last executing test programs: 41.525637983s ago: executing program 4 (id=405): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffeba, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x24008010}, 0x804) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) 41.422652666s ago: executing program 4 (id=407): unshare(0x2040400) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x9}, 0x4000, 0x2, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 41.357526877s ago: executing program 4 (id=408): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x1, 0x6, 0x401, 0x0, 0x8}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x2000000) 41.100049244s ago: executing program 4 (id=416): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r1 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="200000000000000084000000020000000700040001000100ff8c0000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000ac14142a0000000018000000000000008400000005000000000400"], 0x98, 0x8004084}, 0x4041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38040016) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) tkill(r3, 0x7) fcntl$lock(r0, 0x1, &(0x7f0000000080)={0x2, 0x0, 0x3ff, 0x0, r3}) r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @mcast1, 0x2}, 0x1c) 39.870936408s ago: executing program 4 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="6a19040000000000140003007465616d3000000000000000000000000c0016800800018004000c80036bb129e869b41b7421d119325670e9ff7c12f69532c8839ffed0b46f4353bb2d49a070ed89610894ba63aeed6fd9548b8f9bb53e9c1183b6a55c1b68cec6c7772fe018c927341cdeb5f4123dfdb3339ccbb25aaece5db89240662b45af79ffa4c51227d641051722b6f38c9c287f63f467855fd687f43a2c94566d02a25bbca6b0dfff3cd84e2ac274f6b1eb6ae73ee9057dfdc7cacd862ec1489e20aa4b"], 0x40}}, 0x20084084) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000000)=0x1c, 0x80000) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) 39.391242761s ago: executing program 4 (id=425): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x2318f000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001740)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4200, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f00005af000/0x3000)=nil, 0x3000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfef", 0x4}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 39.332241483s ago: executing program 32 (id=425): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x2318f000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001740)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4200, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f00005af000/0x3000)=nil, 0x3000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfef", 0x4}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 8.313507702s ago: executing program 2 (id=646): socket$nl_route(0x10, 0x3, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000100000008000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x700, 0x40, 0x233, 0xa, {{0x3f, 0x4, 0x0, 0x1, 0xfc, 0x68, 0x0, 0x2, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x23, 0x11, [@initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010102, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x27, 0x59, [@rand_addr=0x64010101, @private=0xa010100, @broadcast, @local, @multicast1, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x43, [@multicast1, @private=0xa010102, @empty]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0xbc8, 0x8]}, @generic={0x83, 0xf, "2101f3c7b577ae81b8f7ede649"}, @lsrr={0x83, 0x17, 0x1d, [@rand_addr=0x64010102, @empty, @loopback, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x9, [{@private=0xa010100, 0x82da}, {@multicast2}, {@broadcast, 0x4}, {@empty, 0x9d9}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1, 0x800}]}, @lsrr={0x83, 0x17, 0xc5, [@local, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1]}]}}}}}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.28132633s ago: executing program 5 (id=651): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x4, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x4001c00) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 6.837613973s ago: executing program 5 (id=654): socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000a40)) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x700, 0x40, 0x233, 0xa, {{0x3e, 0x4, 0x0, 0x1, 0xf8, 0x68, 0x0, 0x2, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x23, 0x11, [@initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010102, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x27, 0x59, [@rand_addr=0x64010101, @private=0xa010100, @broadcast, @local, @multicast1, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xb, 0x43, [@multicast1, @private=0xa010102]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0xbc8, 0x8]}, @generic={0x83, 0xf, "2101f3c7b577ae81b8f7ede649"}, @lsrr={0x83, 0x17, 0x1d, [@rand_addr=0x64010102, @empty, @loopback, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x9, [{@private=0xa010100, 0x82da}, {@multicast2}, {@broadcast, 0x4}, {@empty, 0x9d9}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1, 0x800}]}, @lsrr={0x83, 0x17, 0xc5, [@local, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1]}]}}}}}) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.416980725s ago: executing program 2 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x20000044) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4) 6.396104745s ago: executing program 2 (id=657): socket$tipc(0x1e, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8001, 0x3, 0x8, 0x5, 0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000300)='net/sctp\x00') r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = socket(0x1e, 0x4, 0x0) unshare(0x30000000) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16=r5], 0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 5.48513581s ago: executing program 0 (id=658): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x16, 0x0, 0xc, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@ifindex, 0xffffffffffffffff, 0xd, 0x8, 0xffffffffffffffff, @void, @value=r2, @void, @void, r1}, 0x20) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fee6df2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 5.4784012s ago: executing program 5 (id=660): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c8c8}, 0x4000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000780)='net/raw\x00') futimesat(r6, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000200)=r0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x54}}, 0x20000490) r10 = fsmount(r7, 0x0, 0x0) fchdir(r10) r11 = open(0x0, 0x143142, 0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x1}}, './bus\x00'}) connect$pppl2tp(r10, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x4, 0x4, 0x3, 0x4, {0xa, 0x4e21, 0xe, @private1, 0x7}}}, 0x32) openat(r12, &(0x7f0000000040)='./bus\x00', 0x1c1842, 0x81) r13 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r14 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r14, 0x84, 0x22, &(0x7f0000000440)={0x3ff, 0x8201, 0x7, 0x1}, 0x10) write(r13, &(0x7f0000004200)='t', 0x1) 4.912067026s ago: executing program 1 (id=662): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000d80)={[{@nojournal_checksum}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@debug}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$eJzs3c9rHNcdAPDvrH7ZslurUKjdi3VqDcYr21XtFgqV6aEUajC059pitRaqVlqjXRlL6BATAoEQkpgcEpJLzvnh3HINyTl/Qy4hBBsnkU0ccggbZn9IK620+mHtyrY+HxjpvZk3+953Z+fN253HbgAH1nD6JxNxIiJeTyKO1dcnEdFXTfVGjNXKPV5eyqVLEpXKf75LqmUeLS/lommf1JF65nhEfPZSxOlMa72lhcXp8UIhP1fPj5RnboyUFhbPTM2MT+Yn87MXzo2Onr/454sX9i7WH75YPHr/jX/+8aOxn1783d1XP09iLI7WtzXHsVeGY7j+nPSlT+Ea/9jryvZZst8NYFfSU7OndpbHiTgWPdUUAPA8S6//FQDggElc/wHggGl8DvBoeSnXWPb3E4nuenApIklq8Tfub9a29Nbv2R2q3gcdfJREb/2OaOzh/a7hiHj3k/99kC7RofuQABt54XZEXBsabu3/k5Y5Czt1dhtlhtfl9X/QPZ9eioi/bDT+y6yMf2Jl/LNqYINzdzeGI/qb863nf+behjv+fQ8qr4///lab25YG2jT+W5m0NtRTz/0qzZyMiKlCPu3bfh0Rp6Jv4PpUIX+uTR2nHv78cLNtzeO/7+/8//20/vT/aonMvd6BtftMjJfHnyTmZg9uR/y+d3Vu3+OW/v9Qday7/vin6660e+CTq8l//fXldzYrlsafxttYWuPvrMp7EX+IjeNvSNrOTxxJD//Z2t+N6/j4q7cGN6u/+finS1p/471AN6THf7B9/ENJ83zN0t7Wv3X8G7/++5P/VtONzuPWeLk8dy6iP/l36/rzq/s28o3yafy1SNfHn2n7+k/fCV7bZoy997/9cPfxr+jIFMs0/okdHf+dJ+4+nu7Zffzp8R+tpk7V12yn/yvk+2M7DXyS5w4AAAAAAAAAAAAAAAAAAAAAAAAAtisTEUcjyWRX0plMNlv7De/fxmCmUCyVT18vzs9ORPW3soeiL9P4qsvGdyw2vv90qLY9SfPn1+X/FBG/iYg3Bw5X89lcsTCxz7EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMORTX7/P/XNQJsdk95uNREA6IRDW5Z4mF+TrVQqlQ62BwDovK2v/63efq0DDQEAuqbN9f9wN9sBAHTPbt7/AwDPNtd/ADh4XP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosCuXL6dL5cflpVyan7i5MD9dvHlmIl+azs7M57K54tyN7GSxOFnIZ3PFma0er1As3hiN2flbI+V8qTxSWli8OlOcny1fnZoZn8xfzfd1JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JnSwuL0eKGQn3suEq9ExNo1laejYU+eSOKpaMa+JL4+8+XxdmXubPEyHnsqonjGEvvdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G34JAAD//7M8Jlw=") r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000400)={0x0, 0x8000000000000001}) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xf3, 0x1, 0x1, 0x2, 0x0, 0x5, 0x1400, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000280), 0x19}, 0xa0, 0x3, 0x9, 0x1, 0x3, 0x9, 0xd, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x5, r0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x6, 0x1, 0x3, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f00000002c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) 4.688719652s ago: executing program 3 (id=663): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) dup2(r1, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 4.568304325s ago: executing program 1 (id=664): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='-', 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102a02, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000007110bc0000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b0000"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000010000fa0000000000efff17110000ae8ca50c24fdc3758dbf084656e5bc624f93a922813eae8b31a1ba0368ff78abc51df036c9f933253f84f751da5350d4fe23266f7b4c3aaf90b444e49e57e9bb2ec4ec48028dd121df71a2e870fe1d6a7fbc9f5c00696b1a71b70e956858cf71509599809a7ab654c32df773677f4846e4523647973c5da7e65fa6039b4a2c3ae7d62d0d0a9057194bade9bd90236be74616951b160b2ced2d9c", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=0x1, 0x14, 0x1, 0xfffffffa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.41353428s ago: executing program 3 (id=665): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='-', 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102a02, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000007110bc0000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b0000"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000010000fa0000000000efff17110000ae8ca50c24fdc3758dbf084656e5bc624f93a922813eae8b31a1ba0368ff78abc51df036c9f933253f84f751da5350d4fe23266f7b4c3aaf90b444e49e57e9bb2ec4ec48028dd121df71a2e870fe1d6a7fbc9f5c00696b1a71b70e956858cf71509599809a7ab654c32df773677f4846e4523647973c5da7e65fa6039b4a2c3ae7d62d0d0a9057194bade9bd90236be74616951b160b2ced2d9c", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=0x1, 0x14, 0x1, 0xfffffffa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.140334214s ago: executing program 1 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) memfd_create(0x0, 0x71042f6f0286d486) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0\x00') 3.063795886s ago: executing program 5 (id=667): socket$nl_route(0x10, 0x3, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000100000008000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x700, 0x40, 0x233, 0xa, {{0x3f, 0x4, 0x0, 0x1, 0xfc, 0x68, 0x0, 0x2, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x23, 0x11, [@initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010102, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x27, 0x59, [@rand_addr=0x64010101, @private=0xa010100, @broadcast, @local, @multicast1, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x43, [@multicast1, @private=0xa010102, @empty]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0xbc8, 0x8]}, @generic={0x83, 0xf, "2101f3c7b577ae81b8f7ede649"}, @lsrr={0x83, 0x17, 0x1d, [@rand_addr=0x64010102, @empty, @loopback, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x9, [{@private=0xa010100, 0x82da}, {@multicast2}, {@broadcast, 0x4}, {@empty, 0x9d9}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1, 0x800}]}, @lsrr={0x83, 0x17, 0xc5, [@local, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1]}]}}}}}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.005728368s ago: executing program 2 (id=668): socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe5a) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket(0xa, 0x6, 0x8) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40010000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 2.853689752s ago: executing program 0 (id=669): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x40301, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$PPPIOCSMAXCID(r0, 0x4004743c, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x4, 0x8, {{0x6, 0x4, 0x1, 0xd, 0x18, 0x67, 0x0, 0x84, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4, 0x92, 0x1, 0x4}]}}}}}) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f00000000c0)={{0xb8, 0x4, 0xc66, 0x4, 0xffffffff}, &(0x7f0000000000)=[{}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x250241, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/freeze_filesystems', 0x42, 0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r2, r3, 0x0, 0x6) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x44000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f00000000c0)={0x1000, 0xb65, 0x820, 0x4, 0x4, "f7744f7014e8c2d9b5cd3bfcfd0a24402d7ac2", 0x4, 0x9c1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000140)) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="07050000000000000000030000001400017665311e000000000000000000"], 0x28}}, 0x0) openat$cgroup_devices(r8, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) 2.840312062s ago: executing program 3 (id=670): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000280)={0x7}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x884) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 2.649550467s ago: executing program 0 (id=671): socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000a40)) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x700, 0x40, 0x233, 0xa, {{0x3e, 0x4, 0x0, 0x1, 0xf8, 0x68, 0x0, 0x2, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x23, 0x11, [@initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010102, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x27, 0x59, [@rand_addr=0x64010101, @private=0xa010100, @broadcast, @local, @multicast1, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xb, 0x43, [@multicast1, @private=0xa010102]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0xbc8, 0x8]}, @generic={0x83, 0xf, "2101f3c7b577ae81b8f7ede649"}, @lsrr={0x83, 0x17, 0x1d, [@rand_addr=0x64010102, @empty, @loopback, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x9, [{@private=0xa010100, 0x82da}, {@multicast2}, {@broadcast, 0x4}, {@empty, 0x9d9}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1, 0x800}]}, @lsrr={0x83, 0x17, 0xc5, [@local, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1]}]}}}}}) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.617352639s ago: executing program 1 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0xfffffffb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000200), 0xfe, 