last executing test programs: 39.084084339s ago: executing program 2 (id=2975): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/28}, {&(0x7f0000000240)=""/110}], 0x0, &(0x7f0000000340)=""/235}, 0x7f}, {{&(0x7f0000000440)=@x25, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/50}, {&(0x7f0000000b80)=""/179}, {&(0x7f0000000b00)=""/73}, {&(0x7f0000000640)=""/44}, {&(0x7f0000000680)=""/112}, {&(0x7f0000000700)=""/111}, {&(0x7f0000000780)=""/32}], 0x0, &(0x7f0000000600)=""/32}, 0x9c}, {{&(0x7f0000000880)=@nfc_llcp, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000940)=""/193}, 0x3}], 0x6, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000), 0x8) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 38.107722482s ago: executing program 2 (id=2978): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) 37.857700381s ago: executing program 2 (id=2984): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt(r3, 0x1, 0x6, &(0x7f0000000140)=""/39, &(0x7f0000000180)=0x27) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r7, r7, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r7, r7, 0x2f, 0x0, 0x0, @void, @value=r7}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.824931271s ago: executing program 2 (id=2989): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = getpgrp(0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x2000, 0x2000}) 35.516976242s ago: executing program 2 (id=2991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf071d66a62c5f274}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0xc00, 0x0, 0x44000}, 0x0) 34.777307447s ago: executing program 2 (id=3000): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00000001a80000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010100000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa33010000fbffffff0200020000000000000000000000ffff7f000001fc020000000000000000000000000000fc02000000000000000000"], 0xec}}, 0x0) 34.732191239s ago: executing program 32 (id=3000): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00000001a80000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010100000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa33010000fbffffff0200020000000000000000000000ffff7f000001fc020000000000000000000000000000fc02000000000000000000"], 0xec}}, 0x0) 3.802182419s ago: executing program 3 (id=3202): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x184) mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32=0x0], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r2}, 0x38) fspick(r1, &(0x7f0000000080)='./file1\x00', 0x1) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='./file1\x00', 0x40000488) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 3.680104102s ago: executing program 3 (id=3204): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x858, 0x370, 0x288, 0x160, 0x160, 0x0, 0x788, 0x788, 0x788, 0x788, 0x788, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x1, 0x0, [0x4, 0x8, 0x2, 0x0, 0x1, 0xe000, 0x6, 0x7, 0x8, 0x0, 0x7d, 0x2, 0x8, 0x8, 0xfff8, 0x3ff], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}, 0x8807}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x6, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [0x0, 0x2], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private1, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b8) 3.552729647s ago: executing program 3 (id=3207): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x731, 0x17, 0x7ff, 0xd1e, {{0x12, 0x4, 0x2, 0x7, 0x48, 0x64, 0x0, 0x7, 0x2b, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x5, [@local, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp_prespec={0x44, 0x1c, 0x51, 0x3, 0xd, [{@remote, 0x1}, {@rand_addr, 0x9}, {@empty, 0xa}]}]}}}}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4b01}, [@alu={0x3, 0x1, 0x8, 0x9, 0x4, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x6c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x0, 0x7, 0x7, 0x3, 0xfffffffffffffff4}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x43, &(0x7f00000000c0)=""/67, 0x41000, 0x1, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xb, 0x8000, 0xb785}, 0x10, 0x0, r1, 0x0, &(0x7f0000000480)=[r3, r4]}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r6, 0x3, r7, 0x3, 0x80000}) 2.688808817s ago: executing program 5 (id=3219): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000a40), 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.688527387s ago: executing program 3 (id=3220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x84) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, r1, 0x4000000, {0xffffffffffffffff, 0x3}, 0x75}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) bind$xdp(r1, &(0x7f0000000400)={0x2c, 0xc, 0x0, 0x13, r1}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0e740cca351800020074", @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e4, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "dd1f03da3fd67421d1ad6096d4c780e2bc609aaf5c9aed2577cc648361d5e7b0b2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "ccd413857dc66eaf8440afe65c85d4925feeee5eaf2d6ddbf609d7fd307302e78114887d18e849e51d91"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d3df51612efd2d2bf1dc0ecb749826b19b234b38a2"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38e5c0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0473f02c3c1e455f2d4550730c4d5b7544eb7c2bdb5c8981e68787eacfb560015f63"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000000000000000000250009000200f0faabb86a3e3aafe750b5513eeb20e8793f000000000500040000000000050005000200000013000300686173683a6e65742c696661636500000c000780080006000000000005000100070000003b941766b3c70269c3e4000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) 2.491029934s ago: executing program 1 (id=3221): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) fcntl$lock(r2, 0x7, &(0x7f0000000400)={0x0, 0x2, 0x80000000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200000d4) (async) kexec_load(0x5, 0x0, 0x0, 0x280000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0xfea6, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8091}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x0, 0x1, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x4010) 2.422430286s ago: executing program 5 (id=3222): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001040000000000000000000000ef", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) 2.360853039s ago: executing program 3 (id=3223): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) listen(r0, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@jqfmt_vfsold}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000088) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000880)={[], [{@smackfsroot}, {@subj_user={'subj_user', 0x3d, 'memory.events\x00'}}, {@dont_hash}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, 'Gbort'}}, {@audit}, {@pcr={'pcr', 0x3d, 0x1d}}]}, 0x0, 0x569, &(0x7f00000002c0)="$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") 2.058436919s ago: executing program 4 (id=3224): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [], {}, [], {0x10, 0x3}, {0x20, 0xfff4}}, 0x24, 0x0) (fail_nth: 8) 1.783236468s ago: executing program 4 (id=3225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000efffffff0400010008000a000008000005001e"], 0x50}}, 0x4000850) 1.428828161s ago: executing program 0 (id=3226): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="60b80000", @ANYRESOCT=0x0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xf, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xf, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x8, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=r3, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=r3, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010700000000ffffffff410000001e0001"], 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010700000000ffffffff410000001e0001"], 0x34}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.428715731s ago: executing program 1 (id=3227): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socket(0x2b, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600fffe25000000190004000400000007fd00"/57, 0x39}], 0x1) 1.425815951s ago: executing program 4 (id=3228): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0xb1, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x440) 1.401370902s ago: executing program 1 (id=3229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a00f3ff000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000020000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1.363643373s ago: executing program 5 (id=3230): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) capget(&(0x7f0000000200)={0x20071026}, &(0x7f0000000240)={0x4, 0x7, 0x0, 0xae7, 0x7ffe, 0x8}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000240), 0x0}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008734e6bbd2f715df00000000000000000000000000000000000000000000000000000000000000000000000000000000f9117823a02d816400ac1414aa000000000000000000000000000000003300000000000000fc0100000004000000000000000000000000000000000000000000000000000040000000ac1414bb000000000000000015d99f0a0000001f2b0000000000000000000000000000000000ffffffffff0c0635000005000000000747a3f10000000000000000000000000000000000170000", @ANYRES32=r2, @ANYRESHEX=r2], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x2015) inotify_init1(0x80000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = epoll_create1(0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0xe000200c}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) r7 = getpid() ioprio_set$pid(0x1, r7, 0x0) poll(&(0x7f0000000200)=[{r4, 0x400}], 0x1, 0x73) signalfd4(r6, &(0x7f0000000000), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d4545612ce80e81c20095991e9dc7cd130f625b393f52e14b6e679cb4bb68d46477ef95afe68ca9fc9028d3d35be869c04084e4a7b3414fcaee8f9faa668911e98d0ba4130180db657b7e214cc1337cfef92c60bdc815bba6a0a3039d8c314bc4ba912528ae3f42d4eab0ec4cae06b39f32b1e10e5dd3fcee29d74ae27a680fb5bf91c360089a87c10c524523ad30331fd7760b5572b0d561613ec8ab41fe5f2624247083c55dd33e8e1b00534c9a17988d9085aa73ce9f62b3cfe0fca33fb63822c8", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) 1.305766365s ago: executing program 1 (id=3231): socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0xca8, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_rsvp6={{0xa}, {0xc78, 0x2, [@TCA_RSVP_POLICE={0xc74, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x400006, 0xe, 0x1, 0x1, 0x3, 0x2, 0x3, 0xa, 0x1, 0xfff, 0x7, 0x2, 0x1, 0x61592f89, 0x4, 0x1, 0x8, 0x7fffffff, 0x1ff, 0x30, 0x8, 0x5, 0x5975cb9b, 0x5, 0xfffffff7, 0xd78b, 0x0, 0xffff, 0x75, 0x10001, 0x1, 0x21200000, 0x3, 0x33f0, 0xfffff239, 0xb, 0x1, 0xcbb1, 0x28, 0x1, 0x8, 0x48, 0x85, 0x6, 0x9, 0x5, 0x9, 0x7, 0x9b, 0x6, 0x1, 0x10001, 0x9, 0x6, 0x5d8d, 0xf2, 0x83e, 0x5, 0xc, 0x7, 0x3, 0x9a, 0xeda5, 0x4, 0x3, 0x2327, 0x0, 0x19b, 0xffff0000, 0x7f, 0xe7c6, 0x7, 0x4, 0xe8, 0xfffffff8, 0x5, 0x6, 0x6, 0x99, 0x9, 0x1000, 0x10000, 0x6, 0x1, 0x4, 0x7f, 0x1000, 0xfffffffa, 0xc8a, 0x0, 0x0, 0x4, 0x3, 0x2, 0x80, 0x10000, 0xc, 0xa4c, 0x4, 0x49, 0x18b, 0x200, 0x5, 0xffffffff, 0x81, 0x6, 0x10000, 0x7, 0xffff7fff, 0x90, 0xfffff41d, 0x0, 0x0, 0x7, 0xb43, 0x401, 0xd5, 0x5, 0x2, 0x544, 0x3, 0x46f1, 0x3, 0x9, 0x5, 0x8000, 0xc840, 0x4, 0x9, 0xbb, 0x7, 0x9, 0x5, 0x8, 0x6, 0x450, 0x7f, 0x7ff, 0x3, 0x7, 0x81, 0x4, 0x4, 0x10000000, 0xeba, 0x1000000, 0x9, 0x91ec, 0x8, 0x8, 0x3, 0x271, 0x3, 0x5374, 0x8, 0x1, 0xb48, 0x7, 0x8, 0x7, 0x10, 0x7, 0x6, 0x4, 0xb6a, 0x5e43, 0x5, 0x1, 0x80, 0x6b, 0x8001, 0x7, 0x7, 0xd, 0x80, 0x8, 0x1, 0x4, 0x3, 0xc, 0x4, 0x9, 0x0, 0x9, 0x5, 0x4, 0x2, 0xec, 0x1, 0x56c, 0x5, 0x9, 0x4, 0x3, 0x8, 0x4, 0x7, 0x8, 0x8, 0x3, 0xffffffff, 0x8, 0x8, 0xd, 0x80000002, 0xa, 0x5, 0x9, 0x80, 0x4, 0xb, 0x5, 0xfbdd, 0x7fffffff, 0x6, 0x2, 0x6, 0x7, 0xc9, 0x10001, 0x0, 0x80000001, 0x200, 0x7, 0x4, 0x4, 0xf74, 0x13d, 0x100, 0xffffffc0, 0x4, 0x3, 0x8000, 0xfffff801, 0x4, 0x9, 0x5, 0x5, 0x9, 0x4, 0x5, 0x5, 0x3, 0x8, 0x101, 0x40, 0xfffffffa, 0xff, 0x0, 0xb, 0x2, 0x10001, 0x9, 0xaa, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x22}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x7f, 0xfff, 0x3, {0x9, 0x1, 0x101, 0x3, 0x2, 0x4}, {0x2, 0x1, 0x3c, 0x29, 0x0, 0x2}, 0x3, 0x4, 0xffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0xfffffff4, 0x7fff, 0x0, 0x1, 0x5, 0x7, 0x9, 0xd, 0xf, 0x400, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0xb35, 0x8, 0x2, 0x1, 0x7, 0x2, 0x7, 0x1, 0x2, 0xf12ec46, 0xffff, 0x7, 0x5, 0x4, 0xffffff01, 0x1, 0x6, 0x7, 0x1, 0x4, 0x2726, 0xb71, 0x8, 0xde3, 0x8037, 0x8, 0x4, 0x2, 0x0, 0x36a7, 0x10000, 0x6, 0xa4, 0x5, 0x9, 0x70a4, 0x2, 0x6, 0x1, 0xfd, 0x3, 0x5, 0x1, 0x1, 0x1, 0xe7, 0x0, 0x7, 0x78, 0x4, 0x5, 0x7, 0x9, 0x53ae, 0x80000001, 0xffff0f05, 0xe, 0x1, 0x3, 0xff, 0x4f, 0x0, 0x2, 0x401, 0x927, 0xc, 0xfffffff8, 0x6, 0xfffffff9, 0x9, 0x5, 0x65, 0x2, 0x3, 0x8000, 0x6, 0x3, 0xfffffffb, 0x6, 0x7, 0x6, 0x100, 0x7, 0x2, 0xffffffff, 0x3, 0x4, 0x1000, 0x0, 0x7ba8, 0x5, 0x2, 0x6, 0x3, 0x9, 0x100, 0xfffffffa, 0x9b, 0x1, 0x4, 0x7, 0x4, 0x8, 0x8, 0x6, 0xd3, 0x9, 0x32cf, 0x3ff, 0x7af, 0x4, 0x40000, 0x5, 0x8c0, 0x6df9dd58, 0xffffff95, 0x1, 0x6, 0xad0a, 0x9, 0xf, 0x3, 0xfffffe01, 0xffffffaa, 0x2, 0xffffffff, 0x2, 0x100, 0x4, 0x3, 0x40, 0x10, 0x7f, 0x301b, 0x4, 0x0, 0x3b, 0x3, 0x8, 0x0, 0x8, 0x2d, 0x9, 0x80000001, 0x1, 0xfffffffb, 0xfffffffd, 0x1, 0xa, 0xfeb6, 0x800, 0xb74f, 0x4, 0x8001, 0x2f88, 0x9, 0x2, 0x0, 0x0, 0x8, 0xdc, 0x1000, 0x5, 0x6, 0x6, 0x5, 0xffffffff, 0x4, 0x7, 0x2, 0x7c9, 0x8, 0x4, 0xa0, 0x9, 0x9827, 0x4, 0x7, 0xa, 0x101, 0xb18c, 0x5, 0x8, 0x3, 0x1abe880, 0x0, 0x0, 0x0, 0xde1, 0x1ff80, 0x8, 0x5, 0x1000, 0x424c, 0x3, 0x9, 0x6, 0x80000000, 0x3, 0xfffff001, 0x3, 0x5, 0x3, 0x7f, 0x6, 0x1, 0x5b7f, 0x5, 0xfffffffa, 0x5, 0x140, 0xd2, 0x5, 0x6, 0x3, 0x3, 0x3, 0x0, 0x2, 0x7, 0x9b, 0x0, 0x200, 0x8, 0x2, 0x5, 0x8f7, 0x4, 0x0, 0x2, 0x8, 0x0, 0x5, 0x1, 0x0, 0x2, 0xfffffffd, 0xffffff01, 0xfffffffe]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x7, 0xd61, 0x0, 0x8000, 0x5, 0xe6f4, 0x9, 0x7, 0x1, 0xfffffeff, 0x9, 0x101, 0xfffffffd, 0x0, 0x7857, 0x7f, 0x5d9, 0x188e, 0x8001, 0x1ff, 0x53, 0x3, 0x72e31a9c, 0x5, 0x401, 0x7, 0x0, 0x6, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x4a8c, 0x9, 0x382, 0x3ff, 0x4, 0xa, 0x5320, 0x8d8, 0x7, 0x3, 0xf, 0xe, 0x5, 0x100, 0x1, 0x80000001, 0x6, 0xdb, 0x1ff, 0x40, 0x200, 0x5, 0x4, 0x5, 0x10001, 0x2, 0x6, 0x3, 0xc223, 0xfffffffa, 0x1, 0x2, 0x3, 0x4, 0x6, 0xe, 0x5, 0x9, 0x6, 0x1, 0x3, 0xb, 0xe16, 0x7, 0x6, 0xe, 0x5, 0x5, 0x9, 0x400, 0xfffffffc, 0x2, 0x5, 0x4, 0x2, 0x0, 0xd, 0x3, 0x1, 0x2, 0x9, 0x2, 0x0, 0xe7e, 0x101, 0x7, 0x1, 0x57, 0x6, 0x24d6, 0x14000, 0x80000000, 0x8c, 0x5, 0x3, 0x9, 0x6, 0x4ea, 0x9, 0x3ff, 0x3, 0x7, 0x3, 0x6, 0x6, 0x7, 0x401, 0x3, 0x5, 0x2, 0xfffffff7, 0x7ff, 0xc9, 0xfff, 0x3dd480, 0x3, 0x5, 0x2, 0x5, 0x1, 0x6, 0x1, 0x8, 0xfffffffc, 0x3, 0x9, 0x3, 0x5b, 0x8, 0x9, 0x9, 0x7fffffff, 0xb32, 0x7, 0x513, 0x2, 0x800, 0x9, 0x40, 0x9, 0x1, 0x2, 0x9, 0x8f, 0x1ff, 0x9, 0x6, 0x4ba8, 0x2, 0x5, 0x4, 0x9921, 0x6, 0x1000, 0xa860, 0x8, 0x4, 0x3, 0x1ff, 0xb567, 0x20f7, 0x8, 0x1e0624fa, 0x0, 0xb, 0x8, 0x1ff, 0x4, 0x3, 0x7f, 0x3, 0x5, 0x0, 0x54a3, 0x4, 0x10000, 0x1, 0x1, 0xfffffffb, 0x6, 0x3, 0x9, 0xfffffffc, 0x3, 0x7, 0x1, 0x9, 0x80000001, 0x4, 0x6, 0x0, 0x4, 0x7, 0x7, 0xfffbfff1, 0x3, 0x3, 0x7, 0x4, 0x5, 0x8, 0x0, 0x7fffffff, 0x1, 0xf8a, 0x6, 0x8, 0x8, 0x7, 0xfffffffd, 0x4, 0x1f9, 0x4, 0x8001, 0x9, 0x4, 0x10001, 0x8, 0x5ab, 0x6, 0x9, 0x5a31, 0x9, 0x7, 0xfffeffff, 0x81, 0x1fe000, 0x3ff, 0x53ae, 0x8, 0x1, 0x7f, 0x7, 0x7, 0x40, 0x8, 0x81, 0xffffffff, 0x4, 0x7, 0x1, 0x81]}]}]}}]}, 0xca8}, 0x1, 0x0, 0x0, 0x810}, 0x41) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRESOCT=r3], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 1.115667372s ago: executing program 0 (id=3232): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000240)=""/110, 0x6e}], 0x2, &(0x7f0000000340)=""/235, 0xeb}, 0x7f}, {{&(0x7f0000000440)=@x25, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/50, 0x32}, {&(0x7f0000000b80)=""/179, 0xb3}, {&(0x7f0000000b00)=""/73, 0x49}, {&(0x7f0000000640)=""/44, 0x2c}, {&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000780)=""/32, 0x20}], 0x7, &(0x7f0000000600)=""/32, 0x20}, 0x9c}], 0x2, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.112973902s ago: executing program 5 (id=3233): timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) write$ppp(r0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1.049346773s ago: executing program 0 (id=3234): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000400)='./file2\x00', 0xd091, &(0x7f0000000c00), 0x1, 0xb9f, &(0x7f0000001e40)="$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") r0 = socket$caif_stream(0x25, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x123, 