last executing test programs: 2m29.166245305s ago: executing program 2 (id=1316): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4c801) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000009000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), 0x10) (async) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb5, 0x1c080, 0xa, 0x20002f7}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a02000000000018010000202078250000000000202020cb3e460f7b15aff0bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0}, 0x94) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="d6b1ee8b4b8c3329b33621e349bffb3b5e9c52b9596af34ee2ebd5dba58e162fc910b2c5abf8024d72255a3f3561124d00a2d092503d24087cf9020a21eef52a8d65", 0x42}], 0x1}}], 0x1, 0x4c800) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000580)) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r5, 0x20, &(0x7f00000007c0)={&(0x7f0000000800)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m29.058335458s ago: executing program 2 (id=1317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000004007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2m29.042568098s ago: executing program 2 (id=1318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) lseek(r4, 0xd793, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt(r6, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @mcast2}], 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000300)={r8}, &(0x7f0000001340)=0x8) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000300)={r8}, &(0x7f0000001340)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000000c0)={r8, 0x7}, 0x8) syz_io_uring_setup(0x47a8, &(0x7f0000000240)={0x0, 0x46b8, 0x2, 0x3, 0x1fd}, 0x0, &(0x7f00000003c0), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_setup(0x2cc8, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) (async) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r9, r9, 0x0, 0xe3aa6ea) (async) sendfile(r9, r9, 0x0, 0xe3aa6ea) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000400)={{0x40, 0x4, 0x956, 0x1, 0x4}, [{0x3, 0x10001, 0x5, 0x8}, {0x6, 0x1, 0x9, 0x9}, {0x10, 0x10000, 0x2, 0xee}, {0xb8c1, 0x1, 0x6, 0x5}, {0x2, 0x6, 0x2, 0xc}, {0xffffffffffffffff, 0xa, 0x2, 0xff}, {0x8, 0x9, 0x6, 0x2}, {0xea2, 0xfff, 0xf, 0xe5}, {0x9, 0x54bdcde7, 0x2, 0x3}]}) 2m27.87372044s ago: executing program 2 (id=1322): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e2fa0e81ceb3dc4c43c215dc4dade38ff8c84acefa41ae002d4b61ce7602ee69ca59662a7ca071443645c1dc73113beeb9b5a73cd0415b0b37839aa6c68111a458fae5cf2c3a6a3bb8f9e0c32740df61cef926d51a7eff7b9b3f386c", 0x5c}], 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0xffffffff, @mcast2, 0x7}}, 0x7f, 0x6, 0x9, 0x4c, 0x5c}, &(0x7f0000000100)=0x98) socket$key(0xf, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3ffffc, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0xceb, &(0x7f0000000480)={0x0, 0x8123, 0x2000, 0x8, 0x20204}) sendfile(0xffffffffffffffff, r1, &(0x7f0000000280)=0xa6, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="02"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="090000000600000008000000089bc51aab115c7a2ff03d8d20b88412e92da8b202055806b9ae0676fb51c68bbc8f5f18ae55f41093"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=r5], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7) 2m27.10366663s ago: executing program 2 (id=1329): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m26.897822956s ago: executing program 2 (id=1335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000020000000000000001000000024e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000001000000000000800400000000000000ffffffffffffff7f000000000000000007000000000000000300000000000000000000002cbd7000003500000a00040050000000000000001c00040007004e244e200000ff02000000000000000000000000000160001200726663343130362867636d286165732929efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}}, 0x48080) 2m26.841706627s ago: executing program 32 (id=1335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000020000000000000001000000024e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x48080) 2m22.059774365s ago: executing program 3 (id=1388): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) r1 = gettid() r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10003, 0x1, 0x3, 0x5, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000f, 0x4000011, r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x2000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r0, 0x0, 0x0, 0x0}, 0x30) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000002c0)={0x6, 0x3ff, 0xe, 0x9}, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffddbdf2500100000", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b00010067726574617000001400028008000700ac14142805000a000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41}, 0x94) 2m21.10935296s ago: executing program 3 (id=1393): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000008b0000002c00000002000000000000000100000d0000000000000000000000000000000001000084000000000000000001000000000000000000"], &(0x7f00000000c0)=""/16, 0x46, 0x10, 0x1}, 0x28) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008084}, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0x4ff}, {0x6, 0x60, 0x0, 0x8}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/asound/timers\x00', 0x0, 0x0) r3 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000540)=[0x3, 0x9], 0x2) read$watch_queue(r2, &(0x7f00000002c0)=""/211, 0xd3) write$ppp(r0, &(0x7f0000000280)='R\r', 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000e6000100000000000400000002000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m19.864580263s ago: executing program 3 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa", @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 2m19.798791196s ago: executing program 3 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240), 0x2000000}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000002380)={0x4, 0x3, 0x1, 0x5}) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="b312e6bb8b7e3108a9f4a3b4a1d19b3740744f92e0794d", 0x17) mkdir(&(0x7f0000000400)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 2m19.087345494s ago: executing program 3 (id=1404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="bed0", 0x2}], 0x1, &(0x7f0000000700)=[{0x10, 0x11, 0xf}], 0x10}}], 0x2, 0x4044805) 2m18.322028764s ago: executing program 3 (id=1410): socket(0x40000000015, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000020000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007"], 0x134}}, 0x0) 2m18.311602555s ago: executing program 33 (id=1410): socket(0x40000000015, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000020000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007"], 0x134}}, 0x0) 5.876805576s ago: executing program 5 (id=2501): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002300)=@newtaction={0x8e0, 0x30, 0x12f, 0x0, 0x0, {}, [{0x8cc, 0x1, [@m_police={0x8c8, 0x1, 0x0, 0x0, {{0xb}, {0x89c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3ab, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffff9, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x9, 0x3, 0x200, {0x2, 0x2, 0x3, 0x5, 0x5, 0x6}, {0x8, 0x0, 0xe, 0x100, 0x8000, 0xfff}, 0x4, 0xe3ef, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8e0}}, 0x0) 5.802150538s ago: executing program 5 (id=2504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) sendmsg$NLBL_MGMT_C_ADD(r7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(0x0, 0xb, 0x103381) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, 0x0) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="21032b0000000000000009"], 0x14}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) r10 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) rt_tgsigqueueinfo(r10, r10, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) 5.800597738s ago: executing program 1 (id=2505): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x9, 0x8, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffff800, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x60a02, 0x0) sendfile(r0, r0, 0x0, 0x3) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000140)={0x3c, 0x25, 0xa, 0x16, 0x2, 0x200, 0x1, 0x6}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x7c, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x24010814) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x84}, 0x1, 0x0, 0x0, 0x40408e4}, 0x2004c040) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) 5.683870971s ago: executing program 1 (id=2506): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x18, &(0x7f0000000440)='\a\x00', 0x2) write$nbd(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="67440500000000000400000004000000a0587ca2484450584b063a7a7c4cd725696064079f3c1daac3604ead3700841ec72e7e83189d273b4600000000000000000000b959703cff21dec99f22377c525181bfab3497c7fc4b3c56f059f39fdcf0615f2c408a0c0aaab444d779d8e69881f3845751fd05cfc050c6cb383672baa7b3bc322ec08aad761a8adc1443663d9a42e1cff69b43a066315ccec9a4e287f6d805d81e3ef6a96ee4f8e4a79d25ae52d9"], 0x10) mount(0x0, 0x0, 0x0, 0x20808c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettaction={0x20, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x97}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1a031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x1, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000076000d0b20e20000ffdbdf250300000000", @ANYRES32=0x0, @ANYBLOB="08000a0002000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\\'], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket(0x10, 0x3, 0x0) 5.37432718s ago: executing program 1 (id=2507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x8000000000000001, 0x4}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x1, r2, 0xa) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f00000000c0)={0x4, 0x5}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0x28}, 0x922bac8576bdadce) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000019040)=r4, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) pwritev2(r5, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000840)="ec702016680f8385dc622d806d0b2766b7bc754f1b5a0dae051bc3ef", 0x1c}, {0x0}], 0x3, 0x200, 0x4, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) 5.334218961s ago: executing program 1 (id=2508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x1, 0x1, 0x4, 0x4b, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x6, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, {[@timestamp_addr={0x44, 0x4, 0x3f, 0x1, 0x8}]}}}}}) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}}, 0x8000) 5.154195595s ago: executing program 4 (id=2509): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x56, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000001980)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x5433, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = gettid() sched_setscheduler(r7, 0x0, &(0x7f00000001c0)=0x8d2) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000004c0)=0x479, 0x4) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r10, @ANYRES32=r2, @ANYBLOB='&'], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x48, 0x30, 0x57}, {0x28, 0x1, 0xf7, 0xfffff010}, {0x6, 0x26, 0x0, 0x5}]}, 0x10) sendto$unix(r11, &(0x7f0000000100)='Qq?L', 0x4, 0x4040050, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) r13 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$cont(0x15, r13, 0x6a, 0x200008) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240)=[0x2, 0x3, 0x3, 0x3, 0x1], 0x200000000000000, 0x1, 0x0, r13}}, 0x40) 5.153946995s ago: executing program 1 (id=2510): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x3f000000, 0x0) 5.031297028s ago: executing program 1 (id=2511): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xcd9}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.684138358s ago: executing program 0 (id=2512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="feffff7f000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 4.58626309s ago: executing program 4 (id=2513): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@norecovery}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") 4.560779201s ago: executing program 0 (id=2515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 4.560344241s ago: executing program 6 (id=2516): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}], {0x95, 0x0, 0x0, 0xf3ff}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 4.491317063s ago: executing program 0 (id=2517): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x18, &(0x7f0000000440)='\a\x00', 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x20808c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettaction={0x20, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x97}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1a031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x1, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000076000d0b20e20000ffdbdf250300000000", @ANYRES32=0x0, @ANYBLOB="08000a0002000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\\'], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket(0x10, 0x3, 0x0) 4.350180406s ago: executing program 6 (id=2518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x8000000000000001, 0x4}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x1, r2, 0xa) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f00000000c0)={0x4, 0x5}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0x28}, 0x922bac8576bdadce) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000019040)=r4, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) pwritev2(r5, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000840)="ec702016680f8385dc622d806d0b2766b7bc754f1b5a0dae051bc3ef", 0x1c}, {0x0}], 0x3, 0x200, 0x4, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) 4.289199078s ago: executing program 6 (id=2519): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102a02, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa39000000000000703000003feffff720af0fff8ffffff71a4f0ff000000007110bc0000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.965863416s ago: executing program 5 (id=2520): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10}], 0x1, 0x2000, &(0x7f0000000040)={r2, r3+10000000}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff0000"], 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc00", 0x23) r9 = socket$kcm(0x2, 0x3, 0x106) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4c000) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000004000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0x34}], 0x1}, 0x97ffffff) 3.884655098s ago: executing program 4 (id=2521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec8}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) 3.81270717s ago: executing program 6 (id=2522): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") open(0x0, 0x66842, 0x21) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x52f, &(0x7f0000001540)="$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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r2}) syz_io_uring_complete(0x0, 0x0) get_robust_list(0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000004c00), 0x2, 0x42000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000004c40)=""/226) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) syz_emit_ethernet(0x86, &(0x7f00000003c0)={@local, @remote, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x48, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "a78c"}, {0x19, 0x6, "7a46cfb5a6337e2133ec63a012089a16f08ac6342e0e11efe3f1f58587a02de3e34d5861a9a3ce17f1a71167128c76aac4b4"}]}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x5000) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3.488695109s ago: executing program 0 (id=2523): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x14, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000850000000c000000bf9800000000000056090000000000008500000084000000b70000000000000095000000000000006a9f121c1e1b1c712f5d32f5a7bfb6f0787817032d44b0c29972918fa8bd6d113245231e1b9cddea98bbc324e1c5242c775b717ac52b2e4a63eaf17c588e754e649664ef46eafe5f8271985168f477bd5cba5679fa9d"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2133, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000001c0), 0x19}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB], 0x50) 3.110161629s ago: executing