: 00007f7645bc6038 R14: 00007f7645bc5fa0 R15: 00007ffc61d70c58 [ 306.872177][T13401] [ 307.101168][T13408] set_capacity_and_notify: 1 callbacks suppressed [ 307.101186][T13408] loop8: detected capacity change from 0 to 256 [ 307.171162][T13408] FAT-fs (loop8): Directory bread(block 64) failed [ 307.188366][T13408] FAT-fs (loop8): Directory bread(block 65) failed [ 307.221479][T13408] FAT-fs (loop8): Directory bread(block 66) failed [ 307.228022][T13408] FAT-fs (loop8): Directory bread(block 67) failed [ 307.275031][T13408] FAT-fs (loop8): Directory bread(block 68) failed [ 307.301434][T13408] FAT-fs (loop8): Directory bread(block 69) failed [ 307.321026][T13408] FAT-fs (loop8): Directory bread(block 70) failed [ 307.354614][T13408] FAT-fs (loop8): Directory bread(block 71) failed [ 307.366337][T13413] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39173 sclass=netlink_xfrm_socket pid=13413 comm=syz.4.2815 [ 307.390467][T13408] FAT-fs (loop8): Directory bread(block 72) failed [ 307.397096][T13408] FAT-fs (loop8): Directory bread(block 73) failed [ 307.580831][T13421] loop4: detected capacity change from 0 to 512 [ 307.594106][T13425] loop8: detected capacity change from 0 to 512 [ 307.608996][T13421] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2817: inode has both inline data and extents flags [ 307.632262][T13421] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 307.645782][T13421] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2817: couldn't read orphan inode 15 (err -117) [ 307.654986][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 307.655011][ C0] EXT4-fs (loop4): initial error at time 1772481982: ext4_orphan_get:1391: inode 15 [ 307.655044][ C0] EXT4-fs (loop4): last error at time 1772481982: ext4_orphan_get:1391: inode 15 [ 307.655121][T13429] loop7: detected capacity change from 0 to 512 [ 307.667000][T13425] EXT4-fs (loop8): Invalid log cluster size: 4294934528 [ 307.711444][T13421] loop4: lost filesystem error report for type 5 error -117 [ 307.789379][T13429] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2819: inode has both inline data and extents flags [ 307.821381][T13429] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 307.829726][T13429] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2819: couldn't read orphan inode 15 (err -117) [ 307.838966][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 307.838997][ C0] EXT4-fs (loop7): initial error at time 1772481983: ext4_orphan_get:1391: inode 15 [ 307.839032][ C0] EXT4-fs (loop7): last error at time 1772481983: ext4_orphan_get:1391: inode 15 [ 307.919812][T13433] loop8: detected capacity change from 0 to 4096 [ 307.926579][ T7216] smc: removing ib device syz1 [ 307.985988][T13429] loop7: lost filesystem error report for type 5 error -117 [ 308.047046][T13442] loop3: detected capacity change from 0 to 1024 [ 308.131575][ T28] kauditd_printk_skb: 453 callbacks suppressed [ 308.131594][ T28] audit: type=1326 audit(1772481983.489:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a7ac799 code=0x7ffc0000 [ 308.168834][ T28] audit: type=1326 audit(1772481983.489:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a7ac799 code=0x7ffc0000 [ 308.192605][ T28] audit: type=1326 audit(1772481983.489:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a7ac799 code=0x7ffc0000 [ 308.217671][ T28] audit: type=1326 audit(1772481983.529:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd1a7ac799 code=0x7ffc0000 [ 308.242212][ T28] audit: type=1326 audit(1772481983.529:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a7ac799 code=0x7ffc0000 [ 308.266811][ T28] audit: type=1326 audit(1772481983.529:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a7ac799 code=0x7ffc0000 [ 308.312722][ T28] audit: type=1326 audit(1772481983.529:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a7ac799 code=0x7ffc0000 [ 308.341993][ T28] audit: type=1326 audit(1772481983.529:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fdd1a7ac799 code=0x7ffc0000 [ 308.372995][ T28] audit: type=1326 audit(1772481983.579:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a7ac799 code=0x7ffc0000 [ 308.397138][ T28] audit: type=1326 audit(1772481983.579:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd1a7ac502 code=0x7ffc0000 [ 308.492999][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2831'. [ 308.578391][T13463] loop7: detected capacity change from 0 to 512 [ 308.726126][T13463] EXT4-fs: Ignoring removed bh option [ 308.747313][T13463] EXT4-fs: inline encryption not supported [ 308.754108][T13463] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.767270][T13434] chnl_net:caif_netlink_parms(): no params data found [ 308.772601][T13463] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 308.789021][T13463] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2826: bg 0: block 248: padding at end of block bitmap is not set [ 308.811405][T13463] loop7: lost filesystem error report for type 5 error -117 [ 308.811644][T13463] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2826: Failed to acquire dquot type 1 [ 308.830237][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 308.830258][ C0] EXT4-fs (loop7): last error at time 1772481984: ext4_validate_block_bitmap:441 [ 308.840015][T13434] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.846573][T13463] loop7: lost filesystem error report for type 5 error -117 [ 308.854259][T13434] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.869159][T13434] bridge_slave_0: entered allmulticast mode [ 308.876125][T13434] bridge_slave_0: entered promiscuous mode [ 308.883899][T13434] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.891017][T13434] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.956691][T13499] loop8: detected capacity change from 0 to 164 [ 308.978252][T13434] bridge_slave_1: entered allmulticast mode [ 308.985591][T13434] bridge_slave_1: entered promiscuous mode [ 309.012263][T13434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.024066][T13434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.104191][T13463] EXT4-fs (loop7): 1 truncate cleaned up [ 309.261630][T13434] team0: Port device team_slave_0 added [ 309.287477][T13434] team0: Port device team_slave_1 added [ 309.378665][T13434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.414120][T13434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.691692][T13434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.721377][T13434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.735162][T13434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.776175][T13434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.963644][T13434] hsr_slave_0: entered promiscuous mode [ 310.011572][T13434] hsr_slave_1: entered promiscuous mode [ 310.078317][T13434] debugfs: 'hsr0' already exists in 'hsr' [ 310.097197][T13434] Cannot