0x46e, &(0x7f00000007c0)="$eJzs3MtvVFUYAPDvTjst5WEr4gMEra9IfLS0PGThBqOJC01MdIFxNZZCkIEaWhMgRNEYXBoS98aliX+BG3Fj1JWJW90bE0LYSFxdc2fuHcYyM+20U0aZ3y+55Zy5Zzjnu+ce5sw53AYwsCazH0nE1oj4LSLG69l/F5is/3HzxlhEXJxLIk3fvJ7Uyv114+JcUbR435Z6Jh3qUO/ldyIq1er82Tw/vXT6/enF8xeeP3m6cmL+xPyZ2cOHD+zfM3Jo9mBP4tyWtXXXhwu7d7769pXX545eefenb7L2bs3PN8fRK5P1q9vSU9mPUq9r7J9tTelkuI8NoSvZGM26q1wb/+MxFGONc+Pxyid9bRywodK0lI62P30pTdN0U60ccPdJjG0YUMUHffb9tzhWP3vYut7pR99dOxKNdYyb+VE/M9z4el7ewPonI+Lopb+/zI7YoHUIAIBmV49ExHOt5n+leKCp3D353tBERNwbEdsj4r6I2BER90fUyj4YEQ91Wf/yHZLb5z/p+JoCW6Vs/vdibW9r+fyvsTkzMZTnttXiT+L4yer8vvya7I3yaJaf6VDH9y//+nm7c83zv+zI6i/mgnk7/hxetkB3rFKurCfmZtc+johkokX8SRTbONn8eGdE7Ory7y72hE4+8/XudmVWjr+DHuwzpV9FPF3v/0uxLP5C0nZ/cuaFQ7MHpzdFdX7fdHFX3O7nXy6/0a7+dcXfA9euprG55f3fiH8i2RSxeP7Cqdp+7WL3dVz+/bO232nWdv8vVUaSt2rpkfy1c5WlpbMzESPJa7e/PnvrvUX+XGVpJGbq9//eJ1qP/+1x60o8HBHZTbwnIh6JiEfztj8WEY9HxKcd4v/xpSff6z7+DqvyPZTFf2yl/o/m/u8ycb1SHTr1w7fdx1/I+v9ALbU3fyXr/5XiWm0D13PtAAAA4P+iVNvFT0pTjXSpNDVV/z/8O2JzqbqwuPTs8YUPzhyr7/ZPRLlUrHTV14PLSbH+OdGUn12W35+vG38xNFbLT80tVLtdKwZ6a0ub8Z/5o9MDPMDdwfNaMLiMfxhcxj8MLuMfBpfxD4Or1fj/qA/tAO68FT7/x+5UO4A7z/wfBpfxD4PL+IeB1PbZ+NLaH/mXaJEYXemC9ybx3ciGV5EnotT3q1qOiP9E5642UYy6duG0fNfwqn+ZxRoToy1P9e/fJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF76JwAA///jGNH6") 2.434474103s ago: executing program 3 (id=673): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r0 = socket(0x0, 0x3, 0x3fd) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14796, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4083, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x80801, 0x1) listen(r3, 0x9) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6a22e01e, 0x43}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x87}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}], @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "98fb19187e5c91b6"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000044}, 0x40400c0) getpgrp(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000300)="da0a9ce43d", 0x5, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r6}) add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r5) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x1, 0x200, 0x5, 0xc1f3, 0x3, 0x1}) 1.317735854s ago: executing program 3 (id=674): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000001c0)={0x2, 0x6, 0x6, 0xed, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0xf) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000140)}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x40400b0}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 734.91836ms ago: executing program 1 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 670.323402ms ago: executing program 1 (id=676): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x16, 0x0, 0xc, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xb0493, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x1}, 0x877, 0x0, 0xffffffff, 0x2, 0x10000000002, 0x80000011, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fee6df2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 623.962773ms ago: executing program 5 (id=677): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x10) memfd_create(0x0, 0x71042f6f0286d486) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0\x00') 621.988533ms ago: executing program 0 (id=678): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x10) memfd_create(0x0, 0x71042f6f0286d486) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0\x00') 409.315379ms ago: executing program 3 (id=679): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x16, 0x0, 0xc, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@ifindex, 0xffffffffffffffff, 0xd, 0x8, 0xffffffffffffffff, @void, @value=r2, @void, @void, r1}, 0x20) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fee6df2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 284.922422ms ago: executing program 2 (id=680): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x5}, 0x10c002, 0xac5d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x8) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x64, r4, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffd}}}]}, 0x64}, 0x1, 0x2, 0x0, 0x1bb5818a4d175af}, 0x40) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) pwritev(r5, &(0x7f0000000300)=[{0x0}], 0x1, 0x7, 0x10001) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0xc0001102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00'}) 236.440134ms ago: executing program 2 (id=681): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000001c0)={0x2, 0x6, 0x6, 0xed, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0xf) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000140)}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x40400b0}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 157.449856ms ago: executing program 0 (id=682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x4, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0), 0x0, 0x4001c00) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 93.909468ms ago: executing program 5 (id=683): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000012000103000000000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0000001000000006ffdfffca4ac0c2407aaff000000000"], 0x4c}}, 0x0) rt_sigqueueinfo(0x0, 0x2b, &(0x7f0000000040)={0x29, 0x6, 0xfff00000}) 0s ago: executing program 0 (id=684): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0xfe, 0x51b, &(0x7f0000001000)="$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") r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[], 0x13) kernel console output (not intermixed with test programs): z.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.508568][ T4580] FAULT_INJECTION: forcing a failure. [ 97.508568][ T4580] name failslab, interval 1, probability 0, space 0, times 0 [ 97.522111][ T28] audit: type=1400 audit(1777422735.526:396): avc: denied { read } for pid=4574 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.542431][ T4580] CPU: 0 UID: 0 PID: 4580 Comm: syz.2.280 Not tainted syzkaller #0 PREEMPT(full) [ 97.542492][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.542506][ T4580] Call Trace: [ 97.542513][ T4580] [ 97.542523][ T4580] __dump_stack+0x1d/0x30 [ 97.542610][ T4580] dump_stack_lvl+0x95/0xd0 [ 97.542630][ T4580] dump_stack+0x15/0x1b [ 97.542684][ T4580] should_fail_ex+0x263/0x280 [ 97.542712][ T4580] should_failslab+0x8c/0xb0 [ 97.542771][ T4580] kmem_cache_alloc_noprof+0x66/0x3f0 [ 97.542839][ T4580] ? do_getname+0x2e/0x1c0 [ 97.542855][ T4580] ? __fget_files+0x184/0x1c0 [ 97.542880][ T4580] do_getname+0x2e/0x1c0 [ 97.542903][ T4580] user_path_at+0x28/0x100 [ 97.542968][ T4580] __x64_sys_umount+0x85/0xe0 [ 97.542996][ T4580] x64_sys_call+0x103b/0x3020 [ 97.543019][ T4580] do_syscall_64+0x12c/0x3b0 [ 97.543083][ T4580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.543103][ T4580] RIP: 0033:0x7fa36a1ecdd9 [ 97.543117][ T4580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.543134][ T4580] RSP: 002b:00007fa368c47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 97.543154][ T4580] RAX: ffffffffffffffda RBX: 00007fa36a465fa0 RCX: 00007fa36a1ecdd9 [ 97.543218][ T4580] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000180 [ 97.543230][ T4580] RBP: 00007fa368c47090 R08: 0000000000000000 R09: 0000000000000000 [ 97.543243][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.543257][ T4580] R13: 00007fa36a466038 R14: 00007fa36a465fa0 R15: 00007ffd1a8bafa8 [ 97.543287][ T4580] [ 97.710407][ T28] audit: type=1326 audit(1777422735.576:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 97.733779][ T28] audit: type=1326 audit(1777422735.576:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 97.757040][ T28] audit: type=1326 audit(1777422735.576:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 97.785275][ T28] audit: type=1326 audit(1777422735.576:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 97.849844][ T28] audit: type=1400 audit(1777422735.576:401): avc: denied { mounton } for pid=4579 comm="syz.2.280" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 97.927384][ T28] audit: type=1326 audit(1777422735.576:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 98.038233][ T4588] FAULT_INJECTION: forcing a failure. [ 98.038233][ T4588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.052982][ T28] audit: type=1326 audit(1777422735.576:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 98.107417][ T4588] CPU: 0 UID: 0 PID: 4588 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT(full) [ 98.107469][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.107554][ T4588] Call Trace: [ 98.107561][ T4588] [ 98.107569][ T4588] __dump_stack+0x1d/0x30 [ 98.107596][ T4588] dump_stack_lvl+0x95/0xd0 [ 98.107688][ T4588] dump_stack+0x15/0x1b [ 98.107709][ T4588] should_fail_ex+0x263/0x280 [ 98.107751][ T4588] should_fail+0xb/0x20 [ 98.107842][ T4588] should_fail_usercopy+0x1a/0x20 [ 98.107869][ T4588] _copy_to_user+0x20/0xa0 [ 98.107902][ T4588] simple_read_from_buffer+0xb5/0x130 [ 98.107985][ T4588] proc_fail_nth_read+0x10e/0x150 [ 98.108012][ T4588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.108044][ T4588] vfs_read+0x1ab/0x7f0 [ 98.108152][ T4588] ? __rcu_read_unlock+0x4e/0x70 [ 98.108176][ T4588] ? __fget_files+0x184/0x1c0 [ 98.108197][ T4588] ? mutex_lock+0x57/0x90 [ 98.108229][ T4588] ksys_read+0xdc/0x1a0 [ 98.108281][ T4588] __x64_sys_read+0x40/0x50 [ 98.108313][ T4588] x64_sys_call+0x2886/0x3020 [ 98.108399][ T4588] do_syscall_64+0x12c/0x3b0 [ 98.108427][ T4588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.108464][ T4588] RIP: 0033:0x7fb519abd60e [ 98.108482][ T4588] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.108540][ T4588] RSP: 002b:00007fb518556fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.108568][ T4588] RAX: ffffffffffffffda RBX: 00007fb5185576c0 RCX: 00007fb519abd60e [ 98.108585][ T4588] RDX: 000000000000000f RSI: 00007fb5185570a0 RDI: 0000000000000004 [ 98.108601][ T4588] RBP: 00007fb518557090 R08: 0000000000000000 R09: 0000000000000000 [ 98.108647][ T4588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.108662][ T4588] R13: 00007fb519d76038 R14: 00007fb519d75fa0 R15: 00007ffed6610268 [ 98.108703][ T4588] [ 98.497646][ T4598] set_capacity_and_notify: 1 callbacks suppressed [ 98.497665][ T4598] loop2: detected capacity change from 0 to 512 [ 98.529873][ T4598] EXT4-fs: inline encryption not supported [ 98.574864][ T4598] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.620615][ T4605] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 98.746024][ T4610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 100.508977][ T4617] loop3: detected capacity change from 0 to 512 [ 100.542461][ T4617] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 100.584942][ T4617] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 100.603234][ T4617] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.292: bad orphan inode 4 [ 100.624898][ T4617] loop3: lost filesystem error report for type 5 error -117 [ 100.625055][ T4617] EXT4-fs (loop3): 1 orphan inode deleted [ 100.632403][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 100.632425][ C0] EXT4-fs (loop3): initial error at time 1777422738: ext4_orphan_get:1423 [ 100.632465][ C0] EXT4-fs (loop3): last error at time 1777422738: ext4_orphan_get:1423 [ 101.074517][ T4625] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.292: lblock 0 mapped to illegal pblock 4 (length 1) [ 101.235852][ T4626] loop2: detected capacity change from 0 to 256 [ 101.333596][ T4626] tmpfs: Unknown parameter 'grpquota' [ 101.622130][ T3294] EXT4-fs unmount: 5 callbacks suppressed [ 101.622149][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.650049][ T4640] loop1: detected capacity change from 0 to 512 [ 101.668787][ T4640] EXT4-fs: quotafile must be on filesystem root [ 101.806152][ T4646] xt_ipcomp: unknown flags 1D [ 102.079954][ T4649] netlink: 'syz.1.303': attribute type 21 has an invalid length. [ 102.160677][ T4649] netlink: 156 bytes leftover after parsing attributes in process `syz.1.303'. [ 102.486390][ T4652] netlink: 88 bytes leftover after parsing attributes in process `syz.1.303'. [ 102.686486][ T4657] loop1: detected capacity change from 0 to 512 [ 102.711582][ T4657] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.306: inode has both inline data and extents flags [ 102.726207][ T4659] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 102.805486][ T4657] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.805618][ T4657] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.306: couldn't read orphan inode 15 (err -117) [ 102.814982][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 102.814997][ C1] EXT4-fs (loop1): initial error at time 1777422740: ext4_orphan_get:1397: inode 15 [ 102.815021][ C1] EXT4-fs (loop1): last error at time 1777422740: ext4_orphan_get:1397: inode 15 [ 102.914792][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 102.914808][ T28] audit: type=1400 audit(1777422740.926:419): avc: denied { read } for pid=4643 comm="syz.3.300" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 102.966659][ T4657] loop1: lost filesystem error report for type 5 error -117 [ 102.974510][ T4657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.211947][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.403647][ T4664] loop2: detected capacity change from 0 to 2048 [ 103.442834][ T4664] loop2: p1 p3 p4 [ 103.451542][ T4664] loop2: p1 size 67110656 extends beyond EOD, truncated [ 103.471923][ T4664] loop2: p3 size 134217728 extends beyond EOD, truncated [ 103.480817][ T4664] loop2: p4 size 4278190080 extends beyond EOD, truncated [ 103.595342][ T4497] udevd[4497]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.606625][ T3282] udevd[3282]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.611652][ T4500] udevd[4500]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 103.802364][ T28] audit: type=1400 audit(1777422741.876:420): avc: denied { create } for pid=4679 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.854495][ T28] audit: type=1400 audit(1777422741.876:421): avc: denied { connect } for pid=4679 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.932221][ T4682] loop2: detected capacity change from 0 to 512 [ 103.956489][ T4682] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 103.984467][ T4682] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.315: bg 0: block 104: invalid block bitmap [ 103.996912][ T4682] loop2: lost filesystem error report for type 5 error -117 [ 103.999008][ T4682] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 104.006337][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 104.006361][ C0] EXT4-fs (loop2): initial error at time 1777422742: ext4_validate_block_bitmap:432 [ 104.006391][ C0] EXT4-fs (loop2): last error at time 1777422742: ext4_validate_block_bitmap:432 [ 104.040418][ T4682] loop2: lost filesystem error report for type 5 error -117 [ 104.042028][ T4682] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.315: invalid indirect mapped block 1 (level 1) [ 104.062387][ T4682] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.064138][ T4682] EXT4-fs (loop2): 1 truncate cleaned up [ 104.083085][ T4682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.129910][ T4676] loop4: detected capacity change from 0 to 2048 [ 104.144424][ T28] audit: type=1400 audit(1777422742.206:422): avc: denied { read } for pid=4681 comm="syz.2.315" path="/53/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.186080][ T28] audit: type=1400 audit(1777422742.216:423): avc: denied { ioctl } for pid=4681 comm="syz.2.315" path="/53/file1/file1" dev="loop2" ino=18 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.212110][ T4676] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 104.231439][ T4676] System zones: 0-7 [ 104.237852][ T4676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.289559][ T4691] loop0: detected capacity change from 0 to 512 [ 104.308719][ T4676] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.312: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 104.331163][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 104.341869][ T4691] EXT4-fs: inline encryption not supported [ 104.366426][ T4691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.391198][ T4676] EXT4-fs (loop4): Remounting filesystem read-only [ 104.397969][ T4691] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.444678][ T4697] loop1: detected capacity change from 0 to 512 [ 104.458642][ T4689] loop3: detected capacity change from 0 to 8192 [ 104.468741][ T4697] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 104.496421][ T4697] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 104.497441][ T4697] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.319: bad orphan inode 4 [ 104.497471][ T4697] loop1: lost filesystem error report for type 5 error -117 [ 104.498964][ T4697] EXT4-fs (loop1): 1 orphan inode deleted [ 104.499486][ T4697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.500290][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.579754][ T4708] netlink: 'syz.4.320': attribute type 3 has an invalid length. [ 105.587480][ T4708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.320'. [ 105.635266][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.661169][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.690077][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.950836][ T4710] loop1: detected capacity change from 0 to 512 [ 106.137770][ T4715] loop0: detected capacity change from 0 to 1024 [ 106.146037][ T4724] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 106.178059][ T4726] FAULT_INJECTION: forcing a failure. [ 106.178059][ T4726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.191657][ T4715] EXT4-fs: test_dummy_encryption option not supported [ 106.207875][ T4726] CPU: 0 UID: 0 PID: 4726 Comm: syz.3.328 Not tainted syzkaller #0 PREEMPT(full) [ 106.207899][ T4726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.207911][ T4726] Call Trace: [ 106.207916][ T4726] [ 106.207923][ T4726] __dump_stack+0x1d/0x30 [ 106.207951][ T4726] dump_stack_lvl+0x95/0xd0 [ 106.208055][ T4726] dump_stack+0x15/0x1b [ 106.208075][ T4726] should_fail_ex+0x263/0x280 [ 106.208101][ T4726] should_fail+0xb/0x20 [ 106.208177][ T4726] should_fail_usercopy+0x1a/0x20 [ 106.208205][ T4726] _copy_from_user+0x1c/0xb0 [ 106.208244][ T4726] vmemdup_user+0x5e/0xd0 [ 106.208302][ T4726] path_setxattrat+0x1b1/0x310 [ 106.208392][ T4726] __x64_sys_fsetxattr+0x6b/0x80 [ 106.208420][ T4726] x64_sys_call+0x2f0e/0x3020 [ 106.208446][ T4726] do_syscall_64+0x12c/0x3b0 [ 106.208469][ T4726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.208547][ T4726] RIP: 0033:0x7fedda5dcdd9 [ 106.208567][ T4726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.208588][ T4726] RSP: 002b:00007fedd9037028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 106.208607][ T4726] RAX: ffffffffffffffda RBX: 00007fedda855fa0 RCX: 00007fedda5dcdd9 [ 106.208620][ T4726] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffffff [ 106.208632][ T4726] RBP: 00007fedd9037090 R08: 0000000000000001 R09: 0000000000000000 [ 106.208675][ T4726] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000001 [ 106.208690][ T4726] R13: 00007fedda856038 R14: 00007fedda855fa0 R15: 00007fffab4fd958 [ 106.208715][ T4726] [ 106.516901][ T4732] netlink: 'syz.4.329': attribute type 21 has an invalid length. [ 106.571306][ T4734] loop0: detected capacity change from 0 to 512 [ 106.627727][ T4733] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 106.640903][ T4732] netlink: 156 bytes leftover after parsing attributes in process `syz.4.329'. [ 106.696509][ T4710] bio_check_eod: 77 callbacks suppressed [ 106.696524][ T4710] syz.1.321: attempt to access beyond end of device [ 106.696524][ T4710] loop1: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 106.731909][ T4734] EXT4-fs (loop0): 1 orphan inode deleted [ 106.743525][ T4734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.759741][ T4734] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.845763][ T4710] syz.1.321: attempt to access beyond end of device [ 106.845763][ T4710] loop1: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 106.927758][ T4746] loop4: detected capacity change from 0 to 512 [ 106.937118][ T4710] syz.1.321: attempt to access beyond end of device [ 106.937118][ T4710] loop1: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 106.969396][ T4746] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.014860][ T4710] syz.1.321: attempt to access beyond end of device [ 107.014860][ T4710] loop1: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 107.040606][ T4746] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 107.069660][ T4739] loop3: detected capacity change from 0 to 2048 [ 107.080520][ T4710] syz.1.321: attempt to access beyond end of device [ 107.080520][ T4710] loop1: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 107.094507][ T4746] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.331: bad orphan inode 4 [ 107.136170][ T4746] loop4: lost filesystem error report for type 5 error -117 [ 107.136300][ T4746] EXT4-fs (loop4): 1 orphan inode deleted [ 107.143681][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 107.143701][ C1] EXT4-fs (loop4): initial error at time 1777422745: ext4_orphan_get:1423 [ 107.143723][ C1] EXT4-fs (loop4): last error at time 1777422745: ext4_orphan_get:1423 [ 107.182169][ T4710] syz.1.321: attempt to access beyond end of device [ 107.182169][ T4710] loop1: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 107.206244][ T4710] syz.1.321: attempt to access beyond end of device [ 107.206244][ T4710] loop1: rw=2049, sector=912, nr_sectors = 32 limit=512 [ 107.221358][ T4739] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 107.237303][ T4739] System zones: 0-7 [ 107.250385][ T4710] syz.1.321: attempt to access beyond end of device [ 107.250385][ T4710] loop1: rw=2049, sector=976, nr_sectors = 32 limit=512 [ 107.269301][ T4739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.287781][ T4746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.313369][ T4710] syz.1.321: attempt to access beyond end of device [ 107.313369][ T4710] loop1: rw=2049, sector=1040, nr_sectors = 32 limit=512 [ 107.339263][ T4739] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.330: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 107.356386][ T30] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.479038][ T30] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 107.490748][ T4710] syz.1.321: attempt to access beyond end of device [ 107.490748][ T4710] loop1: rw=2049, sector=1104, nr_sectors = 32 limit=512 [ 107.508099][ T4739] EXT4-fs (loop3): Remounting filesystem read-only [ 108.005249][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.359900][ T4759] macsec1: entered promiscuous mode [ 108.367064][ T4759] macsec1: entered allmulticast mode [ 108.536248][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.546953][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.616789][ T4769] EXT4-fs: inline encryption not supported [ 108.677423][ T4769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.729607][ T4769] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.915056][ T28] audit: type=1400 audit(1777422746.986:424): avc: denied { write } for pid=4779 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.983143][ T4781] pim6reg2: entered allmulticast mode [ 109.100852][ T4790] set_capacity_and_notify: 1 callbacks suppressed [ 109.100868][ T4790] loop4: detected capacity change from 0 to 512 [ 109.273044][ T4790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.316538][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.327873][ T4790] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.413655][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.008330][ T4799] loop0: detected capacity change from 0 to 512 [ 111.178421][ T28] audit: type=1400 audit(1777422749.096:425): avc: denied { mounton } for pid=4787 comm="syz.0.342" path="/61/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.450890][ T4799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.482396][ T4799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.934381][ T4806] netlink: 'syz.3.346': attribute type 4 has an invalid length. [ 112.063625][ T4809] loop3: detected capacity change from 0 to 512 [ 112.073014][ T4796] loop4: detected capacity change from 0 to 2048 [ 112.081010][ T4809] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.094069][ T4809] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.131534][ T4796] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 112.144787][ T4813] loop0: detected capacity change from 0 to 512 [ 112.153150][ T4813] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 112.165361][ T4813] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 112.171454][ T4796] System zones: [ 112.173789][ T4813] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.348: bad orphan inode 4 [ 112.182460][ T4796] 0-7 [ 112.187298][ T4813] loop0: lost filesystem error report for type 5 error -117 [ 112.190231][ T4813] EXT4-fs (loop0): 1 orphan inode deleted [ 112.197168][ T4809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.197579][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 112.220715][ T4796] [ 112.222159][ C0] EXT4-fs (loop0): initial error at time 1777422750: ext4_orphan_get:1423 [ 112.222186][ C0] EXT4-fs (loop0): last error at time 1777422750: ext4_orphan_get:1423 [ 112.223326][ T4813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.248722][ T4809] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.264052][ T4796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.280045][ T4796] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.345: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 112.373239][ T4796] EXT4-fs (loop4): Remounting filesystem read-only [ 112.811460][ T28] audit: type=1400 audit(1777422750.806:426): avc: denied { create } for pid=4826 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.903957][ T28] audit: type=1400 audit(1777422750.806:427): avc: denied { setopt } for pid=4826 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.929030][ T28] audit: type=1400 audit(1777422750.816:428): avc: denied { write } for pid=4826 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.134581][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.176484][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.195240][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.302518][ T4838] loop1: detected capacity change from 0 to 512 [ 113.330157][ T4838] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 113.357723][ T4838] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 113.381831][ T4838] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.354: bad orphan inode 4 [ 113.411386][ T4838] loop1: lost filesystem error report for type 5 error -117 [ 113.421297][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 113.427485][ T4838] EXT4-fs (loop1): 1 orphan inode deleted [ 113.428664][ C0] EXT4-fs (loop1): initial error at time 1777422751: ext4_orphan_get:1423 [ 113.449398][ C0] EXT4-fs (loop1): last error at time 1777422751: ext4_orphan_get:1423 [ 113.456643][ T4838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.649408][ T4832] loop0: detected capacity change from 0 to 32768 [ 113.710222][ T4855] netlink: 'syz.3.360': attribute type 21 has an invalid length. [ 113.719164][ T4855] netlink: 156 bytes leftover after parsing attributes in process `syz.3.360'. [ 114.663746][ T4857] loop2: detected capacity change from 0 to 512 [ 114.703312][ T4856] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.354: lblock 0 mapped to illegal pblock 4 (length 1) [ 114.734099][ T4863] loop3: detected capacity change from 0 to 512 [ 114.754669][ T28] audit: type=1400 audit(1777422752.826:429): avc: denied { write } for pid=4860 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.804510][ T4863] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 114.835580][ T4857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.049013][ T4857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.063413][ T4857] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.138199][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.189318][ T28] audit: type=1400 audit(1777422753.246:430): avc: denied { ioctl } for pid=4845 comm="syz.2.358" path="/57/bus/file2" dev="loop2" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.213917][ T4863] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 115.244959][ T4863] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.362: bad orphan inode 4 [ 115.262175][ T4863] loop3: lost filesystem error report for type 5 error -117 [ 115.262800][ T4863] EXT4-fs (loop3): 1 orphan inode deleted [ 115.275895][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 115.275918][ C1] EXT4-fs (loop3): initial error at time 1777422753: ext4_orphan_get:1423 [ 115.275940][ C1] EXT4-fs (loop3): last error at time 1777422753: ext4_orphan_get:1423 [ 115.451989][ T4863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.569925][ T4832] loop0: p1 p3 < > [ 115.976023][ T4871] macsec1: left promiscuous mode [ 115.987188][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.034355][ T4871] macsec1: left allmulticast mode [ 116.315209][ T4497] udevd[4497]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 116.330777][ T3282] udevd[3282]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 116.436669][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.535375][ T4881] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 116.565196][ T4888] loop4: detected capacity change from 0 to 512 [ 116.604599][ T4888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.611135][ T4895] loop0: detected capacity change from 0 to 512 [ 116.624999][ T4888] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.639338][ T28] audit: type=1326 audit(1777422754.706:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ddfccdd9 code=0x7ffc0000 [ 116.663468][ T28] audit: type=1326 audit(1777422754.736:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ddfccdd9 code=0x7ffc0000 [ 116.673162][ T4895] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.371: inode has both inline data and extents flags [ 116.687798][ T28] audit: type=1326 audit(1777422754.736:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ddfccdd9 code=0x7ffc0000 [ 116.711622][ T4895] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.731312][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 116.746900][ C0] EXT4-fs (loop0): initial error at time 1777422754: ext4_orphan_get:1397: inode 15 [ 116.756324][ C0] EXT4-fs (loop0): last error at time 1777422754: ext4_orphan_get:1397: inode 15 [ 116.768822][ T28] audit: type=1326 audit(1777422754.736:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ddfccdd9 code=0x7ffc0000 [ 116.786372][ T4895] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.371: couldn't read orphan inode 15 (err -117) [ 116.806170][ T28] audit: type=1326 audit(1777422754.736:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe2ddfccdd9 code=0x7ffc0000 [ 116.835677][ T28] audit: type=1326 audit(1777422754.736:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ddfccdd9 code=0x7ffc0000 [ 116.859770][ T28] audit: type=1326 audit(1777422754.836:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ddfccdd9 code=0x7ffc0000 [ 116.884675][ T4895] loop0: lost filesystem error report for type 5 error -117 [ 116.885069][ T4900] process 'syz.2.373' launched './file0' with NULL argv: empty string added [ 116.905140][ T28] audit: type=1326 audit(1777422754.836:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe2ddfccb42 code=0x7ffc0000 [ 116.913137][ T4895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.948503][ T4907] loop1: detected capacity change from 0 to 512 [ 116.976289][ T4907] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.005229][ T4898] syzkaller0: entered promiscuous mode [ 117.016127][ T4907] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.374: Failed to acquire dquot type 1 [ 117.030451][ T4898] syzkaller0: entered allmulticast mode [ 117.031669][ T4907] loop1: lost filesystem error report for type 5 error -5 [ 117.037833][ T4907] EXT4-fs (loop1): 1 truncate cleaned up [ 117.045036][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 117.045065][ C0] EXT4-fs (loop1): last error at time 1777422755: ext4_acquire_dquot:7034 [ 117.070676][ T4907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 117.124296][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.132960][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 117.176245][ T4915] netlink: 'syz.0.375': attribute type 21 has an invalid length. [ 117.184571][ T4915] netlink: 128 bytes leftover after parsing attributes in process `syz.0.375'. [ 117.193917][ T4915] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 117.229109][ T4919] loop0: detected capacity change from 0 to 512 [ 117.236591][ T4919] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 117.253027][ T4919] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 117.261638][ T4919] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.377: bad orphan inode 4 [ 117.272165][ T4919] loop0: lost filesystem error report for type 5 error -117 [ 117.273136][ T4919] EXT4-fs (loop0): 1 orphan inode deleted [ 117.286228][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 117.286245][ C0] EXT4-fs (loop0): initial error at time 1777422755: ext4_orphan_get:1423 [ 117.286267][ C0] EXT4-fs (loop0): last error at time 1777422755: ext4_orphan_get:1423 [ 117.310148][ T4919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.379428][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.116885][ T4941] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.120008][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.335452][ T4953] loop1: detected capacity change from 0 to 128 [ 118.342474][ T4953] vfat: Unknown parameter '0x0000000000000003ÿ' [ 118.442749][ T4957] loop1: detected capacity change from 0 to 512 [ 118.449630][ T4957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.463067][ T4957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.475844][ T4957] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.507165][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.815752][ T4968] syz.1.393 uses obsolete (PF_INET,SOCK_PACKET) [ 119.813556][ T4900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.823804][ T4975] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.968999][ T4979] loop0: detected capacity change from 0 to 512 [ 119.977675][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 119.991961][ T4979] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 120.005900][ T4985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.131177][ T4991] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.155392][ T4979] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 120.219812][ T4979] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.397: bad orphan inode 4 [ 120.356398][ T4981] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.408869][ T4979] loop0: lost filesystem error report for type 5 error -117 [ 120.409156][ T4979] EXT4-fs (loop0): 1 orphan inode deleted [ 120.416499][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 120.416513][ C1] EXT4-fs (loop0): initial error at time 1777422758: ext4_orphan_get:1423 [ 120.416557][ C1] EXT4-fs (loop0): last error at time 1777422758: ext4_orphan_get:1423 [ 120.773751][ T5000] loop4: detected capacity change from 0 to 512 [ 120.795587][ T5000] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.820548][ T4979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.856096][ T5000] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 121.020455][ T5007] loop2: detected capacity change from 0 to 512 [ 121.043565][ T5000] lo: Caught tx_queue_len zero misconfig [ 121.514241][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.575557][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 121.575571][ T28] audit: type=1400 audit(1777422759.646:579): avc: denied { ioctl } for pid=5016 comm="syz.4.405" path="socket:[10954]" dev="sockfs" ino=10954 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.661632][ T28] audit: type=1400 audit(1777422759.676:580): avc: denied { connect } for pid=5016 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.737660][ T28] audit: type=1400 audit(1777422759.676:581): avc: denied { write } for pid=5016 comm="syz.4.405" path="socket:[10955]" dev="sockfs" ino=10955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.783629][ T5029] netlink: 'syz.2.411': attribute type 21 has an invalid length. [ 121.791851][ T5029] netlink: 156 bytes leftover after parsing attributes in process `syz.2.411'. [ 121.807981][ T5029] netlink: 88 bytes leftover after parsing attributes in process `syz.2.411'. [ 121.835034][ T5031] loop0: detected capacity change from 0 to 512 [ 121.874706][ T5031] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 121.887567][ T5035] loop2: detected capacity change from 0 to 512 [ 121.913937][ T5037] loop1: detected capacity change from 0 to 512 [ 121.921922][ T5031] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 121.930193][ T5035] EXT4-fs: Ignoring removed oldalloc option [ 121.931018][ T5039] loop3: detected capacity change from 0 to 512 [ 121.948250][ T5031] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.404: bad orphan inode 4 [ 121.958469][ T5039] EXT4-fs: inline encryption not supported [ 121.965369][ T5031] loop0: lost filesystem error report for type 5 error -117 [ 121.965778][ T5031] EXT4-fs (loop0): 1 orphan inode deleted [ 121.973112][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 121.973127][ C1] EXT4-fs (loop0): initial error at time 1777422760: ext4_orphan_get:1423 [ 121.973145][ C1] EXT4-fs (loop0): last error at time 1777422760: ext4_orphan_get:1423 [ 121.981354][ T5037] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 121.986702][ T5031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.008029][ T5035] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.023444][ T5042] loop4: detected capacity change from 0 to 512 [ 122.039425][ T5042] EXT4-fs: Ignoring removed nobh option [ 122.047298][ T5042] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.076628][ T5037] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 122.084845][ T5037] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.414: bad orphan inode 4 [ 122.095173][ T5035] EXT4-fs (loop2): 1 truncate cleaned up [ 122.110448][ T5037] loop1: lost filesystem error report for type 5 error -117 [ 122.110651][ T5037] EXT4-fs (loop1): 1 orphan inode deleted [ 122.118003][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 122.118020][ C0] EXT4-fs (loop1): initial error at time 1777422760: ext4_orphan_get:1423 [ 122.118037][ C0] EXT4-fs (loop1): last error at time 1777422760: ext4_orphan_get:1423 [ 122.149826][ T5035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.174192][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.183874][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.244694][ T5042] EXT4-fs (loop4): 1 truncate cleaned up [ 122.250708][ T5042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.264177][ T5039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.277250][ T5039] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.441664][ T5051] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 4: comm syz.0.404: lblock 0 mapped to illegal pblock 4 (length 1) [ 123.198132][ T3301] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 123.216748][ T28] audit: type=1400 audit(1777422761.266:582): avc: denied { rmdir } for pid=3301 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.384438][ T3301] EXT4-fs (loop4): Remounting filesystem read-only [ 123.391568][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.405305][ T28] audit: type=1400 audit(1777422761.476:583): avc: denied { unlink } for pid=3301 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.502824][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.547029][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.646792][ T5069] FAULT_INJECTION: forcing a failure. [ 123.646792][ T5069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.670536][ T5069] CPU: 1 UID: 0 PID: 5069 Comm: syz.2.424 Not tainted syzkaller #0 PREEMPT(full) [ 123.670707][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.670722][ T5069] Call Trace: [ 123.670729][ T5069] [ 123.670738][ T5069] __dump_stack+0x1d/0x30 [ 123.670773][ T5069] dump_stack_lvl+0x95/0xd0 [ 123.670792][ T5069] dump_stack+0x15/0x1b [ 123.670872][ T5069] should_fail_ex+0x263/0x280 [ 123.670908][ T5069] should_fail+0xb/0x20 [ 123.670934][ T5069] should_fail_usercopy+0x1a/0x20 [ 123.670966][ T5069] _copy_to_iter+0x251/0xea0 [ 123.671044][ T5069] ? seq_list_next+0x32/0x50 [ 123.671120][ T5069] ? _raw_spin_unlock+0x9/0x30 [ 123.671145][ T5069] ? md_seq_stop+0x15/0x20 [ 123.671168][ T5069] ? traverse+0x379/0x3a0 [ 123.671197][ T5069] seq_read_iter+0x1d5/0x940 [ 123.671224][ T5069] ? _parse_integer+0x27/0x40 [ 123.671244][ T5069] ? kstrtoull+0x111/0x140 [ 123.671273][ T5069] seq_read+0x279/0x2c0 [ 123.671343][ T5069] ? __pfx_seq_read+0x10/0x10 [ 123.671367][ T5069] proc_reg_read+0x128/0x1c0 [ 123.671399][ T5069] ? __pfx_proc_reg_read+0x10/0x10 [ 123.671460][ T5069] vfs_read+0x1ab/0x7f0 [ 123.671486][ T5069] ? __rcu_read_unlock+0x4e/0x70 [ 123.671508][ T5069] ? __fget_files+0x184/0x1c0 [ 123.671547][ T5069] ? mutex_unlock+0x4e/0x90 [ 123.671578][ T5069] __x64_sys_pread64+0xfd/0x150 [ 123.671682][ T5069] x64_sys_call+0x27b5/0x3020 [ 123.671706][ T5069] do_syscall_64+0x12c/0x3b0 [ 123.671730][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.671750][ T5069] RIP: 0033:0x7fa36a1ecdd9 [ 123.671769][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.671900][ T5069] RSP: 002b:00007fa368c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 123.671920][ T5069] RAX: ffffffffffffffda RBX: 00007fa36a465fa0 RCX: 00007fa36a1ecdd9 [ 123.671935][ T5069] RDX: 00000000000000ab RSI: 0000200000000000 RDI: 0000000000000003 [ 123.671950][ T5069] RBP: 00007fa368c47090 R08: 0000000000000000 R09: 0000000000000000 [ 123.672034][ T5069] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 123.672046][ T5069] R13: 00007fa36a466038 R14: 00007fa36a465fa0 R15: 00007ffd1a8bafa8 [ 123.672063][ T5069] [ 124.003875][ T5073] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.175138][ T5076] loop2: detected capacity change from 0 to 128 [ 124.455662][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.504673][ T5083] loop1: detected capacity change from 0 to 512 [ 124.530975][ T5083] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 124.575040][ T5083] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 124.621453][ T5083] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.429: bad orphan inode 4 [ 124.642128][ T5076] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.688307][ T5083] loop1: lost filesystem error report for type 5 error -117 [ 124.689963][ T5083] EXT4-fs (loop1): 1 orphan inode deleted [ 124.697453][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 124.697467][ C1] EXT4-fs (loop1): initial error at time 1777422762: ext4_orphan_get:1423 [ 124.697501][ C1] EXT4-fs (loop1): last error at time 1777422762: ext4_orphan_get:1423 [ 124.740367][ T3420] bridge_slave_1: left allmulticast mode [ 124.747231][ T5076] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.759496][ T3420] bridge_slave_1: left promiscuous mode [ 124.769393][ T3420] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.792498][ T3420] bridge_slave_0: left allmulticast mode [ 124.812075][ T3420] bridge_slave_0: left promiscuous mode [ 124.821866][ T3420] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.831024][ T5083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.841514][ T28] audit: type=1400 audit(1777422762.856:584): avc: denied { add_name } for pid=5075 comm="syz.2.428" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.865549][ T28] audit: type=1400 audit(1777422762.866:585): avc: denied { read open } for pid=5092 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.890977][ T28] audit: type=1400 audit(1777422762.866:586): avc: denied { getattr } for pid=5092 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.527913][ T4992] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 125.550092][ T28] audit: type=1400 audit(1777422762.866:587): avc: denied { getattr } for pid=5092 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.580146][ T28] audit: type=1400 audit(1777422762.956:588): avc: denied { read } for pid=5094 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.672220][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.694951][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.806539][ T5117] set_capacity_and_notify: 1 callbacks suppressed [ 125.806557][ T5117] loop1: detected capacity change from 0 to 512 [ 125.847408][ T5117] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.430: inode has both inline data and extents flags [ 125.852178][ T5122] netlink: 'syz.2.434': attribute type 7 has an invalid length. [ 125.860646][ T5117] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.868544][ T5117] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.430: couldn't read orphan inode 15 (err -117) [ 125.877739][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 125.877763][ C0] EXT4-fs (loop1): initial error at time 1777422763: ext4_orphan_get:1397: inode 15 [ 125.877802][ C0] EXT4-fs (loop1): last error at time 1777422763: ext4_orphan_get:1397: inode 15 [ 125.914642][ T5117] loop1: lost filesystem error report for type 5 error -117 [ 125.916444][ T5117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.974060][ T3420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.983499][ T3420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.003664][ T3420] bond0 (unregistering): Released all slaves [ 126.021837][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 126.038551][ T5126] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 126.081604][ T5132] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 126.102653][ T5132] bond1 (unregistering): Released all slaves [ 126.117640][ T3420] hsr_slave_0: left promiscuous mode [ 126.123430][ T3420] hsr_slave_1: left promiscuous mode [ 126.129064][ T3420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.137885][ T3420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.138426][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.155459][ T3420] pim6reg2 (unregistering): left allmulticast mode [ 126.246522][ T3420] team0 (unregistering): Port device team_slave_1 removed [ 126.267337][ T3420] team0 (unregistering): Port device team_slave_0 removed [ 126.300862][ T5142] loop2: detected capacity change from 0 to 512 [ 126.331956][ T5142] EXT4-fs (loop2): 1 truncate cleaned up [ 126.339949][ T5142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.369548][ T5142] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.439: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 126.492101][ T5138] loop1: detected capacity change from 0 to 2048 [ 126.554263][ T5138] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 126.567581][ T5142] dummy0: entered promiscuous mode [ 126.573978][ T5138] System zones: 0-7 [ 126.590875][ T5138] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.437: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 126.608033][ T5138] EXT4-fs (loop1): Remounting filesystem read-only [ 126.639086][ T5142] erspan0: entered promiscuous mode [ 126.728561][ T5142] hsr1: entered allmulticast mode [ 126.739421][ T5142] dummy0: entered allmulticast mode [ 126.746283][ T5142] erspan0: entered allmulticast mode [ 126.797303][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 126.804485][ T5181] loop1: detected capacity change from 0 to 512 [ 126.828118][ T5181] ext4: Unknown parameter 'smackfshat' [ 126.882364][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 126.882380][ T28] audit: type=1400 audit(1777422764.956:600): avc: denied { mount } for pid=5186 comm="syz.3.448" name="/" dev="configfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 126.886741][ T5185] loop0: detected capacity change from 0 to 512 [ 126.920193][ T5187] netlink: 296 bytes leftover after parsing attributes in process `syz.3.448'. [ 126.942171][ T28] audit: type=1400 audit(1777422765.016:601): avc: denied { bind } for pid=5186 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.968572][ T5185] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.447: inode has both inline data and extents flags [ 126.982863][ T5187] loop3: detected capacity change from 0 to 128 [ 126.989642][ T5185] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.990635][ T5185] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.447: couldn't read orphan inode 15 (err -117) [ 126.999853][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 126.999877][ C0] EXT4-fs (loop0): initial error at time 1777422765: ext4_orphan_get:1397: inode 15 [ 126.999928][ C0] EXT4-fs (loop0): last error at time 1777422765: ext4_orphan_get:1397: inode 15 [ 127.006308][ T5187] FAT-fs (loop3): bogus logical sector size 0 [ 127.018343][ T5185] loop0: lost filesystem error report for type 5 error -117 [ 127.043039][ T28] audit: type=1400 audit(1777422765.036:602): avc: denied { recv } for pid=4497 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.123 dest=45968 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 127.092623][ T5187] FAT-fs (loop3): Can't find a valid FAT filesystem [ 127.120060][ T5181] loop1: detected capacity change from 0 to 1024 [ 127.235579][ T5210] netlink: 'syz.3.451': attribute type 1 has an invalid length. [ 127.313181][ T5210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.353214][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.360345][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.368207][ T5077] bridge_slave_0: entered allmulticast mode [ 127.375137][ T5077] bridge_slave_0: entered promiscuous mode [ 127.410516][ T5223] bond1: (slave geneve2): making interface the new active one [ 127.433425][ T5223] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 127.449133][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 127.472468][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.485535][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.499987][ T5077] bridge_slave_1: entered allmulticast mode [ 127.510118][ T5077] bridge_slave_1: entered promiscuous mode [ 127.516562][ T4047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.526463][ T4047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.535777][ T5229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.457'. [ 127.613551][ T5220] loop0: detected capacity change from 0 to 2048 [ 127.624548][ T4047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.653197][ T5232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.457'. [ 127.674708][ T5220] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 127.685133][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.701902][ T5220] System zones: 0-7 [ 127.707412][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.733742][ T5220] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.453: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 127.759127][ T5244] netlink: 9 bytes leftover after parsing attributes in process `syz.3.460'. [ 127.773800][ T5220] EXT4-fs (loop0): Remounting filesystem read-only [ 127.774651][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.826866][ T5244] gretap0: entered promiscuous mode [ 127.846703][ T5244] netlink: 5 bytes leftover after parsing attributes in process `syz.3.460'. [ 127.866617][ T5077] team0: Port device team_slave_0 added [ 127.888577][ T5244] 0ªî{X¹¦: renamed from gretap0 [ 127.954328][ T5247] loop3: detected capacity change from 0 to 1024 [ 127.991523][ T5258] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 128.001927][ T5244] 0ªî{X¹¦: left promiscuous mode [ 128.020071][ T5247] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 128.033887][ T5244] 0ªî{X¹¦: entered allmulticast mode [ 128.038669][ T5247] System zones: 0-1, 3-36 [ 128.058702][ T5247] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.460: bad orphan inode 134217728 [ 128.064458][ T5244] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 128.086392][ T5247] loop3: lost filesystem error report for type 5 error -117 [ 128.088105][ T5077] team0: Port device team_slave_1 added [ 128.180093][ T28] audit: type=1400 audit(1777422766.246:603): avc: denied { accept } for pid=5272 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.193229][ T5258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.258812][ T5274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5274 comm=syz.1.465 [ 128.273929][ T28] audit: type=1400 audit(1777422766.346:604): avc: denied { setopt } for pid=5272 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.307781][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 128.339922][ T5275] loop1: detected capacity change from 0 to 256 [ 128.364368][ T5278] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 128.384230][ T5275] FAT-fs (loop1): bogus number of FAT structure [ 128.394436][ T5278] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 128.425098][ T5281] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 128.425526][ T5278] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.466: bad orphan inode 4 [ 128.430757][ T5283] netlink: 'syz.2.468': attribute type 21 has an invalid length. [ 128.444582][ T5275] FAT-fs (loop1): Can't find a valid FAT filesystem [ 128.461407][ T5278] loop3: lost filesystem error report for type 5 error -117 [ 128.462390][ T5281] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 128.469322][ T5278] EXT4-fs (loop3): 1 orphan inode deleted [ 128.471979][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 128.490972][ C1] EXT4-fs (loop3): initial error at time 1777422766: ext4_orphan_get:1423 [ 128.501063][ C1] EXT4-fs (loop3): last error at time 1777422766: ext4_orphan_get:1423 [ 128.502554][ T5281] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.467: bad orphan inode 4 [ 128.521452][ T5281] loop0: lost filesystem error report for type 5 error -117 [ 128.531347][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 128.545194][ C1] EXT4-fs (loop0): initial error at time 1777422766: ext4_orphan_get:1423 [ 128.553773][ C1] EXT4-fs (loop0): last error at time 1777422766: ext4_orphan_get:1423 [ 128.612510][ T5281] EXT4-fs (loop0): 1 orphan inode deleted [ 128.619971][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.627237][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.703751][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.716759][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.723799][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.641552][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.652919][ T5283] netlink: 156 bytes leftover after parsing attributes in process `syz.2.468'. [ 129.748958][ T5295] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 129.804712][ T5077] hsr_slave_0: entered promiscuous mode [ 129.822551][ T5077] hsr_slave_1: entered promiscuous mode [ 129.828373][ T5077] debugfs: 'hsr0' already exists in 'hsr' [ 129.835000][ T5077] Cannot create hsr debugfs directory [ 129.836529][ T5295] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 129.888974][ T5295] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.471: bad orphan inode 4 [ 129.899102][ T5295] loop2: lost filesystem error report for type 5 error -117 [ 129.899278][ T5295] EXT4-fs (loop2): 1 orphan inode deleted [ 129.906620][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 129.906634][ C0] EXT4-fs (loop2): initial error at time 1777422767: ext4_orphan_get:1423 [ 129.906658][ C0] EXT4-fs (loop2): last error at time 1777422767: ext4_orphan_get:1423 [ 129.937254][ T5302] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 129.974544][ T5302] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 129.983943][ T5302] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.472: bad orphan inode 4 [ 129.994121][ T5302] loop0: lost filesystem error report for type 5 error -117 [ 129.994249][ T5302] EXT4-fs (loop0): 1 orphan inode deleted [ 130.001593][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 130.001615][ C1] EXT4-fs (loop0): initial error at time 1777422768: ext4_orphan_get:1423 [ 130.001640][ C1] EXT4-fs (loop0): last error at time 1777422768: ext4_orphan_get:1423 [ 130.290946][ T5310] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 4: comm syz.2.471: lblock 0 mapped to illegal pblock 4 (length 1) [ 131.134001][ T5311] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 4: comm syz.0.472: lblock 0 mapped to illegal pblock 4 (length 1) [ 131.333856][ T5077] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.365216][ T5077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.380932][ T5077] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.411731][ T5077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.435927][ T5325] FAULT_INJECTION: forcing a failure. [ 131.435927][ T5325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.442367][ T5077] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.449283][ T5325] CPU: 1 UID: 0 PID: 5325 Comm: syz.3.477 Not tainted syzkaller #0 PREEMPT(full) [ 131.449387][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.449466][ T5325] Call Trace: [ 131.449490][ T5325] [ 131.449577][ T5325] __dump_stack+0x1d/0x30 [ 131.449655][ T5325] dump_stack_lvl+0x95/0xd0 [ 131.449715][ T5325] dump_stack+0x15/0x1b [ 131.449775][ T5325] should_fail_ex+0x263/0x280 [ 131.449906][ T5325] should_fail_alloc_page+0xf2/0x100 [ 131.450032][ T5325] __alloc_frozen_pages_noprof+0x108/0x350 [ 131.450177][ T5325] alloc_pages_mpol+0xb3/0x260 [ 131.450251][ T5325] ? __rcu_read_unlock+0x4e/0x70 [ 131.450326][ T5325] folio_alloc_noprof+0x96/0x150 [ 131.450465][ T5325] filemap_alloc_folio_noprof+0x92/0x220 [ 131.450572][ T5325] filemap_get_pages+0x523/0x1250 [ 131.450722][ T5325] ? folios_put_refs+0x29b/0x2d0 [ 131.450827][ T5325] filemap_splice_read+0x3c6/0x780 [ 131.451034][ T5325] ? __pfx_filemap_splice_read+0x10/0x10 [ 131.451149][ T5325] splice_direct_to_actor+0x26e/0x670 [ 131.451285][ T5325] ? __pfx_direct_splice_actor+0x10/0x10 [ 131.451454][ T5325] do_splice_direct+0x119/0x1a0 [ 131.451537][ T5325] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 131.451615][ T5325] do_sendfile+0x382/0x650 [ 131.451684][ T5325] __x64_sys_sendfile64+0x105/0x150 [ 131.451830][ T5325] x64_sys_call+0x2dc4/0x3020 [ 131.451931][ T5325] do_syscall_64+0x12c/0x3b0 [ 131.452028][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.452118][ T5325] RIP: 0033:0x7fedda5dcdd9 [ 131.452186][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.452275][ T5325] RSP: 002b:00007fedd9037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 131.452358][ T5325] RAX: ffffffffffffffda RBX: 00007fedda855fa0 RCX: 00007fedda5dcdd9 [ 131.452405][ T5325] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 131.452448][ T5325] RBP: 00007fedd9037090 R08: 0000000000000000 R09: 0000000000000000 [ 131.452491][ T5325] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001 [ 131.452512][ T5325] R13: 00007fedda856038 R14: 00007fedda855fa0 R15: 00007fffab4fd958 [ 131.452562][ T5325] [ 131.686517][ T5327] set_capacity_and_notify: 4 callbacks suppressed [ 131.686536][ T5327] loop0: detected capacity change from 0 to 512 [ 131.725484][ T5327] EXT4-fs: inline encryption not supported [ 132.068938][ T5327] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.478: corrupted in-inode xattr: e_value size too large [ 132.158270][ T5327] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.161286][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 132.177065][ C1] EXT4-fs (loop0): initial error at time 1777422770: ext4_iget_extra_inode:5128: inode 15 [ 132.187046][ C1] EXT4-fs (loop0): last error at time 1777422770: ext4_iget_extra_inode:5128: inode 15 [ 132.196811][ T5327] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.478: couldn't read orphan inode 15 (err -117) [ 132.213209][ T5327] loop0: lost filesystem error report for type 5 error -117 [ 132.217021][ T5327] EXT4-fs mount: 19 callbacks suppressed [ 132.217036][ T5327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.247185][ T5334] netlink: 'syz.3.480': attribute type 21 has an invalid length. [ 132.263689][ T5077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.272823][ T5334] netlink: 156 bytes leftover after parsing attributes in process `syz.3.480'. [ 132.285255][ T5327] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 132.300203][ T5335] netlink: 88 bytes leftover after parsing attributes in process `syz.3.480'. [ 132.309369][ T5077] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.326090][ T5077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.337607][ T5329] loop2: detected capacity change from 0 to 8192 [ 132.435895][ T5344] loop3: detected capacity change from 0 to 512 [ 132.446092][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.455114][ T5344] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 132.471726][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.487366][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.494486][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.503324][ T5344] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 132.519451][ T5344] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.481: bad orphan inode 4 [ 132.534943][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.539599][ T5344] loop3: lost filesystem error report for type 5 error -117 [ 132.542069][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.550078][ T5344] EXT4-fs (loop3): 1 orphan inode deleted [ 132.556669][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 132.556696][ C1] EXT4-fs (loop3): initial error at time 1777422770: ext4_orphan_get:1423 [ 132.556720][ C1] EXT4-fs (loop3): last error at time 1777422770: ext4_orphan_get:1423 [ 132.615782][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.626519][ T28] audit: type=1400 audit(1777422770.696:605): avc: denied { egress } for pid=23 comm="kworker/1:0" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 132.657524][ T5344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.760328][ T5318] ipip0: entered promiscuous mode [ 132.784702][ T28] audit: type=1400 audit(1777422770.696:606): avc: denied { sendto } for pid=23 comm="kworker/1:0" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 132.826156][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.398460][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.436879][ T5369] 9p: Bad value for 'rfdno' [ 133.454735][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.520991][ T5369] loop2: detected capacity change from 0 to 1024 [ 133.542245][ T5369] EXT4-fs: Ignoring removed bh option [ 133.568658][ T5369] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59032!