program 4 (id=2524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88c4}, 0xc000000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x2000001ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') futex_waitv(&(0x7f0000009e80)=[{0x4, 0x0, 0x6}, {0x4, 0x0}], 0x2, 0x0, 0x0, 0x1) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}, {0x0}, {0x0}, {0x0}], 0x4, 0x6c, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x11, 0x148, 0x260, 0x0, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x200, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x3, 0x6, 0x6, 0x8, 0x6e69}}, @common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x10, 0x8, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x6, 0x6, 0x5, 0x6], 0x1}, {0xffffffffffffffff, [0x1, 0x6, 0x7, 0xe, 0x4, 0x3], 0x1, 0x6}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}, 0x8}, 0x2000, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x8c814) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000180)=0x4) sendto$packet(r3, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x8100, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r8 = socket(0x21, 0x3, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x18, 0x31, 0x1, 0x20000000, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r10, 0x0, 0x0, 0x3a, 0x5) 2.624737441s ago: executing program 4 (id=2525): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0xbfea, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x491, &(0x7f0000000340)="$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") r5 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6) fallocate(r5, 0x8, 0x0, 0x10000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x1a) 2.135628884s ago: executing program 5 (id=2526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x300}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x5}]}]}, 0x17c}}, 0x0) 2.018340367s ago: executing program 5 (id=2527): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 '], 0x50) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 2.006042028s ago: executing program 6 (id=2528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r3 = perf_event_open(0x0, 0x0, 0x1, r2, 0xa) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f00000000c0)={0x4, 0x5}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0x28}, 0x922bac8576bdadce) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000019040)=r4, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) pwritev2(r5, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000840)="ec702016680f8385dc622d806d0b2766b7bc754f1b5a0dae051bc3ef", 0x1c}, {0x0}], 0x3, 0x200, 0x4, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) 1.438077472s ago: executing program 0 (id=2529): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (fail_nth: 1) 1.270444717s ago: executing program 5 (id=2530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) sendmsg$NLBL_MGMT_C_ADD(r7, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x103381) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="21032b0000000000000009"], 0x14}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) r10 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) rt_tgsigqueueinfo(r10, r10, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) 1.270016117s ago: executing program 4 (id=2531): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x9, 0x8, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffff800, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x60a02, 0x0) sendfile(r0, r0, 0x0, 0x3) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000140)={0x3c, 0x25, 0xa, 0x16, 0x2, 0x200, 0x1, 0x6}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x7c, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x24010814) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x84}, 0x1, 0x0, 0x0, 0x40408e4}, 0x2004c040) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) 1.217517238s ago: executing program 0 (id=2532): unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400374bcd71fcf85e5b303a00fe8000000000000000000000000e00"/61], 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe80, 0x4}, 0x48) 0s ago: executing program 6 (id=2533): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000a40)={[{@block_validity}, {@orlov}, {@i_version}, {@bsdgroups}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@journal_checksum}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5c1559ef}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x1, 0x756, &(0x7f00000002c0)="$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") (async) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffb, 0x0, 0x4, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x101, 0x10025, 0x0, 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @random="43ebb4a956fb", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @broadcast}, "21db0e31e0cddb5f29f9eb1ee119ff3213491ba894b756ac1cbe5340"}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2503000000180001801400020073797a5f74756e0000000000000000000500030000000000050003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f00000006c0)={0xff, "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"}) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) (async, rerun: 32) socket(0x1f, 0x2, 0x2) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x1c}}, 0x404c004) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006800010101000000fcffff7f00000000000000000c000200010000000400000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) kernel console output (not intermixed with test programs): d1: (slave macvlan2): failed to get link speed/duplex [ 247.895531][ T28] audit: type=1400 audit(247.854:8638): avc: denied { getopt } for pid=9571 comm="syz.6.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.943363][ T9574] FAULT_INJECTION: forcing a failure. [ 247.943363][ T9574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.982019][ T9574] CPU: 1 UID: 0 PID: 9574 Comm: syz.6.1901 Tainted: G W syzkaller #0 PREEMPT(full) [ 247.982052][ T9574] Tainted: [W]=WARN [ 247.982060][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.982071][ T9574] Call Trace: [ 247.982140][ T9574] [ 247.982151][ T9574] __dump_stack+0x1d/0x30 [ 247.982179][ T9574] dump_stack_lvl+0x95/0xd0 [ 247.982212][ T9574] dump_stack+0x15/0x1b [ 247.982252][ T9574] should_fail_ex+0x263/0x280 [ 247.982285][ T9574] should_fail+0xb/0x20 [ 247.982308][ T9574] should_fail_usercopy+0x1a/0x20 [ 247.982349][ T9574] _copy_from_user+0x1c/0xb0 [ 247.982420][ T9574] wants_mount_setattr+0x12d/0x6b0 [ 247.982522][ T9574] __se_sys_mount_setattr+0xf6/0x260 [ 247.982546][ T9574] __x64_sys_mount_setattr+0x67/0x80 [ 247.982569][ T9574] x64_sys_call+0x2f2f/0x3020 [ 247.982591][ T9574] do_syscall_64+0x12c/0x3b0 [ 247.982613][ T9574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.982684][ T9574] RIP: 0033:0x7f546bcacdd9 [ 247.982704][ T9574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.982769][ T9574] RSP: 002b:00007f546a6ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 247.982941][ T9574] RAX: ffffffffffffffda RBX: 00007f546bf25fa0 RCX: 00007f546bcacdd9 [ 247.982956][ T9574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 247.982971][ T9574] RBP: 00007f546a6ff090 R08: 0000000000000020 R09: 0000000000000000 [ 247.982987][ T9574] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 247.983000][ T9574] R13: 00007f546bf26038 R14: 00007f546bf25fa0 R15: 00007ffc9c1c5f88 [ 247.983065][ T9574] [ 248.161359][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.224426][ T9584] netlink: 'syz.0.1905': attribute type 2 has an invalid length. [ 248.232834][ T9580] gre0 speed is unknown, defaulting to 1000 [ 248.275204][ T9585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'. [ 248.332916][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.378903][ T9589] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1904'. [ 248.458222][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.564370][ T9602] loop0: detected capacity change from 0 to 512 [ 248.578274][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.602176][ T9602] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.666562][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 248.678932][ T9595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1909'. [ 248.689053][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 248.716991][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.725649][ T9602] EXT4-fs (loop0): 1 truncate cleaned up [ 248.731972][ T9602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.937715][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.166209][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.216349][ T28] audit: type=1400 audit(249.134:8639): avc: denied { watch watch_reads } for pid=9601 comm="syz.0.1911" path="/354/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.408251][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.608424][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 250.008746][ T28] audit: type=1400 audit(249.144:8640): avc: denied { execute_no_trans } for pid=9601 comm="syz.0.1911" path="/354/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.032589][ T28] audit: type=1400 audit(249.154:8641): avc: denied { setattr } for pid=9601 comm="syz.0.1911" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.055485][ T28] audit: type=1400 audit(249.164:8642): avc: denied { unlink } for pid=9601 comm="syz.0.1911" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.146642][ T9631] loop6: detected capacity change from 0 to 2048 [ 250.181068][ T9634] GUP no longer grows the stack in syz.1.1920 (9634): 200000006000-200000009000 (200000004000) [ 250.190041][ T9638] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1923'. [ 250.191813][ T9634] CPU: 1 UID: 0 PID: 9634 Comm: syz.1.1920 Tainted: G W syzkaller #0 PREEMPT(full) [ 250.191846][ T9634] Tainted: [W]=WARN [ 250.191854][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.191867][ T9634] Call Trace: [ 250.191874][ T9634] [ 250.191882][ T9634] __dump_stack+0x1d/0x30 [ 250.191909][ T9634] dump_stack_lvl+0x95/0xd0 [ 250.191941][ T9634] dump_stack+0x15/0x1b [ 250.191961][ T9634] fixup_user_fault+0x4fb/0x550 [ 250.191989][ T9634] fault_in_user_writeable+0x5c/0xc0 [ 250.192020][ T9634] futex_lock_pi+0x621/0x800 [ 250.192062][ T9634] ? __pfx_futex_wake_mark+0x10/0x10 [ 250.192095][ T9634] do_futex+0x21f/0x380 [ 250.192127][ T9634] __se_sys_futex+0x2f6/0x370 [ 250.192229][ T9634] ? xfd_validate_state+0x45/0xf0 [ 250.192260][ T9634] __x64_sys_futex+0x78/0x90 [ 250.192352][ T9634] x64_sys_call+0x24ab/0x3020 [ 250.192428][ T9634] do_syscall_64+0x12c/0x3b0 [ 250.192525][ T9634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.192595][ T9634] RIP: 0033:0x7f7a98cbcdd9 [ 250.192612][ T9634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.192631][ T9634] RSP: 002b:00007f7a97717028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 250.192653][ T9634] RAX: ffffffffffffffda RBX: 00007f7a98f35fa0 RCX: 00007f7a98cbcdd9 [ 250.192667][ T9634] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 250.192710][ T9634] RBP: 00007f7a98d52d69 R08: 0000000000000000 R09: 0000000000000082 [ 250.192724][ T9634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.192737][ T9634] R13: 00007f7a98f36038 R14: 00007f7a98f35fa0 R15: 00007fffc737b088 [ 250.192757][ T9634] [ 250.216067][ T9640] loop5: detected capacity change from 0 to 512 [ 250.397697][ T9640] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 250.412756][ T9640] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 250.423898][ T9640] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1925: bad orphan inode 4 [ 250.434137][ T9631] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 250.438144][ T9640] loop5: lost filesystem error report for type 5 error -117 [ 250.442273][ T9631] loop6: partition table partially beyond EOD, truncated [ 250.450797][ T9640] EXT4-fs (loop5): 1 orphan inode deleted [ 250.456900][ T9631] loop6: p1 size 393216 extends beyond EOD, [ 250.462637][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 250.462662][ C0] EXT4-fs (loop5): initial error at time 250: ext4_orphan_get:1423 [ 250.468684][ T9631] truncated [ 250.475084][ C0] [ 250.475093][ C0] EXT4-fs (loop5): last error at time 250: ext4_orphan_get:1423 [ 250.484055][ T9631] loop6: p3 start 4225 is beyond EOD, [ 250.486144][ C0] [ 250.502987][ T9648] loop4: detected capacity change from 0 to 1024 [ 250.504112][ T9631] truncated [ 250.514121][ T9631] loop6: p5 size 393216 extends beyond EOD, truncated [ 250.543788][ T9648] EXT4-fs: inline encryption not supported [ 250.571612][ T9648] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 250.571612][ T9648] [ 250.584209][ T9654] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.1925: lblock 0 mapped to illegal pblock 4 (length 1) [ 250.651869][ T4200] IPVS: starting estimator thread 0... [ 250.726243][ T9661] loop0: detected capacity change from 0 to 256 [ 250.817687][ T9661] FAT-fs (loop0): Directory bread(block 64) failed [ 250.824352][ T9661] FAT-fs (loop0): Directory bread(block 65) failed [ 250.830955][ T9661] FAT-fs (loop0): Directory bread(block 66) failed [ 250.837511][ T9661] FAT-fs (loop0): Directory bread(block 67) failed [ 250.844141][ T9661] FAT-fs (loop0): Directory bread(block 68) failed [ 250.850702][ T9661] FAT-fs (loop0): Directory bread(block 69) failed [ 250.857281][ T9661] FAT-fs (loop0): Directory bread(block 70) failed [ 250.863856][ T9661] FAT-fs (loop0): Directory bread(block 71) failed [ 250.870534][ T9661] FAT-fs (loop0): Directory bread(block 72) failed [ 250.877176][ T9661] FAT-fs (loop0): Directory bread(block 73) failed [ 250.890225][ T9659] IPVS: using max 2640 ests per chain, 132000 per kthread [ 251.012150][ T9664] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 251.065089][ T28] audit: type=1400 audit(251.024:8643): avc: denied { connect } for pid=9645 comm="syz.4.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.360655][ T9657] lo speed is unknown, defaulting to 1000 [ 251.373748][ T7659] EXT4-fs unmount: 2 callbacks suppressed [ 251.373766][ T7659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.392473][ T9657] lo speed is unknown, defaulting to 1000 [ 251.420547][ T9657] lo speed is unknown, defaulting to 1000 [ 251.448406][ T9657] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 251.471582][ T9657] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 251.506603][ T9657] lo speed is unknown, defaulting to 1000 [ 251.521907][ T9657] lo speed is unknown, defaulting to 1000 [ 251.558312][ T9657] lo speed is unknown, defaulting to 1000 [ 251.564543][ T9657] lo speed is unknown, defaulting to 1000 [ 251.570901][ T9657] lo speed is unknown, defaulting to 1000 [ 251.576989][ T9657] lo speed is unknown, defaulting to 1000 [ 251.834234][ T9690] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 251.906163][ T9690] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 251.943522][ T9690] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 251.980912][ T9690] bond2: (slave vxcan3): making interface the new active one [ 251.994208][ T9690] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 252.046528][ T28] audit: type=1400 audit(252.004:8644): avc: denied { bind } for pid=9706 comm="syz.5.