create hsr debugfs directory [ 310.393516][T13537] loop7: detected capacity change from 0 to 512 [ 310.449799][T13434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.471242][T13434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.491583][T13434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 310.509844][T13434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.553159][T13434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.564372][T13434] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.578561][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.585695][ T7248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.609723][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.616883][ T7248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.631186][T13547] FAULT_INJECTION: forcing a failure. [ 310.631186][T13547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.665755][T13547] CPU: 1 UID: 0 PID: 13547 Comm: syz.8.2851 Tainted: G W syzkaller #0 PREEMPT(full) [ 310.665793][T13547] Tainted: [W]=WARN [ 310.665802][T13547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.665839][T13547] Call Trace: [ 310.665847][T13547] [ 310.665856][T13547] __dump_stack+0x1d/0x30 [ 310.665882][T13547] dump_stack_lvl+0x95/0xd0 [ 310.665961][T13547] dump_stack+0x15/0x1b [ 310.665986][T13547] should_fail_ex+0x263/0x280 [ 310.666010][T13547] should_fail+0xb/0x20 [ 310.666030][T13547] should_fail_usercopy+0x1a/0x20 [ 310.666076][T13547] strncpy_from_user+0x27/0x250 [ 310.666110][T13547] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 310.666138][T13547] do_getname+0x59/0x1c0 [ 310.666163][T13547] user_path_at+0x28/0x100 [ 310.666225][T13547] __se_sys_mount+0x25b/0x2e0 [ 310.666250][T13547] ? fput+0x8f/0xc0 [ 310.666304][T13547] __x64_sys_mount+0x67/0x80 [ 310.666324][T13547] x64_sys_call+0x2d61/0x3020 [ 310.666410][T13547] do_syscall_64+0x12c/0x370 [ 310.666492][T13547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.666519][T13547] RIP: 0033:0x7f2bd04cc799 [ 310.666537][T13547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.666555][T13547] RSP: 002b:00007f2bcef1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 310.666633][T13547] RAX: ffffffffffffffda RBX: 00007f2bd0745fa0 RCX: 00007f2bd04cc799 [ 310.666647][T13547] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 310.666660][T13547] RBP: 00007f2bcef1f090 R08: 0000200000000340 R09: 0000000000000000 [ 310.666673][T13547] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 310.666687][T13547] R13: 00007f2bd0746038 R14: 00007f2bd0745fa0 R15: 00007ffef85aa018 [ 310.666728][T13547] [ 310.922593][T13563] __nla_validate_parse: 2 callbacks suppressed [ 310.922611][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2857'. [ 310.960899][T13564] loop9: detected capacity change from 0 to 2048 [ 310.972446][T13434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.984263][T13568] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2859'. [ 311.083716][T13574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2861'. [ 311.100245][T13564] EXT4-fs mount: 37 callbacks suppressed [ 311.100314][T13564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.262641][T13589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.275789][T13591] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2864'. [ 311.315588][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2864'. [ 311.440877][T13602] ip6gre1: entered promiscuous mode [ 311.451370][T13602] ip6gre1: entered allmulticast mode [ 311.506098][T13434] veth0_vlan: entered promiscuous mode [ 311.522966][T13434] veth1_vlan: entered promiscuous mode [ 311.553679][T13434] veth0_macvtap: entered promiscuous mode [ 311.611112][T13434] veth1_macvtap: entered promiscuous mode [ 311.639674][T13434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.639950][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.651692][T13434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.707890][T13624] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2871'. [ 311.721179][T13626] FAULT_INJECTION: forcing a failure. [ 311.721179][T13626] name failslab, interval 1, probability 0, space 0, times 0 [ 311.749087][T13626] CPU: 0 UID: 0 PID: 13626 Comm: syz.3.2873 Tainted: G W syzkaller #0 PREEMPT(full) [ 311.749171][T13626] Tainted: [W]=WARN [ 311.749180][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.749195][T13626] Call Trace: [ 311.749203][T13626] [ 311.749213][T13626] __dump_stack+0x1d/0x30 [ 311.749289][T13626] dump_stack_lvl+0x95/0xd0 [ 311.749317][T13626] dump_stack+0x15/0x1b [ 311.749365][T13626] should_fail_ex+0x263/0x280 [ 311.749393][T13626] should_failslab+0x8c/0xb0 [ 311.749433][T13626] __kmalloc_noprof+0xb8/0x4e0 [ 311.749460][T13626] ? fib_create_info+0xba5/0x1950 [ 311.749496][T13626] fib_create_info+0xba5/0x1950 [ 311.749587][T13626] fib_table_insert+0x60/0xe80 [ 311.749624][T13626] ? rtm_to_fib_config+0x929/0x950 [ 311.749658][T13626] ? __mutex_lock_slowpath+0xa/0x10 [ 311.749689][T13626] ? fib_new_table+0xad/0x1c0 [ 311.749724][T13626] inet_rtm_newroute+0xb5/0x160 [ 311.749754][T13626] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 311.749786][T13626] rtnetlink_rcv_msg+0x64b/0x720 [ 311.749888][T13626] netlink_rcv_skb+0x123/0x220 [ 311.749929][T13626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.749992][T13626] rtnetlink_rcv+0x1c/0x30 [ 311.750087][T13626] netlink_unicast+0x5c0/0x690 [ 311.750123][T13626] netlink_sendmsg+0x5c8/0x6f0 [ 311.750154][T13626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.750184][T13626] ____sys_sendmsg+0x5af/0x600 [ 311.750220][T13626] ___sys_sendmsg+0x195/0x1e0 [ 311.750270][T13626] __x64_sys_sendmsg+0xd4/0x160 [ 311.750305][T13626] x64_sys_call+0x194c/0x3020 [ 311.750350][T13626] do_syscall_64+0x12c/0x370 [ 311.750408][T13626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.750457][T13626] RIP: 0033:0x7f764594c799 [ 311.750478][T13626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.750500][T13626] RSP: 002b:00007f764439f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.750525][T13626] RAX: ffffffffffffffda RBX: 00007f7645bc5fa0 RCX: 00007f764594c799 [ 311.750542][T13626] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 311.750558][T13626] RBP: 00007f764439f090 R08: 0000000000000000 R09: 0000000000000000 [ 311.750618][T13626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.750634][T13626] R13: 00007f7645bc6038 R14: 00007f7645bc5fa0 R15: 00007ffc61d70c58 [ 311.750656][T13626] [ 312.070182][T13631] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 312.080223][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.093455][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.102712][T13631] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 312.113838][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.118612][T13634] set_capacity_and_notify: 2 callbacks