=35945) [ 133.599265][ T5369] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.638359][ T5369] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.485: iget: special inode unallocated [ 133.650645][ T5382] netlink: 'syz.3.488': attribute type 21 has an invalid length. [ 133.654730][ T5366] loop0: detected capacity change from 0 to 512 [ 133.665813][ T5382] netlink: 156 bytes leftover after parsing attributes in process `syz.3.488'. [ 133.667556][ T5369] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 133.688758][ T5369] EXT4-fs (loop2): Remounting filesystem read-only [ 133.698163][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 133.698247][ C0] EXT4-fs (loop2): initial error at time 1777422771: __ext4_fill_super:5596: inode 2 [ 133.698363][ C0] EXT4-fs (loop2): last error at time 1777422771: __ext4_fill_super:5596: inode 2 [ 133.782950][ T5366] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.806949][ T5369] EXT4-fs (loop2): get root inode failed [ 133.819399][ T5077] veth0_vlan: entered promiscuous mode [ 133.821201][ T5369] EXT4-fs (loop2): mount failed [ 133.834261][ T5077] veth1_vlan: entered promiscuous mode [ 133.881039][ T5077] veth0_macvtap: entered promiscuous mode [ 133.892337][ T5366] EXT4-fs (loop0): orphan file too big: 4294967295 [ 133.904934][ T5366] EXT4-fs (loop0): mount failed [ 133.912086][ T5077] veth1_macvtap: entered promiscuous mode [ 133.930677][ T28] audit: type=1400 audit(1777422771.996:607): avc: denied { create } for pid=5396 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 133.965248][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.000880][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.010357][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.027028][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.038677][ T4266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.047550][ T4266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.118341][ T5402] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 134.168752][ T3420] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.183922][ T3420] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.287436][ T5409] netlink: 'syz.0.494': attribute type 21 has an invalid length. [ 134.342568][ T5409] netlink: 156 bytes leftover after parsing attributes in process `syz.0.494'. [ 134.510344][ T5413] loop2: detected capacity change from 0 to 512 [ 134.555346][ T5391] loop3: detected capacity change from 0 to 2048 [ 134.571082][ T5413] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 134.673138][ T5413] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 134.714697][ T5413] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.495: bad orphan inode 4 [ 134.726207][ T5391] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 134.727274][ T5415] loop0: detected capacity change from 0 to 512 [ 134.744305][ T5413] loop2: lost filesystem error report for type 5 error -117 [ 134.744552][ T5413] EXT4-fs (loop2): 1 orphan inode deleted [ 134.751900][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 134.751919][ C0] EXT4-fs (loop2): initial error at time 1777422772: ext4_orphan_get:1423 [ 134.751966][ C0] EXT4-fs (loop2): last error at time 1777422772: ext4_orphan_get:1423 [ 134.768169][ T5391] System zones: [ 134.781316][ T5415] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 134.796810][ T5413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.834409][ T5415] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 134.846272][ T5391] 0-7 [ 134.849396][ T5415] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.496: bad orphan inode 4 [ 134.872543][ T5391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.990373][ T5415] loop0: lost filesystem error report for type 5 error -117 [ 134.990618][ T5415] EXT4-fs (loop0): 1 orphan inode deleted [ 134.997994][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 134.998017][ C0] EXT4-fs (loop0): initial error at time 1777422773: ext4_orphan_get:1423 [ 134.998049][ C0] EXT4-fs (loop0): last error at time 1777422773: ext4_orphan_get:1423 [ 135.100276][ T5415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.196185][ T5404] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.490: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 135.245722][ T5404] EXT4-fs (loop3): Remounting filesystem read-only [ 135.763438][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.988859][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.123078][ T5440] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 4: comm syz.0.496: lblock 0 mapped to illegal pblock 4 (length 1) [ 136.449170][ T28] audit: type=1400 audit(1777422774.516:608): avc: denied { append } for pid=5444 comm="syz.5.499" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.531949][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.587737][ T28] audit: type=1400 audit(1777422774.556:609): avc: denied { ioctl } for pid=5444 comm="syz.5.499" path="socket:[13501]" dev="sockfs" ino=13501 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.739115][ T5458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=5458 comm=syz.3.503 [ 136.753955][ T5459] loop5: detected capacity change from 0 to 512 [ 136.769778][ T5461] netlink: 'syz.0.505': attribute type 21 has an invalid length. [ 136.779707][ T5459] EXT4-fs: inline encryption not supported [ 136.805485][ T5461] netlink: 156 bytes leftover after parsing attributes in process `syz.0.505'. [ 136.835143][ T5459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.866717][ T5459] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.888692][ T28] audit: type=1400 audit(1777422774.956:610): avc: denied { create } for pid=5457 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 136.952195][ T5473] loop0: detected capacity change from 0 to 512 [ 136.982387][ T5435] ipip0: entered promiscuous mode [ 137.050789][ T5473] EXT4-fs (loop0): 1 truncate cleaned up [ 137.058533][ T5473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.119775][ T28] audit: type=1400 audit(1777422775.186:611): avc: denied { setattr } for pid=5457 comm="syz.5.504" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.163664][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.214602][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.437233][ T5495] loop2: detected capacity change from 0 to 512 [ 137.455479][ T5495] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.516: inode has both inline data and extents flags [ 137.523525][ T5495] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.524163][ T5495] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.516: couldn't read orphan inode 15 (err -117) [ 137.533413][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 137.533437][ C0] EXT4-fs (loop2): initial error at time 1777422775: ext4_orphan_get:1397: inode 15 [ 137.533473][ C0] EXT4-fs (loop2): last error at time 1777422775: ext4_orphan_get:1397: inode 15 [ 137.711464][ T5495] loop2: lost filesystem error report for type 5 error -117 [ 137.712442][ T5495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.999229][ T5506] loop1: detected capacity change from 0 to 8192 [ 138.041201][ T5512] loop3: detected capacity change from 0 to 512 [ 138.072745][ T5512] EXT4-fs: inline encryption not supported [ 138.092905][ T5514] netlink: 48 bytes leftover after parsing attributes in process `syz.5.523'. [ 138.133233][ T5512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.210641][ T5512] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.422850][ T5524] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 138.464588][ T5524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.485558][ T5525] macsec1: entered promiscuous mode [ 138.490817][ T5525] macsec1: entered allmulticast mode [ 138.603026][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.623890][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.687744][ T5531] netlink: 76 bytes leftover after parsing attributes in process `syz.3.529'. [ 138.721357][ T5531] netlink: 100 bytes leftover after parsing attributes in process `syz.3.529'. [ 138.756330][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 138.789518][ T5531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.529'. [ 138.804745][ T5539] loop5: detected capacity change from 0 to 1024 [ 138.816464][ T28] audit: type=1326 audit(1777422776.886:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 138.854023][ T28] audit: type=1326 audit(1777422776.886:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 138.860302][ T5539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.878255][ T28] audit: type=1326 audit(1777422776.906:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 138.908946][ T5545] netlink: 'syz.0.533': attribute type 21 has an invalid length. [ 138.917059][ T28] audit: type=1326 audit(1777422776.906:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 138.944259][ T28] audit: type=1326 audit(1777422776.906:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 138.957978][ T5545] netlink: 156 bytes leftover after parsing attributes in process `syz.0.533'. [ 138.967508][ T28] audit: type=1326 audit(1777422776.906:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 138.967549][ T28] audit: type=1326 audit(1777422776.906:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 139.023365][ T28] audit: type=1326 audit(1777422776.916:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 139.051978][ T5547] netlink: 88 bytes leftover after parsing attributes in process `syz.0.533'. [ 139.062590][ T28] audit: type=1326 audit(1777422776.916:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 139.091829][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.102974][ T5549] FAULT_INJECTION: forcing a failure. [ 139.102974][ T5549] name failslab, interval 1, probability 0, space 0, times 0 [ 139.112237][ T5546] loop3: detected capacity change from 0 to 4096 [ 139.122318][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.1.534 Not tainted syzkaller #0 PREEMPT(full) [ 139.122344][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.122355][ T5549] Call Trace: [ 139.122360][ T5549] [ 139.122366][ T5549] __dump_stack+0x1d/0x30 [ 139.122386][ T5549] dump_stack_lvl+0x95/0xd0 [ 139.122481][ T5549] dump_stack+0x15/0x1b [ 139.122534][ T5549] should_fail_ex+0x263/0x280 [ 139.122560][ T5549] ? __rdma_create_id+0x48/0x3d0 [ 139.122582][ T5549] should_failslab+0x8c/0xb0 [ 139.122625][ T5549] __kmalloc_cache_noprof+0x5f/0x400 [ 139.122657][ T5549] ? __xa_alloc+0x291/0x300 [ 139.122677][ T5549] ? __pfx_ucma_event_handler+0x10/0x10 [ 139.122708][ T5549] ? __pfx_ucma_event_handler+0x10/0x10 [ 139.122802][ T5549] __rdma_create_id+0x48/0x3d0 [ 139.122820][ T5549] ? __pfx_ucma_event_handler+0x10/0x10 [ 139.122885][ T5549] rdma_create_user_id+0x5a/0xa0 [ 139.122904][ T5549] ucma_create_id+0x19c/0x280 [ 139.122929][ T5549] ? __pfx_ucma_create_id+0x10/0x10 [ 139.122960][ T5549] ucma_write+0x1c9/0x260 [ 139.123043][ T5549] vfs_writev+0x42b/0x900 [ 139.123062][ T5549] ? __pfx_ucma_write+0x10/0x10 [ 139.123093][ T5549] do_writev+0xe9/0x210 [ 139.123183][ T5549] __x64_sys_writev+0x45/0x50 [ 139.123211][ T5549] x64_sys_call+0x1c0c/0x3020 [ 139.123310][ T5549] do_syscall_64+0x12c/0x3b0 [ 139.123332][ T5549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.123352][ T5549] RIP: 0033:0x7fb519afcdd9 [ 139.123365][ T5549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.123382][ T5549] RSP: 002b:00007fb518557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 139.123467][ T5549] RAX: ffffffffffffffda RBX: 00007fb519d75fa0 RCX: 00007fb519afcdd9 [ 139.123480][ T5549] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 139.123565][ T5549] RBP: 00007fb518557090 R08: 0000000000000000 R09: 0000000000000000 [ 139.123577][ T5549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.123589][ T5549] R13: 00007fb519d76038 R14: 00007fb519d75fa0 R15: 00007ffed6610268 [ 139.123607][ T5549] [ 139.132314][ T28] audit: type=1326 audit(1777422776.916:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fa36a1ecdd9 code=0x7ffc0000 [ 139.376141][ T5546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.560602][ T5546] usb usb7: usbfs: process 5546 (syz.3.529) did not claim interface 16 before use [ 139.610147][ T5563] loop1: detected capacity change from 0 to 512 [ 139.724184][ T5563] EXT4-fs: inline encryption not supported [ 139.894345][ T5563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.928849][ T5563] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.307436][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.310231][ T5592] netlink: 'syz.0.545': attribute type 21 has an invalid length. [ 140.326110][ T5592] netlink: 156 bytes leftover after parsing attributes in process `syz.0.545'. [ 140.354285][ T5592] netlink: 88 bytes leftover after parsing attributes in process `syz.0.545'. [ 140.383531][ T5597] netlink: 'syz.1.546': attribute type 21 has an invalid length. [ 140.395489][ T5597] netlink: 156 bytes leftover after parsing attributes in process `syz.1.546'. [ 140.421006][ T5600] FAULT_INJECTION: forcing a failure. [ 140.421006][ T5600] name failslab, interval 1, probability 0, space 0, times 0 [ 140.435157][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz.5.547 Not tainted syzkaller #0 PREEMPT(full) [ 140.435188][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.435278][ T5600] Call Trace: [ 140.435285][ T5600] [ 140.435292][ T5600] __dump_stack+0x1d/0x30 [ 140.435336][ T5600] dump_stack_lvl+0x95/0xd0 [ 140.435359][ T5600] dump_stack+0x15/0x1b [ 140.435381][ T5600] should_fail_ex+0x263/0x280 [ 140.435412][ T5600] ? alloc_netdev_mqs+0x801/0xa70 [ 140.435430][ T5600] should_failslab+0x8c/0xb0 [ 140.435458][ T5600] __kmalloc_cache_noprof+0x5f/0x400 [ 140.435525][ T5600] alloc_netdev_mqs+0x801/0xa70 [ 140.435563][ T5600] rtnl_create_link+0x239/0x720 [ 140.435596][ T5600] rtnl_newlink_create+0x174/0x650 [ 140.435684][ T5600] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 140.435734][ T5600] rtnl_newlink+0x1185/0x1400 [ 140.435769][ T5600] ? avc_has_perm_noaudit+0x30/0x130 [ 140.435873][ T5600] ? __rcu_read_lock+0x2e/0x50 [ 140.435942][ T5600] ? __rcu_read_unlock+0x4e/0x70 [ 140.435989][ T5600] ? avc_has_perm_noaudit+0xab/0x130 [ 140.436025][ T5600] ? cred_has_capability+0x224/0x2a0 [ 140.436149][ T5600] ? selinux_capable+0x31/0x40 [ 140.436178][ T5600] ? security_capable+0x7b/0x90 [ 140.436229][ T5600] ? ns_capable+0x7c/0xb0 [ 140.436258][ T5600] ? __pfx_rtnl_newlink+0x10/0x10 [ 140.436334][ T5600] rtnetlink_rcv_msg+0x64b/0x720 [ 140.436370][ T5600] netlink_rcv_skb+0x123/0x220 [ 140.436396][ T5600] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.436423][ T5600] rtnetlink_rcv+0x1c/0x30 [ 140.436562][ T5600] netlink_unicast+0x5a8/0x680 [ 140.436598][ T5600] netlink_sendmsg+0x5c8/0x6f0 [ 140.436633][ T5600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.436664][ T5600] ____sys_sendmsg+0x563/0x5b0 [ 140.436736][ T5600] ___sys_sendmsg+0x195/0x1e0 [ 140.436765][ T5600] __x64_sys_sendmsg+0xd4/0x160 [ 140.436797][ T5600] x64_sys_call+0x194c/0x3020 [ 140.436819][ T5600] do_syscall_64+0x12c/0x3b0 [ 140.436903][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.437021][ T5600] RIP: 0033:0x7f255cf3cdd9 [ 140.437035][ T5600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.437052][ T5600] RSP: 002b:00007f255b997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.437155][ T5600] RAX: ffffffffffffffda RBX: 00007f255d1b5fa0 RCX: 00007f255cf3cdd9 [ 140.437172][ T5600] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 140.437187][ T5600] RBP: 00007f255b997090 R08: 0000000000000000 R09: 0000000000000000 [ 140.437223][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.437234][ T5600] R13: 00007f255d1b6038 R14: 00007f255d1b5fa0 R15: 00007ffc13a1b2c8 [ 140.437251][ T5600] [ 140.742554][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.787662][ T5603] 9p: Bad value for 'rfdno' [ 140.817163][ T5603] loop5: detected capacity change from 0 to 1024 [ 140.846029][ T5603] EXT4-fs: Ignoring removed bh option [ 140.862396][ T5603] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59032!