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.068444][ T9701] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 252.091382][ T9701] bond2: (slave vxcan5): Enslaving as a backup interface with an up link [ 252.122363][ T9707] veth0_vlan: entered allmulticast mode [ 252.145242][ T9707] __nla_validate_parse: 3 callbacks suppressed [ 252.145274][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1947'. [ 252.168011][ T28] audit: type=1400 audit(252.124:8645): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 252.512990][ T9707] veth0_vlan (unregistering): left allmulticast mode [ 252.614602][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 252.623826][ T9728] tc_dump_action: action bad kind [ 252.870356][ T9741] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 252.881426][ T9741] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 252.896199][ T9741] netlink: 'syz.6.1957': attribute type 10 has an invalid length. [ 252.904100][ T9741] ipvlan0: entered allmulticast mode [ 252.909454][ T9741] veth0_vlan: entered allmulticast mode [ 252.916978][ T9741] team0: Device ipvlan0 failed to register rx_handler [ 252.945574][ T9742] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1958'. [ 252.990126][ T9742] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1958'. [ 253.048234][ T12] net_ratelimit: 17 callbacks suppressed [ 253.048264][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.208329][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.338147][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.416794][ T9757] FAULT_INJECTION: forcing a failure. [ 253.416794][ T9757] name failslab, interval 1, probability 0, space 0, times 0 [ 253.446427][ T9759] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.463071][ T9757] CPU: 1 UID: 0 PID: 9757 Comm: syz.0.1963 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.463221][ T9757] Tainted: [W]=WARN [ 253.463291][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.463304][ T9757] Call Trace: [ 253.463309][ T9757] [ 253.463317][ T9757] __dump_stack+0x1d/0x30 [ 253.463340][ T9757] dump_stack_lvl+0x95/0xd0 [ 253.463363][ T9757] dump_stack+0x15/0x1b [ 253.463385][ T9757] should_fail_ex+0x263/0x280 [ 253.463476][ T9757] should_failslab+0x8c/0xb0 [ 253.463503][ T9757] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 253.463614][ T9757] ? __alloc_skb+0x2d6/0x690 [ 253.463690][ T9757] __alloc_skb+0x2d6/0x690 [ 253.463720][ T9757] ? __alloc_skb+0x200/0x690 [ 253.463793][ T9757] alloc_skb_with_frags+0x7e/0x3d0 [ 253.463829][ T9757] ? __rcu_read_unlock+0x4e/0x70 [ 253.463854][ T9757] ? avc_has_perm_noaudit+0xab/0x130 [ 253.463922][ T9757] sock_alloc_send_pskb+0x44d/0x500 [ 253.463985][ T9757] ? sock_cmsg_send+0x186/0x1b0 [ 253.464011][ T9757] sco_sock_sendmsg+0x18f/0x5e0 [ 253.464094][ T9757] ? __pfx_sco_sock_sendmsg+0x10/0x10 [ 253.464127][ T9757] ____sys_sendmsg+0x563/0x5b0 [ 253.464156][ T9757] ___sys_sendmsg+0x195/0x1e0 [ 253.464178][ T9757] ? path_openat+0x1b01/0x2050 [ 253.464266][ T9757] __sys_sendmmsg+0x185/0x320 [ 253.464300][ T9757] __x64_sys_sendmmsg+0x57/0x70 [ 253.464334][ T9757] x64_sys_call+0x27aa/0x3020 [ 253.464356][ T9757] do_syscall_64+0x12c/0x3b0 [ 253.464379][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.464399][ T9757] RIP: 0033:0x7fca7e5acdd9 [ 253.464488][ T9757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.464505][ T9757] RSP: 002b:00007fca7d007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 253.464526][ T9757] RAX: ffffffffffffffda RBX: 00007fca7e825fa0 RCX: 00007fca7e5acdd9 [ 253.464543][ T9757] RDX: 0000000000000001 RSI: 00002000000027c0 RDI: 0000000000000004 [ 253.464632][ T9757] RBP: 00007fca7d007090 R08: 0000000000000000 R09: 0000000000000000 [ 253.464645][ T9757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.464658][ T9757] R13: 00007fca7e826038 R14: 00007fca7e825fa0 R15: 00007ffe4b50eb78 [ 253.464678][ T9757] [ 253.728218][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.757114][ T9762] gre0 speed is unknown, defaulting to 1000 [ 253.848178][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.876788][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1968'. [ 253.891016][ T9771] tc_dump_action: action bad kind [ 254.793276][ T9775] loop0: detected capacity change from 0 to 2048 [ 254.883731][ T9759] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.903031][ T9762] lo speed is unknown, defaulting to 1000 [ 255.068291][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 255.894228][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 255.917115][ T9759] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.008169][ T9775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.916933][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 256.953051][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.347918][ T9797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1974'. [ 257.426420][ T9802] loop6: detected capacity change from 0 to 512 [ 257.452737][ T9802] EXT4-fs: Ignoring removed orlov option [ 257.482119][ T9802] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 257.500137][ T9804] netlink: 'syz.1.1978': attribute type 5 has an invalid length. [ 257.508610][ T9804] netlink: 'syz.1.1978': attribute type 11 has an invalid length. [ 257.517678][ T9802] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #16: comm syz.6.1977: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 257.535237][ T9802] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 257.535517][ T9802] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1977: couldn't read orphan inode 16 (err -117) [ 257.544691][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 257.544713][ C0] EXT4-fs (loop6): initial error at time 257: ext4_ext_check_inode:521: inode 16 [ 257.544741][ C0] EXT4-fs (loop6): last error at time 257: ext4_ext_check_inode:521: inode 16 [ 257.585129][ T9802] loop6: lost filesystem error report for type 5 error -117 [ 257.585352][ T9802] EXT4-fs (loop6): 1 orphan inode deleted [ 257.599498][ T9802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.673507][ T9759] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.719649][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 257.763629][ T3439] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.792594][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.811527][ T3439] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.838744][ T3439] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.902972][ T9817] syzkaller0: entered promiscuous mode [ 257.908533][ T9817] syzkaller0: entered allmulticast mode [ 257.918649][ T3439] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.948197][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.061653][ T28] audit: type=1400 audit(258.024:8646): avc: denied { connect } for pid=9825 comm="syz.0.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 258.198238][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.267583][ T28] audit: type=1400 audit(258.224:8647): avc: denied { name_connect } for pid=9841 comm="syz.4.1989" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 258.299695][ T9835] loop6: detected capacity change from 0 to 512 [ 258.313008][ T9831] loop0: detected capacity change from 0 to 512 [ 258.318105][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.326833][ T9835] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 258.370373][ T9835] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 258.383615][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 258.414380][ T9831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.428151][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.548100][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.798146][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.841890][ T9863] IPVS: length: 165 != 8 [ 258.908591][ T9855] dummy0 (unregistering): left promiscuous mode [ 258.928878][ T9869] loop6: detected capacity change from 0 to 1024 [ 258.957326][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1996'. [ 258.986591][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.014747][ T9872] random: crng reseeded on system resumption [ 259.069012][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1996'. [ 259.084658][ T9876] netlink: 'syz.1.2000': attribute type 21 has an invalid length. [ 259.095038][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.208121][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.249949][ T9891] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61459 sclass=netlink_xfrm_socket pid=9891 comm=syz.1.2005 [ 259.318501][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.368187][ T9898] loop0: detected capacity change from 0 to 512 [ 259.375401][ T9898] EXT4-fs: Ignoring removed bh option [ 259.384783][ T9898] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.440735][ T9898] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2008: corrupted in-inode xattr: e_value size too large [ 259.455102][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.455244][ T9898] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.462701][ T9898] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2008: couldn't read orphan inode 15 (err -117) [ 259.472073][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 259.472098][ C1] EXT4-fs (loop0): initial error at time 259: ext4_iget_extra_inode:5128: inode 15 [ 259.472132][ C1] EXT4-fs (loop0): last error at time 259: ext4_iget_extra_inode:5128: inode 15 [ 259.509392][ T9898] loop0: lost filesystem error report for type 5 error -117 [ 259.510395][ T9898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.569010][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.974184][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.284197][ T28] audit: type=1400 audit(260.244:8648): avc: denied { setopt } for pid=9923 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 260.473311][ T9934] x_tables: unsorted entry at hook 1 [ 261.159733][ T9942] loop4: detected capacity change from 0 to 512 [ 261.402505][ T9942] ext4: Unknown parameter 'smackfstransmute' [ 262.107197][ T9946] syzkaller0: entered promiscuous mode [ 262.122232][ T9946] syzkaller0: entered allmulticast mode [ 262.192953][ T9951] smc: ib device syz1 ibport 2 applied user defined pnetid SYZ0 [ 263.309885][ T107] net_ratelimit: 16 callbacks suppressed [ 263.309906][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.345506][ T9974] loop6: detected capacity change from 0 to 512 [ 263.363911][ T28] audit: type=1400 audit(2000000000.000:8649): avc: denied { mount } for pid=9976 comm="syz.1.2031" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 263.371740][ T9974] ext4: Unknown parameter 'smackfstransmute' [ 263.429161][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.454079][ T9981] loop5: detected capacity change from 0 to 512 [ 263.472124][ T9981] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51489!=18645) [ 263.488780][ T9981] EXT4-fs (loop5): group descriptors corrupted! [ 263.567489][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.333666][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.366497][ T9977] syz.1.2031 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 264.464489][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2042'. [ 264.528154][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.551405][T10014] loop4: detected capacity change from 0 to 512 [ 264.562047][T10014] ext4: Unknown parameter 'smackfstransmute' [ 264.599081][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 264.649779][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.666096][ T28] audit: type=1400 audit(2000000001.290:8650): avc: denied { setopt } for pid=10020 comm="syz.1.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 264.768153][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.823961][T10039] loop0: detected capacity change from 0 to 1024 [ 264.846864][T10039] EXT4-fs: Ignoring removed bh option [ 264.898122][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.970285][T10039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.984705][T10047] loop4: detected capacity change from 0 to 1024 [ 265.007177][T10047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.043083][T10052] loop5: detected capacity change from 0 to 128 [ 265.054699][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.080362][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.170209][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.284305][T10064] loop5: detected capacity change from 0 to 512 [ 265.300344][T10064] ext4: Unknown parameter 'smackfstransmute' [ 265.469526][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2071'. [ 265.480135][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 265.493079][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 265.510993][T10079] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2072'. [ 265.592992][T10081] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2074'. [ 265.610011][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.721465][T10088] loop6: detected capacity change from 0 to 512 [ 265.736670][T10088] ext4: Unknown parameter 'smackfstransmute' [ 266.378773][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'. [ 266.423256][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 266.428047][T10100] tc_dump_action: action bad kind [ 266.477040][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 266.812974][T10113] loop5: detected capacity change from 0 to 512 [ 266.823948][T10099] loop4: detected capacity change from 0 to 512 [ 267.200826][T10113] EXT4-fs (loop5): orphan cleanup on readonly fs [ 267.259592][T10099] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2080: corrupted in-inode xattr: invalid ea_ino [ 267.274390][T10099] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.278157][ C1] EXT4-fs (loop4): initial error at time 2000000003: ext4_iget_extra_inode:5128 [ 267.288793][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.2085: corrupted inode contents [ 267.293549][ C1] : inode 15 [ 267.293979][ C1] EXT4-fs (loop4): last error at time 2000000003: ext4_iget_extra_inode:5128: inode 15 [ 267.331305][T10124] bridge_slave_1: left allmulticast mode [ 267.352345][T10099] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2080: couldn't read orphan inode 15 (err -117) [ 267.364113][T10113] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.375301][T10113] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 267.375447][T10099] loop4: lost filesystem error report for type 5 error -117 [ 267.377248][T10113] loop5: lost filesystem error report for type 5 error -117 [ 267.378393][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 267.400067][T10124] bridge_slave_1: left promiscuous mode [ 267.406438][ C0] EXT4-fs (loop5): initial error at time 2000000004: ext4_do_update_inode:5690: inode 15 [ 267.406739][ C0] EXT4-fs (loop5): last error at time 2000000004: ext4_do_update_inode:5690: inode 15 [ 267.470151][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.523992][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.2085: corrupted inode contents [ 267.531796][T10099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.542262][T10124] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 267.571450][T10108] netlink: 'syz.0.2083': attribute type 27 has an invalid length. [ 267.581232][T10113] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.584185][T10113] EXT4-fs error (device loop5): ext4_evict_inode:315: inode #15: comm syz.5.2085: mark_inode_dirty error [ 267.614425][T10128] loop0: detected capacity change from 0 to 512 [ 267.631346][T10128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.639019][T10113] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.658301][T10113] EXT4-fs (loop5): 1 orphan inode deleted [ 267.681653][T10113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 267.693239][T10128] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.736735][ T7659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.801055][T10108] EXT4-fs error (device loop0): __ext4_add_entry:2412: inode #12: comm syz.0.2083: Directory hole found for htree leaf block 0 [ 267.829675][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.882220][T10108] EXT4-fs (loop0): Remounting filesystem read-only [ 267.932027][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.948921][ T3439] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 267.959668][ T3439] Quota error (device loop0): write_blk: dquota write failed [ 267.967948][ T3439] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 268.049842][T10149] loop0: detected capacity change from 0 to 512 [ 268.051365][T10151] loop4: detected capacity change from 0 to 512 [ 268.077500][T10151] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.095461][T10149] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 268.116779][T10151] EXT4-fs (loop4): 1 truncate cleaned up [ 268.130233][T10149] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: inode #32: comm syz.0.2094: iget: special inode unallocated [ 268.132816][T10151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.157493][T10149] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 268.158347][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 268.163249][T10149] EXT4-fs (loop0): no journal found [ 268.169441][ C1] EXT4-fs (loop0): initial error at time 2000000004: ext4_get_journal_inode:5896: inode 32 [ 268.196101][T10149] EXT4-fs (loop0): can't get journal size [ 268.198260][ C1] EXT4-fs (loop0): last error at time 2000000004: ext4_get_journal_inode:5896: inode 32 [ 