0x28, &(0x7f0000000980)="328dc0b9f60a83e59cf9dc33fdb7e6d99ff586425ad6c9605a4a5d51be6f72fed7d3d75d34113bfba07345c420be15abb1ec2c03a226e78717da3e9046848bef15ffafe129ac99bd357acb51ed51e3125cf116ce8d38f564383aa094ddfc695120389c125de00cc794fd07178dc400534aee1f417145fba10f145d74370869d15f8f1a7071bb00bbc8add2881c81cf8c524a974434b5cf71ba756e45422619bb3e785743e463c05c952096fb033f46f456c40b17fb0ce43826974e4e85a3f9ad1e220eaa0437d40f9583ae1f26f46075b4ff056ce137e6", &(0x7f0000000380)=""/40, 0x9, 0x0, 0x15c, 0x86, &(0x7f00000004c0)="41991678fd5619ed47c5db674255c95a2fb62f30ccbd3016e097937ae1fe674012e29df17a0f33339c80a97020a4a42f22227af1f47b87050cc622b1382fa522e48bdfae5a33f315788858f270c8783793166a3a3c8cb9e8e56489d9856854e3a670e23e3c38da50231062ddb85e6ca86ea4e4e8726fed6dfb333a2164acdeffa161cc0568d9f3dd86b1709d38e770184a80492c4d194e99c7ffee14d1a330e4c235c794b23c1d4627aa9df8678b6ead4ed873d0881894c0993cad3ca2f99a797e52d05967c036bd587b33d67f358d5023fa1af29437d2a2669ab956c5e366405ac37cb77b2645f6351bd9a2932336f82400000000000000000000000000009cdd65e105fe145c7034786e33f7fb252fd2f36b28a2eb7e12fea8ab1214fafc927e238e8e677ebd1c389c6d10ab6fee255aecd272aa19d20745eedd3e9927806be1cc9f73dde92071ad5c58c01cb83e86b9c73f57e210ffc1bf95ae82", &(0x7f0000000c40)="9d33538d263ee9010092d85f3d31a41762dd54fcc8d1cf63eb3c73761a3752426c403178a2d586197a26b8f95e1b4cf248f47035590d6275b9a869f8efc9704b695b114f9cde99317ca006feaa14f3f3b8579a5f6da90456cd26379ae557224d813ba0cb5b222719e611d4fcafa60ad2b9de884b2d99143123f83660d12b033117657454074e", 0x3, 0x0, 0x10001}, 0x50) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r0, &(0x7f0000000040)=@util={0x25, "a1a23b02a0c8121422dba7f6a8390ee3"}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1783, 0x0, 0x1, 0x2000164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x200204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 719.804915ms ago: executing program 0 (id=3235): symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x8a, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000000)) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x4001, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000000600)="$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") syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086a1606410a600180400000000000000000000db000000000000ff02000000000000000000000000000116410000000000000708000000010002000000a1f65e5bff971a4cf52d9ec4a500000000009f960132d3de9e938161c552774d19c4913dd71050b1503c9250f4a95bcfb736000611fbe862d2814fc2ae26117eac6085f91187a7be50f39853ae51c6b4ec95efa7dc923ba6a1fb974815e9e93ac4a8d0d047b812c3556491ace5536af4280f68c6558a7dccc1436cf28d34ff18c222f773"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x200, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a2f00000000080041007369770014003314626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$kcm(0x10, 0x2, 0x0) r5 = syz_io_uring_setup(0x3d, &(0x7f0000000580)={0x0, 0xaa9d, 0x2, 0x1, 0xba}, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, 0x0, 0x1) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5, 0x401}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) 592.972569ms ago: executing program 4 (id=3236): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [], {}, [], {0x10, 0x3, 0x100000}, {0x20, 0xfff4}}, 0x24, 0x0) 289.75308ms ago: executing program 5 (id=3237): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f7274000500040000021c000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fff1f00006000540001c020008000640"], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x24008000) 271.703331ms ago: executing program 1 (id=3238): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x2b, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x3b, 0x7, 0x4}, {@loopback, 0x4e24, 0x3, 0x2, 0x10001, 0x7fff}}, 0x44) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) (async, rerun: 32) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) (async, rerun: 32) r2 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x3, 0x0, 0x9, 0x8, 0x0, 0x9, 0x241, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000380), 0x3}, 0x8, 0x5, 0x1, 0x1, 0x6, 0x5, 0xc5b0, 0x0, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xde, 0x3, 0x4, 0x40, 0x0, 0x80000000, 0x402, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0xa040, 0xfffffffffffffff8, 0x2, 0x8, 0x2, 0x3, 0x1}, r1, 0x3, r2, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000580)={{r2, &(0x7f0000000440)=',{[+[\x00', 0xef739edb95221430, &(0x7f0000000480)={@align=0x3b41, {0x6, 0x85, 0x7, 0x8000}}, 0x9f06, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x2}, {[0xd92, 0xfff, 0xffffffff, 0x1]}, 0x0, 0x1, &(0x7f0000000540)=""/1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x93, 0xb3, &(0x7f0000000600)="f2cd39752aa159a9870535f9d54a07f6bc03b019f5423bcc9c3c5cf144f5908bf027896e630c8e2bc1778843ebd0518ed49c6a0dfc03c819669fd97808f3dc0ee07b315af03967f9f299e21db496a60782f9f76e9ab6360e3e77655c4e2c4a26ac87187e07a7ab5160ad34d55585ff0bf922749e4d4542500ceec3813724a2659635133e78898767c20ee4343d1dd67dd6bbc2", &(0x7f00000006c0)=""/179, 0x9, 0x0, 0xc5, 0x18, &(0x7f0000000780)="1b34125895c6a54baca1079edb3a49f2f85f5fd54024f001834e5ab5bb2b7df6fb3e012d2eaf482666addc875bada555d2ee7acc0910fec96fcb6ef2d83fe85be01283aef944e994af13522d317ce5121079e3f5e05a26a7996c819f5e94a067714c3cb2e8db2e8d08c5790bfcad010a4ae1b5bb5d565b27f4e3f44ef505b4faf725ea3d3df4167efb316f51cd5f7cf87d88037c36acdf923bafc1aaae1c25c727b59ed0a8ad3801242d2e898f45e84bba9244825417ebd16c93e463800288a956c6cf630e", &(0x7f0000000880)="a68d881e29c3956813bcee255bb46762c5af9f9c388d4960", 0x5, 0x0, 0x8}, 0x50) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00)={0x0, r0}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x9, [@restrict={0xa, 0x0, 0x0, 0xb, 0x1}, @const={0x6, 0x0, 0x0, 0xa, 0x1}, @const={0x9, 0x0, 0x0, 0xa, 0x3}, @struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x6, [{0xf, 0x2, 0x7a7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xd5e8}}, @datasec={0xe, 0x4, 0x0, 0xf, 0x2, [{0x1, 0xde0, 0x7}, {0x5, 0xffffffcb, 0xffffff00}, {0x4, 0x8e, 0xffff}, {0x2, 0x10, 0x3}], "7095"}]}, {0x0, [0x2e, 0x61, 0x5f, 0x61, 0x61, 0x5f, 0x30]}}, &(0x7f0000000a00)=""/146, 0xb5, 0x92, 0x1, 0x6, 0x10000, @value=r5}, 0x28) (async) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000b40)={@ipv4, 0x0}, &(0x7f0000000b80)=0x14) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x800, '\x00', r7, r6, 0x3, 0x2, 0x4}, 0x50) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000c40)='wg0\x00', 0x4) (async, rerun: 32) quotactl_fd$Q_GETFMT(r8, 0xffffffff80000402, 0x0, &(0x7f0000000c80)) (rerun: 32) epoll_wait(r4, &(0x7f0000000cc0)=[{}], 0x1, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r6, {0x3ff}}, './file0\x00'}) (async) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000d40)={0x4}) ioctl$SG_GET_VERSION_NUM(r9, 0x2282, &(0x7f0000000d80)) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000dc0)) r11 = io_uring_setup(0x6df6, &(0x7f0000000e00)={0x0, 0x7957, 0x1000, 0x3, 0x28, 0x0, r9}) r12 = syz_io_uring_setup(0x53f8, &(0x7f0000000e80)={0x0, 0xd13d, 0x10000, 0x3, 0x5c, 0x0, r11}, &(0x7f0000000f00), &(0x7f0000000f40)) (async) fchmodat(r9, &(0x7f0000000f80)='./file0\x00', 0x8) (async) syz_usb_connect(0x5, 0xc80, &(0x7f0000000fc0)={{0x12, 0x1, 0x201, 0xc5, 0x57, 0x85, 0xff, 0x4dd, 0x9032, 0x2421, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6e, 0x4, 0x64, 0x8, 0x80, 0x10, "", [{{0x9, 0x4, 0x2f, 0x3, 0xb, 0x2, 0xa, 0x0, 0x82, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "71e4a58fae38"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xa5, 0x7, 0x7, 0x82}, [@acm={0x4, 0x24, 0x2, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x24, 0x3, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x0, 0xea, [0xc95, 0x8]}]}, @generic={0xf8, 0x9, "19d4001b96a7930d67b575983c104b63f018f405e1f5b1a9d681d3631d9ed4cd9c7988e244faef3544cc3cab86cd21214ff8492ad84b7bf22be5e7b7a990879d8a6ba882f4e6a02ae5c65882b4c61674cd88415063e421f0ab46788e42588a2a14902a062fe01bd2a080478a84a5cc9d1153813c198970ad2840a2ee6df15a1fbf6ecb9d472bdca9548abbfa72eaefeb690954ff0e74b786371d8b26a4a9cbb2a1cb486906f1ce079f96d26c34299fc9ce5bff30ebbbe6634780dd41da90542f223f18dec765509a2a3762fc62030d71bd29b773b7b6cc37f3adb63f1d3f6d7a17ac205b93eedaf9d491d17fbaac99b7f3763fd84dc2"}], [{{0x9, 0x5, 0xc, 0x0, 0x28, 0x6, 0x2, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7d7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xd6d5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x9, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9}, @generic={0xe0, 0x9, "c341b6b9bd566e6ce26240e8b02bc3fe36d4712c7acba91a6cca6ec08841659c5bff098f7ba92f8028e5bf15b1fe92eb4236aa6ff544fe92ec162d3c2978a85397399189dbd9b34ae6a01e0a09ee298e1c6cb13939f85157a97edf1724498d73a095350158bfd7d0bbf602093767bc2a17706ef8b143a1abcf29744c93ba58f62e632ebdc1bcdff2d0ff40ae81dc036ec8c90b65d0aba81a7ac0063450f4198fcbe27495bdd7e66e11eb339ba23a9ddea2e77c0517c174da88c8de861db702a24591322d9255e829d356a058d85d638fe15ed0c799019644c2006fc158ed"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0xcf, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xf, 0x7, 0x7}}, {{0x9, 0x5, 0x88, 0x0, 0x40, 0x1, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x80, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x37597dab6e8c1788, 0x1, 0x8, 0xc6}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xff, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x6}, @generic={0x7b, 0x9, "342cabd90535a66a7bd1d15b695b36a4b7fdefc535773bcdc5da9d9a41a5f4eec34179e8913f95167acb6d41c084fead453e7543bcc2319a2d692ee34a8df887bb0f416f92846cbd4b387f9b9485531ec550891620606c3d5acb6f9622620936e19962f638569320116ab69164768188cbd49b46f5ab1e96ce"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x4, 0x7, 0x5, [@generic={0x9, 0x6, "38870f178b12f3"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x40, 0x37, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x3, 0x24, 0xed, [@generic={0x9d, 0x22, "ed4872559e5f4c84b7e8800a732d04ddb92d610ab912d7ebe917ccd83678a6cbdd542ba2cd85845457e44dcbb4094571f09f5d8e648ecdabbc388172358205b40aaf9da63265ed4811068b29d0d2c19ca5ee42c06924314643fd71b37631d8f6ac55f3c8336429bb2f99b9bcb165c74a7d081a11f5acbf9b0154fb0f78f7a9117d9f6821f85674eabf17dcb0d7140cfb2397a413ddb3fd6f9c9604"}, @generic={0x16, 0xb, "6b9543eff0720bb1ad70f114011885def27fdcd9"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x1, 0xfb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0xa0c}, @generic={0xc9, 0xa, "dcea83de0d717f176a252ec89a9e9d3fdee5f7c2473402923a5451a2bbc2dfc1f6fc02054c6f3967afd425ad4156ef06687a65649acd7de9fe75bdcc50b2a50778616d2cb98c15a3772f4713f58746718d30a0852602e1f41e54ef03e49290e4de34583aa2b76a0afe60ca06a78cf20110da16515c74d4cea14c6e6d2a081145bfcb25a17be8142a28f5de3d2ff1d603348e83c031a6b4add20ee572f5123d21c1ea1592ebb6728d2b62713e0629552d567c4555cc7f2244ea5253f6ba32cd303160221492e121"}]}}]}}, {{0x9, 0x4, 0x14, 0x7, 0x5, 0xa7, 0x93, 0x92, 0x59, [], [{{0x9, 0x5, 0x2, 0x4, 0x3ff, 0xe, 0x1, 0xf}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x9, 0xe0, [@generic={0x50, 0x4, "5e7495a0facf431a1d4c4783d5d9acf16d36adb8689ed43d05676cbe9d8d00e06efc2e19dde676fffc0b4ea3e70b611223e7ead9b53d7ac8bd6cd72d6ad47abd3f3232e80111234df30e9ba35dbc"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x101}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x7, 0x7, 0x2}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x82, 0x8, 0x4}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x42, 0x1, 0x8b, [@generic={0xe2, 0xb, "92e31a2e9b7b61ae3b0ab1a17c995001a4f44f431290744af1eefee34660d75ac92575c7fc40f9a405991940bb62e682def4c344b7cc4a59f37a150854b7c098d8d7052bc560b34a1d402dc73ba47ca96aed6e9bfdeb39b0aebc2c6f90968d72dc3c1dadda455253d3dd64068410189f0060dfd9580bf49f44306cb575b8ef6ad765543c3efca6c6f74b3455e5edec3572cc081459a336f57a1c04a45ea145b157653d7d861291d52e2e6151d994ce0befa5ad967678daa279c18873d4544580740cfc484e4be8642c7d94728ce73fc16ebbdb85ccd258c3faf792c522970165"}]}}]}}, {{0x9, 0x4, 0xdd, 0x9, 0x3, 0x6e, 0xb4, 0x3, 0x7, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x4, 0x7, 0x19}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x8, 0xf8, 0x3}}, {{0x9, 0x5, 0x83f932a5f258b388, 0x1, 0x40, 0x3, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x9}]}}]}}, {{0x9, 0x4, 0xe3, 0xc, 0xd, 0x62, 0xb4, 0x56, 0x4, [], [{{0x9, 0x5, 0xe, 0x8, 0x40, 0x9, 0xf9, 0xaf, [@generic={0xe0, 0x7, "7318ce6ee09459f6b57042c8ebf48373cd39d7ef49601ec2abe9c98630122febbcbf493dcd029f5740008ca97ca58d0473a6f4805f388770e0a2e8687f6e0e6c3535c21969f85d2ff8bf6d2c433599c5ff0440c50c1adfb93133a4c37cb2d4a142c66ea77cabc74eb026d9548655418404380986242cae12185276d3ef7935789abfbd8383168d0aab58ee4fe9c25bd5a1fef2d3b0e60271d6670ef1244ae2c74aec70a3d1fc784ba0f88c666fa8f9a047b6684a2c469d0b39915017f4b4439bd951071fd4aa869b9e752057337b51498a598b4aa446286abc805164f3f5"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xf8, 0xf0, 0xc4}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x2, 0x9, 0x2, [@generic={0x37, 0x8, "f0b44f1dc605a3deec743d0f9327a2d387af6fe001ec8956fe99f913ea24ec15ad40604a7a4ebcbcac0a13fb2d0e4ebedd4b1c2d31"}, @generic={0x58, 0xd, "5cc9b07981fee28a0900fa38e63217f49c08ce845b1cbc157e021ccbb95ea7b1cb0e9700035899c682cf38c78061ffeb3b18f6a274496cc7a92b6e8f2e2d64f8ea6576099a723b2731b036bdc777c97ef1aa764ff1d5"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x5, 0x9, 0x68}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0xf4, 0x5, 0x74, [@generic={0x6d, 0xf, "84faf1739db0735c69193fd466cfc6e139a6eef5f1b0daba6c134faae2038c20be9e9039568e1175b1a9672943ee8e8d29705fc305e403ab8b0e912ee0ad410d414968443fa7da3e7b47cbe1b4aecccb01bb2023e1690da2a7b593bc5ef61d2fb8ca5d75d2e4c8bde77324"}, @generic={0x22, 0x8, "a67c55c29ea826c55ca865922490213f5f522711039608e0a5410146f1dda4fc"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x1, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}, @generic={0xa3, 0x5, "4875ebc8c8c21e9e882e6d9869b24f2561892082f053bf45a933656d277f7a3b80ea530c75901bf7719b52782c46ec2d35f06071e6bdcb5344a2da8c89f6b4b425b41eb95714de5116bd226b20d4427bbd841de304b8b4f4bd024132833148803c5520e3d6cfcffc46f68223d62979f5ef9d1f9ea67138675c351e12eefc751766d3b3ebd62f1d8c463ec5e6c6862ce2ff51d2adc23a825ae0184a0ea66ddd59f0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x3, 0x7, 0x8, [@generic={0xdb, 0x22, "a55d95eee8222a1b524a771427b1d6682b208fbe039ee8b7f8e332661411c042c865f1cd626e012f83b2cbf3b67ec62e1d571fff9f1c6c0a16828279ca21cde1bb2c2d8e93f4a4601b3c89570deccb205be52158663419cbb13a607980c2f739bf86efd4a2f59b55e47325e5605ca6e7cc422922d20f3fa3106b1fdf66af63bcf5bb27ee2049de3fb905733f6ac98680c91d4579ae39fb88b24784b26ac5495b12ff98ce541faecbde82ee4659db97bf4f4603dd5b7e2393bb9859e9373d706e4f6b99ef1ecd103ad7fdef831f8e38d72de6fb6ec3c0d73a24"}, @generic={0xfe, 0x8, "5120c152f1fc9c5f8e33ab71c8c2500af523adec42b161ce6a6fdcb22b14c60631bf5b3509676729e93d4f83a4b68676539ea330318b6e5af924b58f6f7cb81dd9ec5bc0bebe0b9962f1d50ec9a57ca0bf8320862ccb7702677b88db29a331f687133b2f851113876c442021f0e62a8920bf521fb43304b3424e8ded16cc71625d2c13350a31d0efca9094efa65e2af05891cf99d683cfc30e782a2a8f9774fdcae70da7aa0ecd898167bc512baf7a6b81314fda22bd68fd027b5e08338ba41f524cb31218ec4bad13d1a4355a1809a1bc32fe3c7b9f28065f6c4153cf6cb2b6c0e2565587c510c1f188ba5a1dfa3bc2940d737ba8c4c4effcb20e3d"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x6, 0x7f, 0x6}}, {{0x9, 0x5, 0xd, 0x8, 0xee10b6513b7efc72, 0x6, 0x9, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0xc, 0x7, [@generic={0x97, 0x6, "662b9b658967a649b4f197132eed2741ada4a7d46968fd3678ece561c494ac44d3a9154d2b64da4679878c871f0fa77449d0854f2a56753ec47ef891f11b2fb11dc229b42230a4a6afe92790e125f33e9b0607818e022ea9f1beb5cc1dc9862913b425500bfb31de1f0c6aa79910c5437f82d8a58659894ad354e78a41aab2e72ce39d860e8d51672c94d7909191d5f3d8d0839b2b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x7, 0xf7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4d3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf1, 0x554e}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0x20, 0x5c}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x24, 0x0, 0x8, [@generic={0x78, 0x23, "0e721243451a294b3ef317211fcab6ab3ad3fe8b7be77ffdfffedf26c23fd900b82a7f74e0e6e4bb7c9bd27e4cdbed6f295b8ca5f83f6d4b2c8ae61301ab200912086efd17de584c22b43ddf59f90c3a273c91952c1d22c44a968b66eb307a7683351bf313479f1745b644b654e0bd19fdd36716a37c"}]}}]}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x250, 0x9, 0x6, 0x80, 0x8, 0x5}, 0x115, &(0x7f0000001c80)={0x5, 0xf, 0x115, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x9}, @generic={0xf4, 0x10, 0x3, "81c63ace2d70424ed98d7c5052228b5a45602b063ab97be8bdf419f6c587f077a8a594b31a4cab1f260dedc320079e504c79ddad9cd51d65301ad2c073c6996c567dff8defbc89b963ba7cb64152d112bb728b4c3691b70985ca6a43398dba8f99c5b5b542190b8fe5f34b41f35ee33fb8d33a4359c4b1e772d7fa4e5645328379d18b9dccb6507467f5707296a950d2b59b0e60794afcd2607168520b1d0fd6a75fe505fe8043b1f598ba4a2be1ece76755159ec6b27e29229443ff611aec3bd2cd64179e1499b3bf51147c422784e0de83ee7cdcd354686bd9ce0b17a34af257693409fd4fe1a828e78448f4bb27234d"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0xd, 0x2, 