suppressed [ 312.118628][T13634] loop7: detected capacity change from 0 to 1024 [ 312.125991][T13631] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 312.135577][T13635] loop9: detected capacity change from 0 to 512 [ 312.148766][T13631] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #5: comm syz.3.2875: unexpected bad inode w/o EXT4_IGET_BAD [ 312.182365][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.189185][T13635] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 312.199013][T13631] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 312.200988][T13631] EXT4-fs (loop3): no journal found [ 312.210132][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 312.210172][ C0] EXT4-fs (loop3): initial error at time 1772481987: ext4_get_journal_inode:5863: inode 5 [ 312.210213][ C0] EXT4-fs (loop3): last error at time 1772481987: ext4_get_journal_inode:5863: inode 5 [ 312.212343][T13634] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2876: Failed to acquire dquot type 0 [ 312.222813][T13631] EXT4-fs (loop3): can't get journal size [ 312.234898][T13635] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 312.263616][T13634] loop7: lost filesystem error report for type 5 error -117 [ 312.278098][T13631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.281485][T13634] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, [ 312.285936][T13635] EXT4-fs: failed to create workqueue [ 312.297940][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 312.297961][ C0] EXT4-fs (loop7): initial error at time 1772481987: ext4_acquire_dquot:7001 [ 312.298000][ C0] EXT4-fs (loop7): last error at time 1772481987: ext4_acquire_dquot:7001 [ 312.298075][T13634] inode 13: [ 312.305858][T13635] EXT4-fs (loop9): mount failed [ 312.311028][T13634] block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 312.352670][T13634] EXT4-fs (loop7): 1 truncate cleaned up [ 312.358773][T13634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.387642][T13634] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.405434][ T3798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.519951][T13653] loop8: detected capacity change from 0 to 512 [ 312.526781][T13653] EXT4-fs: Ignoring removed nobh option [ 312.539698][T13652] SELinux: policydb version -1067258026 does not match my version range 15-35 [ 312.551796][T13653] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 312.564302][T13652] SELinux: failed to load policy [ 312.596787][T13653] cgroup: name respecified [ 312.601527][T13653] žÿ: renamed from team_slave_1 [ 312.614781][T13660] syzkaller0: entered promiscuous mode [ 312.622540][T13660] syzkaller0: entered allmulticast mode [ 312.632237][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2883'. [ 312.677205][T13665] loop9: detected capacity change from 0 to 512 [ 312.687177][T13665] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.2885: inode has both inline data and extents flags [ 312.765284][T13665] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 312.765533][T13665] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2885: couldn't read orphan inode 15 (err -117) [ 312.774736][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 312.774762][ C0] EXT4-fs (loop9): initial error at time 1772481988: ext4_orphan_get:1391: inode 15 [ 312.774800][ C0] EXT4-fs (loop9): last error at time 1772481988: ext4_orphan_get:1391: inode 15 [ 312.842730][T13668] loop8: detected capacity change from 0 to 1024 [ 312.854635][T13668] EXT4-fs: inline encryption not supported [ 312.871093][T13665] loop9: lost filesystem error report for type 5 error -117 [ 312.872165][T13665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.900599][T13668] EXT4-fs: Ignoring removed i_version option [ 312.916237][T13679] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.941145][T13679] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.984918][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.006501][T13668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.033598][T13679] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.075925][T13679] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.104872][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2892'. [ 313.115023][T13688] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 313.163296][T13679] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.175124][T13679] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.203296][ T9745] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.244068][T13700] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2896'. [ 313.254533][T13679] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.264431][T13698] loop4: detected capacity change from 0 to 256 [ 313.273548][T13698] FAT-fs (loop4): bogus number of FAT sectors [ 313.273782][T13679] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.289828][T13696] loop8: detected capacity change from 0 to 4096 [ 313.291041][T13698] FAT-fs (loop4): Can't find a valid FAT filesystem [ 313.340276][T13696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.360981][ T7246] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.369603][ T7246] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.373009][T13705] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2898'. [ 313.390848][ T7246] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.401924][ T7246] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.423375][ T7246] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.434154][ T7246] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.442909][ T9745] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.457190][T13710] loop4: detected capacity change from 0 to 512 [ 313.460102][ T7246] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.472199][ T7246] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.484229][T13710] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 313.493612][T13681] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.511062][T13710] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.2900: iget: bad i_size value: 12154757448730 [ 313.526113][T13710] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 313.526401][T13710] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2900: couldn't read orphan inode 13 (err -117) [ 313.532262][T13681] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.535605][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 313.563550][ C0] EXT4-fs (loop4): initial error at time 1772481988: ext4_orphan_get:1391: inode 13 [ 313.572949][ C0] EXT4-fs (loop4): last error at time 1772481988: ext4_orphan_get:1391: inode 13 [ 313.582605][T13710] loop4: lost filesystem error report for type 5 error -117 [ 