268.205597][T10149] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 268.215863][T10149] EXT4-fs (loop0): failed to initialize system zone (-117) [ 268.215901][T10149] EXT4-fs (loop0): mount failed [ 268.257474][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.317603][T10149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10149 comm=syz.0.2094 [ 268.334951][T10161] loop6: detected capacity change from 0 to 512 [ 268.348496][ T3439] net_ratelimit: 22 callbacks suppressed [ 268.348515][ T3439] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.366793][T10161] ext4: Unknown parameter 'smackfstransmute' [ 268.426618][T10168] tc_dump_action: action bad kind [ 268.478110][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.615389][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.693479][T10184] loop4: detected capacity change from 0 to 512 [ 268.694715][T10168] loop6: detected capacity change from 0 to 512 [ 268.725689][T10184] EXT4-fs (loop4): too many log groups per flexible block group [ 268.740406][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.747965][T10184] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 268.789553][T10184] EXT4-fs (loop4): mount failed [ 268.851854][T10168] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2102: corrupted in-inode xattr: invalid ea_ino [ 268.882526][T10168] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 268.888085][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 268.903723][ C0] EXT4-fs (loop6): initial error at time 2000000005: ext4_iget_extra_inode:5128: inode 15 [ 268.913667][ C0] EXT4-fs (loop6): last error at time 2000000005: ext4_iget_extra_inode:5128: inode 15 [ 268.925645][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.926836][T10168] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2102: couldn't read orphan inode 15 (err -117) [ 268.958704][T10168] loop6: lost filesystem error report for type 5 error -117 [ 269.024473][T10200] loop4: detected capacity change from 0 to 512 [ 269.039235][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.052869][T10200] ext4: Unknown parameter 'smackfstransmute' [ 269.108094][T10168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.161860][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.279155][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.295645][T10138] loop5: detected capacity change from 0 to 4096 [ 269.389618][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.398950][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.508517][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.511111][T10226] __nla_validate_parse: 5 callbacks suppressed [ 269.511125][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2120'. [ 269.537537][T10138] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 269.548764][T10138] System zones: 0-5 [ 269.637031][T10138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.690343][ T7659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.797374][T10259] EXT4-fs (loop5): 1 truncate cleaned up [ 269.809494][T10259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.914276][T10259] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.2123: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 269.966076][T10272] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.2125: bit already cleared for inode 11 [ 269.980703][T10272] loop4: lost filesystem error report for type 5 error -117 [ 269.983944][T10272] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 269.991370][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 269.991391][ C0] EXT4-fs (loop4): initial error at time 2000000006: ext4_free_inode:354 [ 269.991421][ C0] EXT4-fs (loop4): last error at time 2000000006: ext4_free_inode:354 [ 270.050268][T10272] loop4: lost filesystem error report for type 5 error -117 [ 270.050623][T10272] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 270.070422][T10272] loop4: lost filesystem error report for type 5 error -117 [ 270.070700][T10272] EXT4-fs (loop4): 1 orphan inode deleted [ 270.090866][T10272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.116700][ T7659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.127651][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2127'. [ 270.136745][T10286] tc_dump_action: action bad kind [ 270.158225][T10288] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2128'. [ 270.183124][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.318182][T10305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.358036][T10305] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 270.366100][T10305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 270.378328][T10305] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 270.409072][T10305] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 270.418708][T10305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 270.577640][T10285] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2127: corrupted in-inode xattr: invalid ea_ino [ 270.593985][T10285] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 270.596455][T10285] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2127: couldn't read orphan inode 15 (err -117) [ 270.622762][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 270.622783][ C1] EXT4-fs (loop6): initial error at time 2000000007: ext4_iget_extra_inode:5128: inode 15 [ 270.622811][ C1] EXT4-fs (loop6): last error at time 2000000007: ext4_iget_extra_inode:5128: inode 15 [ 270.673420][T10327] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2134: dx entry: limit 65535 != root limit 120 [ 270.685817][T10327] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2134: Corrupt directory, running e2fsck is recommended [ 270.704016][T10316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.725239][T10285] loop6: lost filesystem error report for type 5 error -117 [ 270.795004][T10285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.974708][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.129427][T10339] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 271.153102][T10341] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2144'. [ 271.162477][T10341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2144'. [ 271.177176][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2144'. [ 271.195893][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 271.195956][ T7659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.223697][ T28] audit: type=1400 audit(2000000007.850:8651): avc: denied { create } for pid=10338 comm="syz.4.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 271.236330][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 271.265382][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 271.274820][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 271.338005][T10339] EXT4-fs (loop4): orphan cleanup on readonly fs [ 271.345090][T10339] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2143: corrupted inode contents [ 271.357254][T10339] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.357689][T10339] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 271.366870][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 271.366893][ C0] EXT4-fs (loop4): initial error at time 2000000007: ext4_do_update_inode:5690: inode 15 [ 271.366942][ C0] EXT4-fs (loop4): last error at time 2000000007: ext4_do_update_inode:5690: inode 15 [ 271.408664][T10339] loop4: lost filesystem error report for type 5 error -117 [ 271.408899][T10339] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.2143: corrupted inode contents [ 271.439557][T10339] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.443751][T10339] EXT4-fs error (device loop4): ext4_evict_inode:315: inode #15: comm syz.4.2143: mark_inode_dirty error [ 271.469211][T10339] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.469604][T10339] EXT4-fs (loop4): 1 orphan inode deleted [ 271.490932][T10356] tc_dump_action: action bad kind [ 271.729359][T10339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 271.981386][T10358] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2149: corrupted in-inode xattr: invalid ea_ino [ 271.995807][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.005526][T10358] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2149: couldn't read orphan inode 15 (err -117) [ 272.017704][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 272.017727][ C1] EXT4-fs (loop6): initial error at time 2000000008: ext4_iget_extra_inode:5128: inode 15 [ 272.017757][ C1] EXT4-fs (loop6): last error at time 2000000008: ext4_iget_extra_inode:5128: inode 15 [ 272.054667][T10358] loop6: lost filesystem error report for type 5 error -117 [ 272.055310][T10358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.135098][T10358] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.2149: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 272.168641][T10373] netlink: 'syz.0.2155': attribute type 9 has an invalid length. [ 272.169155][T10373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=10373 comm=syz.0.2155 [ 272.227324][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.229179][T10378] set_capacity_and_notify: 7 callbacks suppressed [ 272.229195][T10378] loop4: detected capacity change from 0 to 2048 [ 272.253754][T10378] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000802) [ 272.385102][T10384] loop6: detected capacity change from 0 to 1024 [ 272.406117][T10384] EXT4-fs: Ignoring removed i_version option [ 272.701825][T10384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.915881][T10389] loop4: detected capacity change from 0 to 1024 [ 272.980888][T10389] EXT4-fs: inline encryption not supported [ 273.001146][T10384] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 273.005073][T10389] EXT4-fs: Ignoring removed nobh option [ 273.030085][T10384] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 273.030122][T10384] EXT4-fs (loop6): This should not happen!! Data will be lost [ 273.030122][T10384] [ 273.030138][T10384] EXT4-fs (loop6): Total free blocks count 0 [ 273.030152][T10384] EXT4-fs (loop6): Free/Dirty block details [ 273.030180][T10384] EXT4-fs (loop6): free_blocks=20480 [ 273.030195][T10384] EXT4-fs (loop6): dirty_blocks=2960 [ 273.030209][T10384] EXT4-fs (loop6): Block reservation details [ 273.030242][T10384] EXT4-fs (loop6): i_reserved_data_blocks=185 [ 273.109722][ T36] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 273.127324][T10389] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 273.129677][ T7919] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 273.153925][T10389] System zones: 0-1, 3-12 [ 273.203922][T10389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.206919][ T28] audit: type=1400 audit(2000000009.830:8652): avc: denied { connect } for pid=10411 comm="syz.6.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 273.228788][T10410] bond3: option ad_select: invalid value (4) [ 273.243318][T10410] bond3 (unregistering): Released all slaves [ 273.266281][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.407445][T10414] tc_dump_action: action bad kind [ 273.429231][T10423] loop0: detected capacity change from 0 to 512 [ 273.458294][ T887] net_ratelimit: 31 callbacks suppressed [ 273.458332][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 273.505017][T10423] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2167: corrupted in-inode xattr: invalid ea_ino [ 273.518482][T10423] fserror_report: 1 callbacks suppressed [ 273.518555][T10423] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 273.586176][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 273.603040][T10423] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2167: couldn't read orphan inode 15 (err -117) [ 273.615172][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 273.615191][ C1] EXT4-fs (loop0): initial error at time 2000000010: ext4_iget_extra_inode:5128: inode 15 [ 273.615218][ C1] EXT4-fs (loop0): last error at time 2000000010: ext4_iget_extra_inode:5128: inode 15 [ 273.644142][T10423] loop0: lost filesystem error report for type 5 error -117 [ 273.644753][T10423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.734622][T10423] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.2167: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 273.799129][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 273.898916][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.918147][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.028173][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.075053][T10461] x_tables: ip_tables: udp match: only valid for protocol 17 [ 274.138529][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.248523][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.382732][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.498216][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.517107][T10481] loop4: detected capacity change from 0 to 512 [ 274.555411][T10481] EXT4-fs: Ignoring removed nobh option [ 274.589994][T10481] EXT4-fs: Ignoring removed orlov option [ 274.635368][T10481] EXT4-fs error (device loop4): __ext4_iget:5481: inode #11: block 1: comm syz.4.2188: invalid block [ 274.649901][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.712035][T10481] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 274.712536][T10481] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2188: couldn't read orphan inode 11 (err -117) [ 274.722538][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 274.722559][ C1] EXT4-fs (loop4): initial error at time 2000000011: __ext4_iget:5481: inode 11: block 1 [ 274.722628][ C1] EXT4-fs (loop4): last error at time 2000000011: __ext4_iget:5481: inode 11: block 1 [ 274.812166][T10481] loop4: lost filesystem error report for type 5 error -117 [ 274.813725][T10481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.883415][T10488] __nla_validate_parse: 82 callbacks suppressed [ 274.883456][T10488] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2191'. [ 274.915069][T10488] x_tables: ip_tables: udp match: only valid for protocol 17 [ 274.963407][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.973824][T10480] netlink: 'syz.4.2188': attribute type 21 has an invalid length. [ 274.983260][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.038866][T10483] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 275.076184][T10481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.097131][T10498] FAULT_INJECTION: forcing a failure. [ 275.097131][T10498] name failslab, interval 1, probability 0, space 0, times 0 [ 275.109933][T10498] CPU: 1 UID: 0 PID: 10498 Comm: syz.4.2194 Tainted: G W syzkaller #0 PREEMPT(full) [ 275.109967][T10498] Tainted: [W]=WARN [ 275.109975][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.109988][T10498] Call Trace: [ 275.109995][T10498] [ 275.110017][T10498] __dump_stack+0x1d/0x30 [ 275.110043][T10498] dump_stack_lvl+0x95/0xd0 [ 275.110137][T10498] dump_stack+0x15/0x1b [ 275.110203][T10498] should_fail_ex+0x263/0x280 [ 275.110299][T10498] ? ctnetlink_alloc_filter+0x4d/0x4f0 [ 275.110339][T10498] should_failslab+0x8c/0xb0 [ 275.110374][T10498] __kmalloc_cache_noprof+0x5f/0x400 [ 275.110450][T10498] ctnetlink_alloc_filter+0x4d/0x4f0 [ 275.110479][T10498] ? __netlink_lookup+0x276/0x2b0 [ 275.110556][T10498] ctnetlink_start+0xc3/0x110 [ 275.110724][T10498] __netlink_dump_start+0x334/0x520 [ 275.110837][T10498] ctnetlink_get_conntrack+0x13b/0x470 [ 275.110875][T10498] ? __pfx_ctnetlink_start+0x10/0x10 [ 275.110907][T10498] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 275.110943][T10498] ? __pfx_ctnetlink_done+0x10/0x10 [ 275.111027][T10498] nfnetlink_rcv_msg+0x4fe/0x5d0 [ 275.111069][T10498] netlink_rcv_skb+0x123/0x220 [ 275.111090][T10498] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 275.111128][T10498] nfnetlink_rcv+0x167/0x1720 [ 275.111149][T10498] ? xas_load+0x413/0x430 [ 275.111227][T10498] ? xas_load+0x413/0x430 [ 275.111281][T10498] ? ktime_get+0x212/0x240 [ 275.111310][T10498] ? lapic_next_event+0x11/0x20 [ 275.111334][T10498] ? clockevents_program_event+0x2fd/0x340 [ 275.111360][T10498] ? tick_program_event+0x79/0xc0 [ 275.111391][T10498] ? _raw_spin_unlock+0x9/0x30 [ 275.111414][T10498] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 275.111486][T10498] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 275.111511][T10498] ? set_normalized_timespec64+0xe0/0x110 [ 275.111556][T10498] ? __account_obj_stock+0x3d5/0x590 [ 275.111579][T10498] ? irqentry_exit+0x527/0x5b0 [ 275.111682][T10498] ? __rcu_read_unlock+0x4e/0x70 [ 275.111733][T10498] ? __rcu_read_unlock+0x4e/0x70 [ 275.111756][T10498] ? avc_has_perm_noaudit+0xab/0x130 [ 275.111789][T10498] ? selinux_nlmsg_lookup+0x99/0x890 [ 275.111826][T10498] ? selinux_netlink_send+0x5c2/0x610 [ 275.111854][T10498] ? __rcu_read_unlock+0x33/0x70 [ 275.111873][T10498] ? __netlink_lookup+0x276/0x2b0 [ 275.111902][T10498] netlink_unicast+0x5a8/0x680 [ 275.111975][T10498] netlink_sendmsg+0x5c8/0x6f0 [ 275.112007][T10498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.112037][T10498] ____sys_sendmsg+0x563/0x5b0 [ 275.112114][T10498] ___sys_sendmsg+0x195/0x1e0 [ 275.112149][T10498] __x64_sys_sendmsg+0xd4/0x160 [ 275.112180][T10498] x64_sys_call+0x194c/0x3020 [ 275.112206][T10498] do_syscall_64+0x12c/0x3b0 [ 275.112289][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.112389][T10498] RIP: 0033:0x7f0ea276cdd9 [ 275.112409][T10498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.112428][T10498] RSP: 002b:00007f0ea11c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.112501][T10498] RAX: ffffffffffffffda RBX: 00007f0ea29e5fa0 RCX: 00007f0ea276cdd9 [ 275.112516][T10498] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 275.112531][T10498] RBP: 00007f0ea11c7090 R08: 0000000000000000 R09: 0000000000000000 [ 275.112545][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.112558][T10498] R13: 00007f0ea29e6038 R14: 00007f0ea29e5fa0 R15: 00007ffe14127758 [ 275.112589][T10498] [ 275.462552][T10493] loop5: detected capacity change from 0 to 512 [ 275.548163][T10493] EXT4-fs: Ignoring removed bh option [ 275.565347][T10493] EXT4-fs: inline encryption not supported [ 275.608150][T10493] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.698641][T10493] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.2189: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 2, max 0(0), depth 0(0) [ 275.712862][T10496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.734185][T10493] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 275.734396][T10493] EXT4-fs (loop5): get root inode failed [ 275.749232][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 275.749255][ C0] EXT4-fs (loop5): last error at time 2000000012: ext4_ext_check_inode:521: inode 2 [ 275.808383][T10493] EXT4-fs (loop5): mount failed [ 276.085505][ T28] audit: type=1400 audit(2000000012.700:8653): avc: denied { getopt } for pid=10503 comm="syz.4.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 276.763828][T10523] loop0: detected capacity change from 0 to 1024 [ 276.770655][T10523] ext4: Unknown parameter 'nouser_xattr' [ 277.561195][T10535] loop4: detected capacity change from 0 to 512 [ 277.679036][T10535] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2202: inode has both inline data and extents flags [ 277.718407][T10535] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.719958][T10535] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2202: couldn't read orphan inode 15 (err -117) [ 277.729332][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 277.729349][ C1] EXT4-fs (loop4): initial error at time 2000000014: ext4_orphan_get:1397: inode 15 [ 277.729382][ C1] EXT4-fs (loop4): last error at time 2000000014: ext4_orphan_get:1397: inode 15 [ 277.956109][T10543] netlink: 'syz.1.2205': attribute type 21 has an invalid length. [ 277.974948][T10543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2205'. [ 278.298573][T10535] loop4: lost filesystem error report for type 5 error -117 [ 278.337962][T10535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.388726][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 278.559342][ T107] net_ratelimit: 18 callbacks suppressed [ 278.559387][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 278.728199][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 278.769840][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.933963][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 279.048108][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 279.158275][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 279.244317][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2209'. [ 279.255232][T10564] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2210'. [ 279.272361][T10562] loop4: detected capacity change from 0 to 512 [ 279.317337][T10562] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 279.331549][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 279.370387][T10562] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #32: comm syz.4.2209: iget: special inode unallocated [ 279.383290][T10562] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 279.383534][T10562] EXT4-fs (loop4): no journal found [ 279.397950][T10562] EXT4-fs (loop4): can't get journal size [ 279.408232][T10562] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 279.430082][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 279.436553][ C1] EXT4-fs (loop4): initial error at time 2000000015: ext4_get_journal_inode:5896: inode 32 [ 279.446619][ C1] EXT4-fs (loop4): last error at time 2000000015: ext4_get_journal_inode:5896: inode 32 [ 279.456822][T10567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2211'. [ 279.466981][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 279.477104][T10562] EXT4-fs (loop4): failed to initialize system zone (-117) [ 279.487823][T10562] EXT4-fs (loop4): mount failed [ 279.516344][T10570] IPv6: sit2: Disabled Multicast RS [ 279.522436][T10570] sit2: entered allmulticast mode [ 279.589551][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 279.748703][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 279.896336][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 280.809922][T10584] loop5: detected capacity change from 0 to 512 [ 280.821295][T10584] EXT4-fs: Ignoring removed nobh option [ 280.857547][T10584] EXT4-fs (loop5): blocks per group (23) and clusters per group (32768) inconsistent [ 280.979400][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2220'. [ 281.372746][T10605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10605 comm=syz.0.2224 [ 281.409029][T10607] xfrm1: entered promiscuous mode [ 281.576442][T10616] FAULT_INJECTION: forcing a failure. [ 281.576442][T10616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.618412][T10616] CPU: 0 UID: 0 PID: 10616 Comm: syz.5.2231 Tainted: G W syzkaller #0 PREEMPT(full) [ 281.618515][T10616] Tainted: [W]=WARN [ 281.618522][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.618534][T10616] Call Trace: [ 281.618542][T10616] [ 281.618552][T10616] __dump_stack+0x1d/0x30 [ 281.618583][T10616] dump_stack_lvl+0x95/0xd0 [ 281.618651][T10616] dump_stack+0x15/0x1b [ 281.618672][T10616] should_fail_ex+0x263/0x280 [ 281.618751][T10616] should_fail+0xb/0x20 [ 281.618777][T10616] should_fail_usercopy+0x1a/0x20 [ 281.618808][T10616] _copy_to_user+0x20/0xa0 [ 281.618846][T10616] simple_read_from_buffer+0xb5/0x130 [ 281.618877][T10616] proc_fail_nth_read+0x10e/0x150 [ 281.618911][T10616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.618985][T10616] vfs_read+0x1ab/0x7f0 [ 281.619015][T10616] ? __rcu_read_unlock+0x4e/0x70 [ 281.619035][T10616] ? __fget_files+0x184/0x1c0 [ 281.619054][T10616] ? mutex_lock+0x57/0x90 [ 281.619115][T10616] ksys_read+0xdc/0x1a0 [ 281.619140][T10616] __x64_sys_read+0x40/0x50 [ 281.619258][T10616] x64_sys_call+0x2886/0x3020 [ 281.619291][T10616] do_syscall_64+0x12c/0x3b0 [ 281.619396][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.619419][T10616] RIP: 0033:0x7f50f10ed60e [ 281.619435][T10616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.619452][T10616] RSP: 002b:00007f50efb86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.619473][T10616] RAX: ffffffffffffffda RBX: 00007f50efb876c0 RCX: 00007f50f10ed60e [ 281.619488][T10616] RDX: 000000000000000f RSI: 00007f50efb870a0 RDI: 0000000000000004 [ 281.619536][T10616] RBP: 00007f50efb87090 R08: 0000000000000000 R09: 0000000000000000 [ 281.619551][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.619588][T10616] R13: 00007f50f13a6038 R14: 00007f50f13a5fa0 R15: 00007ffe965b2b78 [ 281.619609][T10616] [ 281.851411][T10620] netlink: 'syz.5.2233': attribute type 2 has an invalid length. [ 281.933140][T10624] loop5: detected capacity change from 0 to 2048 [ 282.008758][T10630] 9p: Bad value for 'rfdno' [ 282.024165][T10624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.202852][T10623] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 282.239982][T10623] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 282.308245][T10623] EXT4-fs (loop5): This should not happen!! Data will be lost [ 282.308245][T10623] [ 282.337008][T10623] EXT4-fs (loop5): Total free blocks count 0 [ 282.347073][T10623] EXT4-fs (loop5): Free/Dirty block details [ 282.353296][T10623] EXT4-fs (loop5): free_blocks=4096 [ 282.364938][T10623] EXT4-fs (loop5): dirty_blocks=512 [ 282.370350][T10623] EXT4-fs (loop5): Block reservation details [ 282.376556][T10623] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 282.493222][ T107] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 354 with error 28 [ 282.510256][ T7659] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 282.590639][T10640] loop5: detected capacity change from 0 to 128 [ 282.616638][T10637] loop0: detected capacity change from 0 to 8192 [ 282.656642][T10643] loop6: detected capacity change from 0 to 1024 [ 282.665731][T10637] loop0: p1 < > p2 p4 < p5 > [ 282.671037][T10643] EXT4-fs: Ignoring removed bh option [ 282.671425][T10637] loop0: partition table partially beyond EOD, truncated [ 282.685351][T10637] loop0: p1 start 134217728 is beyond EOD, truncated [ 282.692679][T10637] loop0: p2 size 591360 extends beyond EOD, truncated [ 282.702139][T10637] loop0: p5 size 591360 extends beyond EOD, truncated [ 282.710638][T10643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.792185][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2240'. [ 282.864726][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.882312][T10640] loop5: detected capacity change from 0 to 512 [ 283.949798][T10657] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2244'. [ 283.959690][ T57] net_ratelimit: 18 callbacks suppressed [ 283.959731][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 285.566604][T10667] netlink: 'syz.1.2244': attribute type 7 has an invalid length. [ 285.813854][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 285.842808][T10682] loop4: detected capacity change from 0 to 2048 [ 285.968727][T10682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.969552][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 286.049785][T10691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2251'. [ 286.260576][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 286.278817][T10695] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2251'. [ 286.398179][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 286.561126][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 286.689873][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 286.998378][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 287.095836][ T28] audit: type=1400 audit(287.055:8654): avc: denied { read } for pid=10709 comm="syz.6.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.140406][ T30] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 287.232929][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 287.275864][ T30] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 578 with error 28 [ 287.295248][ T30] EXT4-fs (loop4): This should not happen!! Data will be lost [ 287.295248][ T30] [ 287.305949][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2257'. [ 287.306736][ T30] EXT4-fs (loop4): Total free blocks count 0 [ 287.321037][ T30] EXT4-fs (loop4): Free/Dirty block details [ 287.327017][ T30] EXT4-fs (loop4): free_blocks=4096 [ 287.332656][ T30] EXT4-fs (loop4): dirty_blocks=608 [ 287.338991][ T30] EXT4-fs (loop4): Block reservation details [ 287.345111][ T30] EXT4-fs (loop4): i_reserved_data_blocks=38 [ 287.354104][ T30] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 287.367717][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 287.400178][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 287.696587][ T28] audit: type=1400 audit(287.655:8655): avc: denied { watch watch_reads } for pid=10732 comm="syz.1.2263" path="/520/file1" dev="tmpfs" ino=2745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.883110][ T3504] net_ratelimit: 9 callbacks suppressed [ 289.883131][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 289.907071][T10749] loop6: detected capacity change from 0 to 2048 [ 289.986777][T10749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.023737][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 290.363182][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 290.508118][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 290.628149][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 290.768173][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 290.898106][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 291.038343][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 291.057686][ T3504] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 291.120712][ T3504] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 291.168270][ T3504] EXT4-fs (loop6): This should not happen!! Data will be lost [ 291.168270][ T3504] [ 291.189089][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 291.216545][ T3504] EXT4-fs (loop6): Total free blocks count 0 [ 291.242657][ T3504] EXT4-fs (loop6): Free/Dirty block details [ 291.264739][ T3504] EXT4-fs (loop6): free_blocks=4096 [ 291.280900][ T3504] EXT4-fs (loop6): dirty_blocks=336 [ 291.286627][ T3504] EXT4-fs (loop6): Block reservation details [ 291.293026][ T3504] EXT4-fs (loop6): i_reserved_data_blocks=21 [ 291.304011][ T887] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 291.321612][ T7919] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 291.374368][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 291.460922][T10765] loop0: detected capacity change from 0 to 512 [ 291.470702][T10767] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2275'. [ 291.485893][T10765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 291.494973][T10767] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2275'. [ 291.528724][T10765] EXT4-fs (loop0): 1 truncate cleaned up [ 291.554916][T10765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.619260][T10775] loop6: detected capacity change from 0 to 256 [ 291.716866][T10775] FAT-fs (loop6): Directory bread(block 64) failed [ 291.723871][T10775] FAT-fs (loop6): Directory bread(block 65) failed [ 291.730532][T10775] FAT-fs (loop6): Directory bread(block 66) failed [ 291.737088][T10775] FAT-fs (loop6): Directory bread(block 67) failed [ 291.743852][T10775] FAT-fs (loop6): Directory bread(block 68) failed [ 291.750512][T10775] FAT-fs (loop6): Directory bread(block 69) failed [ 291.757408][T10775] FAT-fs (loop6): Directory bread(block 70) failed [ 291.764013][T10775] FAT-fs (loop6): Directory bread(block 71) failed [ 291.770790][T10775] FAT-fs (loop6): Directory bread(block 72) failed [ 291.777353][T10775] FAT-fs (loop6): Directory bread(block 73) failed [ 292.616106][T10784] loop4: detected capacity change from 0 to 2048 [ 293.023473][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.035042][T10784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.920181][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2284'. [ 294.988947][ T3504] net_ratelimit: 13 callbacks suppressed [ 294.988968][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 295.007064][ T3504] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 295.040917][ T3504] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 295.057906][ T3504] EXT4-fs (loop4): This should not happen!! Data will be lost [ 295.057906][ T3504] [ 295.067782][ T3504] EXT4-fs (loop4): Total free blocks count 0 [ 295.073910][ T3504] EXT4-fs (loop4): Free/Dirty block details [ 295.080064][ T3504] EXT4-fs (loop4): free_blocks=4096 [ 295.085288][ T3504] EXT4-fs (loop4): dirty_blocks=144 [ 295.090566][ T3504] EXT4-fs (loop4): Block reservation details [ 295.096609][ T3504] EXT4-fs (loop4): i_reserved_data_blocks=9 [ 295.104205][ T3504] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 