=35945) [ 140.891715][ T5603] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.911083][ T5603] EXT4-fs error (device loop5): __ext4_fill_super:5596: inode #2: comm syz.5.551: iget: special inode unallocated [ 140.942839][ T5603] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 140.943068][ T5603] EXT4-fs (loop5): Remounting filesystem read-only [ 140.951358][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 140.954375][ T5603] EXT4-fs (loop5): get root inode failed [ 140.958788][ C1] EXT4-fs (loop5): initial error at time 1777422779: __ext4_fill_super:5596: inode 2 [ 140.958823][ C1] EXT4-fs (loop5): last error at time 1777422779: __ext4_fill_super:5596: inode 2 [ 140.965988][ T5603] EXT4-fs (loop5): mount failed [ 140.999670][ T5611] loop3: detected capacity change from 0 to 4096 [ 141.018967][ T5611] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 141.047337][ T5611] System zones: 0-5 [ 141.057819][ T5611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.255766][ T5636] EXT4-fs: inline encryption not supported [ 141.284849][ T5636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.298906][ T5636] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.322978][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.400814][ T5644] EXT4-fs (loop3): 1 truncate cleaned up [ 141.426276][ T5644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.453903][ T5649] netlink: 'syz.5.559': attribute type 21 has an invalid length. [ 141.473076][ T5644] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.558: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 141.552905][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.565903][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.638491][ T5651] FAT-fs (loop5): bogus number of reserved sectors [ 141.677620][ T5651] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 141.717980][ T5651] FAT-fs (loop5): Can't find a valid FAT filesystem [ 141.762547][ T5671] set_capacity_and_notify: 4 callbacks suppressed [ 141.762562][ T5671] loop0: detected capacity change from 0 to 512 [ 141.816320][ T5671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.870699][ T5671] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.564: bg 0: block 393: padding at end of block bitmap is not set [ 141.891705][ T5671] loop0: lost filesystem error report for type 5 error -117 [ 141.893184][ T5671] EXT4-fs (loop0): Remounting filesystem read-only [ 141.907060][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 141.907082][ C0] EXT4-fs (loop0): initial error at time 1777422779: ext4_validate_block_bitmap:441 [ 141.907131][ C0] EXT4-fs (loop0): last error at time 1777422779: ext4_validate_block_bitmap:441 [ 141.932854][ T5671] EXT4-fs (loop0): 2 truncates cleaned up [ 141.939205][ T5671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.974415][ T5689] loop1: detected capacity change from 0 to 512 [ 141.983493][ T5689] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 141.992886][ T5689] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 142.001195][ T5689] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.569: bad orphan inode 4 [ 142.011715][ T5689] loop1: lost filesystem error report for type 5 error -117 [ 142.011862][ T5689] EXT4-fs (loop1): 1 orphan inode deleted [ 142.025009][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 142.025033][ C0] EXT4-fs (loop1): initial error at time 1777422780: ext4_orphan_get:1423 [ 142.025071][ C0] EXT4-fs (loop1): last error at time 1777422780: ext4_orphan_get:1423 [ 142.065508][ T5689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.106279][ T5695] loop2: detected capacity change from 0 to 512 [ 142.154043][ T5698] netlink: 'syz.3.571': attribute type 12 has an invalid length. [ 142.163267][ T5695] EXT4-fs (loop2): 1 truncate cleaned up [ 142.184683][ T5695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.206647][ T5698] xt_TCPMSS: Only works on TCP SYN packets [ 142.404738][ T5713] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.569: lblock 0 mapped to illegal pblock 4 (length 1) [ 142.422633][ T5695] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.570: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 142.550180][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.810454][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.828834][ T5723] loop0: detected capacity change from 0 to 512 [ 142.934225][ T5731] loop3: detected capacity change from 0 to 2048 [ 142.953411][ T5731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.003866][ C1] Adjusting tsc more than 11% (6083271 vs 8464875) [ 143.172331][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.292756][ T5752] loop1: detected capacity change from 0 to 128 [ 143.299502][ T5752] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 143.436132][ T5753] veth0: entered promiscuous mode [ 143.443889][ T5753] loop5: detected capacity change from 0 to 256 [ 144.064423][ T5769] loop2: detected capacity change from 0 to 512 [ 144.073456][ T5769] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 144.088843][ T5769] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 144.097518][ T5769] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.593: bad orphan inode 4 [ 144.107561][ T5769] loop2: lost filesystem error report for type 5 error -117 [ 144.107816][ T5769] EXT4-fs (loop2): 1 orphan inode deleted [ 144.120881][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 144.120894][ C0] EXT4-fs (loop2): initial error at time 1777422781: ext4_orphan_get:1423 [ 144.120917][ C0] EXT4-fs (loop2): last error at time 1777422781: ext4_orphan_get:1423 [ 144.144737][ T5769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.284999][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.294225][ T5748] veth0: left promiscuous mode [ 144.406172][ T5775] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 4: comm syz.2.593: lblock 0 mapped to illegal pblock 4 (length 1) [ 144.424500][ T5773] loop0: detected capacity change from 0 to 512 [ 144.515136][ T5773] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 144.573439][ T5776] loop3: detected capacity change from 0 to 1024 [ 144.596786][ T5773] EXT4-fs (loop0): 1 truncate cleaned up [ 144.606852][ T5776] EXT4-fs: inline encryption not supported [ 144.642098][ T5773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.656541][ T5776] EXT4-fs: Ignoring removed nobh option [ 144.683167][ T5776] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 144.697130][ T5776] System zones: 0-1, 3-12 [ 144.702912][ T5776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.757036][ T28] kauditd_printk_skb: 175 callbacks suppressed [ 144.757058][ T28] audit: type=1400 audit(1777422782.398:797): avc: denied { rename } for pid=5772 comm="syz.0.594" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.787673][ T28] audit: type=1400 audit(1777422782.398:798): avc: denied { rename } for pid=5772 comm="syz.0.594" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.810880][ T28] audit: type=1400 audit(1777422782.398:799): avc: denied { rmdir } for pid=5772 comm="syz.0.594" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.036314][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.133922][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.328154][ T5801] netlink: 'syz.2.602': attribute type 21 has an invalid length. [ 145.367709][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.420261][ T5802] __nla_validate_parse: 12 callbacks suppressed [ 145.420274][ T5802] netlink: 80 bytes leftover after parsing attributes in process `syz.2.602'. [ 145.532775][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.541090][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.898647][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.942723][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.218461][ T5793] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 146.236774][ T5793] macsec1: left promiscuous mode [ 146.244583][ T5793] macsec1: left allmulticast mode [ 146.252453][ T5801] netlink: 156 bytes leftover after parsing attributes in process `syz.2.602'. [ 146.273543][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.300944][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.332810][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.340635][ T28] audit: type=1400 audit(1777422783.745:800): avc: denied { read } for pid=5807 comm="syz.5.604" path="socket:[14054]" dev="sockfs" ino=14054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.342264][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.581577][ T5835] macsec0: entered promiscuous mode [ 146.665342][ T5835] macsec1: entered promiscuous mode [ 146.673871][ T5835] macsec1: entered allmulticast mode [ 146.697144][ T5834] macsec0: left promiscuous mode [ 146.743071][ T28] audit: type=1400 audit(1777422784.088:801): avc: denied { setopt } for pid=5841 comm="syz.3.615" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.855623][ T28] audit: type=1400 audit(1777422784.140:802): avc: denied { connect } for pid=5841 comm="syz.3.615" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.894716][ T5843] EXT4-fs: Ignoring removed bh option [ 146.897203][ T5843] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59032!=35945) [ 147.135135][ T5843] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.274642][ T5843] EXT4-fs error (device loop3): __ext4_fill_super:5596: inode #2: comm syz.3.615: iget: special inode unallocated [ 147.399813][ T5843] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 147.401798][ T5843] EXT4-fs (loop3): Remounting filesystem read-only [ 147.412366][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 147.412403][ C1] EXT4-fs (loop3): initial error at time 1777422784: __ext4_fill_super:5596: inode 2 [ 147.412447][ C1] EXT4-fs (loop3): last error at time 1777422784: __ext4_fill_super:5596: inode 2 [ 147.758892][ T5843] EXT4-fs (loop3): get root inode failed [ 147.789255][ T5843] EXT4-fs (loop3): mount failed [ 147.832596][ T5858] set_capacity_and_notify: 2 callbacks suppressed [ 147.832628][ T5858] loop5: detected capacity change from 0 to 1024 [ 147.878807][ T5858] EXT4-fs: Ignoring removed bh option [ 147.911013][ T5847] ipip0: entered promiscuous mode [ 147.921359][ T5858] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59032!=35945) [ 147.977559][ T5858] EXT4-fs (loop5): group descriptors corrupted! [ 148.854333][ T5872] macsec1: entered promiscuous mode [ 148.859695][ T5872] macsec1: entered allmulticast mode [ 149.015315][ T5871] loop2: detected capacity change from 0 to 2048 [ 149.101446][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.479292][ T5879] 0ªî{X¹¦: left allmulticast mode [ 149.505934][ T5883] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 149.579385][ T5879] macsec1: left promiscuous mode [ 149.598093][ T5879] macsec1: left allmulticast mode [ 149.649543][ T111] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.676966][ T111] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.718565][ T111] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.760763][ T111] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.224281][ T5891] loop0: detected capacity change from 0 to 128 [ 150.245699][ T5887] loop5: detected capacity change from 0 to 8192 [ 150.264625][ T5889] loop3: detected capacity change from 0 to 8192 [ 150.397875][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.407494][ T5891] FAT-fs (loop0): bogus number of reserved sectors [ 150.443596][ T5891] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 150.486061][ T5891] FAT-fs (loop0): Can't find a valid FAT filesystem [ 150.519041][ T5894] loop1: detected capacity change from 0 to 128 [ 150.544834][ T5894] FAT-fs (loop1): bogus number of reserved sectors [ 150.580116][ T5894] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 150.596345][ T5894] FAT-fs (loop1): Can't find a valid FAT filesystem [ 150.671627][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 150.733635][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 150.781368][ T5906] loop0: detected capacity change from 0 to 512 [ 150.813280][ T5906] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 150.845574][ T28] audit: type=1400 audit(1777422787.719:803): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 150.903964][ T5906] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 150.960904][ T5906] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.634: bad orphan inode 4 [ 151.009421][ T5906] loop0: lost filesystem error report for type 5 error -117 [ 151.009656][ T5906] EXT4-fs (loop0): 1 orphan inode deleted [ 151.017026][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 151.017042][ C0] EXT4-fs (loop0): initial error at time 1777422787: ext4_orphan_get:1423 [ 151.017070][ C0] EXT4-fs (loop0): last error at time 1777422787: ext4_orphan_get:1423 [ 151.116746][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.512932][ T5920] loop2: detected capacity change from 0 to 512 [ 153.519656][ T5920] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 153.549339][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.858054][ T5924] ipip0: left promiscuous mode [ 154.043195][ T5929] loop1: detected capacity change from 0 to 512 [ 154.066117][ T5929] EXT4-fs: inline encryption not supported [ 154.163604][ T5929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.199800][ T5929] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.261212][ T5930] loop5: detected capacity change from 0 to 512 [ 154.345750][ T5930] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.438099][ T5935] loop0: detected capacity change from 0 to 1024 [ 154.468010][ T5935] EXT4-fs: test_dummy_encryption option not supported [ 154.519106][ T5935] IPVS: persistence engine module ip_vs_pe_ not found [ 154.565878][ T5930] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 154.637469][ T5930] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.642: bg 0: block 248: padding at end of block bitmap is not set [ 154.720121][ T5930] loop5: lost filesystem error report for type 5 error -117 [ 154.721560][ T5930] Quota error (device loop5): write_blk: dquota write failed [ 154.738204][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 154.738344][ C0] EXT4-fs (loop5): last error at time 1777422791: ext4_validate_block_bitmap:441 [ 154.761450][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.773183][ T5930] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 154.784141][ T5930] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.642: Failed to acquire dquot type 1 [ 154.795800][ T5930] loop5: lost filesystem error report for type 5 error -28 [ 154.803107][ T5930] EXT4-fs (loop5): 1 truncate cleaned up [ 154.852714][ T5930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 155.068208][ T5950] loop0: detected capacity change from 0 to 128 [ 155.082101][ T5952] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.189121][ T5930] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 155.298754][ T5930] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 155.455607][ T28] audit: type=1400 audit(1777422791.925:804): avc: denied { mounton } for pid=5928 comm="syz.5.642" path="/38/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.479169][ T5954] tmpfs: Unknown parameter 'siÿÿ' [ 155.530208][ T5930] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.642: Failed to acquire dquot type 1 [ 155.969999][ T5956] loop1: detected capacity change from 0 to 128 [ 155.981180][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 155.994493][ T5963] netlink: 84 bytes leftover after parsing attributes in process `syz.0.652'. [ 156.063001][ T28] audit: type=1326 audit(1777422792.485:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb519afcdd9 code=0x0 [ 156.684675][ T28] audit: type=1400 audit(1777422793.045:806): avc: denied { create } for pid=5974 comm="syz.1.655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=iucv_socket permissive=1 [ 156.735128][ T5975] loop1: detected capacity change from 0 to 2048 [ 156.773202][ T5975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.785869][ T5975] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.790130][ T5987] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 156.843499][ T5986] loop2: detected capacity change from 0 to 512 [ 156.849851][ T3420] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 156.856328][ T5975] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.655: corrupted xattr block 128: overlapping e_value [ 156.879120][ T5986] ------------[ cut here ]------------ [ 156.884748][ T5986] EA inode 11 i_nlink=0 [ 156.884770][ T5986] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.657/5986 [ 156.899630][ T5986] Modules linked in: [ 156.903632][ T5986] CPU: 0 UID: 0 PID: 5986 Comm: syz.2.657 Not tainted syzkaller #0 PREEMPT(full) [ 156.912887][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.917502][ T5975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 156.923009][ T5986] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 156.938604][ T5986] Code: 34 5f 98 ff 4c 8d 2d 9d 69 5c 05 49 8d 7e 40 e8 64 1d b6 ff 49 8b 6e 40 4c 89 e7 e8 98 18 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf 6d d7 03 66 66 66 66 66 66 2e [ 156.958275][ T5986] RSP: 0018:ffffc90001d775a8 EFLAGS: 00010246 [ 156.964379][ T5986] RAX: ffff888103832cf8 RBX: ffff8881006cf718 RCX: ffffffff81c0c988 [ 156.964427][ T5975] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.655: corrupted xattr block 128: overlapping e_value [ 156.972450][ T5986] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3310 [ 156.994126][ T5986] RBP: 000000000000000b R08: 00018881006cf6cb R09: 0000000000000000 [ 157.002230][ T5986] R10: ffffc90001d774d8 R11: 0001c90001d774d8 R12: ffff8881006cf6c8 [ 157.010338][ T5986] R13: ffffffff871d3310 R14: ffff8881006cf680 R15: 0000000000000001 [ 157.018352][ T5986] FS: 00007fa368c266c0(0000) GS:ffff8882ae8fe000(0000) knlGS:0000000000000000 [ 157.027330][ T5986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.028324][ T5975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 157.034025][ T5986] CR2: 00007fc3df0ea000 CR3: 000000011d948000 CR4: 00000000003506f0 [ 157.050996][ T5986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.059040][ T5986] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 157.061916][ T5975] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.655: corrupted xattr block 128: overlapping e_value [ 157.067088][ T5986] Call Trace: [ 157.067098][ T5986] [ 157.087111][ T5986] ext4_xattr_set_entry+0x77c/0x1010 [ 157.092442][ T5986] ext4_xattr_ibody_set+0x184/0x3c0 [ 157.097765][ T5986] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 157.103686][ T5986] __ext4_expand_extra_isize+0x246/0x280 [ 157.104017][ T5975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 157.109372][ T5986] __ext4_mark_inode_dirty+0x29b/0x3d0 [ 157.109428][ T5986] ext4_evict_inode+0x8ba/0xe30 [ 157.128755][ T5986] ? __pfx_ext4_evict_inode+0x10/0x10 [ 157.134222][ T5986] evict+0x2af/0x510 [ 157.135017][ T5975] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.655: corrupted xattr block 128: overlapping e_value [ 157.138165][ T5986] ? __dquot_initialize+0x146/0x7c0 [ 157.157067][ T5986] iput+0x41a/0x580 [ 157.160945][ T5986] ext4_process_orphan+0x1a9/0x1c0 [ 157.166143][ T5986] ext4_orphan_cleanup+0x69c/0x9f0 [ 157.171332][ T5986] ext4_fill_super+0x3408/0x37c0 [ 157.174467][ T5975] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.655: corrupted xattr block 128: overlapping e_value [ 157.176335][ T5986] ? set_blocksize+0x14c/0x270 [ 157.190292][ T28] audit: type=1400 audit(1777422793.394:807): avc: denied { read append } for pid=5974 comm="syz.1.655" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.194737][ T5986] ? setup_bdev_super+0x30e/0x370 [ 157.222293][ T5986] ? __pfx_ext4_fill_super+0x10/0x10 [ 157.227640][ T5986] get_tree_bdev_flags+0x291/0x300 [ 157.232795][ T5986] ? __pfx_ext4_fill_super+0x10/0x10 [ 157.238110][ T5986] get_tree_bdev+0x1f/0x30 [ 157.242652][ T5986] ext4_get_tree+0x1c/0x30 [ 157.244250][ T28] audit: type=1400 audit(1777422793.458:808): avc: denied { open } for pid=5974 comm="syz.1.655" path="/155/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.247262][ T5986] vfs_get_tree+0x57/0x1d0 [ 157.247305][ T5986] do_new_mount+0x288/0x8d0 [ 157.279794][ T5986] path_mount+0x4d0/0xbc0 [ 157.284273][ T5986] __se_sys_mount+0x28c/0x2e0 [ 157.289142][ T5986] ? __se_sys_mkdirat+0xa2/0xf0 [ 157.294153][ T5986] ? kmem_cache_free+0xca/0x380 [ 157.299064][ T5986] __x64_sys_mount+0x67/0x80 [ 157.303799][ T5986] x64_sys_call+0x2d61/0x3020 [ 157.308514][ T5986] do_syscall_64+0x12c/0x3b0 [ 157.313138][ T5986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.319167][ T5986] RIP: 0033:0x7fa36a1ee04a [ 157.323617][ T5986] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.343274][ T5986] RSP: 002b:00007fa368c25e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.349832][ T5975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 157.351779][ T5986] RAX: ffffffffffffffda RBX: 00007fa368c25ee0 RCX: 00007fa36a1ee04a [ 157.351828][ T5986] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fa368c25ea0 [ 157.362501][ T5975] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.655: bg 0: block 345: padding at end of block bitmap is not set [ 157.368761][ T5986] RBP: 0000200000000180 R08: 00007fa368c25ee0 R09: 0000000000000000 [ 157.377383][ T28] audit: type=1400 audit(1777422793.669:809): avc: denied { write } for pid=5974 comm="syz.1.655" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.391537][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 157.412744][ T5975] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 157.421680][ T5986] R13: 00007fa368c25ea0 R14: 000000000000047a R15: 00002000000001c0 [ 157.446282][ T5986] [ 157.449323][ T5986] ---[ end trace 0000000000000000 ]--- [ 157.457704][ T5986] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.657: bit already cleared for inode 11 [ 157.469211][ T5986] loop2: lost filesystem error report for type 5 error -117 [ 157.469601][ T5986] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 157.485454][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 157.485478][ C0] EXT4-fs (loop2): initial error at time 1777422793: ext4_free_inode:354 [ 157.485505][ C0] EXT4-fs (loop2): last error at time 1777422793: ext4_free_inode:354 [ 157.520670][ T5986] loop2: lost filesystem error report for type 5 error -117 [ 157.520954][ T5986] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 157.542938][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.579148][ T5994] netlink: 'syz.1.659': attribute type 21 has an invalid length. [ 157.595116][ T5986] loop2: lost filesystem error report for type 5 error -117 [ 157.595800][ T5986] EXT4-fs (loop2): 1 orphan inode deleted [ 157.612512][ T5994] netlink: 156 bytes leftover after parsing attributes in process `syz.1.659'. [ 157.627533][ T5986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.642215][ T5994] netlink: 88 bytes leftover after parsing attributes in process `syz.1.659'. [ 157.964047][ T6000] loop1: detected capacity change from 0 to 2048 [ 158.001470][ T6000] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 158.011020][ T6000] System zones: 0-7 [ 158.015973][ T6000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.052449][ T6000] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.661: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 158.084931][ T6000] EXT4-fs (loop1): Remounting filesystem read-only [ 158.150240][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.320338][ T6007] loop1: detected capacity change from 0 to 2048 [ 158.351412][ T6007] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 158.367890][ T6007] System zones: 0-7 [ 158.373805][ T6007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.391114][ T6007] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.662: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 158.408183][ T6007] EXT4-fs (loop1): Remounting filesystem read-only [ 158.493264][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.530907][ T6013] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 158.553424][ T6013] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 158.584097][ T6013] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.664: bad orphan inode 4 [ 158.621546][ T6013] loop1: lost filesystem error report for type 5 error -117 [ 158.621671][ T6013] EXT4-fs (loop1): 1 orphan inode deleted [ 158.634797][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 158.634833][ C0] EXT4-fs (loop1): initial error at time 1777422794: ext4_orphan_get:1423 [ 158.634852][ C0] EXT4-fs (loop1): last error at time 1777422794: ext4_orphan_get:1423 [ 158.667132][ T6016] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 158.679929][ T6016] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 158.688918][ T6016] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.665: bad orphan inode 4 [ 158.702995][ T6016] loop3: lost filesystem error report for type 5 error -117 [ 158.703190][ T6016] EXT4-fs (loop3): 1 orphan inode deleted [ 158.710535][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 158.710555][ C0] EXT4-fs (loop3): initial error at time 1777422794: ext4_orphan_get:1423 [ 158.710573][ C0] EXT4-fs (loop3): last error at time 1777422794: ext4_orphan_get:1423 [ 158.741013][ T6013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.761512][ T6016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.059923][ T6020] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.664: lblock 0 mapped to illegal pblock 4 (length 1) [ 159.877147][ T6022] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.665: lblock 0 mapped to illegal pblock 4 (length 1) [ 159.921885][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.976372][ T5979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.045347][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.107209][ T6024] set_capacity_and_notify: 2 callbacks suppressed [ 160.107236][ T6024] loop1: detected capacity change from 0 to 256 [ 160.221658][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.267012][ T6034] syz.0.669 (6034) used obsolete PPPIOCDETACH ioctl [ 160.276787][ T6037] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.325929][ T6036] bond2: entered promiscuous mode [ 160.345968][ T6036] ip6gre1: entered promiscuous mode [ 160.351514][ T6036] ip6gre1: entered allmulticast mode [ 160.374229][ T6036] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 160.399866][ T28] audit: type=1400 audit(1777422796.457:810): avc: denied { write } for pid=6035 comm="syz.3.670" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.420901][ T6036] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 160.631555][ T6047] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.740997][ T6052] loop1: detected capacity change from 0 to 512 [ 160.749373][ T6052] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 160.761573][ T6052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.672: bg 0: block 288: padding at end of block bitmap is not set [ 160.775794][ T6052] loop1: lost filesystem error report for type 5 error -117 [ 160.776369][ T6052] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 160.783752][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 160.783782][ C0] EXT4-fs (loop1): initial error at time 1777422796: ext4_validate_block_bitmap:441 [ 160.783809][ C0] EXT4-fs (loop1): last error at time 1777422796: ext4_validate_block_bitmap:441 [ 160.817547][ T6052] loop1: lost filesystem error report for type 5 error -117 [ 160.818513][ T6052] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.672: attempt to clear invalid blocks 1024 len 1 [ 160.838852][ T6052] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 160.839356][ T6052] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.672: invalid indirect mapped block 1819239214 (level 0) [ 160.862344][ T6052] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 160.863534][ T6052] EXT4-fs (loop1): 1 truncate cleaned up [ 161.910783][ T6059] loop3: detected capacity change from 0 to 4096 [ 161.983515][ T6059] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 162.023704][ T6059] System zones: 0-5 [ 162.046611][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 162.445725][ T6067] loop5: detected capacity change from 0 to 512 [ 162.457357][ T6067] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.677: inode has both inline data and extents flags [ 162.460154][ T6070] loop0: detected capacity change from 0 to 512 [ 162.477429][ T6067] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.483603][ T6070] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.678: inode has both inline data and extents flags [ 162.485129][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 162.493625][ T6070] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.505838][ C1] EXT4-fs (loop5): initial error at time 1777422798: ext4_orphan_get:1397 [ 162.512349][ T6067] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.677: couldn't read orphan inode 15 (err -117) [ 162.521391][ C1] : inode 15 [ 162.521406][ C1] EXT4-fs (loop5): last error at time 1777422798: ext4_orphan_get:1397: inode 15 [ 162.555230][ T6067] loop5: lost filesystem error report for type 5 error -117 [ 162.561014][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 162.574802][ C1] EXT4-fs (loop0): initial error at time 1777422798: ext4_orphan_get:1397: inode 15 [ 162.580785][ T6070] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.678: couldn't read orphan inode 15 (err -117) [ 162.584261][ C1] EXT4-fs (loop0): last error at time 1777422798: ext4_orphan_get:1397: inode 15 [ 162.653658][ T6070] loop0: lost filesystem error report for type 5 error -117 [ 163.053562][ T6083] loop2: detected capacity change from 0 to 4096 [ 163.084979][ T6087] loop0: detected capacity change from 0 to 512 [ 163.100984][ T6087] EXT4-fs: Ignoring removed nobh option [ 163.126405][ T6085] loop5: detected capacity change from 0 to 8192 [ 163.138254][ T6087] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.157186][ T6083] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 163.232987][ T6083] System zones: 0-5 [ 163.257881][ T6091] ================================================================== [ 163.265992][ T6091] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 163.273124][ T6091] [ 163.275457][ T6091] write to 0xffff888142ef131e of 2 bytes by task 6085 on cpu 0: [ 163.283191][ T6091] fat16_ent_put+0x28/0x60 [ 163.287637][ T6091] fat_alloc_clusters+0x57b/0xc50 [ 163.292870][ T6091] fat_get_block+0x25e/0x5f0 [ 163.297533][ T6091] __block_write_begin_int+0x400/0xf90 [ 163.303018][ T6091] cont_write_begin+0x5fe/0x970 [ 163.307912][ T6091] fat_write_begin+0x52/0xe0 [ 163.312525][ T6091] generic_perform_write+0x183/0x490 [ 163.317832][ T6091] __generic_file_write_iter+0x9e/0x120 [ 163.323421][ T6091] generic_file_write_iter+0x8d/0x310 [ 163.328828][ T6091] vfs_write+0x5a6/0x9f0 [ 163.333124][ T6091] ksys_write+0xdc/0x1a0 [ 163.337394][ T6091] __x64_sys_write+0x40/0x50 [ 163.342012][ T6091] x64_sys_call+0x27e1/0x3020 [ 163.346719][ T6091] do_syscall_64+0x12c/0x3b0 [ 163.351343][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.357259][ T6091] [ 163.359600][ T6091] read to 0xffff888142ef1200 of 512 bytes by task 6091 on cpu 1: [ 163.367341][ T6091] fat_mirror_bhs+0x1df/0x330 [ 163.372059][ T6091] fat_alloc_clusters+0xb48/0xc50 [ 163.377136][ T6091] fat_get_block+0x25e/0x5f0 [ 163.381753][ T6091] __block_write_begin_int+0x400/0xf90 [ 163.387246][ T6091] cont_write_begin+0x5fe/0x970 [ 163.392134][ T6091] fat_write_begin+0x52/0xe0 [ 163.396758][ T6091] generic_perform_write+0x183/0x490 [ 163.402072][ T6091] __generic_file_write_iter+0x9e/0x120 [ 163.407651][ T6091] generic_file_write_iter+0x8d/0x310 [ 163.413062][ T6091] aio_write+0x2fe/0x430 [ 163.417342][ T6091] io_submit_one+0xbc1/0x1350 [ 163.422054][ T6091] __se_sys_io_submit+0xfb/0x280 [ 163.424920][ T6083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'. [ 163.427034][ T6091] __x64_sys_io_submit+0x43/0x50 [ 163.440848][ T6091] x64_sys_call+0x19d5/0x3020 [ 163.445546][ T6091] do_syscall_64+0x12c/0x3b0 [ 163.450166][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.456072][ T6091] [ 163.458407][ T6091] Reported by Kernel Concurrency Sanitizer on: [ 163.464672][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.5.683 Tainted: G W syzkaller #0 PREEMPT(full) [ 163.475472][ T6091] Tainted: [W]=WARN [ 163.479297][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.489369][ T6091] ==================================================================