313.583276][T13710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.647540][T13681] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.658633][T13681] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.710046][T13434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.747351][T13681] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.761931][T13681] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.776205][T13721] loop9: detected capacity change from 0 to 256 [ 313.789754][T13721] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.841935][T13681] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.852225][T13681] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.886294][T13730] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264) [ 313.927030][T13730] FAT-fs (loop9): Filesystem has been set read-only [ 313.941540][T13735] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264) [ 313.950801][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 313.950820][ T28] audit: type=1400 audit(1772481989.309:5643): avc: denied { setattr } for pid=13720 comm="syz.9.2906" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 314.023605][T13733] loop4: detected capacity change from 0 to 1024 [ 314.154541][T13733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.256119][ T28] audit: type=1400 audit(1772481989.479:5644): avc: denied { create } for pid=13720 comm="syz.9.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 314.307899][ T28] audit: type=1400 audit(1772481989.669:5645): avc: denied { ioctl } for pid=13743 comm="syz.3.2911" path="socket:[46098]" dev="sockfs" ino=46098 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 314.378364][T13747] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 314.393940][T13747] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 314.417902][T13747] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.2912: Failed to acquire dquot type 0 [ 314.432826][T13747] loop3: lost filesystem error report for type 5 error -117 [ 314.433272][T13747] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 314.455464][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 314.455515][ C1] EXT4-fs (loop3): initial error at time 1772481989: ext4_acquire_dquot:7001 [ 314.455541][ C1] EXT4-fs (loop3): last error at time 1772481989: ext4_acquire_dquot:7001 [ 314.483008][T13747] EXT4-fs (loop3): 1 truncate cleaned up [ 314.483111][T13434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.490149][T13747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.512793][T13747] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.604135][T13755] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 314.612896][T13755] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.2915: iget: bad i_size value: 12154757448730 [ 314.626000][T13755] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 314.626291][T13755] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2915: couldn't read orphan inode 13 (err -117) [ 314.626320][T13755] loop8: lost filesystem error report for type 5 error -117 [ 314.635017][T13755] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.689767][ T28] audit: type=1400 audit(1772481990.039:5646): avc: denied { setattr } for pid=13752 comm="syz.3.2914" name="rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 314.765763][ T9745] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.809362][T13767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.839548][T13770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.852520][T13770] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.866209][T13434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.888362][T13763] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.2918: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 314.918832][ T3798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.972056][T13778] netlink: 'syz.3.2923': attribute type 5 has an invalid length. [ 315.170428][T13788] FAULT_INJECTION: forcing a failure. [ 315.170428][T13788] name failslab, interval 1, probability 0, space 0, times 0 [ 315.183408][T13788] CPU: 0 UID: 0 PID: 13788 Comm: syz.4.2927 Tainted: G W syzkaller #0 PREEMPT(full) [ 315.183511][T13788] Tainted: [W]=WARN [ 315.183589][T13788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.183601][T13788] Call Trace: [ 315.183608][T13788] [ 315.183615][T13788] __dump_stack+0x1d/0x30 [ 315.183643][T13788] dump_stack_lvl+0x95/0xd0 [ 315.183742][T13788] dump_stack+0x15/0x1b [ 315.183766][T13788] should_fail_ex+0x263/0x280 [ 315.183794][T13788] ? alloc_fs_context+0x46/0x580 [ 315.183890][T13788] should_failslab+0x8c/0xb0 [ 315.183914][T13788] __kmalloc_cache_noprof+0x5f/0x410 [ 315.183943][T13788] alloc_fs_context+0x46/0x580 [ 315.184047][T13788] fs_context_for_mount+0x22/0x30 [ 315.184073][T13788] do_new_mount+0xe7/0x8d0 [ 315.184104][T13788] ? security_capable+0x7b/0x90 [ 315.184131][T13788] path_mount+0x4d0/0xbc0 [ 315.184157][T13788] __se_sys_mount+0x28c/0x2e0 [ 315.184261][T13788] ? fput+0x8f/0xc0 [ 315.184318][T13788] __x64_sys_mount+0x67/0x80 [ 315.184344][T13788] x64_sys_call+0x2d61/0x3020 [ 315.184450][T13788] do_syscall_64+0x12c/0x370 [ 315.184475][T13788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.184502][T13788] RIP: 0033:0x7f36d55ac799 [ 315.184522][T13788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.184545][T13788] RSP: 002b:00007f36d3fff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.184637][T13788] RAX: ffffffffffffffda RBX: 00007f36d5825fa0 RCX: 00007f36d55ac799 [ 315.184654][T13788] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 315.184670][T13788] RBP: 00007f36d3fff090 R08: 0000200000000340 R09: 0000000000000000 [ 315.184686][T13788] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 315.184702][T13788] R13: 00007f36d5826038 R14: 00007f36d5825fa0 R15: 00007fffbcb48ca8 [ 315.184796][T13788] [ 315.668268][T13794] chnl_net:caif_netlink_parms(): no params data found [ 315.705578][T13807] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.2932: inode has both inline data and extents flags [ 315.721480][T13807] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 315.721674][T13807] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2932: couldn't read orphan inode 15 (err -117) [ 315.742898][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 315.742920][ C1] EXT4-fs (loop9): initial error at time 1772481991: ext4_orphan_get:1391: inode 15 [ 315.742961][ C1] EXT4-fs (loop9): last error at time 1772481991: ext4_orphan_get:1391: inode 15 [ 315.760892][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.775428][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.782637][T13794] bridge_slave_0: entered allmulticast mode [ 315.789158][T13807] loop9: lost filesystem error report for type 5 error -117 [ 315.789416][T13794] bridge_slave_0: entered promiscuous mode [ 315.789960][T13807] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.798231][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.822396][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.829611][T13794] bridge_slave_1: entered allmulticast mode [ 315.836149][T13794] bridge_slave_1: entered promiscuous mode [ 315.855149][T13794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.865626][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.866019][T13794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.900897][T13794] team0: Port device team_slave_0 added [ 315.907934][T13794] team0: Port device team_slave_1 added [ 315.940132][T13794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.951546][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.009238][T13794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.020721][T13794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.021432][ T28] audit: type=1400 audit(1772481991.379:5647): avc: denied { name_bind } for pid=13817 comm="syz.4.2934" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 316.027947][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.121448][T13794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.166436][T13794] hsr_slave_0: entered promiscuous mode [ 316.178848][T13794] hsr_slave_1: entered promiscuous mode [ 316.195919][T13794] debugfs: 'hsr0' already exists in 'hsr' [ 316.217744][T13794] Cannot create hsr debugfs directory [ 316.308526][T13794] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.318475][T13794] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.363042][T13794] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.374262][T13794] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.498637][T13794] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.508498][T13794] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.554202][T13794] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.564174][T13794] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.602954][T13830] EXT4-fs: inline encryption not supported [ 316.843411][T13830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.172624][T13794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 317.191405][T13840] __nla_validate_parse: 4 callbacks suppressed [ 317.191423][T13840] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2938'. [ 317.262857][T13794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 317.295488][T13794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 317.314124][T13794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.365397][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2939'. [ 317.404410][T13794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.432764][T13794] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.443302][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.450401][ T7223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.472699][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.479851][ T7223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.558017][T13794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.643887][T13794] veth0_vlan: entered promiscuous mode [ 317.653171][T13794] veth1_vlan: entered promiscuous mode [ 317.673077][T13794] veth0_macvtap: entered promiscuous mode [ 317.681058][T13794] veth1_macvtap: entered promiscuous mode [ 317.694478][T13794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.709444][T13794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.722968][ T7223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.744514][ T7223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.757775][ T7223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.777357][ T7223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.806426][T13866] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 317.826774][T13866] tipc: Failed to remove unknown binding: 66,0,0/0:1960778674/1960778675 [ 317.845057][ T28] audit: type=1400 audit(1772481993.169:5648): avc: denied { read } for pid=13865 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 317.889019][ T28] audit: type=1400 audit(1772481993.189:5649): avc: denied { relabelto } for pid=13865 comm="syz.3.2930" name="0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 317.966408][ T28] audit: type=1400 audit(1772481993.189:5650): avc: denied { associate } for pid=13865 comm="syz.3.2930" name="0" dev="tmpfs" ino=13 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 318.144072][T13874] set_capacity_and_notify: 8 callbacks suppressed [ 318.144089][T13874] loop8: detected capacity change from 0 to 512 [ 318.160481][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.193876][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2943'. [ 318.224953][T13874] EXT4-fs: Ignoring removed bh option [ 318.230460][T13874] EXT4-fs: inline encryption not supported [ 318.247996][T13878] loop9: detected capacity change from 0 to 512 [ 318.264460][T13874] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 318.277592][T13878] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.2944: inode has both inline data and extents flags [ 318.291125][T13878] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 318.291322][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 318.294788][T13874] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 318.300477][ C1] EXT4-fs (loop9): initial error at time 1772481993: ext4_orphan_get:1391 [ 318.308296][T13874] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2942: bg 0: block 248: padding at end of block bitmap is not set [ 318.321255][ C1] : inode 15 [ 318.321274][ C1] EXT4-fs (loop9): last error at time 1772481993: ext4_orphan_get:1391: inode 15 [ 318.330336][T13874] loop8: lost filesystem error report for type 5 error -117 [ 318.344043][ C1] [ 318.344324][T13878] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2944: couldn't read orphan inode 15 (err -117) [ 318.361317][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 318.364583][T13878] loop9: lost filesystem error report for type 5 error -117 [ 318.366183][ C0] EXT4-fs (loop8): last error at time 1772481993: ext4_validate_block_bitmap:441 [ 318.401085][T13874] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.2942: Failed to acquire dquot type 1 [ 318.412500][T13874] loop8: lost filesystem error report for type 5 error -117 [ 318.413111][T13874] EXT4-fs (loop8): 1 truncate cleaned up [ 318.422018][T13878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.426610][T13874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 318.466136][ T7247] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.479434][ T7247] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.487906][ T7247] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.496300][ T7247] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.516267][ T7247] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.525588][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.541865][ T7247] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.568071][ T7247] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.681748][ T7247] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.734932][T13883] loop4: detected capacity change from 0 to 512 [ 320.126545][T13891] loop7: detected capacity change from 0 to 164 [ 320.367894][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 320.367910][ T28] audit: type=1326 audit(1772481995.729:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.460047][ T28] audit: type=1326 audit(1772481995.769:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.485811][ T28] audit: type=1326 audit(1772481995.769:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.510937][ T28] audit: type=1326 audit(1772481995.769:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.537543][ T28] audit: type=1326 audit(1772481995.769:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.565450][ T28] audit: type=1326 audit(1772481995.789:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.589735][ T28] audit: type=1326 audit(1772481995.789:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.647805][ T28] audit: type=1326 audit(1772481995.789:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.678401][ T28] audit: type=1326 audit(1772481995.789:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.699790][T13899] loop3: detected capacity change from 0 to 512 [ 320.706414][T13907] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2952'. [ 320.719332][T13907] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2952'. [ 320.731833][T13907] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2952'. [ 320.752959][ T28] audit: type=1326 audit(1772481995.789:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.8.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd04cc799 code=0x7ffc0000 [ 320.754378][T13907] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2952'. [ 320.786013][T13907] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2952'. [ 320.799548][T13907] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2952'. [ 320.799608][T13907] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2952'. [ 320.926883][T13920] FAULT_INJECTION: forcing a failure. [ 320.926883][T13920] name failslab, interval 1, probability 0, space 0, times 0 [ 320.940001][T13920] CPU: 1 UID: 0 PID: 13920 Comm: syz.7.2957 Tainted: G W syzkaller #0 PREEMPT(full) [ 320.940047][T13920] Tainted: [W]=WARN [ 320.940057][T13920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.940069][T13920] Call Trace: [ 320.940075][T13920] [ 320.940141][T13920] __dump_stack+0x1d/0x30 [ 320.940172][T13920] dump_stack_lvl+0x95/0xd0 [ 320.940272][T13920] dump_stack+0x15/0x1b [ 320.940320][T13920] should_fail_ex+0x263/0x280 [ 320.940400][T13920] should_failslab+0x8c/0xb0 [ 320.940424][T13920] kmem_cache_alloc_noprof+0x66/0x400 [ 320.940500][T13920] ? skb_clone+0x151/0x1f0 [ 320.940564][T13920] skb_clone+0x151/0x1f0 [ 320.940595][T13920] __netlink_deliver_tap+0x2c9/0x500 [ 320.940629][T13920] ? netlink_attachskb+0x2e2/0x660 [ 320.940705][T13920] netlink_sendskb+0x126/0x150 [ 320.940733][T13920] netlink_unicast+0x2a2/0x690 [ 320.940792][T13920] netlink_ack+0x4c8/0x500 [ 320.940856][T13920] netlink_rcv_skb+0x192/0x220 [ 320.940885][T13920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 320.940927][T13920] rtnetlink_rcv+0x1c/0x30 [ 320.940969][T13920] netlink_unicast+0x5c0/0x690 [ 320.940999][T13920] netlink_sendmsg+0x5c8/0x6f0 [ 320.941038][T13920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.941126][T13920] ____sys_sendmsg+0x5af/0x600 [ 320.941162][T13920] ___sys_sendmsg+0x195/0x1e0 [ 320.941205][T13920] __x64_sys_sendmsg+0xd4/0x160 [ 320.941241][T13920] x64_sys_call+0x194c/0x3020 [ 320.941277][T13920] do_syscall_64+0x12c/0x370 [ 320.941303][T13920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.941329][T13920] RIP: 0033:0x7fdd1a7ac799 [ 320.941381][T13920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.941403][T13920] RSP: 002b:00007fdd19207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.941427][T13920] RAX: ffffffffffffffda RBX: 00007fdd1aa25fa0 RCX: 00007fdd1a7ac799 [ 320.941444][T13920] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 320.941460][T13920] RBP: 00007fdd19207090 R08: 0000000000000000 R09: 0000000000000000 [ 320.941538][T13920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.941553][T13920] R13: 00007fdd1aa26038 R14: 00007fdd1aa25fa0 R15: 00007ffe011abc38 [ 320.941574][T13920] [ 321.180827][T13917] loop3: detected capacity change from 0 to 512 [ 321.188319][ T9745] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 321.199153][T13917] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2956: inode has both inline data and extents flags [ 321.212907][T13917] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 321.213045][T13917] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2956: couldn't read orphan inode 15 (err -117) [ 321.222210][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 321.222230][ C0] EXT4-fs (loop3): initial error at time 1772481996: ext4_orphan_get:1391: inode 15 [ 321.222265][ C0] EXT4-fs (loop3): last error at time 1772481996: ext4_orphan_get:1391: inode 15 [ 321.260318][T13917] loop3: lost filesystem error report for type 5 error -117 [ 321.271868][T13917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.314760][T13794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.341748][T13928] loop7: detected capacity change from 0 to 1024 [ 321.350648][T13928] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 321.383145][T13928] JBD2: no valid journal superblock found [ 321.389039][T13928] EXT4-fs (loop7): Could not load journal inode [ 321.484401][T13938] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 321.613994][T13943] loop9: detected capacity change from 0 to 164 [ 321.848264][T13947] loop4: detected capacity change from 0 to 512 [ 322.808520][T13955] syzkaller0: entered promiscuous mode [ 322.931899][T13955] syzkaller0: entered allmulticast mode [ 323.003453][T13947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.081926][T13947] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.160295][T13434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.174480][T13967] loop3: detected capacity change from 0 to 512 [ 323.192912][T13967] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2972: inode has both inline data and extents flags [ 323.237234][T13967] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 323.237401][T13967] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2972: couldn't read orphan inode 15 (err -117) [ 323.246761][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 323.246777][ C1] EXT4-fs (loop3): initial error at time 1772481998: ext4_orphan_get:1391: inode 15 [ 323.246809][ C1] EXT4-fs (loop3): last error at time 1772481998: ext4_orphan_get:1391: inode 15 [ 323.341716][T13967] loop3: lost filesystem error report