0x59, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0xc, 0x200}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0xc0a}}, {0xea, &(0x7f0000001e00)=@string={0xea, 0x3, "b45233a903ab0b4e9964277796fc2a72538c20e7c9b0ae686e4bb03bd04d9223d70ac2580ade1c45a434281accba4df759707795ada3356836c32bb7f22399953949a5989b4149078a4effe2dcef6f96a730f978dae76032757b4640584c0d88b9e155f33bd37527dccf57edd72796586bd3fb680136a8d8bbed263a729b4b83cf291a2bc67052c5502a48ec6e37418dbd1047c9b368f360096f5b7f206e235d598ea8ac49f223fa2349becc647c0d4b405745ae2f548de988357c28165e219e77d8ab8b15d0807bae1664980c55eff97b2947ab624573ecf96e527259fab77c604d43ecd41fc7fe"}}]}) truncate(&(0x7f0000001f40)='./file0\x00', 0x7fffffffffffffff) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) (rerun: 64) clock_nanosleep(0x7, 0x1, &(0x7f0000001fc0)={r13, r14+10000000}, &(0x7f0000002000)) (async) sendmsg$nl_route(r4, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)=@ipv6_newnexthop={0x58, 0x68, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x10}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_OIF={0x8, 0x5, r7}, @NHA_OIF={0x8, 0x5, r7}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x9}, {0x2, 0x3}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4011}, 0x8040) (async, rerun: 32) unshare(0x40000000) (rerun: 32) ioctl$XFS_IOC_EXCHANGE_RANGE(r12, 0x40285881, &(0x7f0000002180)={r9, 0x0, 0x9, 0x1000, 0x73, 0x8}) 235.140822ms ago: executing program 4 (id=3239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x1, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0xf00000000000000, 0x80}, 0x5050) 234.085442ms ago: executing program 3 (id=3240): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x1108, &(0x7f00000000c0)={0x0, 0x10, 0x80, 0x8000003, 0x87}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x424a}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x41) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @empty, 0x4}, 0x1c) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$l2tp(r1, &(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x1108, &(0x7f00000000c0)={0x0, 0x10, 0x80, 0x8000003, 0x87}, &(0x7f0000000000), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x424a}) (async) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) creat(&(0x7f0000000040)='./file0\x00', 0x41) (async) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @empty, 0x4}, 0x1c) (async) 132.991065ms ago: executing program 0 (id=3241): mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) (async, rerun: 32) r3 = shmget(0x3, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x1000) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e1f, 0x0, 0x4, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@empty, 0x3505, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) sendmsg$sock(r5, &(0x7f0000000380)={&(0x7f0000000200)=@generic={0x8, "778cc21ac8dd5258e7f87a00bbd6bf0215f841b94abeffbab34dffa8b4d461c793eef9ded69afca043c7ec0f145bd48f7277f8382daa7a63b2c375ad03bfd8a358d9899d42b876f185135642f72a526f507eed61f8b7b1db81481db13a980691dd714ea78a0b8a83535ce0ba8a79997463938c8002c7aea0b0aae4c8643a"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="bd786f0c0706408bb4eb2f3edb0c4f395236cea067800ff1cbaf704533e67b68623809f0a52d8c0afdebbde8f2ba939282b9dab7ebbdc4dd44eb39bf3f8ab094e49bcbb119c83a0be344fa89ef6bd4cce4fdb678706a3767b5eb6885cb5720354bb2f0d7e59823f5474e3bc5002dd5dace9ef30d927f8818dd299d98cea7d3292a2ef859645fac809282dd15719509b9a6b0969a926bea65e01afb6848f38b769230ffcdfdd479f732d4571ddfc5631bb28f09a041f277045d9e00f46390ab1e981533", 0xc3}, {&(0x7f0000000440)="1eef89b345a76ab90583d01563f89c26dd18c9221265f036382e8be6953fb47e809a30b86c6e61d90af7954b8ee351b05a8be595bc13d9bcdc3a734d985178d331f56e75f0384e53670e4ee4734bd6796d052dad0565873019b6a65ccf84f794ad952d4de5ee388a2a460746c7623236d57a4737ca8c97ea1cfd9a91b9aadd343db3f4c1f4069efbbe0fce29cd92028939", 0x91}, {&(0x7f00000000c0)="0acb7e32827d17", 0x7}, {&(0x7f0000000600)="1e878a6eb1b53d3a11e686854a4312a17364c2c55c49dbb80ffd6bd79cda7e604c4dcc7e730075a371c94b39cdde15c1093fa69ea82353ad42b3ba9451af25c5fef6b5656d05ca6e281074eb5145612bf3e399fb9abe7fe1430a63ca21e92c6b8db8ec72f75fa5279243eb2b998259f486d59ea98d0421f61ff67c1f4bae67bbe095a1ded4a0e2147ae977f1794ae550f301", 0x92}], 0x4, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x2dac}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}], 0xd8}, 0x20) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) io_uring_setup(0x323, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x182}) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 132.804096ms ago: executing program 1 (id=3242): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) listen(r0, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@jqfmt_vfsold}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000088) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000880)={[], [{@smackfsroot}, {@subj_user={'subj_user', 0x3d, 'memory.events\x00'}}, {@dont_hash}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, 'Gbort'}}, {@audit}, {@pcr={'pcr', 0x3d, 0x1d}}]}, 0x0, 0x569, &(0x7f00000002c0)="$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") 132.568795ms ago: executing program 4 (id=3243): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd1, 0x1}, 0x106200, 0x10004, 0x220da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34728, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x4000000000010003, 0x8, 0x9, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x4000011, r2, 0x0) pwritev(r0, &(0x7f0000001980)=[{&(0x7f0000000240)="47c6abf1ba310d8d7eef10461b9550e8cfb4eade01c49b82e4482808af7c2499523da8344fbda2968efdd86d3011ea7bb67676f5bb0c64478fae91ba5aa4e4c8f850", 0x42}, {&(0x7f0000000040)="8dc8b987811dc7ccf266481c3be9b9f3e58e621479bc44ab79728133a8206291b81877375dc1db3081dc712b5490", 0x2e}, {&(0x7f00000002c0)="1da9e90f8c97cde16f9b1806dac618642bf9d9e9aabc574f2906a26060c17e3ef038bcd7316bd698b983be7f2e71704727a69d19ae8e571d2b9f1ba63b5c7a6e29155f8f85f8aa2ef015f88f9b42f41f60fe0015", 0x54}, {&(0x7f00000003c0)="bb14690560b168db15e38edbbee2e94aca1d2e3d3698cb61ac23d567685ea61292ea3757b26eb8f6f369efe1389054048f6f5d47b604afb4b4fc7356e17bbc69e561d1c5e00a05f2507275ceb9c31ac18fa33230454362057ca2bae4", 0x5c}, {&(0x7f0000000440)="5b4e09d1c3bf6aeb079145b88bdec372692493fe91ff46793884dbfd0afc5f39240a6e27a4ebafab54b849adc360c5957239f592a9c27bbfcbdbbf1e46d27bc9d13729a52497c4d1edab092a5b23ecde9433bd6843158d3be25778d7eca1e37cbb68a4166ca19a4636d2133a00f9e5a99f686e863a361e19ae50158bff61a51aa9bb957d50449ad1b8f028e46e676e25e5270bcb9c0f7ac33be13f1b12c580c676732d49cae8fbabe3baf6c6f3e55529bbf21aad964aa17cb4", 0xb9}, {&(0x7f0000000540)="0685830619a0426d66903d790ed90d88caf593a348cbfa597c784d18207aad6d459d86d5014fcd4f95901decdde4232029783c25f6226763f47b32d9355060ae6071a08bbe6782b92b7e673eed", 0x4d}, {&(0x7f0000001700)="6f58da43998841074617a379ad4b08a3d135f12b0d057b4690e18a4f33846dc7d28fff38e5424db6ee4fdd6add6246c79dd4a6e02bc221c54694a07c84675da4666edb2b46f6d17ce2cccc138f9041982834911cef7eae73dfb90b4948469f08857e5b3d21a0319d67203dc8d4fe8b9bbc1ec1b29b06b08ac224f012fe3db32905bca650931c3cc92571a72c89d16760422f429fa6c29937202c636217588a292a9e5c4da7e50e4550a4af13100fb3d0af9ea2ac78e5f8bd0ef60b20bba4b03b2438f0599ed22401ec9401adc13580aaa179", 0xd2}, {&(0x7f0000001800)="746b16ffb8d4c88749900cfccb963004f164c6df31d2120c3ee22435f2b498e10a8c6dc3a5e40dee18df3c6c425bea56db96bfefc44ac9ea106d373bcdffedd583bf98b9b4cf996d163beadc618af5bb7d62c2fd94903f0430f7c3a94e4c681d47131396f955cfba50d8148061ef6870cff5510a8af6a5f927214151302837794fc7943c4db8d3a5d548cd77eca7fa41837c4072263344cd2344a905e5b780488fc8d68817cb92811dab4ffb81b333eb91995a4c3de3bbedbe5bf9fc81857888", 0xc0}, {&(0x7f00000005c0)="60ea4395d793fbc3842e0dd6d2642bdc4dad6846ba902f77ca0d1b18b54cfc7be7eaebe5e6244ab3c995474215e66c33f32d10ba70d030b09cca529a15344f75458765ba9de91aee12109f6913cb400825797b10aac765a2d27c910ca4323b2eae", 0x61}, {&(0x7f00000018c0)="cc0204d60a8a1c708bfcb822b8642198866d65e5c1f048748b9848fc4f2c3e58a3f898382dcf7147b9d0dd3c1107cdf0141a83818862378b4489cdf8531b816e232750203be574428a85aa078ec8d28a201afe388621edadcff28821d072c8e43dc8fa919a2b73c2c0bb570dacdfc6661fae7819026817b500bcc90d22fd7566c83beb1739041d9dc29545b6266581a9f4c8e54923a262def60d56e0eeecb968224a63c267d8accc6e593aa42e2cfdd225192c23f715", 0xb6}], 0xa, 0xa, 0x6) r3 = socket(0x2d, 0x2, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x500002}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x100}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 53.306808ms ago: executing program 5 (id=3244): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000980)=""/265, 0x109}, {&(0x7f0000004b00)=""/176, 0xb0}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x4}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x184) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) mknodat$null(r1, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000006c0)='./file1\x00', 0x400000a0) open(&(0x7f0000000ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2000, 0x88) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 0s ago: executing program 0 (id=3245): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000400)='./file2\x00', 0xd091, &(0x7f0000000c00), 0x1, 0xb9f, &(0x7f0000001e40)="$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") r0 = socket$caif_stream(0x25, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x123, 0x28, &(0x7f0000000980)="328dc0b9f60a83e59cf9dc33fdb7e6d99ff586425ad6c9605a4a5d51be6f72fed7d3d75d34113bfba07345c420be15abb1ec2c03a226e78717da3e9046848bef15ffafe129ac99bd357acb51ed51e3125cf116ce8d38f564383aa094ddfc695120389c125de00cc794fd07178dc400534aee1f417145fba10f145d74370869d15f8f1a7071bb00bbc8add2881c81cf8c524a974434b5cf71ba756e45422619bb3e785743e463c05c952096fb033f46f456c40b17fb0ce43826974e4e85a3f9ad1e220eaa0437d40f9583ae1f26f46075b4ff056ce137e6", &(0x7f0000000380)=""/40, 0x9, 0x0, 0x15c, 0x86, &(0x7f00000004c0)="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", &(0x7f0000000c40)="9d33538d263ee9010092d85f3d31a41762dd54fcc8d1cf63eb3c73761a3752426c403178a2d586197a26b8f95e1b4cf248f47035590d6275b9a869f8efc9704b695b114f9cde99317ca006feaa14f3f3b8579a5f6da90456cd26379ae557224d813ba0cb5b222719e611d4fcafa60ad2b9de884b2d99143123f83660d12b033117657454074e", 0x3, 0x0, 0x10001}, 0x50) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r0, &(0x7f0000000040)=@util={0x25, "a1a23b02a0c8121422dba7f6a8390ee3"}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1783, 0x0, 0x1, 0x2000164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x200204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 384.962575][ T28] audit: type=1400 audit(1774687447.002:1727): avc: denied { connect } for pid=13145 comm="syz.2.2920" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.012973][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2920'. [ 385.494225][T13170] EXT4-fs: Ignoring removed orlov option [ 385.500000][T13170] EXT4-fs: Ignoring removed bh option [ 385.545634][ T28] audit: type=1326 audit(1774687447.232:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.2.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4ae4c799 code=0x7ffc0000 [ 385.785997][ T28] audit: type=1326 audit(1774687447.232:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.2.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f7e4ae4c799 code=0x7ffc0000 [ 385.928231][T13175] set_capacity_and_notify: 7 callbacks suppressed [ 385.928250][T13175] loop3: detected capacity change from 0 to 1024 [ 385.995969][ T28] audit: type=1326 audit(1774687447.232:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.2.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4ae4c799 code=0x7ffc0000 [ 386.006892][T13175] EXT4-fs: Ignoring removed mblk_io_submit option [ 386.045611][ T28] audit: type=1326 audit(1774687447.232:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.2.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7e4ae4c799 code=0x7ffc0000 [ 386.089694][ T28] audit: type=1326 audit(1774687447.232:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.2.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4ae4c799 code=0x7ffc0000 [ 386.150706][T13178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13178 comm=syz.1.2929 [ 386.164405][T13175] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 386.240720][T13178] loop1: detected capacity change from 0 to 512 [ 386.302612][T13178] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 386.368855][T13184] loop0: detected capacity change from 0 to 512 [ 386.376092][T13184] EXT4-fs: inline encryption not supported [ 386.392216][T13184] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.408810][T13178] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 386.419333][T13178] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2929: Corrupt directory, running e2fsck is recommended [ 386.449935][T13178] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 386.458618][T13178] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.2929: corrupted in-inode xattr: e_name out of bounds [ 386.478364][T13189] loop2: detected capacity change from 0 to 4096 [ 386.506642][T13178] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.506866][T13178] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2929: couldn't read orphan inode 15 (err -117) [ 386.516165][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 386.516191][ C0] EXT4-fs (loop1): initial error at time 1774687448: ext4_iget_extra_inode:5025: inode 15 [ 386.516219][ C0] EXT4-fs (loop1): last error at time 1774687448: ext4_iget_extra_inode:5025: inode 15 [ 386.556205][T13178] loop1: lost filesystem error report for type 5 error -117 [ 386.582784][T13094] loop4: detected capacity change from 0 to 4096 [ 386.587822][T13189] netlink: 'syz.2.2931': attribute type 21 has an invalid length. [ 386.617503][T13189] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2931'. [ 386.623499][T13191] loop0: detected capacity change from 0 to 128 [ 386.641884][T13094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.657443][T13178] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 386.716326][T13178] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 386.732731][T13094] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 386.766686][T13094] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 386.776746][T13094] System zones: 0-5 [ 386.785705][T13178] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2929: Corrupt directory, running e2fsck is recommended [ 386.798803][T13029] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 386.821521][T13180] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 386.823872][T13200] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 386.844943][T13200] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 386.855359][T13200] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2929: Corrupt directory, running e2fsck is recommended [ 386.932254][T13202] loop0: detected capacity change from 0 to 1024 [ 386.939831][T13202] EXT4-fs: Ignoring removed orlov option [ 386.945755][T13202] EXT4-fs: Ignoring removed bh option [ 387.024919][T13180] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 387.096625][T13180] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2929: Corrupt directory, running e2fsck is recommended [ 387.188228][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'. [ 387.583040][T13215] loop4: detected capacity change from 0 to 128 [ 387.601579][T13213] loop2: detected capacity change from 0 to 128 [ 387.692707][T13213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 387.713377][T13213] FAT-fs (loop2): Filesystem has been set read-only [ 387.735587][T13213] bio_check_eod: 43888 callbacks suppressed [ 387.735639][T13213] syz.2.2939: attempt to access beyond end of device [ 387.735639][T13213] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 387.758704][T13213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 387.772786][T13213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 387.813968][T13216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2938'. [ 387.821319][T13213] syz.2.2939: attempt to access beyond end of device [ 387.821319][T13213] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 387.880195][T13216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2938'. [ 387.950264][T13213] syz.2.2939: attempt to access beyond end of device [ 387.950264][T13213] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 387.996172][T13213] syz.2.2939: attempt to access beyond end of device [ 387.996172][T13213] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 388.016789][T13216] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2938'. [ 388.078993][T13213] syz.2.2939: attempt to access beyond end of device [ 388.078993][T13213] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 388.099682][T13254] loop4: detected capacity change from 0 to 512 [ 388.133363][T13254] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.191766][T13213] syz.2.2939: attempt to access beyond end of device [ 388.191766][T13213] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 388.223504][T13213] syz.2.2939: attempt to access beyond end of device [ 388.223504][T13213] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 388.250780][T13261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13261 comm=syz.4.2948 [ 388.264803][T13213] syz.2.2939: attempt to access beyond end of device [ 388.264803][T13213] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 388.293493][T13213] syz.2.2939: attempt to access beyond end of device [ 388.293493][T13213] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 388.321517][T13213] syz.2.2939: attempt to access beyond end of device [ 388.321517][T13213] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 388.446192][T13261] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 388.485992][T13261] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 388.526941][T13256] netlink: 'syz.0.2947': attribute type 21 has an invalid length. [ 388.540070][T13256] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2947'. [ 388.540119][T13261] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2948: Corrupt directory, running e2fsck is recommended [ 388.563795][T13261] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 388.572442][T13261] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2948: corrupted in-inode xattr: e_name out of bounds [ 388.572476][T13261] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 388.575523][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 388.575544][ C0] EXT4-fs (loop4): initial error at time 1774687450: ext4_iget_extra_inode:5025: inode 15 [ 388.575576][ C0] EXT4-fs (loop4): last error at time 1774687450: ext4_iget_extra_inode:5025: inode 15 [ 388.576043][T13261] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2948: couldn't read orphan inode 15 (err -117) [ 388.576077][T13261] loop4: lost filesystem error report for type 5 error -117 [ 388.611128][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2949'. [ 388.626857][T13261] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 388.626888][T13261] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 388.626908][T13261] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2948: Corrupt directory, running e2fsck is recommended [ 388.627824][T13261] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 388.627848][T13261] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 388.627923][T13261] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2948: Corrupt directory, running e2fsck is recommended [ 388.628938][T13261] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 388.629020][T13261] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 388.629036][T13261] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2948: Corrupt directory, running e2fsck is recommended [ 388.629993][T13261] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 388.843962][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 388.843980][ T28] audit: type=1400 audit(1774687450.952:1739): avc: denied { watch watch_reads } for pid=13272 comm="syz.1.2949" path="/proc/172" dev="proc" ino=40552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 389.370792][ T28] audit: type=1400 audit(1774687451.482:1740): avc: denied { setopt } for pid=13293 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 389.553242][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'. [ 389.597264][ T28] audit: type=1400 audit(1774687451.682:1741): avc: denied { create } for pid=13291 comm="syz.3.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 389.636110][ T28] audit: type=1400 audit(1774687451.682:1742): avc: denied { setopt } for pid=13291 comm="syz.3.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 389.691483][T13304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13304 comm=syz.2.2960 [ 389.754667][ T28] audit: type=1400 audit(1774687451.862:1743): avc: denied { execute } for pid=13299 comm="syz.4.2959" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 389.810305][T13312] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 389.822278][T13312] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 389.832677][T13312] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2960: Corrupt directory, running e2fsck is recommended [ 389.846571][T13312] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 389.855152][T13312] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2960: corrupted in-inode xattr: e_name out of bounds [ 389.869852][T13312] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.870217][T13312] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2960: couldn't read orphan inode 15 (err -117) [ 389.879585][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 389.879626][ C0] EXT4-fs (loop2): initial error at time 1774687451: ext4_iget_extra_inode:5025: inode 15 [ 389.879658][ C0] EXT4-fs (loop2): last error at time 1774687451: ext4_iget_extra_inode:5025: inode 15 [ 389.919107][T13312] loop2: lost filesystem error report for type 5 error -117 [ 389.922075][T13304] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 389.942741][T13304] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 389.988367][ T3597] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.000401][T13304] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2960: Corrupt directory, running e2fsck is recommended [ 390.015597][T13312] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 390.040625][T13303] lo speed is unknown, defaulting to 1000 [ 390.047329][T13326] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 390.048286][ T3597] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.069845][T13326] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 390.088702][T13326] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2960: Corrupt directory, running e2fsck is recommended [ 390.157203][ T3597] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.172000][T13312] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 390.203562][T13312] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2960: Corrupt directory, running e2fsck is recommended [ 390.693055][ T3597] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.703554][ T3313] EXT4-fs unmount: 39 callbacks suppressed [ 390.703571][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.747378][T13327] ISOFS: unable to read i-node block [ 390.752864][T13327] isofs_fill_super: get root inode failed [ 390.788826][T13331] netlink: 'syz.4.2963': attribute type 21 has an invalid length. [ 390.811089][T13331] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2963'. [ 390.914786][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 390.965344][T13303] chnl_net:caif_netlink_parms(): no params data found [ 391.013424][T13349] set_capacity_and_notify: 7 callbacks suppressed [ 391.013444][T13349] loop2: detected capacity change from 0 to 512 [ 391.036263][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2968'. [ 391.049633][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2968'. [ 391.051026][ T3597] bridge_slave_1: left allmulticast mode [ 391.064934][ T3597] bridge_slave_1: left promiscuous mode [ 391.068660][T13349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.070819][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.124710][ T3597] bridge_slave_0: left allmulticast mode [ 391.124734][T13349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 391.135599][ T3597] bridge_slave_0: left promiscuous mode [ 391.158428][T13349] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2969: invalid indirect mapped block 2683928664 (level 1) [ 391.210098][T13349] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 391.210347][T13349] EXT4-fs (loop2): Remounting filesystem read-only [ 391.219536][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 391.219578][ C0] EXT4-fs (loop2): initial error at time 1774687453: ext4_free_branches:1023: inode 11 [ 391.219614][ C0] EXT4-fs (loop2): last error at time 1774687453: ext4_free_branches:1023: inode 11 [ 391.333467][T13349] EXT4-fs (loop2): 1 truncate cleaned up [ 391.339927][T13349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.411569][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.415570][ T28] audit: type=1400 audit(1774687453.522:1744): avc: denied { bind } for pid=13348 comm="syz.2.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 391.579865][ T3597] geneve1 (unregistering): left allmulticast mode [ 391.591130][ T28] audit: type=1400 audit(1774687453.702:1745): avc: denied { audit_write } for pid=13373 comm="syz.4.2971" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 391.618498][T13374] loop4: detected capacity change from 0 to 1024 [ 391.626309][T13374] EXT4-fs: inline encryption not supported [ 391.640449][T13374] EXT4-fs: Ignoring removed bh option [ 391.654932][T13374] EXT4-fs: Ignoring removed oldalloc option [ 391.662082][T13374] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 73 [ 391.684728][ T3597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.697681][ T3597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.708049][ T3597] bond0 (unregistering): Released all slaves [ 391.720912][ T3597] bond1 (unregistering): Released all slaves [ 391.736432][ T3597] bond2 (unregistering): Released all slaves [ 391.866544][T13303] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.873787][T13303] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.889081][T13303] bridge_slave_0: entered allmulticast mode [ 391.896608][T13303] bridge_slave_0: entered promiscuous mode [ 391.937641][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.985456][T13303] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.995075][ T3597] tipc: Left network mode [ 392.038667][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.075368][T13303] bridge_slave_1: entered allmulticast mode [ 392.089534][T13393] loop1: detected capacity change from 0 to 4096 [ 392.102461][T13303] bridge_slave_1: entered promiscuous mode [ 392.120364][T13303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.140178][T13393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.161857][ T3597] hsr_slave_0: left promiscuous mode [ 392.168103][ T3597] hsr_slave_1: left promiscuous mode [ 392.185964][ T3597] veth1_macvtap: left promiscuous mode [ 392.197850][ T3597] veth1_vlan: left promiscuous mode [ 392.203243][ T3597] veth0_vlan: left promiscuous mode [ 392.213214][T12135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.320951][T13407] loop1: detected capacity change from 0 to 512 [ 392.329079][T13303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.382176][T13303] team0: Port device team_slave_0 added [ 392.396221][T13303] team0: Port device team_slave_1 added [ 392.413353][T13303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.421372][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.470399][T13303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.483977][T13407] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 392.499102][T13407] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 392.851268][T13408] loop3: detected capacity change from 0 to 136 [ 392.879873][T13303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.897430][T13408] ISOFS: unable to read i-node block [ 392.903030][T13408] isofs_fill_super: get root inode failed [ 392.931653][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.974043][T13303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.067265][T13303] hsr_slave_0: entered promiscuous mode [ 393.073580][T13303] hsr_slave_1: entered promiscuous mode [ 393.146143][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 393.178686][T13438] veth0_macvtap: left promiscuous mode [ 393.316504][T13449] loop3: detected capacity change from 0 to 4096 [ 393.333666][T13449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.255053][T13455] 9p: Bad value for 'rfdno' [ 394.293674][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.350293][T13451] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2981'. [ 394.359360][T13451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.387638][ T3597] IPVS: stop unused estimator thread 0... [ 395.101712][T13462] loop4: detected capacity change from 0 to 1024 [ 395.108534][T13462] EXT4-fs: Ignoring removed orlov option [ 395.114332][T13462] EXT4-fs: Ignoring removed bh option [ 395.183786][T13462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.405727][T13465] loop2: detected capacity change from 0 to 1024 [ 395.467614][T13465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.561035][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.650283][T13488] loop1: detected capacity change from 0 to 4096 [ 395.720683][T13488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.746943][T13500] loop3: detected capacity change from 0 to 1024 [ 395.797964][T13500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.851679][T12135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.903835][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.973647][T13303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.010924][T13303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.025876][T13303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.040678][T13303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.071140][T13478] syz_tun (unregistering): left promiscuous mode [ 396.104439][T13524] dummy0 speed is unknown, defaulting to 1000 [ 396.115359][T13303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.128827][T13524] dummy0 speed is unknown, defaulting to 1000 [ 396.138510][T13303] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.147963][T13537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13537 comm=syz.1.2999 [ 396.154484][T11029] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.168196][T11029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.178842][T13478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.192689][T13537] loop1: detected capacity change from 0 to 512 [ 396.203555][T13537] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 396.205823][T13524] dummy0 speed is unknown, defaulting to 1000 [ 396.226870][T13537] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 396.248885][ T1829] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.256077][ T1829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.282230][T13537] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2999: Corrupt directory, running e2fsck is recommended [ 396.292065][T13524] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 396.314675][T13539] lo speed is unknown, defaulting to 1000 [ 396.340309][T13539] dummy0 speed is unknown, defaulting to 1000 [ 396.358607][T13537] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 396.392367][T13537] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.2999: corrupted in-inode xattr: e_name out of bounds [ 396.434879][T13537] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 396.435024][T13537] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2999: couldn't read orphan inode 15 (err -117) [ 396.444326][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 396.444347][ C0] EXT4-fs (loop1): initial error at time 1774687714: ext4_iget_extra_inode:5025: inode 15 [ 396.444380][ C0] EXT4-fs (loop1): last error at time 1774687714: ext4_iget_extra_inode:5025: inode 15 [ 396.558282][T13537] loop1: lost filesystem error report for type 5 error -117 [ 396.558836][T13537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.580711][T13537] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 396.612901][T13556] netlink: 'syz.4.3002': attribute type 4 has an invalid length. [ 396.629625][T13537] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 396.640549][T13537] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2999: Corrupt directory, running e2fsck is recommended [ 396.657971][T13561] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 396.670915][T13561] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 396.684524][T13303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.726492][T13567] loop4: detected capacity change from 0 to 1024 [ 396.746219][T13561] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2999: Corrupt directory, running e2fsck is recommended [ 396.783066][T13537] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 396.810779][T13567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.844765][T13524] dummy0 speed is unknown, defaulting to 1000 [ 396.865673][T13537] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 396.867635][T13561] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 396.881902][T13537] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2999: Corrupt directory, running e2fsck is recommended [ 396.888085][ T3603] ip6gretap0 (unregistering): left promiscuous mode [ 396.949560][T12135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.008177][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.049809][T13596] loop6: detected capacity change from 0 to 8 [ 397.099328][T13598] loop4: detected capacity change from 0 to 4096 [ 397.116183][T13598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.162795][ T3603] bond0 (unregistering): Released all slaves [ 397.177167][ T3603] bond1 (unregistering): Released all slaves [ 397.190172][ T3603] bond2 (unregistering): Released all slaves [ 397.198545][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.211107][ T3603] bond3 (unregistering): (slave lo): Releasing backup interface [ 397.219606][ T3603] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 397.231222][ T3603] bond3 (unregistering): Released all slaves [ 397.239917][ T3603] bond4 (unregistering): Released all slaves [ 397.249148][T13524] dummy0 speed is unknown, defaulting to 1000 [ 397.254464][T13303] veth0_vlan: entered promiscuous mode [ 397.273288][T13524] dummy0 speed is unknown, defaulting to 1000 [ 397.277559][T13303] veth1_vlan: entered promiscuous mode [ 397.323752][T13524] dummy0 speed is unknown, defaulting to 1000 [ 397.333128][ T3603] tipc: Left network mode [ 397.392692][T13303] veth0_macvtap: entered promiscuous mode [ 397.400231][T13303] veth1_macvtap: entered promiscuous mode [ 397.415278][T13303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.424587][T13303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.477153][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.496067][T13524] dummy0 speed is unknown, defaulting to 1000 [ 397.507312][T13554] lo speed is unknown, defaulting to 1000 [ 397.513621][T13554] dummy0 speed is unknown, defaulting to 1000 [ 397.590901][T13620] loop4: detected capacity change from 0 to 512 [ 397.665699][ T3603] hsr_slave_0: left promiscuous mode [ 397.673959][ T28] audit: type=1400 audit(1774687715.778:1746): avc: denied { mount } for pid=13621 comm="syz.3.3009" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 397.711825][ T3603] hsr_slave_1: left promiscuous mode [ 397.789526][ T3603] team0 (unregistering): Port device macvlan1 removed [ 398.031653][T13620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.044257][T13620] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.084883][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.108028][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.140033][T13636] FAULT_INJECTION: forcing a failure. [ 398.140033][T13636] name failslab, interval 1, probability 0, space 0, times 0 [ 398.145627][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.162642][T13636] CPU: 0 UID: 0 PID: 13636 Comm: syz.3.3013 Tainted: G W syzkaller #0 PREEMPT(full) [ 398.162678][T13636] Tainted: [W]=WARN [ 398.162685][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.162698][T13636] Call Trace: [ 398.162704][T13636] [ 398.162711][T13636] __dump_stack+0x1d/0x30 [ 398.162742][T13636] dump_stack_lvl+0x95/0xd0 [ 398.162843][T13636] dump_stack+0x15/0x1b [ 398.162864][T13636] should_fail_ex+0x263/0x280 [ 398.162896][T13636] should_failslab+0x8c/0xb0 [ 398.162922][T13636] __kvmalloc_node_noprof+0x155/0x650 [ 398.163023][T13636] ? vmemdup_user+0x2b/0xd0 [ 398.163043][T13636] ? should_fail_usercopy+0x1a/0x20 [ 398.163114][T13636] vmemdup_user+0x2b/0xd0 [ 398.163134][T13636] path_setxattrat+0x1b1/0x310 [ 398.163284][T13636] __x64_sys_setxattr+0x6e/0x90 [ 398.163363][T13636] x64_sys_call+0x2ee2/0x3020 [ 398.163388][T13636] do_syscall_64+0x12c/0x370 [ 398.163423][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.163465][T13636] RIP: 0033:0x7f7327c8c799 [ 398.163485][T13636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.163582][T13636] RSP: 002b:00007f73266e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 398.163610][T13636] RAX: ffffffffffffffda RBX: 00007f7327f05fa0 RCX: 00007f7327c8c799 [ 398.163626][T13636] RDX: 00002000000001c0 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 398.163642][T13636] RBP: 00007f73266e7090 R08: 0000000000000000 R09: 0000000000000000 [ 398.163736][T13636] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 398.163751][T13636] R13: 00007f7327f06038 R14: 00007f7327f05fa0 R15: 00007ffe82c56008 [ 398.163773][T13636] [ 398.406117][T13652] loop1: detected capacity change from 0 to 128 [ 398.426260][T13652] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 398.434364][T13652] FAT-fs (loop1): Filesystem has been set read-only [ 398.441165][T13652] bio_check_eod: 6620 callbacks suppressed [ 398.441182][T13652] syz.1.3017: attempt to access beyond end of device [ 398.441182][T13652] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 398.469067][T13652] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 398.477336][T13652] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 398.495792][T13652] syz.1.3017: attempt to access beyond end of device [ 398.495792][T13652] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 398.514230][T13652] syz.1.3017: attempt to access beyond end of device [ 398.514230][T13652] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 398.582109][T13665] loop0: detected capacity change from 0 to 1024 [ 398.589298][T13665] EXT4-fs: Ignoring removed bh option [ 398.594750][T13665] EXT4-fs: Ignoring removed oldalloc option [ 398.600795][T13665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 398.649144][T13665] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 398.657527][T13665] System zones: 0-1, 3-36 [ 398.668430][T13665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.697468][T13652] syz.1.3017: attempt to access beyond end of device [ 398.697468][T13652] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 398.722808][T13652] syz.1.3017: attempt to access beyond end of device [ 398.722808][T13652] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 398.738433][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.788875][ T28] audit: type=1400 audit(1774687716.808:1747): avc: denied { create } for pid=13659 comm="syz.0.2958" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 398.970210][T13652] syz.1.3017: attempt to access beyond end of device [ 398.970210][T13652] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 399.073782][T13676] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 399.095343][T13652] syz.1.3017: attempt to access beyond end of device [ 399.095343][T13652] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 399.127814][T13676] bond7 (unregistering): Released all slaves [ 399.188543][T13652] syz.1.3017: attempt to access beyond end of device [ 399.188543][T13652] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 399.251079][T13652] syz.1.3017: attempt to access beyond end of device [ 399.251079][T13652] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 399.291570][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.361443][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.422853][T13690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13690 comm=syz.1.3022 [ 399.479474][T13690] loop1: detected capacity change from 0 to 512 [ 399.513107][T13554] chnl_net:caif_netlink_parms(): no params data found [ 399.673185][T13690] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 399.673217][T13690] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 399.673309][T13690] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3022: Corrupt directory, running e2fsck is recommended [ 399.674202][T13690] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 399.674246][T13690] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.3022: corrupted in-inode xattr: e_name out of bounds [ 399.674352][T13690] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 399.674488][T13690] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3022: couldn't read orphan inode 15 (err -117) [ 399.674514][T13690] loop1: lost filesystem error report for type 5 error -117 [ 399.675010][T13690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.686574][T13690] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 399.686632][T13690] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 399.686650][T13690] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3022: Corrupt directory, running e2fsck is recommended [ 399.688259][T13690] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 399.688285][T13690] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 399.688302][T13690] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3022: Corrupt directory, running e2fsck is recommended [ 399.689871][T13690] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 399.689899][T13690] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 399.690001][T13690] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3022: Corrupt directory, running e2fsck is recommended [ 399.691482][T13690] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 399.810532][T12135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.834634][T13554] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.840225][T13554] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.840320][T13554] bridge_slave_0: entered allmulticast mode [ 399.840965][T13554] bridge_slave_0: entered promiscuous mode [ 399.846373][T13554] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.846441][T13554] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.846575][T13554] bridge_slave_1: entered allmulticast mode [ 399.847091][T13554] bridge_slave_1: entered promiscuous mode [ 399.893046][T13554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.894191][T13554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.951950][ T3603] IPVS: stop unused estimator thread 0... [ 399.956601][T13554] team0: Port device team_slave_0 added [ 399.976421][T13554] team0: Port device team_slave_1 added [ 400.017350][T13554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.017367][T13554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.017474][T13554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.018198][T13554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.018210][T13554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.018346][T13554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.116623][T13554] hsr_slave_0: entered promiscuous mode [ 400.117133][T13554] hsr_slave_1: entered promiscuous mode [ 400.117531][T13554] debugfs: 'hsr0' already exists in 'hsr' [ 400.117546][T13554] Cannot create hsr debugfs directory [ 400.377472][T13696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3019'. [ 400.377963][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'. [ 400.432718][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.465908][T13729] SET target dimension over the limit! [ 400.551738][T13554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.554545][T13554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.572883][T13554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 400.579338][T13554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 400.631138][ T28] audit: type=1400 audit(1774687718.738:1748): avc: denied { read } for pid=13744 comm="syz.4.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 400.697245][T13761] netlink: 'syz.4.3030': attribute type 10 has an invalid length. [ 400.700729][T13761] team0: Device veth0_macvtap failed to register rx_handler [ 400.733556][T13759] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3029'. [ 400.735060][T13759] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3029'. [ 400.946023][T13554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.082446][T13770] loop1: detected capacity change from 0 to 128 [ 401.101328][T13554] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.281015][T13771] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 401.302310][T13771] FAT-fs (loop1): Filesystem has been set read-only [ 401.302345][T13771] syz.1.3033: attempt to access beyond end of device [ 401.302345][T13771] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 401.302429][T13771] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 401.302454][T13771] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 401.398071][ T1829] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.398153][ T1829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.402150][ T1829] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.402214][ T1829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.561505][T13554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.737582][T13788] loop0: detected capacity change from 0 to 512 [ 401.762226][T13788] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 401.776037][T13788] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 401.820309][T13788] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3035: Corrupt directory, running e2fsck is recommended [ 401.866668][T13788] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 401.894192][T13554] veth0_vlan: entered promiscuous mode [ 401.898849][T13788] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.3035: corrupted in-inode xattr: e_name out of bounds [ 401.902076][T13554] veth1_vlan: entered promiscuous mode [ 401.930304][T13554] veth0_macvtap: entered promiscuous mode [ 401.935984][T13788] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 401.936343][T13788] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3035: couldn't read orphan inode 15 (err -117) [ 401.938306][T13554] veth1_macvtap: entered promiscuous mode [ 401.945872][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 401.970375][ C0] EXT4-fs (loop0): initial error at time 1774687720: ext4_iget_extra_inode:5025: inode 15 [ 401.977304][T13554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.980775][ C0] EXT4-fs (loop0): last error at time 1774687720: ext4_iget_extra_inode:5025: inode 15 [ 401.989799][T13554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.017950][T13788] loop0: lost filesystem error report for type 5 error -117 [ 402.018606][T13788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.056607][T13788] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 402.070311][T13788] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 402.091604][T13788] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3035: Corrupt directory, running e2fsck is recommended [ 402.107493][T11029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.119076][T11029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.131668][T13807] netlink: 'syz.1.3036': attribute type 49 has an invalid length. [ 402.143345][T13788] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 402.156083][T13788] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 402.166810][T11029] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.176511][T11029] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.185705][T13788] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3035: Corrupt directory, running e2fsck is recommended [ 402.219113][T13809] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 402.248513][T13809] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 402.286710][T13809] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3035: Corrupt directory, running e2fsck is recommended [ 402.324870][T13788] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 402.378086][T13828] loop1: detected capacity change from 0 to 512 [ 402.409244][T13828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.422027][T13828] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.495933][T12135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.572812][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.572995][T13836] loop4: detected capacity change from 0 to 512 [ 402.616357][T13836] EXT4-fs: Mount option(s) incompatible with ext3 [ 402.647078][T13826] loop5: detected capacity change from 0 to 512 [ 402.733969][T13850] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 402.787898][T13826] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 402.815912][T13832] lo speed is unknown, defaulting to 1000 [ 402.823527][T13826] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 402.834895][T13832] dummy0 speed is unknown, defaulting to 1000 [ 402.855294][T13826] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3039: Corrupt directory, running e2fsck is recommended [ 402.880060][T13860] loop0: detected capacity change from 0 to 1024 [ 402.908136][T13861] loop4: detected capacity change from 0 to 1024 [ 402.915124][T13861] EXT4-fs: Ignoring removed orlov option [ 402.920978][T13861] EXT4-fs: Ignoring removed bh option [ 402.937459][T13861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.956682][T13860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.114359][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.154402][ T30] batadv1: left allmulticast mode [ 403.169338][ T30] batadv1: left promiscuous mode [ 403.186056][ T30] bridge0: port 3(batadv1) entered disabled state [ 403.210142][ T30] bridge_slave_1: left allmulticast mode [ 403.230493][ T30] bridge_slave_1: left promiscuous mode [ 