295.119094][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 295.126521][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 295.183262][T10805] loop6: detected capacity change from 0 to 512 [ 295.202978][T10805] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2287: corrupted in-inode xattr: invalid ea_ino [ 295.208285][T10811] netlink: 'syz.4.2288': attribute type 1 has an invalid length. [ 295.216392][T10805] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.238210][T10805] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2287: couldn't read orphan inode 15 (err -117) [ 295.262739][T10805] loop6: lost filesystem error report for type 5 error -117 [ 295.264908][T10805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.268217][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 295.349658][T10811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.382851][T10811] bond4: (slave geneve3): making interface the new active one [ 295.384499][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 295.399917][T10811] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 295.410232][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.447902][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.454917][T10823] loop4: detected capacity change from 0 to 512 [ 295.485602][T10823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 295.495790][ T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.513092][ T57] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.514105][T10825] loop0: detected capacity change from 0 to 512 [ 295.523938][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 295.541870][T10823] EXT4-fs (loop4): 1 truncate cleaned up [ 295.549155][T10825] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.563613][T10823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.610422][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.620672][T10825] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 295.641571][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.708349][T10825] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 295.717805][T10825] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2291: Failed to acquire dquot type 1 [ 295.738981][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 295.751670][T10825] loop0: lost filesystem error report for type 5 error -5 [ 295.752143][T10825] EXT4-fs (loop0): 1 truncate cleaned up [ 295.759415][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 295.759438][ C0] EXT4-fs (loop0): last error at time 295: ext4_acquire_dquot:7034 [ 295.780469][T10825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 296.145319][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 296.357988][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 296.819412][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 297.159698][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 297.795108][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 298.160138][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 299.098545][T10853] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65043 sclass=netlink_xfrm_socket pid=10853 comm=syz.1.2300 [ 299.193911][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'. [ 299.441627][T10857] bridge_slave_1: entered promiscuous mode [ 299.483200][T10857] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.498327][T10863] loop4: detected capacity change from 0 to 2048 [ 299.539843][T10857] batadv_slave_1: entered promiscuous mode [ 299.754388][T10857] batadv_slave_1: entered allmulticast mode [ 299.803468][T10868] loop6: detected capacity change from 0 to 2048 [ 299.869474][T10868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.894917][T10863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.098215][T10872] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 300.391577][T10862] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 300.488244][T10862] EXT4-fs (loop4): This should not happen!! Data will be lost [ 300.488244][T10862] [ 300.564110][T10866] macsec1: entered promiscuous mode [ 300.569463][T10866] macsec1: entered allmulticast mode [ 300.575242][ T30] net_ratelimit: 3 callbacks suppressed [ 300.575256][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 300.600312][T10862] EXT4-fs (loop4): Total free blocks count 0 [ 300.650844][T10862] EXT4-fs (loop4): Free/Dirty block details [ 300.725814][T10882] loop5: detected capacity change from 0 to 2048 [ 300.733762][T10862] EXT4-fs (loop4): free_blocks=4096 [ 300.739251][T10862] EXT4-fs (loop4): dirty_blocks=512 [ 300.744468][T10862] EXT4-fs (loop4): Block reservation details [ 300.750474][T10862] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 300.799481][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 300.810206][T10882] Alternate GPT is invalid, using primary GPT. [ 300.999827][T10882] loop5: p1 p2 p3 [ 301.330255][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.358449][T10894] netlink: 'syz.0.2308': attribute type 10 has an invalid length. [ 301.536002][T10892] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 301.545974][T10892] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 301.596675][T10894] ipvlan0: entered allmulticast mode [ 301.602167][T10894] veth0_vlan: entered allmulticast mode [ 302.826415][T10897] loop6: detected capacity change from 0 to 512 [ 302.845203][T10897] ext4: Unknown parameter 'smackfstransmute' [ 303.368295][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 303.479344][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 418 with error 28 [ 303.506061][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 303.518954][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 303.638178][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 303.758182][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 303.948319][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 304.138407][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 304.278214][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 304.587622][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 304.756319][T10933] loop0: detected capacity change from 0 to 512 [ 304.777277][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 304.800472][T10936] bridge3: entered promiscuous mode [ 304.807550][T10933] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 304.828434][T10933] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 304.839029][T10933] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2324: Corrupt directory, running e2fsck is recommended [ 304.859069][T10933] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 304.876898][T10933] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2324: corrupted in-inode xattr: e_name out of bounds [ 304.884091][T10940] netlink: 436 bytes leftover after parsing attributes in process `syz.6.2326'. [ 304.900259][T10940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2326'. [ 304.911957][T10933] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.913238][T10942] netlink: 'syz.1.2328': attribute type 4 has an invalid length. [ 304.922524][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 304.922547][ C0] EXT4-fs (loop0): initial error at time 2000000002: ext4_iget_extra_inode:5128: inode 15 [ 304.922599][ C0] EXT4-fs (loop0): last error at time 2000000002: ext4_iget_extra_inode:5128: inode 15 [ 304.930480][T10933] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2324: couldn't read orphan inode 15 (err -117) [ 304.949243][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2328'. [ 304.957076][T10933] loop0: lost filesystem error report for type 5 error -117 [ 304.978929][T10933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.087728][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.561013][T10966] loop6: detected capacity change from 0 to 512 [ 305.620037][T10966] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51489!=18645) [ 305.694657][T10965] x_tables: unsorted underflow at hook 2 [ 305.730244][ T887] net_ratelimit: 6 callbacks suppressed [ 305.730260][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 305.735568][T10966] EXT4-fs (loop6): group descriptors corrupted! [ 306.719475][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 306.749676][T10966] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 306.749676][T10966] program syz.6.2336 not setting count and/or reply_len properly [ 306.793320][T10971] tap0: tun_chr_ioctl cmd 1074025677 [ 306.798983][T10971] tap0: linktype set to 0 [ 306.878120][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.160141][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.328155][ T887] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.389231][T10979] loop4: detected capacity change from 0 to 512 [ 307.419558][T10979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.437310][T10981] loop6: detected capacity change from 0 to 1024 [ 307.448671][T10979] EXT4-fs (loop4): 1 truncate cleaned up [ 307.468174][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.481014][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=10989 comm=syz.1.2344 [ 307.494390][T10979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.529283][T10993] loop0: detected capacity change from 0 to 1024 [ 307.533032][T10981] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2341'. [ 307.540048][ T28] audit: type=1400 audit(2000000004.690:8656): avc: denied { remount } for pid=10992 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 307.572810][T10979] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.4.2340: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 307.657090][T10981] random: crng reseeded on system resumption [ 307.679052][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.686560][T10979] EXT4-fs (loop4): Remounting filesystem read-only [ 307.694006][T10979] EXT4-fs warning (device loop4): ext4_rename_delete:3739: inode #2: comm syz.4.2340: Deleting old file: nlink 4, error=-117 [ 307.717707][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2341'. [ 307.748280][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.024256][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 308.152981][T11011] loop5: detected capacity change from 0 to 1024 [ 308.211490][T11011] EXT4-fs: Ignoring removed oldalloc option [ 308.241028][T11015] loop6: detected capacity change from 0 to 512 [ 308.282619][T11011] EXT4-fs: Ignoring removed i_version option [ 308.288851][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 308.343942][T11015] EXT4-fs (loop6): 1 truncate cleaned up [ 308.383591][T11011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.401350][T11015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.413756][T10873] bond1: (slave macvlan2): failed to get link speed/duplex [ 308.500874][T11011] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 308.606953][T11015] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.2353: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 308.730447][ T28] audit: type=1400 audit(2000000005.880:8657): avc: denied { setattr } for pid=11023 comm="syz.5.2357" name="NETLINK" dev="sockfs" ino=29219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.759268][T11028] netlink: 'syz.1.2358': attribute type 2 has an invalid length. [ 308.795379][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 308.850577][ T28] audit: type=1400 audit(2000000005.940:8658): avc: denied { map } for pid=11023 comm="syz.5.2357" path="pipe:[29218]" dev="pipefs" ino=29218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 308.918180][T10985] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 308.935180][T11033] loop5: detected capacity change from 0 to 2048 [ 308.992483][T11033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.028704][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.188969][ T28] audit: type=1400 audit(2000000006.350:8659): avc: denied { connect } for pid=11039 comm="syz.6.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 309.323132][T11048] xt_bpf: check failed: parse error [ 309.536575][T11063] FAULT_INJECTION: forcing a failure. [ 309.536575][T11063] name failslab, interval 1, probability 0, space 0, times 0 [ 309.549606][T11063] CPU: 1 UID: 0 PID: 11063 Comm: syz.4.2370 Tainted: G W syzkaller #0 PREEMPT(full) [ 309.549724][T11063] Tainted: [W]=WARN [ 309.549732][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 309.549745][T11063] Call Trace: [ 309.549752][T11063] [ 309.549761][T11063] __dump_stack+0x1d/0x30 [ 309.549788][T11063] dump_stack_lvl+0x95/0xd0 [ 309.549893][T11063] dump_stack+0x15/0x1b [ 309.549915][T11063] should_fail_ex+0x263/0x280 [ 309.549946][T11063] should_failslab+0x8c/0xb0 [ 309.549990][T11063] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 309.550091][T11063] ? __alloc_skb+0x2d6/0x690 [ 309.550136][T11063] __alloc_skb+0x2d6/0x690 [ 309.550200][T11063] ? __alloc_skb+0x200/0x690 [ 309.550237][T11063] sock_omalloc+0x81/0xf0 [ 309.550288][T11063] msg_zerocopy_realloc+0x84/0x420 [ 309.550313][T11063] ? sock_cmsg_send+0x160/0x1b0 [ 309.550340][T11063] tcp_sendmsg_locked+0x2680/0x2cc0 [ 309.550379][T11063] ? set_normalized_timespec64+0xe0/0x110 [ 309.550486][T11063] ? __account_obj_stock+0x3d5/0x590 [ 309.550546][T11063] ? __rcu_read_unlock+0x4e/0x70 [ 309.550567][T11063] ? avc_has_perm_noaudit+0xab/0x130 [ 309.550671][T11063] ? avc_has_perm+0x101/0x190 [ 309.550702][T11063] ? selinux_socket_sendmsg+0x192/0x1c0 [ 309.550819][T11063] ? __pfx_tcp_sendmsg+0x10/0x10 [ 309.550853][T11063] tcp_sendmsg+0x2f/0x50 [ 309.550995][T11063] inet_sendmsg+0x76/0xd0 [ 309.551147][T11063] ? __pfx_inet_sendmsg+0x10/0x10 [ 309.551172][T11063] ____sys_sendmsg+0x519/0x5b0 [ 309.551199][T11063] ___sys_sendmsg+0x195/0x1e0 [ 309.551245][T11063] ? path_openat+0x1b01/0x2050 [ 309.551288][T11063] __sys_sendmmsg+0x185/0x320 [ 309.551322][T11063] __x64_sys_sendmmsg+0x57/0x70 [ 309.551350][T11063] x64_sys_call+0x27aa/0x3020 [ 309.551376][T11063] do_syscall_64+0x12c/0x3b0 [ 309.551426][T11063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.551452][T11063] RIP: 0033:0x7f0ea276cdd9 [ 309.551471][T11063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.551492][T11063] RSP: 002b:00007f0ea11c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 309.551532][T11063] RAX: ffffffffffffffda RBX: 00007f0ea29e5fa0 RCX: 00007f0ea276cdd9 [ 309.551568][T11063] RDX: 0000000000000002 RSI: 0000200000002b80 RDI: 0000000000000003 [ 309.551582][T11063] RBP: 00007f0ea11c7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.551670][T11063] R10: 0000000004044805 R11: 0000000000000246 R12: 0000000000000001 [ 309.551686][T11063] R13: 00007f0ea29e6038 R14: 00007f0ea29e5fa0 R15: 00007ffe14127758 [ 309.551708][T11063] [ 309.849956][T11071] loop0: detected capacity change from 0 to 512 [ 309.868465][T11071] ext4: Unknown parameter 'smackfstransmute' [ 309.960406][T10985] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 310.063843][T11075] loop4: detected capacity change from 0 to 512 [ 310.087471][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 610 with error 28 [ 310.100007][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 310.100007][ T12] [ 310.109954][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 310.111869][T11075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.116027][ T12] EXT4-fs (loop5): Free/Dirty block details [ 310.132013][T11075] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.143201][ T12] EXT4-fs (loop5): free_blocks=4096 [ 310.150742][ T12] EXT4-fs (loop5): dirty_blocks=640 [ 310.157013][ T12] EXT4-fs (loop5): Block reservation details [ 310.163167][ T12] EXT4-fs (loop5): i_reserved_data_blocks=40 [ 310.172435][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 310.190605][ T7659] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 311.258456][ T30] net_ratelimit: 15 callbacks suppressed [ 311.258475][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.399174][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 312.326835][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 312.423397][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.538128][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 312.993371][T11118] loop0: detected capacity change from 0 to 2048 [ 313.009156][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.028239][T11118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.185500][T11126] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2388'. [ 