for type 5 error -117 [ 323.342156][T13967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.710802][T13794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.744810][T13978] __nla_validate_parse: 61 callbacks suppressed [ 323.744826][T13978] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2977'. [ 323.790909][T13983] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 323.818789][T13980] syzkaller0: entered promiscuous mode [ 323.824558][T13980] syzkaller0: entered allmulticast mode [ 323.842705][T13986] loop9: detected capacity change from 0 to 512 [ 323.854072][T13986] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.2980: inode has both inline data and extents flags [ 323.871127][T13986] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 323.871813][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 323.876416][T13986] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2980: couldn't read orphan inode 15 (err -117) [ 323.881048][ C1] EXT4-fs (loop9): initial error at time 1772481999: ext4_orphan_get:1391: inode 15 [ 323.908779][ C1] EXT4-fs (loop9): last error at time 1772481999: ext4_orphan_get:1391: inode 15 [ 323.938831][T13986] loop9: lost filesystem error report for type 5 error -117 [ 323.939350][T13986] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.991188][T13995] program syz.4.2984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.043712][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.114274][T13999] loop4: detected capacity change from 0 to 1024 [ 324.134475][T13999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.152849][T13999] FAULT_INJECTION: forcing a failure. [ 324.152849][T13999] name failslab, interval 1, probability 0, space 0, times 0 [ 324.173866][T13999] CPU: 1 UID: 0 PID: 13999 Comm: syz.4.2986 Tainted: G W syzkaller #0 PREEMPT(full) [ 324.173982][T13999] Tainted: [W]=WARN [ 324.173989][T13999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.174001][T13999] Call Trace: [ 324.174086][T13999] [ 324.174095][T13999] __dump_stack+0x1d/0x30 [ 324.174126][T13999] dump_stack_lvl+0x95/0xd0 [ 324.174153][T13999] dump_stack+0x15/0x1b [ 324.174244][T13999] should_fail_ex+0x263/0x280 [ 324.174272][T13999] should_failslab+0x8c/0xb0 [ 324.174296][T13999] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 324.174379][T13999] ? __d_alloc+0x37/0x340 [ 324.174432][T13999] __d_alloc+0x37/0x340 [ 324.174458][T13999] d_alloc+0x2e/0x100 [ 324.174486][T13999] lookup_one_qstr_excl+0x99/0x250 [ 324.174587][T13999] filename_create+0x155/0x220 [ 324.174691][T13999] filename_mknodat+0x13e/0x450 [ 324.174729][T13999] __se_sys_mknod+0x37/0xf0 [ 324.174747][T13999] __x64_sys_mknod+0x43/0x50 [ 324.174801][T13999] x64_sys_call+0x2acd/0x3020 [ 324.174831][T13999] do_syscall_64+0x12c/0x370 [ 324.174854][T13999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.174879][T13999] RIP: 0033:0x7f36d55ac799 [ 324.174946][T13999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.174967][T13999] RSP: 002b:00007f36d3fff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 324.175053][T13999] RAX: ffffffffffffffda RBX: 00007f36d5825fa0 RCX: 00007f36d55ac799 [ 324.175069][T13999] RDX: 0000000000000709 RSI: 0000000000000000 RDI: 0000200000000000 [ 324.175083][T13999] RBP: 00007f36d3fff090 R08: 0000000000000000 R09: 0000000000000000 [ 324.175109][T13999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.175125][T13999] R13: 00007f36d5826038 R14: 00007f36d5825fa0 R15: 00007fffbcb48ca8 [ 324.175146][T13999] [ 324.193247][T13997] loop9: detected capacity change from 0 to 512 [ 324.237349][T14005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2988'. [ 324.390256][T14005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2988'. [ 324.410723][T13434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.457759][T14010] loop9: detected capacity change from 0 to 1024 [ 324.508952][T14015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2989'. [ 324.595048][T14010] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 324.651019][T14010] JBD2: no valid journal superblock found [ 324.656998][T14026] loop3: detected capacity change from 0 to 2048 [ 324.675310][T14010] EXT4-fs (loop9): Could not load journal inode [ 324.726113][T14026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.941939][T14043] program syz.4.3001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.277804][T14053] ipvlan2: entered allmulticast mode [ 325.284890][T14053] dummy0: entered allmulticast mode [ 325.698388][T13794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.798438][T14056] loop3: detected capacity change from 0 to 1024 [ 325.891235][T14056] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 325.924909][T14056] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 325.932087][T14063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3009'. [ 325.935096][T14056] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 325.973067][T14056] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #5: comm syz.3.3005: unexpected bad inode w/o EXT4_IGET_BAD [ 326.000852][ T3392] IPVS: starting estimator thread 0... [ 326.006942][T14056] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 326.007069][T14056] EXT4-fs (loop3): no journal found [ 326.016210][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 326.016253][ C0] EXT4-fs (loop3): initial error at time 1772482001: ext4_get_journal_inode:5863: inode 5 [ 326.016273][ C0] EXT4-fs (loop3): last error at time 1772482001: ext4_get_journal_inode:5863: inode 5 [ 326.047911][T14056] EXT4-fs (loop3): can't get journal size [ 326.054606][T14056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.071920][T14072] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3007'. [ 326.092351][T14068] IPVS: using max 2496 ests per chain, 124800 per kthread [ 326.130786][T13794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.163768][T14076] loop8: detected capacity change from 0 to 1764 [ 326.173653][T14076] ISOFS: Unable to identify CD-ROM format. [ 326.206174][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 326.206207][ T28] audit: type=1400 audit(1772482001.569:5852): avc: denied { remount } for pid=14075 comm="syz.8.3013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 326.216083][T14082] loop3: detected capacity change from 0 to 1024 [ 326.301838][T14082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.369765][T14093] FAULT_INJECTION: forcing a failure. [ 326.369765][T14093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.387605][T14076] loop8: detected capacity change from 0 to 1024 [ 326.398776][T13794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.411591][T14076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.425305][T14093] CPU: 1 UID: 0 PID: 14093 Comm: syz.9.3018 Tainted: G W syzkaller #0 PREEMPT(full) [ 326.425342][T14093] Tainted: [W]=WARN [ 