403.249252][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.312085][ T30] bridge_slave_0: left allmulticast mode [ 403.317862][ T30] bridge_slave_0: left promiscuous mode [ 403.323616][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.339816][T13871] loop0: detected capacity change from 0 to 1024 [ 403.357873][T13871] EXT4-fs: Ignoring removed oldalloc option [ 403.369565][T13871] EXT4-fs: Ignoring removed bh option [ 403.378523][T13871] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 1792 [ 403.390515][ T30] bond5 (unregistering): (slave gretap1): Releasing active interface [ 403.499758][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.521022][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.540589][ T30] bond0 (unregistering): Released all slaves [ 403.559541][ T30] bond1 (unregistering): Released all slaves [ 403.578699][ T30] bond2 (unregistering): (slave lo): Releasing backup interface [ 403.595792][ T30] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 403.607164][ T30] bond2 (unregistering): Released all slaves [ 403.643437][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.649717][ T30] bond3 (unregistering): Released all slaves [ 403.685962][ T30] bond4 (unregistering): Released all slaves [ 403.694771][ T30] bond5 (unregistering): Released all slaves [ 403.703314][T13882] loop4: detected capacity change from 0 to 512 [ 403.704160][ T30] bond6 (unregistering): Released all slaves [ 403.715577][T13882] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 403.738139][T13882] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 403.784360][T13837] Process accounting resumed [ 403.796599][T13882] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3051: bad orphan inode 4 [ 403.820696][T13888] FAULT_INJECTION: forcing a failure. [ 403.820696][T13888] name failslab, interval 1, probability 0, space 0, times 0 [ 403.822136][T13882] loop4: lost filesystem error report for type 5 error -117 [ 403.835520][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 403.849290][ C1] EXT4-fs (loop4): initial error at time 1774687721: ext4_orphan_get:1417 [ 403.854002][T13882] EXT4-fs (loop4): 1 orphan inode deleted [ 403.858086][ C1] EXT4-fs (loop4): last error at time 1774687721: ext4_orphan_get:1417 [ 403.858977][ T30] tipc: Disabling bearer [ 403.878968][T13890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13890 comm=syz.0.3054 [ 403.903034][T13888] CPU: 0 UID: 0 PID: 13888 Comm: syz.1.3053 Tainted: G W syzkaller #0 PREEMPT(full) [ 403.903061][T13888] Tainted: [W]=WARN [ 403.903067][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.903075][T13888] Call Trace: [ 403.903079][T13888] [ 403.903084][T13888] __dump_stack+0x1d/0x30 [ 403.903106][T13888] dump_stack_lvl+0x95/0xd0 [ 403.903143][T13888] dump_stack+0x15/0x1b [ 403.903192][T13888] should_fail_ex+0x263/0x280 [ 403.903212][T13888] ? hash_netiface_create+0x21b/0x740 [ 403.903232][T13888] should_failslab+0x8c/0xb0 [ 403.903256][T13888] __kmalloc_cache_noprof+0x5f/0x410 [ 403.903291][T13888] hash_netiface_create+0x21b/0x740 [ 403.903311][T13888] ? __nla_parse+0x40/0x60 [ 403.903330][T13888] ? __pfx_hash_netiface_create+0x10/0x10 [ 403.903397][T13888] ip_set_create+0x3cf/0x970 [ 403.903424][T13888] ? __nla_parse+0x40/0x60 [ 403.903444][T13888] nfnetlink_rcv_msg+0x509/0x5d0 [ 403.903535][T13888] netlink_rcv_skb+0x123/0x220 [ 403.903556][T13888] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 403.903652][T13888] nfnetlink_rcv+0x167/0x1720 [ 403.903671][T13888] ? __kfree_skb+0x109/0x150 [ 403.903691][T13888] ? nlmon_xmit+0x4f/0x60 [ 403.903706][T13888] ? consume_skb+0x4b/0x160 [ 403.903733][T13888] ? nlmon_xmit+0x4f/0x60 [ 403.903747][T13888] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 403.903770][T13888] ? __dev_queue_xmit+0x136c/0x1f20 [ 403.903898][T13888] ? __dev_queue_xmit+0x148/0x1f20 [ 403.903920][T13888] ? ref_tracker_free+0x37d/0x3e0 [ 403.903941][T13888] ? __netlink_deliver_tap+0x4dc/0x500 [ 403.904021][T13888] netlink_unicast+0x5c0/0x690 [ 403.904050][T13888] netlink_sendmsg+0x5c8/0x6f0 [ 403.904160][T13888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.904182][T13888] ____sys_sendmsg+0x563/0x5b0 [ 403.904207][T13888] ___sys_sendmsg+0x195/0x1e0 [ 403.904339][T13888] __x64_sys_sendmsg+0xd4/0x160 [ 403.904388][T13888] x64_sys_call+0x194c/0x3020 [ 403.904407][T13888] do_syscall_64+0x12c/0x370 [ 403.904425][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.904484][T13888] RIP: 0033:0x7f08a1d2c799 [ 403.904496][T13888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.904510][T13888] RSP: 002b:00007f08a0787028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.904526][T13888] RAX: ffffffffffffffda RBX: 00007f08a1fa5fa0 RCX: 00007f08a1d2c799 [ 403.904604][T13888] RDX: 0000000020040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 403.904620][T13888] RBP: 00007f08a0787090 R08: 0000000000000000 R09: 0000000000000000 [ 403.904629][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.904644][T13888] R13: 00007f08a1fa6038 R14: 00007f08a1fa5fa0 R15: 00007ffff6767f28 [ 403.904663][T13888] [ 403.905877][T13882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.936457][ T30] tipc: Left network mode [ 403.961119][T13890] loop0: detected capacity change from 0 to 512 [ 403.972093][T13832] chnl_net:caif_netlink_parms(): no params data found [ 404.087765][T13903] program syz.1.3055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.092511][ T28] audit: type=1400 audit(1774687722.208:1749): avc: denied { write } for pid=13901 comm="syz.1.3055" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 404.236388][T13890] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 404.257078][T13890] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 404.268780][T13890] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3054: Corrupt directory, running e2fsck is recommended [ 404.285372][T13826] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 404.287771][T13890] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 404.287911][T13890] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.3054: corrupted in-inode xattr: e_name out of bounds [ 404.287939][T13890] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 404.288047][T13890] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3054: couldn't read orphan inode 15 (err -117) [ 404.288086][T13890] loop0: lost filesystem error report for type 5 error -117 [ 404.288598][T13890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.292958][T13890] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 404.292991][T13890] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 404.293022][T13890] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3054: Corrupt directory, running e2fsck is recommended [ 404.294165][T13890] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 404.294194][T13890] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 404.294212][T13890] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3054: Corrupt directory, running e2fsck is recommended [ 404.295172][T13890] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 404.295199][T13890] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 404.295219][T13890] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3054: Corrupt directory, running e2fsck is recommended [ 404.297879][T13890] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 404.325823][ T28] audit: type=1400 audit(1774687722.208:1750): avc: denied { open } for pid=13901 comm="syz.1.3055" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 404.560189][T13826] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.3039: corrupted in-inode xattr: invalid ea_ino [ 404.579748][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.610010][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3051'. [ 404.619360][T13912] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3051'. [ 404.636360][ T30] hsr_slave_0: left promiscuous mode [ 404.646088][ T30] hsr_slave_1: left promiscuous mode [ 404.813696][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.829128][T13826] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 404.831882][T13826] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3039: couldn't read orphan inode 15 (err -117) [ 404.841701][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 404.841751][ C1] EXT4-fs (loop5): initial error at time 1774687722: ext4_iget_extra_inode:5025: inode 15 [ 404.841939][ C1] EXT4-fs (loop5): last error at time 1774687722: ext4_iget_extra_inode:5025: inode 15 [ 405.299190][T13826] loop5: lost filesystem error report for type 5 error -117 [ 405.341764][T13826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.369405][T13826] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #2: comm syz.5.3039: corrupted xattr block 255: invalid header [ 405.386774][T13826] SELinux: (dev loop5, type ext4) getxattr errno 117 [ 405.407976][T13826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.501143][ T30] batman_adv: batadv0: Removing interface: dummy0 [ 405.518320][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.561217][T13926] FAULT_INJECTION: forcing a failure. [ 405.561217][T13926] name failslab, interval 1, probability 0, space 0, times 0 [ 405.578648][T13926] CPU: 1 UID: 0 PID: 13926 Comm: syz.1.3062 Tainted: G W syzkaller #0 PREEMPT(full) [ 405.578686][T13926] Tainted: [W]=WARN [ 405.578759][T13926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.578779][T13926] Call Trace: [ 405.578785][T13926] [ 405.578794][T13926] __dump_stack+0x1d/0x30 [ 405.578890][T13926] dump_stack_lvl+0x95/0xd0 [ 405.578918][T13926] dump_stack+0x15/0x1b [ 405.578945][T13926] should_fail_ex+0x263/0x280 [ 405.578978][T13926] should_failslab+0x8c/0xb0 [ 405.579055][T13926] __kmalloc_noprof+0xb8/0x4e0 [ 405.579082][T13926] ? __d_alloc+0x95/0x340 [ 405.579116][T13926] __d_alloc+0x95/0x340 [ 405.579150][T13926] d_alloc+0x2e/0x100 [ 405.579222][T13926] lookup_one_qstr_excl+0x99/0x250 [ 405.579330][T13926] filename_create+0x155/0x220 [ 405.579374][T13926] filename_mkdirat+0x81/0x300 [ 405.579401][T13926] __se_sys_mkdirat+0x32/0xf0 [ 405.579478][T13926] __x64_sys_mkdirat+0x43/0x50 [ 405.579560][T13926] x64_sys_call+0x2c4e/0x3020 [ 405.579627][T13926] do_syscall_64+0x12c/0x370 [ 405.579659][T13926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.579685][T13926] RIP: 0033:0x7f08a1d2c799 [ 405.579776][T13926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.579795][T13926] RSP: 002b:00007f08a0787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 405.579881][T13926] RAX: ffffffffffffffda RBX: 00007f08a1fa5fa0 RCX: 00007f08a1d2c799 [ 405.579899][T13926] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 405.579914][T13926] RBP: 00007f08a0787090 R08: 0000000000000000 R09: 0000000000000000 [ 405.579980][T13926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.579994][T13926] R13: 00007f08a1fa6038 R14: 00007f08a1fa5fa0 R15: 00007ffff6767f28 [ 405.580013][T13926] [ 405.787050][T13927] loop5: detected capacity change from 0 to 128 [ 405.823564][ T30] team0 (unregistering): Port device team_slave_1 removed [ 405.843419][ T30] team0 (unregistering): Port device team_slave_0 removed [ 405.850481][T13927] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.863825][T13927] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 405.921117][ T28] audit: type=1400 audit(1774687724.038:1751): avc: denied { setattr } for pid=13924 comm="syz.5.3061" path="/2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 406.250464][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3063'. [ 406.369402][T13949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13949 comm=syz.0.3066 [ 406.426460][T13554] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.617506][T13952] netlink: 'syz.1.3068': attribute type 1 has an invalid length. [ 406.739353][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.746803][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.747058][T13949] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 406.754123][T13832] bridge_slave_0: entered allmulticast mode [ 406.772334][T13949] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 406.788909][T13832] bridge_slave_0: entered promiscuous mode [ 406.795014][T13949] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3066: Corrupt directory, running e2fsck is recommended [ 406.831777][T13949] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 406.840812][T13949] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.3066: corrupted in-inode xattr: e_name out of bounds [ 406.861849][T13949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.862329][T13949] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3066: couldn't read orphan inode 15 (err -117) [ 406.871706][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 406.871728][ C1] EXT4-fs (loop0): initial error at time 1774687724: ext4_iget_extra_inode:5025: inode 15 [ 406.871761][ C1] EXT4-fs (loop0): last error at time 1774687724: ext4_iget_extra_inode:5025: inode 15 [ 407.000256][T13952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.067275][T13832] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.074614][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.095060][T13949] loop0: lost filesystem error report for type 5 error -117 [ 407.096807][T13949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.130015][T13832] bridge_slave_1: entered allmulticast mode [ 407.142785][T13832] bridge_slave_1: entered promiscuous mode [ 407.266738][T13832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.288069][T13949] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 407.329468][T13832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.329612][T13949] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 407.370446][T13832] team0: Port device team_slave_0 added [ 407.387824][T13832] team0: Port device team_slave_1 added [ 407.410434][T13949] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3066: Corrupt directory, running e2fsck is recommended [ 407.453761][T13832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.517108][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.544966][T13951] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 407.563947][T13951] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 407.584763][T13951] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3066: Corrupt directory, running e2fsck is recommended [ 407.598458][T13832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.627398][T13832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.635830][T13949] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 407.653821][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.682948][T13982] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 407.705350][T13949] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 407.733342][T13832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.758167][T13982] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 407.989594][T13832] hsr_slave_0: entered promiscuous mode [ 408.000097][T13832] hsr_slave_1: entered promiscuous mode [ 408.518544][T13832] debugfs: 'hsr0' already exists in 'hsr' [ 408.524558][T13832] Cannot create hsr debugfs directory [ 408.781099][T14006] set_capacity_and_notify: 2 callbacks suppressed [ 408.781118][T14006] loop1: detected capacity change from 0 to 136 [ 408.817171][T14006] ISOFS: unable to read i-node block [ 408.822523][T14006] isofs_fill_super: get root inode failed [ 408.830975][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.892811][T14012] Cannot find del_set index 0 as target [ 408.914906][ T28] audit: type=1400 audit(1774687727.028:1752): avc: denied { listen } for pid=14014 comm="syz.0.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 408.951204][ T28] audit: type=1400 audit(1774687727.028:1753): avc: denied { getopt } for pid=14014 comm="syz.0.