313.238156][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.247198][T11126] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2388'. [ 313.273016][T11131] loop5: detected capacity change from 0 to 512 [ 313.280336][T11126] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2388'. [ 313.298768][T11131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.326869][T11131] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 313.362731][T11131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 313.387109][T11131] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 313.397373][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.426954][T11131] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 313.466889][T11131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 313.533825][T11136] loop6: detected capacity change from 0 to 8192 [ 313.651526][T10873] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.693984][T11136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=11136 comm=syz.6.2391 [ 314.352517][T11143] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2390: dx entry: limit 65535 != root limit 120 [ 314.364807][T11143] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2390: Corrupt directory, running e2fsck is recommended [ 314.411915][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.421448][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 314.580584][T11153] loop0: detected capacity change from 0 to 512 [ 314.599426][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 314.623091][T11153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 314.636477][T11156] syzkaller0: entered promiscuous mode [ 314.645443][ T7659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.749195][T11153] EXT4-fs (loop0): 1 truncate cleaned up [ 314.780711][T11153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.824849][T11161] xt_hashlimit: size too large, truncated to 1048576 [ 314.839600][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.938853][T11176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2405'. [ 314.953884][T11176] x_tables: ip_tables: udp match: only valid for protocol 17 [ 314.968287][T11178] loop0: detected capacity change from 0 to 512 [ 314.997420][T11178] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2406: Invalid inode bitmap blk 4 in block_group 0 [ 315.031121][T11178] loop0: lost filesystem error report for type 5 error -117 [ 315.031589][T11178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.057774][T11178] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2406'. [ 315.229565][T11198] loop5: detected capacity change from 0 to 1024 [ 315.236411][T11198] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.243357][T11198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.251581][T11198] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 315.280178][T11198] loop5: detected capacity change from 0 to 1024 [ 315.288981][T11198] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 315.297944][T11198] EXT4-fs (loop5): mounted filesystem 00000000-0008-0000-0000-000000000000 ro without journal. Quota mode: none. [ 315.311080][T11198] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2413: corrupted xattr block 128: bad e_name length [ 315.325299][T11198] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 315.335178][ T28] audit: type=1400 audit(2000000012.490:8660): avc: denied { bind } for pid=11197 comm="syz.5.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 315.363078][ T7659] EXT4-fs (loop5): unmounting filesystem 00000000-0008-0000-0000-000000000000. [ 315.400789][T11206] loop5: detected capacity change from 0 to 2048 [ 315.421506][T11206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.469325][ T28] audit: type=1401 audit(2000000012.610:8661): op=setxattr invalid_context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audit: type=1400 audit(2000000012.630:8662): avc: denied { execute } for pid=11199 comm="syz.4.2411" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 315.631095][T11204] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 315.645829][T11204] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 315.672127][T11204] EXT4-fs (loop5): This should not happen!! Data will be lost [ 315.672127][T11204] [ 315.682194][T11204] EXT4-fs (loop5): Total free blocks count 0 [ 315.688453][T11204] EXT4-fs (loop5): Free/Dirty block details [ 315.694525][T11204] EXT4-fs (loop5): free_blocks=4096 [ 315.699898][T11204] EXT4-fs (loop5): dirty_blocks=832 [ 315.705159][T11204] EXT4-fs (loop5): Block reservation details [ 315.711331][T11204] EXT4-fs (loop5): i_reserved_data_blocks=52 [ 315.778946][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.804636][T10873] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 610 with error 28 [ 315.823932][ T7659] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 315.900373][T11221] pim6reg: entered allmulticast mode [ 315.995972][T11228] FAULT_INJECTION: forcing a failure. [ 315.995972][T11228] name failslab, interval 1, probability 0, space 0, times 0 [ 316.009001][T11228] CPU: 0 UID: 0 PID: 11228 Comm: syz.5.2422 Tainted: G W syzkaller #0 PREEMPT(full) [ 316.009067][T11228] Tainted: [W]=WARN [ 316.009076][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.009088][T11228] Call Trace: [ 316.009094][T11228] [ 316.009103][T11228] __dump_stack+0x1d/0x30 [ 316.009132][T11228] dump_stack_lvl+0x95/0xd0 [ 316.009155][T11228] dump_stack+0x15/0x1b [ 316.009174][T11228] should_fail_ex+0x263/0x280 [ 316.009230][T11228] ? ctnetlink_alloc_filter+0x4d/0x4f0 [ 316.009265][T11228] should_failslab+0x8c/0xb0 [ 316.009363][T11228] __kmalloc_cache_noprof+0x5f/0x400 [ 316.009403][T11228] ctnetlink_alloc_filter+0x4d/0x4f0 [ 316.009460][T11228] ? __netlink_lookup+0x276/0x2b0 [ 316.009491][T11228] ctnetlink_start+0xc3/0x110 [ 316.009536][T11228] __netlink_dump_start+0x334/0x520 [ 316.009565][T11228] ctnetlink_get_conntrack+0x13b/0x470 [ 316.009653][T11228] ? __pfx_ctnetlink_start+0x10/0x10 [ 316.009686][T11228] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 316.009791][T11228] ? __pfx_ctnetlink_done+0x10/0x10 [ 316.009905][T11228] nfnetlink_rcv_msg+0x4fe/0x5d0 [ 316.009954][T11228] netlink_rcv_skb+0x123/0x220 [ 316.009980][T11228] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 316.010053][T11228] nfnetlink_rcv+0x167/0x1720 [ 316.010078][T11228] ? __kfree_skb+0x109/0x150 [ 316.010097][T11228] ? nlmon_xmit+0x4f/0x60 [ 316.010125][T11228] ? consume_skb+0x4b/0x130 [ 316.010293][T11228] ? nlmon_xmit+0x4f/0x60 [ 316.010320][T11228] ? dev_hard_start_xmit+0x36c/0x3a0 [ 316.010345][T11228] ? __dev_queue_xmit+0x1396/0x1ec0 [ 316.010396][T11228] ? __dev_queue_xmit+0x165/0x1ec0 [ 316.010420][T11228] ? ref_tracker_free+0x37d/0x3e0 [ 316.010464][T11228] ? __netlink_deliver_tap+0x4dc/0x500 [ 316.010559][T11228] netlink_unicast+0x5a8/0x680 [ 316.010586][T11228] netlink_sendmsg+0x5c8/0x6f0 [ 316.010617][T11228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.010646][T11228] ____sys_sendmsg+0x563/0x5b0 [ 316.010709][T11228] ___sys_sendmsg+0x195/0x1e0 [ 316.010746][T11228] __x64_sys_sendmsg+0xd4/0x160 [ 316.010783][T11228] x64_sys_call+0x194c/0x3020 [ 316.010809][T11228] do_syscall_64+0x12c/0x3b0 [ 316.010909][T11228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.010935][T11228] RIP: 0033:0x7f50f112cdd9 [ 316.010955][T11228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.010976][T11228] RSP: 002b:00007f50efb87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.011078][T11228] RAX: ffffffffffffffda RBX: 00007f50f13a5fa0 RCX: 00007f50f112cdd9 [ 316.011128][T11228] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 316.011140][T11228] RBP: 00007f50efb87090 R08: 0000000000000000 R09: 0000000000000000 [ 316.011152][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.011163][T11228] R13: 00007f50f13a6038 R14: 00007f50f13a5fa0 R15: 00007ffe965b2b78 [ 316.011181][T11228] [ 316.328112][ T28] audit: type=1326 audit(2000000013.470:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea276cdd9 code=0x7fc00000 [ 316.354319][ T28] audit: type=1326 audit(2000000013.470:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ea276cdd9 code=0x7fc00000 [ 316.365325][ T12] net_ratelimit: 12 callbacks suppressed [ 316.365345][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.377915][ T28] audit: type=1326 audit(2000000013.470:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea276cdd9 code=0x7fc00000 [ 316.438692][ T28] audit: type=1326 audit(2000000013.470:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea276cdd9 code=0x7fc00000 [ 316.463693][ T28] audit: type=1326 audit(2000000013.470:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea276cdd9 code=0x7fc00000 [ 316.489295][ T28] audit: type=1326 audit(2000000013.470:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea276cdd9 code=0x7fc00000 [ 316.513112][ T28] audit: type=1326 audit(2000000013.470:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea276cdd9 code=0x7fc00000 [ 316.538919][T11250] xt_bpf: check failed: parse error [ 316.578116][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.594379][T11253] netlink: 'syz.1.2430': attribute type 16 has an invalid length. [ 316.647427][T11258] loop0: detected capacity change from 0 to 512 [ 316.685403][T11253] syz_tun: left promiscuous mode [ 316.732915][T11258] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 316.844082][T11264] loop6: detected capacity change from 0 to 128 [ 316.925980][T11268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2434'. [ 316.988617][T11272] netlink: 'syz.5.2435': attribute type 39 has an invalid length. [ 317.014916][ T57] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.018675][T11274] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 317.028466][ T57] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 317.042503][ T57] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.050998][ T57] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 317.091585][T11272] hsr_slave_0 (unregistering): left promiscuous mode [ 317.101876][ T57] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.111184][ T57] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 317.134393][ T57] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.143897][ T57] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 317.166084][T11286] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 317.178121][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.187092][T11286] EXT4-fs (loop0): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 317.283100][T11293] xt_l2tp: missing protocol rule (udp|l2tpip) [ 317.289922][T11293] netlink: 'syz.0.2442': attribute type 2 has an invalid length. [ 317.299358][T11294] xt_l2tp: missing protocol rule (udp|l2tpip) [ 317.368070][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.488671][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.569131][T11313] netlink: 'syz.1.2449': attribute type 83 has an invalid length. [ 317.588580][T11315] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 317.638887][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.722658][T11315] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 317.723039][T11325] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2453'. [ 317.745485][T11315] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2450: bg 0: block 248: padding at end of block bitmap is not set [ 317.775142][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.783273][T11315] loop0: lost filesystem error report for type 5 error -117 [ 317.788067][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 317.801843][ C1] EXT4-fs (loop0): last error at time 2000000014: ext4_validate_block_bitmap:441 [ 317.860476][T11315] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2450: Failed to acquire dquot type 1 [ 317.871988][T11315] loop0: lost filesystem error report for type 5 error -28 [ 317.873535][T11315] EXT4-fs (loop0): 1 truncate cleaned up [ 317.892920][T11315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 317.941652][T11315] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2450: Failed to acquire dquot type 1 [ 317.958049][T11315] tmpfs: Unknown parameter 'siz˙' [ 318.019217][T11315] syz.0.2450 (11315) used greatest stack depth: 7488 bytes left [ 318.029912][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 318.158373][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 318.246651][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 318.257152][T11331] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2456'. [ 318.279985][T11333] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 318.305802][T11338] set_capacity_and_notify: 2 callbacks suppressed [ 318.305821][T11338] loop6: detected capacity change from 0 to 512 [ 318.322049][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 318.357730][T11338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.395164][T11338] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.492942][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.532289][T11337] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2455'. [ 318.545529][T11359] bond0: (slave bridge_slave_1): Releasing backup interface [ 318.588779][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2466'. [ 318.603896][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 318.615539][T11365] bond0: Unable to set down delay as MII monitoring is disabled [ 318.671226][T11337] loop0: detected capacity change from 0 to 256 [ 319.163374][T11388] loop5: detected capacity change from 0 to 1024 [ 319.248647][T11388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.265440][T11388] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.318781][T11388] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2473: bg 0: block 112: padding at end of block bitmap is not set [ 319.339807][T11388] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 319.354943][T11388] EXT4-fs (loop5): This should not happen!! Data will be lost [ 319.354943][T11388] [ 319.366734][T11388] EXT4-fs (loop5): Total free blocks count 0 [ 319.374736][T11388] EXT4-fs (loop5): Free/Dirty block details [ 319.381601][T11388] EXT4-fs (loop5): free_blocks=0 [ 319.387500][T11388] EXT4-fs (loop5): dirty_blocks=64 [ 319.394143][T11388] EXT4-fs (loop5): Block reservation details [ 319.405171][T11388] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 319.637611][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2474'. [ 319.724220][T11393] tc_dump_action: action bad kind [ 319.762594][T11394] loop4: detected capacity change from 0 to 512 [ 319.790509][T11394] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2474: corrupted in-inode xattr: invalid ea_ino [ 319.851735][T11394] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.851939][T11394] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2474: couldn't read orphan inode 15 (err -117) [ 319.861141][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 319.861161][ C0] EXT4-fs (loop4): initial error at time 2000000017: ext4_iget_extra_inode:5128: inode 15 [ 319.861195][ C0] EXT4-fs (loop4): last error at time 2000000017: ext4_iget_extra_inode:5128: inode 15 [ 319.983436][T11394] loop4: lost filesystem error report for type 5 error -117 [ 319.984850][T11394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.029950][T11412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2482'. [ 320.042890][T11414] FAULT_INJECTION: forcing a failure. [ 320.042890][T11414] name failslab, interval 1, probability 0, space 0, times 0 [ 320.060305][T11414] CPU: 0 UID: 0 PID: 11414 Comm: syz.6.2483 Tainted: G W syzkaller #0 PREEMPT(full) [ 320.060383][T11414] Tainted: [W]=WARN [ 320.060390][T11414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.060401][T11414] Call Trace: [ 320.060408][T11414] [ 320.060417][T11414] __dump_stack+0x1d/0x30 [ 320.060480][T11414] dump_stack_lvl+0x95/0xd0 [ 320.060500][T11414] dump_stack+0x15/0x1b [ 320.060572][T11414] should_fail_ex+0x263/0x280 [ 320.060599][T11414] should_failslab+0x8c/0xb0 [ 320.060626][T11414] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 320.060678][T11414] ? __alloc_skb+0x2d6/0x690 [ 320.060789][T11414] __alloc_skb+0x2d6/0x690 [ 320.060824][T11414] ? __alloc_skb+0x200/0x690 [ 320.060899][T11414] netlink_alloc_large_skb+0xbf/0xf0 [ 320.060950][T11414] netlink_sendmsg+0x40c/0x6f0 [ 320.060977][T11414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.061058][T11414] ____sys_sendmsg+0x563/0x5b0 [ 