326.425350][T14093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.425409][T14093] Call Trace: [ 326.425417][T14093] [ 326.425425][T14093] __dump_stack+0x1d/0x30 [ 326.425455][T14093] dump_stack_lvl+0x95/0xd0 [ 326.425525][T14093] dump_stack+0x15/0x1b [ 326.425549][T14093] should_fail_ex+0x263/0x280 [ 326.425575][T14093] should_fail+0xb/0x20 [ 326.425598][T14093] should_fail_usercopy+0x1a/0x20 [ 326.425650][T14093] _copy_to_user+0x20/0xa0 [ 326.425683][T14093] simple_read_from_buffer+0xb5/0x130 [ 326.425717][T14093] proc_fail_nth_read+0x10e/0x150 [ 326.425751][T14093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.425782][T14093] vfs_read+0x1ab/0x7f0 [ 326.425867][T14093] ? __rcu_read_unlock+0x4e/0x70 [ 326.425892][T14093] ? __fget_files+0x184/0x1c0 [ 326.425918][T14093] ? mutex_lock+0x57/0x90 [ 326.425977][T14093] ksys_read+0xdc/0x1a0 [ 326.426007][T14093] __x64_sys_read+0x40/0x50 [ 326.426046][T14093] x64_sys_call+0x2886/0x3020 [ 326.426090][T14093] do_syscall_64+0x12c/0x370 [ 326.426116][T14093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.426142][T14093] RIP: 0033:0x7f5d72c3cfce [ 326.426222][T14093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 326.426244][T14093] RSP: 002b:00007f5d716cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.426270][T14093] RAX: ffffffffffffffda RBX: 00007f5d716cf6c0 RCX: 00007f5d72c3cfce [ 326.426315][T14093] RDX: 000000000000000f RSI: 00007f5d716cf0a0 RDI: 0000000000000004 [ 326.426330][T14093] RBP: 00007f5d716cf090 R08: 0000000000000000 R09: 0000000000000000 [ 326.426346][T14093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.426361][T14093] R13: 00007f5d72ef6038 R14: 00007f5d72ef5fa0 R15: 00007ffcf2146648 [ 326.426383][T14093] [ 326.639708][T14096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3019'. [ 326.676724][T14098] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3020: inode has both inline data and extents flags [ 326.690832][T14098] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 326.690952][T14098] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3020: couldn't read orphan inode 15 (err -117) [ 326.700124][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 326.700147][ C0] EXT4-fs (loop9): initial error at time 1772482002: ext4_orphan_get:1391: inode 15 [ 326.700178][ C0] EXT4-fs (loop9): last error at time 1772482002: ext4_orphan_get:1391: inode 15 [ 326.739664][T14098] loop9: lost filesystem error report for type 5 error -117 [ 326.752701][T14098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.795322][T14076] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.849663][T10505] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.858886][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.915368][ T3521] ================================================================== [ 326.916598][ T9745] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.923718][ T3521] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 326.939605][ T3521] [ 326.941946][ T3521] write to 0xffff888103f983dc of 4 bytes by task 3300 on cpu 1: [ 326.949716][ T3521] shmem_mknod+0x143/0x170 [ 326.954156][ T3521] shmem_create+0x34/0x50 [ 326.958504][ T3521] path_openat+0xd75/0x2050 [ 326.963022][ T3521] do_file_open+0x16c/0x290 [ 326.967537][ T3521] do_sys_openat2+0x94/0x130 [ 326.972140][ T3521] __x64_sys_openat+0xf2/0x120 [ 326.977014][ T3521] x64_sys_call+0x1e39/0x3020 [ 326.981700][ T3521] do_syscall_64+0x12c/0x370 [ 326.986294][ T3521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.992194][ T3521] [ 326.994526][ T3521] read to 0xffff888103f983dc of 4 bytes by task 3521 on cpu 0: [ 327.002068][ T3521] fill_mg_cmtime+0x5b/0x270 [ 327.006773][ T3521] generic_fillattr+0x24a/0x340 [ 327.011628][ T3521] shmem_getattr+0x181/0x200 [ 327.016224][ T3521] vfs_getattr_nosec+0x146/0x1e0 [ 327.021164][ T3521] vfs_getattr+0x48/0x60 [ 327.025409][ T3521] vfs_statx_path+0x28/0x140 [ 327.030005][ T3521] vfs_statx+0xc4/0x170 [ 327.034162][ T3521] vfs_fstatat+0x118/0x170 [ 327.038588][ T3521] __se_sys_newfstatat+0x55/0x3e0 [ 327.043618][ T3521] __x64_sys_newfstatat+0x55/0x70 [ 327.048647][ T3521] x64_sys_call+0x2c64/0x3020 [ 327.053337][ T3521] do_syscall_64+0x12c/0x370 [ 327.057927][ T3521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.063828][ T3521] [ 327.066149][ T3521] value changed: 0x1126c50c -> 0x112bb0a2 [ 327.071871][ T3521] [ 327.074192][ T3521] Reported by Kernel Concurrency Sanitizer on: [ 327.080343][ T3521] CPU: 0 UID: 0 PID: 3521 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 327.090762][ T3521] Tainted: [W]=WARN [ 327.094570][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.104626][ T3521] ================================================================== [ 327.126845][T14119] FAULT_INJECTION: forcing a failure. [ 327.126845][T14119] name failslab, interval 1, probability 0, space 0, times 0 [ 327.139915][T14119] CPU: 1 UID: 0 PID: 14119 Comm: syz.3.3026 Tainted: G W syzkaller #0 PREEMPT(full) [ 327.139950][T14119] Tainted: [W]=WARN [ 327.139957][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.139970][T14119] Call Trace: [ 327.139977][T14119] [ 327.139986][T14119] __dump_stack+0x1d/0x30 [ 327.140041][T14119] dump_stack_lvl+0x95/0xd0 [ 327.140138][T14119] dump_stack+0x15/0x1b [ 327.140197][T14119] should_fail_ex+0x263/0x280 [ 327.140221][T14119] should_failslab+0x8c/0xb0 [ 327.140243][T14119] __kvmalloc_node_noprof+0x155/0x650 [ 327.140267][T14119] ? vmemdup_user+0x2b/0xd0 [ 327.140316][T14119] vmemdup_user+0x2b/0xd0 [ 327.140334][T14119] map_get_next_key+0x140/0x330 [ 327.140354][T14119] ? __sys_bpf+0x643/0x7e0 [ 327.140390][T14119] __sys_bpf+0x64d/0x7e0 [ 327.140454][T14119] __x64_sys_bpf+0x41/0x50 [ 327.140485][T14119] x64_sys_call+0x10cb/0x3020 [ 327.140515][T14119] do_syscall_64+0x12c/0x370 [ 327.140536][T14119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.140586][T14119] RIP: 0033:0x7f4512ebc799 [ 327.140678][T14119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.140695][T14119] RSP: 002b:00007f45118f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.140715][T14119] RAX: ffffffffffffffda RBX: 00007f4513136090 RCX: 00007f4512ebc799 [ 327.140777][T14119] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 327.140791][T14119] RBP: 00007f45118f6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.140858][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.140871][T14119] R13: 00007f4513136128 R14: 00007f4513136090 R15: 00007ffd4af6ef28 [ 327.140889][T14119] [ 327.358490][T14120] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.397606][T14120] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3028'. [ 327.423976][ T28] audit: type=1400 audit(1772482002.779:5853): avc: denied { accept } for pid=14114 comm="syz.9.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 327.469106][ T9339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.