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.007879][T14024] FAULT_INJECTION: forcing a failure. [ 409.007879][T14024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.052198][T14023] loop5: detected capacity change from 0 to 4096 [ 409.068794][T14023] netlink: 'syz.5.3075': attribute type 21 has an invalid length. [ 409.069393][T14024] CPU: 1 UID: 0 PID: 14024 Comm: syz.4.3077 Tainted: G W syzkaller #0 PREEMPT(full) [ 409.069497][T14024] Tainted: [W]=WARN [ 409.069505][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.069518][T14024] Call Trace: [ 409.069525][T14024] [ 409.069532][T14024] __dump_stack+0x1d/0x30 [ 409.069561][T14024] dump_stack_lvl+0x95/0xd0 [ 409.069653][T14024] dump_stack+0x15/0x1b [ 409.069724][T14024] should_fail_ex+0x263/0x280 [ 409.069896][T14024] should_fail+0xb/0x20 [ 409.069921][T14024] should_fail_usercopy+0x1a/0x20 [ 409.069972][T14024] _copy_from_user+0x1c/0xb0 [ 409.070004][T14024] __sys_bpf+0x183/0x7e0 [ 409.070032][T14024] __x64_sys_bpf+0x41/0x50 [ 409.070065][T14024] x64_sys_call+0x10cb/0x3020 [ 409.070114][T14024] do_syscall_64+0x12c/0x370 [ 409.070141][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.070166][T14024] RIP: 0033:0x7f2d81a4c799 [ 409.070184][T14024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.070204][T14024] RSP: 002b:00007f2d804a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.070262][T14024] RAX: ffffffffffffffda RBX: 00007f2d81cc5fa0 RCX: 00007f2d81a4c799 [ 409.070287][T14024] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 409.070382][T14024] RBP: 00007f2d804a7090 R08: 0000000000000000 R09: 0000000000000000 [ 409.070396][T14024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.070410][T14024] R13: 00007f2d81cc6038 R14: 00007f2d81cc5fa0 R15: 00007fff95436ec8 [ 409.070493][T14024] [ 409.089401][T14029] FAULT_INJECTION: forcing a failure. [ 409.089401][T14029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.095565][T14020] loop1: detected capacity change from 0 to 4096 [ 409.115890][T14023] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3075'. [ 409.175690][T14029] CPU: 0 UID: 0 PID: 14029 Comm: syz.0.3079 Tainted: G W syzkaller #0 PREEMPT(full) [ 409.175725][T14029] Tainted: [W]=WARN [ 409.175732][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.175743][T14029] Call Trace: [ 409.175823][T14029] [ 409.175832][T14029] __dump_stack+0x1d/0x30 [ 409.175862][T14029] dump_stack_lvl+0x95/0xd0 [ 409.175941][T14029] dump_stack+0x15/0x1b [ 409.175965][T14029] should_fail_ex+0x263/0x280 [ 409.176031][T14029] should_fail+0xb/0x20 [ 409.176106][T14029] should_fail_usercopy+0x1a/0x20 [ 409.176135][T14029] _copy_to_user+0x20/0xa0 [ 409.176231][T14029] simple_read_from_buffer+0xb5/0x130 [ 409.176256][T14029] proc_fail_nth_read+0x10e/0x150 [ 409.176289][T14029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.176398][T14029] vfs_read+0x1ab/0x7f0 [ 409.176507][T14029] ? __rcu_read_unlock+0x4e/0x70 [ 409.176605][T14029] ? __fget_files+0x184/0x1c0 [ 409.176639][T14029] ? mutex_lock+0x57/0x90 [ 409.176672][T14029] ksys_read+0xdc/0x1a0 [ 409.176692][T14029] __x64_sys_read+0x40/0x50 [ 409.176718][T14029] x64_sys_call+0x2886/0x3020 [ 409.176746][T14029] do_syscall_64+0x12c/0x370 [ 409.176826][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.176868][T14029] RIP: 0033:0x7f250007cfce [ 409.176886][T14029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 409.176906][T14029] RSP: 002b:00007f24feb16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.176929][T14029] RAX: ffffffffffffffda RBX: 00007f24feb176c0 RCX: 00007f250007cfce [ 409.176945][T14029] RDX: 000000000000000f RSI: 00007f24feb170a0 RDI: 0000000000000004 [ 409.176976][T14029] RBP: 00007f24feb17090 R08: 0000000000000000 R09: 0000000000000000 [ 409.176990][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.177004][T14029] R13: 00007f2500336038 R14: 00007f2500335fa0 R15: 00007fff90963148 [ 409.177031][T14029] [ 409.485467][T14020] netlink: 'syz.1.3076': attribute type 21 has an invalid length. [ 409.502162][T14020] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3076'. [ 409.544705][T14049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14049 comm=syz.5.3082 [ 409.655964][T14059] loop4: detected capacity change from 0 to 1024 [ 409.676702][T14063] netlink: 'syz.5.3084': attribute type 4 has an invalid length. [ 409.698667][T14059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.845385][T14042] syz.0.3081 (14042) used greatest stack depth: 7816 bytes left [ 409.904585][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.948525][T13832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 409.985567][T13832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.027455][T14085] lo speed is unknown, defaulting to 1000 [ 410.027639][T13832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.055553][T14103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14103 comm=syz.0.3093 [ 410.080682][T13832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.092684][T14097] loop1: detected capacity change from 0 to 4096 [ 410.098120][T14101] loop4: detected capacity change from 0 to 4096 [ 410.118728][T14097] netlink: 'syz.1.3091': attribute type 21 has an invalid length. [ 410.160605][T14097] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3091'. [ 410.176406][T14101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.418387][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.871813][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.928676][ T28] audit: type=1400 audit(1774687729.038:1754): avc: denied { mount } for pid=14145 comm="syz.5.3097" name="/" dev="autofs" ino=44224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 410.999841][T13832] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.012621][T14155] FAULT_INJECTION: forcing a failure. [ 411.012621][T14155] name failslab, interval 1, probability 0, space 0, times 0 [ 411.030311][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.037439][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.046471][T14155] CPU: 0 UID: 0 PID: 14155 Comm: syz.4.3096 Tainted: G W syzkaller #0 PREEMPT(full) [ 411.046567][T14155] Tainted: [W]=WARN [ 411.046574][T14155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.046586][T14155] Call Trace: [ 411.046625][T14155] [ 411.046633][T14155] __dump_stack+0x1d/0x30 [ 411.046662][T14155] dump_stack_lvl+0x95/0xd0 [ 411.046685][T14155] dump_stack+0x15/0x1b [ 411.046775][T14155] should_fail_ex+0x263/0x280 [ 411.046806][T14155] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 411.046843][T14155] should_failslab+0x8c/0xb0 [ 411.046880][T14155] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 411.046906][T14155] ? shmem_alloc_inode+0x34/0x50 [ 411.046935][T14155] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 411.046965][T14155] shmem_alloc_inode+0x34/0x50 [ 411.047005][T14155] alloc_inode+0x40/0x170 [ 411.047031][T14155] new_inode+0x1d/0xe0 [ 411.047059][T14155] shmem_get_inode+0x246/0x750 [ 411.047164][T14155] shmem_mknod+0x44/0x170 [ 411.047199][T14155] shmem_mkdir+0x33/0x70 [ 411.047233][T14155] vfs_mkdir+0x294/0x3e0 [ 411.047258][T14155] filename_mkdirat+0x138/0x300 [ 411.047395][T14155] __se_sys_mkdirat+0x32/0xf0 [ 411.047421][T14155] __x64_sys_mkdirat+0x43/0x50 [ 411.047444][T14155] x64_sys_call+0x2c4e/0x3020 [ 411.047471][T14155] do_syscall_64+0x12c/0x370 [ 411.047566][T14155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.047614][T14155] RIP: 0033:0x7f2d81a4c799 [ 411.047631][T14155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.047649][T14155] RSP: 002b:00007f2d804a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 411.047671][T14155] RAX: ffffffffffffffda RBX: 00007f2d81cc5fa0 RCX: 00007f2d81a4c799 [ 411.047700][T14155] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 411.047778][T14155] RBP: 00007f2d804a7090 R08: 0000000000000000 R09: 0000000000000000 [ 411.047794][T14155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.047809][T14155] R13: 00007f2d81cc6038 R14: 00007f2d81cc5fa0 R15: 00007fff95436ec8 [ 411.047832][T14155] [ 411.273704][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.280877][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.330426][T13832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.348712][T13832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.584064][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.856799][T14188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14188 comm=syz.0.3103 [ 412.151678][T13832] veth0_vlan: entered promiscuous mode [ 412.162437][T13832] veth1_vlan: entered promiscuous mode [ 412.171941][T14195] loop4: detected capacity change from 0 to 4096 [ 412.189093][T13832] veth0_macvtap: entered promiscuous mode [ 412.205809][T13832] veth1_macvtap: entered promiscuous mode [ 412.230429][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.246555][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.317304][T14195] netlink: 'syz.4.3104': attribute type 21 has an invalid length. [ 412.366818][ T1829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.384619][ T1829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.400880][T14195] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3104'. [ 412.884795][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.922031][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.965360][T14215] netlink: 'syz.4.3109': attribute type 1 has an invalid length. [ 413.161713][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3113'. [ 413.181093][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3113'. [ 413.287983][T14217] loop3: detected capacity change from 0 to 1024 [ 413.299825][T14215] 8021q: adding VLAN 0 to HW filter on device bond9 [ 413.314699][T14217] EXT4-fs: Ignoring removed orlov option [ 413.343469][T14229] vlan2: entered promiscuous mode [ 413.361527][T14217] EXT4-fs: Ignoring removed bh option [ 413.375211][T14229] dummy0: entered promiscuous mode [ 413.419283][T14217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.442420][T14234] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3114'. [ 413.497050][T13832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.562797][ T28] audit: type=1326 audit(1774687731.668:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969dc9c799 code=0x7ffc0000 [ 413.624704][T14143] loop1: detected capacity change from 0 to 4096 [ 413.640573][ T28] audit: type=1326 audit(1774687731.668:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969dc9c799 code=0x7ffc0000 [ 413.682112][T14143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 413.695528][ T28] audit: type=1326 audit(1774687731.668:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969dc9c799 code=0x7ffc0000 [ 413.767043][T14143] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 413.810298][ T28] audit: type=1326 audit(1774687731.668:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f969dc9c799 code=0x7ffc0000 [ 413.848784][T14143] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 413.852090][T14143] EXT4-fs: failed to create workqueue [ 413.859614][T14259] loop3: detected capacity change from 0 to 4096 [ 413.883189][ T28] audit: type=1326 audit(1774687731.678:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969dc9c799 code=0x7ffc0000 [ 413.892844][T14244] lo speed is unknown, defaulting to 1000 [ 413.925283][T14143] EXT4-fs (loop1): mount failed [ 413.929146][T14259] netlink: 'syz.3.3118': attribute type 21 has an invalid length. [ 413.955684][T14259] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3118'. [ 413.987085][ T28] audit: type=1326 audit(1774687731.678:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f969dc9c502 code=0x7ffc0000 [ 414.079708][ T28] audit: type=1326 audit(1774687731.678:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f969dc9c597 code=0x7ffc0000 [ 414.131663][ T28] audit: type=1326 audit(1774687731.678:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f969dc59491 code=0x7ffc0000 [ 414.158027][ T28] audit: type=1326 audit(1774687731.678:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f969dc9d589 code=0x7ffc0000 [ 414.297986][T14244] chnl_net:caif_netlink_parms(): no params data found [ 414.917139][T14287] loop3: detected capacity change from 0 to 136 [ 414.936035][T14287] ISOFS: unable to read i-node block [ 414.941562][T14287] isofs_fill_super: get root inode failed [ 414.949216][ T1829] tipc: Subscription rejected, illegal request [ 414.971793][T14300] loop0: detected capacity change from 0 to 136 [ 414.979363][T14300] ISOFS: unable to read i-node block [ 414.984777][T14300] isofs_fill_super: get root inode failed [ 415.171508][T14244] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.178687][T14244] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.186303][T14244] bridge_slave_0: entered allmulticast mode [ 415.193117][T14244] bridge_slave_0: entered promiscuous mode [ 415.200011][T14244] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.207478][T14244] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.214717][T14244] bridge_slave_1: entered allmulticast mode [ 415.229318][T14244] bridge_slave_1: entered promiscuous mode [ 415.260816][T14244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.268236][T14314] loop3: detected capacity change from 0 to 512 [ 415.279157][T14314] EXT4-fs: Ignoring removed bh option [ 415.294893][T14314] EXT4-fs: inline encryption not supported [ 415.296787][T14244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.320107][T14308] loop5: detected capacity change from 0 to 256 [ 415.329404][T14314] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3128: missing EA_INODE flag [ 415.356550][T14314] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 415.362273][T14314] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3128: error while reading EA inode 11 err=-117 [ 415.371489][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 415.371508][ C1] EXT4-fs (loop3): initial error at time 1774687733: ext4_xattr_inode_iget:441: inode 11 [ 415.371554][ C1] EXT4-fs (loop3): last error at time 1774687733: ext4_xattr_inode_iget:441: inode 11 [ 415.398503][T14318] loop0: detected capacity change from 0 to 4096 [ 415.400538][T14314] loop3: lost filesystem error report for type 5 error -117 [ 415.417051][T14314] EXT4-fs (loop3): 1 orphan inode deleted [ 415.422494][T14244] team0: Port device team_slave_0 added [ 415.424949][T14314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.444124][T14244] team0: Port device team_slave_1 added [ 415.472679][T13832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.476182][T14244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.489979][T14318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.502591][T14244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.529650][T14244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.568270][T14244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.575397][T14244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.605198][T14244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.643569][T14244] hsr_slave_0: entered promiscuous mode [ 415.656925][T14244] hsr_slave_1: entered promiscuous mode [ 415.663037][T14244] debugfs: 'hsr0' already exists in 'hsr' [ 415.669340][T14244] Cannot create hsr debugfs directory [ 415.689732][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.763927][T14331] lo speed is unknown, defaulting to 1000 [ 415.770039][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3135'. [ 415.791231][T14339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.801855][T14339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.824517][T14339] bond0 (unregistering): Released all slaves [ 415.932152][T14349] loop0: detected capacity change from 0 to 512 [ 415.949102][T14349] EXT4-fs: inline encryption not supported [ 415.997473][T14349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.010826][T14352] dummy0: entered promiscuous mode [ 416.016414][T14352] macsec1: entered allmulticast mode [ 416.023700][T14349] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.029124][T14352] dummy0: entered allmulticast mode [ 416.045343][T14352] dummy0: left allmulticast mode [ 416.050933][T14352] dummy0: left promiscuous mode [ 416.077851][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.624557][T14368] loop0: detected capacity change from 0 to 128 [ 416.651145][T14368] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 416.677026][T14381] loop1: detected capacity change from 0 to 512 [ 416.678099][T14368] FAT-fs (loop0): Filesystem has been set read-only [ 416.694695][T14381] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3146: bg 0: block 5: invalid block bitmap [ 416.700991][T14368] bio_check_eod: 2568 callbacks suppressed [ 416.701011][T14368] syz.0.3143: attempt to access beyond end of device [ 416.701011][T14368] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 416.707360][T14381] loop1: lost filesystem error report for type 5 error -117 [ 416.713023][T14368] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 416.735699][T14381] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 416.747970][T14368] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 416.750807][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 416.765426][ C0] EXT4-fs (loop1): initial error at time 1774687734: ext4_validate_block_bitmap:432 [ 416.774957][ C0] EXT4-fs (loop1): last error at time 1774687734: ext4_validate_block_bitmap:432 [ 416.784314][T14381] loop1: lost filesystem error report for type 5 error -117 [ 416.786072][T14381] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3146: invalid indirect mapped block 3 (level 2) [ 416.806812][T14381] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 416.815644][T14381] EXT4-fs (loop1): 1 orphan inode deleted [ 416.821701][T14368] syz.0.3143: attempt to access beyond end of device [ 416.821701][T14368] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 416.824881][T14381] EXT4-fs (loop1): 1 truncate cleaned up [ 416.854133][T14381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.881529][T14368] syz.0.3143: attempt to access beyond end of device [ 416.881529][T14368] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 416.896953][T14244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.950390][T14368] syz.0.3143: attempt to access beyond end of device [ 416.950390][T14368] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 416.975056][T14368] syz.0.3143: attempt to access beyond end of device [ 416.975056][T14368] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 416.985781][T14244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.993149][T14368] syz.0.3143: attempt to access beyond end of device [ 416.993149][T14368] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 417.015710][T14368] syz.0.3143: attempt to access beyond end of device [ 417.015710][T14368] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 417.046706][T14368] syz.0.3143: attempt to access beyond end of device [ 417.046706][T14368] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 417.050201][T14244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 417.088257][T14401] netlink: 'syz.5.3149': attribute type 1 has an invalid length. [ 417.106575][T14368] syz.0.3143: attempt to access beyond end of device [ 417.106575][T14368] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 417.136400][T14401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.143393][T14368] syz.0.3143: attempt to access beyond end of device [ 417.143393][T14368] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 417.159231][T14244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 417.166714][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 417.166731][ T28] audit: type=1400 audit(1774687735.288:1852): avc: denied { create } for pid=14380 comm="syz.1.