320.061107][T11414] ___sys_sendmsg+0x195/0x1e0 [ 320.061262][T11414] __x64_sys_sendmsg+0xd4/0x160 [ 320.061286][T11414] x64_sys_call+0x194c/0x3020 [ 320.061313][T11414] do_syscall_64+0x12c/0x3b0 [ 320.061341][T11414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.061367][T11414] RIP: 0033:0x7f546bcacdd9 [ 320.061404][T11414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.061425][T11414] RSP: 002b:00007f546a6ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.061450][T11414] RAX: ffffffffffffffda RBX: 00007f546bf25fa0 RCX: 00007f546bcacdd9 [ 320.061466][T11414] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 320.061482][T11414] RBP: 00007f546a6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 320.061527][T11414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.061542][T11414] R13: 00007f546bf26038 R14: 00007f546bf25fa0 R15: 00007ffc9c1c5f88 [ 320.061566][T11414] [ 320.370818][T11394] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.2474: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 320.506270][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.557772][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2489'. [ 320.620452][T11437] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2493'. [ 320.782443][ T7659] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 320.794803][ T7659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 320.823465][ T4191] kernel write not supported for file /input/event0 (pid: 4191 comm: kworker/1:10) [ 320.859293][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2499'. [ 320.894875][T11456] loop6: detected capacity change from 0 to 512 [ 320.903110][T11456] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 320.918219][T11456] EXT4-fs (loop6): orphan cleanup on readonly fs [ 320.927305][T11456] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2502: Block bitmap for bg 0 marked uninitialized [ 320.941220][T11456] loop6: lost filesystem error report for type 5 error -117 [ 320.948062][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 320.962140][ C0] EXT4-fs (loop6): initial error at time 2000000018: ext4_read_block_bitmap_nowait:517 [ 320.971929][ C0] EXT4-fs (loop6): last error at time 2000000018: ext4_read_block_bitmap_nowait:517 [ 321.045223][T11456] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 321.054439][T11456] loop6: lost filesystem error report for type 5 error -117 [ 321.054718][T11456] EXT4-fs (loop6): 1 orphan inode deleted [ 321.068144][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2506'. [ 321.068765][T11456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 321.077332][T11467] tc_dump_action: action bad kind [ 321.094479][T11456] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 321.105380][T11456] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 321.455222][T11470] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2502: Block bitmap for bg 0 marked uninitialized [ 321.469823][T11475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.484303][T11470] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2502: Block bitmap for bg 0 marked uninitialized [ 321.497774][ T107] net_ratelimit: 22 callbacks suppressed [ 321.497813][ T107] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.622319][T11470] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2502: Block bitmap for bg 0 marked uninitialized [ 321.678289][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.801328][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.935619][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.048087][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.151607][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.161043][ T57] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.173121][T11493] loop4: detected capacity change from 0 to 512 [ 322.298101][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.331830][T11493] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.2513: Bad quota inum: 31, type: 1 [ 322.376720][T11493] loop4: lost filesystem error report for type 5 error -117 [ 322.376932][T11493] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=31). Please run e2fsck to fix. [ 322.414575][T11493] EXT4-fs (loop4): mount failed [ 322.479102][T11504] tc_dump_action: action bad kind [ 322.492596][T11512] loop6: detected capacity change from 0 to 512 [ 322.510584][T11504] loop0: detected capacity change from 0 to 512 [ 322.539023][T11512] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 322.555634][T11497] gre0 speed is unknown, defaulting to 1000 [ 322.579676][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.612071][T11512] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 322.640482][T11512] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2519: bad orphan inode 4 [ 322.669245][T11512] loop6: lost filesystem error report for type 5 error -117 [ 322.669745][T11512] EXT4-fs (loop6): 1 orphan inode deleted [ 322.683213][T11512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.701948][T11504] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2517: corrupted in-inode xattr: invalid ea_ino [ 322.715526][T11497] lo speed is unknown, defaulting to 1000 [ 322.725542][T11504] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 322.725763][T11504] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2517: couldn't read orphan inode 15 (err -117) [ 322.746710][T11504] loop0: lost filesystem error report for type 5 error -117 [ 322.755309][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 322.769248][ C1] EXT4-fs (loop0): initial error at time 2000000019: ext4_iget_extra_inode:5128: inode 15 [ 322.779204][ C1] EXT4-fs (loop0): last error at time 2000000019: ext4_orphan_get:1402 [ 322.848516][T11523] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.2519: lblock 0 mapped to illegal pblock 4 (length 1) [ 322.881597][T11504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.939444][ T7919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.979234][T11522] syzkaller0: entered promiscuous mode [ 322.984903][T11522] syzkaller0: entered allmulticast mode [ 323.224697][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 323.242843][T11527] loop6: detected capacity change from 0 to 2048 [ 323.259556][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.315342][T11527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.558190][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 323.677039][T11538] gre0 speed is unknown, defaulting to 1000 [ 323.747056][T11538] lo speed is unknown, defaulting to 1000 [ 323.867100][T11543] __nla_validate_parse: 4 callbacks suppressed [ 323.867115][T11543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2524'. [ 323.919393][T11543] SET target dimension over the limit! [ 324.167140][T11497] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.265075][T11497] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.272597][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 324.272611][ T28] audit: type=1400 audit(2000000021.430:8694): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=35002 daddr=10.128.0.239 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 324.342940][T11497] bridge_slave_0: entered allmulticast mode [ 324.369090][T11497] bridge_slave_0: entered promiscuous mode [ 324.406762][T11497] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.431850][T11555] loop4: detected capacity change from 0 to 512 [ 324.454345][T11497] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.493870][T11497] bridge_slave_1: entered allmulticast mode [ 324.533512][T11555] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2525: inode has both inline data and extents flags [ 324.555286][T11497] bridge_slave_1: entered promiscuous mode [ 324.725330][ T12] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 324.749261][T11497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.766983][T11555] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 324.768084][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 324.783924][ C1] EXT4-fs (loop4): initial error at time 2000000021: ext4_orphan_get:1397: inode 15 [ 324.793536][ C1] EXT4-fs (loop4): last error at time 2000000021: ext4_orphan_get:1397: inode 15 [ 324.815139][T11497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.824419][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 324.852565][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 324.852565][ T12] [ 324.879012][T11497] team0: Port device team_slave_0 added [ 324.886283][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 324.899290][T11497] team0: Port device team_slave_1 added [ 324.905053][T11555] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2525: couldn't read orphan inode 15 (err -117) [ 324.917095][ T12] EXT4-fs (loop6): Free/Dirty block details [ 324.933002][ T12] EXT4-fs (loop6): free_blocks=4096 [ 324.946837][ T12] EXT4-fs (loop6): dirty_blocks=336 [ 324.962038][T11555] loop4: lost filesystem error report for type 5 error -117 [ 324.965796][T11555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.991040][T11497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.001410][ T12] EXT4-fs (loop6): Block reservation details [ 325.013494][ T12] EXT4-fs (loop6): i_reserved_data_blocks=21 [ 325.021043][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.059208][ T107] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 325.099530][ T7919] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 325.148777][T11497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.200617][T11497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.231546][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.298399][T11497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.350854][T11604] FAULT_INJECTION: forcing a failure. [ 325.350854][T11604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.406374][T11497] hsr_slave_0: entered promiscuous mode [ 325.448674][T11604] CPU: 0 UID: 0 PID: 11604 Comm: syz.0.2529 Tainted: G W syzkaller #0 PREEMPT(full) [ 325.448739][T11604] Tainted: [W]=WARN [ 325.448746][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 325.448758][T11604] Call Trace: [ 325.448764][T11604] [ 325.448772][T11604] __dump_stack+0x1d/0x30 [ 325.448801][T11604] dump_stack_lvl+0x95/0xd0 [ 325.448876][T11604] dump_stack+0x15/0x1b [ 325.448981][T11604] should_fail_ex+0x263/0x280 [ 325.449011][T11604] should_fail+0xb/0x20 [ 325.449103][T11604] should_fail_usercopy+0x1a/0x20 [ 325.449135][T11604] _copy_from_user+0x1c/0xb0 [ 325.449163][T11604] __sys_bpf+0x183/0x7e0 [ 325.449269][T11604] __x64_sys_bpf+0x41/0x50 [ 325.449295][T11604] x64_sys_call+0x10cb/0x3020 [ 325.449415][T11604] do_syscall_64+0x12c/0x3b0 [ 325.449437][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.449460][T11604] RIP: 0033:0x7fca7e5acdd9 [ 325.449479][T11604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.449502][T11604] RSP: 002b:00007fca7d007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.449567][T11604] RAX: ffffffffffffffda RBX: 00007fca7e825fa0 RCX: 00007fca7e5acdd9 [ 325.449581][T11604] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 325.449594][T11604] RBP: 00007fca7d007090 R08: 0000000000000000 R09: 0000000000000000 [ 325.449607][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.449619][T11604] R13: 00007fca7e826038 R14: 00007fca7e825fa0 R15: 00007ffe4b50eb78 [ 325.449637][T11604] [ 325.468656][T11497] hsr_slave_1: entered promiscuous mode [ 325.590716][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.597495][T11497] debugfs: 'hsr0' already exists in 'hsr' [ 325.636416][T11497] Cannot create hsr debugfs directory [ 326.778331][T11596] net_ratelimit: 3 callbacks suppressed [ 326.778350][T11596] bond1: (slave macvlan2): failed to get link speed/duplex [ 326.793499][T11643] ================================================================== [ 326.801610][T11643] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 326.809372][T11643] [ 326.811741][T11643] write to 0xffff888120411b00 of 8 bytes by task 11642 on cpu 1: [ 326.819469][T11643] mas_wr_store_entry+0x3be9/0x5ad0 [ 326.824688][T11643] mas_store_prealloc+0x43e/0x690 [ 326.829726][T11643] mmap_region+0x1d29/0x20d0 [ 326.834333][T11643] do_mmap+0x9b2/0xbd0 [ 326.838424][T11643] vm_mmap_pgoff+0x183/0x2d0 [ 326.843044][T11643] ksys_mmap_pgoff+0xc1/0x310 [ 326.847730][T11643] x64_sys_call+0x14df/0x3020 [ 326.852435][T11643] do_syscall_64+0x12c/0x3b0 [ 326.857039][T11643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.862955][T11643] [ 326.865298][T11643] read to 0xffff888120411b00 of 8 bytes by task 11643 on cpu 0: [ 326.872933][T11643] mtree_range_walk+0x350/0x490 [ 326.877807][T11643] mas_walk+0x1cc/0x370 [ 326.881972][T11643] lock_vma_under_rcu+0xc9/0x210 [ 326.886945][T11643] do_user_addr_fault+0x232/0x1050 [ 326.892162][T11643] exc_page_fault+0x62/0xa0 [ 326.896716][T11643] asm_exc_page_fault+0x26/0x30 [ 326.902107][T11643] [ 326.904442][T11643] value changed: 0xffff888120411c0e -> 0xffff888120411b00 [ 326.911551][T11643] [ 326.913892][T11643] Reported by Kernel Concurrency Sanitizer on: [ 326.920146][T11643] CPU: 0 UID: 0 PID: 11643 Comm: syz.6.2533 Tainted: G W syzkaller #0 PREEMPT(full) [ 326.931105][T11643] Tainted: [W]=WARN [ 326.934921][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.944987][T11643] ================================================================== [ 326.972743][T11630] gre0 speed is unknown, defaulting to 1000 [ 327.031314][T11630] lo speed is unknown, defaulting to 1000 [ 327.093083][T11497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.114900][T11497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.133762][T11497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.143011][T11497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.151293][T11497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.162498][T11497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.184428][T11497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 327.202715][T11497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.249804][T11497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.259045][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.277765][T11497] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.287796][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.294963][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.306548][T11600] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.313690][T11600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.368118][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.424477][T11497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.478636][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.495490][T11497] veth0_vlan: entered promiscuous mode [ 327.503543][T11497] veth1_vlan: entered promiscuous mode [ 327.520054][T11497] veth0_macvtap: entered promiscuous mode [ 327.527837][T11497] veth1_macvtap: entered promiscuous mode [ 327.540062][T11497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.551844][T11497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.563224][T11600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.572346][T11600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.581895][T11600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.591324][T11600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.618130][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.728157][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.838148][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.968704][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 328.078190][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 328.188502][T11596] bond1: (slave macvlan2): failed to get link speed/duplex [ 331.818127][ T3504] net_ratelimit: 31 callbacks suppressed [ 331.818148][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 331.938509][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.048147][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.158152][T11596] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.268232][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.378136][ T30] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.488134][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.598518][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.708139][ T3504] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.818170][T11596] bond1: (slave macvlan2): failed to get link speed/duplex