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 417.194121][ T28] audit: type=1400 audit(1774687735.288:1853): avc: denied { write } for pid=14380 comm="syz.1.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 417.449756][T14426] FAULT_INJECTION: forcing a failure. [ 417.449756][T14426] name failslab, interval 1, probability 0, space 0, times 0 [ 417.507340][T14244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.557292][T14426] CPU: 0 UID: 0 PID: 14426 Comm: syz.5.3152 Tainted: G W syzkaller #0 PREEMPT(full) [ 417.557333][T14426] Tainted: [W]=WARN [ 417.557342][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.557358][T14426] Call Trace: [ 417.557366][T14426] [ 417.557412][T14426] __dump_stack+0x1d/0x30 [ 417.557445][T14426] dump_stack_lvl+0x95/0xd0 [ 417.557472][T14426] dump_stack+0x15/0x1b [ 417.557500][T14426] should_fail_ex+0x263/0x280 [ 417.557533][T14426] should_failslab+0x8c/0xb0 [ 417.557575][T14426] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 417.557668][T14426] ? alloc_vmap_area+0x1b6/0xe30 [ 417.557785][T14426] alloc_vmap_area+0x1b6/0xe30 [ 417.557811][T14426] ? __kmalloc_cache_node_noprof+0x3a1/0x480 [ 417.557843][T14426] __get_vm_area_node+0x173/0x1d0 [ 417.557875][T14426] __vmalloc_node_range_noprof+0x291/0x12b0 [ 417.557972][T14426] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 417.557997][T14426] ? selinux_file_open+0x2e6/0x330 [ 417.558039][T14426] ? __rcu_read_unlock+0x4e/0x70 [ 417.558066][T14426] ? avc_has_perm_noaudit+0xab/0x130 [ 417.558108][T14426] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 417.558136][T14426] __vmalloc_noprof+0xa4/0xf0 [ 417.558167][T14426] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 417.558193][T14426] bpf_prog_alloc_no_stats+0x47/0x390 [ 417.558218][T14426] ? bpf_prog_alloc+0x2a/0x150 [ 417.558257][T14426] bpf_prog_alloc+0x3c/0x150 [ 417.558277][T14426] bpf_prog_load+0x506/0x1140 [ 417.558308][T14426] ? security_bpf+0x2b/0x90 [ 417.558350][T14426] __sys_bpf+0x505/0x7e0 [ 417.558383][T14426] __x64_sys_bpf+0x41/0x50 [ 417.558415][T14426] x64_sys_call+0x10cb/0x3020 [ 417.558448][T14426] do_syscall_64+0x12c/0x370 [ 417.558495][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.558518][T14426] RIP: 0033:0x7f969dc9c799 [ 417.558596][T14426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.558619][T14426] RSP: 002b:00007f969c6ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.558644][T14426] RAX: ffffffffffffffda RBX: 00007f969df15fa0 RCX: 00007f969dc9c799 [ 417.558659][T14426] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 417.558672][T14426] RBP: 00007f969c6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 417.558729][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.558750][T14426] R13: 00007f969df16038 R14: 00007f969df15fa0 R15: 00007fff469ce048 [ 417.558769][T14426] [ 417.558778][T14426] syz.5.3152: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 417.721669][T14244] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.726367][T14426] ,cpuset= [ 417.786418][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.795827][T14426] / [ 417.796911][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.805012][T14426] ,mems_allowed=0 [ 417.851429][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.862268][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.869612][T14426] [ 417.872064][T14426] CPU: 1 UID: 0 PID: 14426 Comm: syz.5.3152 Tainted: G W syzkaller #0 PREEMPT(full) [ 417.872114][T14426] Tainted: [W]=WARN [ 417.872122][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.872166][T14426] Call Trace: [ 417.872173][T14426] [ 417.872190][T14426] __dump_stack+0x1d/0x30 [ 417.872219][T14426] dump_stack_lvl+0x95/0xd0 [ 417.872244][T14426] dump_stack+0x15/0x1b [ 417.872280][T14426] warn_alloc+0x145/0x1c0 [ 417.872320][T14426] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 417.872396][T14426] ? selinux_file_open+0x2e6/0x330 [ 417.872468][T14426] ? __rcu_read_unlock+0x4e/0x70 [ 417.872492][T14426] ? avc_has_perm_noaudit+0xab/0x130 [ 417.872531][T14426] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 417.872595][T14426] __vmalloc_noprof+0xa4/0xf0 [ 417.872627][T14426] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 417.872692][T14426] bpf_prog_alloc_no_stats+0x47/0x390 [ 417.872717][T14426] ? bpf_prog_alloc+0x2a/0x150 [ 417.872741][T14426] bpf_prog_alloc+0x3c/0x150 [ 417.872766][T14426] bpf_prog_load+0x506/0x1140 [ 417.872835][T14426] ? security_bpf+0x2b/0x90 [ 417.872942][T14426] __sys_bpf+0x505/0x7e0 [ 417.873032][T14426] __x64_sys_bpf+0x41/0x50 [ 417.873064][T14426] x64_sys_call+0x10cb/0x3020 [ 417.873094][T14426] do_syscall_64+0x12c/0x370 [ 417.873169][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.873208][T14426] RIP: 0033:0x7f969dc9c799 [ 417.873229][T14426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.873293][T14426] RSP: 002b:00007f969c6ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.873342][T14426] RAX: ffffffffffffffda RBX: 00007f969df15fa0 RCX: 00007f969dc9c799 [ 417.873360][T14426] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 417.873377][T14426] RBP: 00007f969c6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 417.873393][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.873409][T14426] R13: 00007f969df16038 R14: 00007f969df15fa0 R15: 00007fff469ce048 [ 417.873432][T14426] [ 417.873585][T14426] Mem-Info: [ 417.966948][T14244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.065076][T14426] active_anon:12944 inactive_anon:9 isolated_anon:0 [ 418.065076][T14426] active_file:13370 inactive_file:16576 isolated_file:0 [ 418.065076][T14426] unevictable:1 dirty:244 writeback:0 [ 418.065076][T14426] slab_reclaimable:3964 slab_unreclaimable:21597 [ 418.065076][T14426] mapped:29977 shmem:4130 pagetables:3503 [ 418.065076][T14426] sec_pagetables:0 bounce:0 [ 418.065076][T14426] kernel_misc_reclaimable:0 [ 418.065076][T14426] free:1831937 free_pcp:19262 free_cma:0 [ 418.115527][T14244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.202094][T14448] FAULT_INJECTION: forcing a failure. [ 418.202094][T14448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.222555][T14426] Node 0 active_anon:46324kB inactive_anon:36kB active_file:53480kB inactive_file:66304kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:119792kB dirty:976kB writeback:0kB shmem:11416kB kernel_stack:4384kB pagetables:13664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 418.230252][T14448] CPU: 0 UID: 0 PID: 14448 Comm: syz.3.3155 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.230287][T14448] Tainted: [W]=WARN [ 418.230357][T14448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.230370][T14448] Call Trace: [ 418.230378][T14448] [ 418.230387][T14448] __dump_stack+0x1d/0x30 [ 418.230420][T14448] dump_stack_lvl+0x95/0xd0 [ 418.230445][T14448] dump_stack+0x15/0x1b [ 418.230478][T14448] should_fail_ex+0x263/0x280 [ 418.230507][T14448] should_fail+0xb/0x20 [ 418.230529][T14448] should_fail_usercopy+0x1a/0x20 [ 418.230558][T14448] _copy_from_user+0x1c/0xb0 [ 418.230622][T14448] ___sys_sendmsg+0xc1/0x1e0 [ 418.230665][T14448] __x64_sys_sendmsg+0xd4/0x160 [ 418.230702][T14448] x64_sys_call+0x194c/0x3020 [ 418.230730][T14448] do_syscall_64+0x12c/0x370 [ 418.230796][T14448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.230820][T14448] RIP: 0033:0x7f92d611c799 [ 418.230838][T14448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.230858][T14448] RSP: 002b:00007f92d4b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.230893][T14448] RAX: ffffffffffffffda RBX: 00007f92d6395fa0 RCX: 00007f92d611c799 [ 418.230909][T14448] RDX: 0000000024008000 RSI: 0000200000001080 RDI: 0000000000000004 [ 418.230990][T14448] RBP: 00007f92d4b77090 R08: 0000000000000000 R09: 0000000000000000 [ 418.231010][T14448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.231024][T14448] R13: 00007f92d6396038 R14: 00007f92d6395fa0 R15: 00007ffc4a898558 [ 418.231115][T14448] [ 418.414459][T14426] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.449313][T12135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.464642][T14244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.465926][T14426] lowmem_reserve[]: 0 2879 7857 7857 [ 418.495082][T14426] Node 0 DMA32 free:2944624kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948148kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 418.641401][T14426] lowmem_reserve[]: 0 0 4978 4978 [ 418.647136][T14426] Node 0 Normal free:4366760kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57576kB inactive_anon:36kB active_file:53480kB inactive_file:66304kB unevictable:4kB writepending:976kB zspages:0kB present:5242880kB managed:5098240kB mlocked:4kB bounce:0kB free_pcp:68496kB local_pcp:39144kB free_cma:0kB [ 419.630336][T14468] loop3: detected capacity change from 0 to 4096 [ 419.765657][T14426] lowmem_reserve[]: 0 0 0 0 [ 419.770367][T14426] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 419.783640][T14426] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 1*16kB (M) 4*32kB (M) 5*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944624kB [ 420.138630][T14473] loop0: detected capacity change from 0 to 136 [ 420.431308][T14473] ISOFS: unable to read i-node block [ 420.436683][T14473] isofs_fill_super: get root inode failed [ 420.769037][T14426] Node 0 Normal: 1127*4kB (UME) 4269*8kB (UME) 4467*16kB (UME) 2915*32kB (UME) 1399*64kB (UME) 426*128kB (UME) 149*256kB (UME) 82*512kB (UME) 70*1024kB (UME) 39*2048kB (UME) 925*4096kB (UM) = 4367956kB [ 420.789585][T14426] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 420.904069][T14426] 35774 total pagecache pages [ 420.909197][T14426] 4 pages in swap cache [ 420.913605][T14426] Free swap = 122972kB [ 420.928956][T14468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.944730][T14244] veth0_vlan: entered promiscuous mode [ 420.953491][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3159'. [ 420.974084][T14426] Total swap = 124996kB [ 420.979680][T14244] veth1_vlan: entered promiscuous mode [ 420.986830][T14426] 2097051 pages RAM [ 421.018733][T14426] 0 pages HighMem/MovableOnly [ 421.025780][T13832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.037112][T14426] 81614 pages reserved [ 421.060704][T14244] veth0_macvtap: entered promiscuous mode [ 421.112413][T14244] veth1_macvtap: entered promiscuous mode [ 421.129682][T14488] loop5: detected capacity change from 0 to 512 [ 421.154842][T14244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.162907][T14488] EXT4-fs: inline encryption not supported [ 421.195788][T14488] EXT4-fs: Ignoring removed i_version option [ 421.206716][T14244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.222901][T14490] loop0: detected capacity change from 0 to 512 [ 421.233901][T14488] EXT4-fs (loop5): 1 orphan inode deleted [ 421.245563][T14488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.271934][ T1829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.282965][T14490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.305620][ T1829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.340775][ T1829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.356578][ T1829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.512082][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.021399][T13554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.199742][T14505] loop1: detected capacity change from 0 to 512 [ 422.614690][ T28] audit: type=1400 audit(1774687740.718:1854): avc: denied { read } for pid=14508 comm="syz.0.3164" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 422.865773][T14507] loop3: detected capacity change from 0 to 128 [ 423.079841][T14513] loop0: detected capacity change from 0 to 8192 [ 423.106535][T14505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.136964][T14513] loop0: p1 < > p2 p4 < p5 > [ 423.141747][T14513] loop0: partition table partially beyond EOD, truncated [ 423.149520][T14513] loop0: p1 start 134217728 is beyond EOD, truncated [ 423.156388][T14513] loop0: p2 size 591360 extends beyond EOD, truncated [ 423.177870][T14513] loop0: p5 size 591360 extends beyond EOD, truncated [ 423.250726][T14505] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.340479][ T28] audit: type=1400 audit(1774687740.718:1855): avc: denied { open } for pid=14508 comm="syz.0.3164" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 423.373040][T14507] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 423.427339][ T3001] loop0: p1 < > p2 p4 < p5 > [ 423.439132][ T28] audit: type=1400 audit(1774687741.548:1856): avc: denied { watch } for pid=14504 comm="syz.1.3165" path="/99/file2" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.626017][T14507] FAT-fs (loop3): Filesystem has been set read-only [ 423.635554][ T3001] loop0: partition table partially beyond EOD, truncated [ 423.657738][T14507] bio_check_eod: 13200 callbacks suppressed [ 423.657761][T14507] syz.3.3167: attempt to access beyond end of device [ 423.657761][T14507] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 423.680463][ T3001] loop0: p1 start 134217728 is beyond EOD, truncated [ 423.691184][T14507] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 423.699352][ T3001] loop0: p2 size 591360 extends beyond EOD, truncated [ 423.706621][T14507] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 423.715047][T14507] syz.3.3167: attempt to access beyond end of device [ 423.715047][T14507] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 423.724607][ T28] audit: type=1400 audit(1774687741.838:1857): avc: denied { watch watch_reads } for pid=14521 comm="syz.4.3169" path="/1/file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 423.741303][T14507] syz.3.3167: attempt to access beyond end of device [ 423.741303][T14507] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 423.766322][T14507] syz.3.3167: attempt to access beyond end of device [ 423.766322][T14507] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 423.775740][ T3001] loop0: p5 size 591360 extends beyond EOD, truncated [ 423.787205][T14507] syz.3.3167: attempt to access beyond end of device [ 423.787205][T14507] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 423.975461][T14535] af_packet: tpacket_rcv: packet too big, clamped from 114 to 4294967272. macoff=96 [ 423.985967][T14507] syz.3.3167: attempt to access beyond end of device [ 423.985967][T14507] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 424.461163][T14539] loop4: detected capacity change from 0 to 1024 [ 424.470229][T14536] loop5: detected capacity change from 0 to 136 [ 424.484576][T14536] ISOFS: unable to read i-node block [ 424.504180][T14536] isofs_fill_super: get root inode failed [ 424.516541][T14507] syz.3.3167: attempt to access beyond end of device [ 424.516541][T14507] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 424.530662][T14507] syz.3.3167: attempt to access beyond end of device [ 424.530662][T14507] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 424.544654][T14507] syz.3.3167: attempt to access beyond end of device [ 424.544654][T14507] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 424.553892][T14539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.607690][T14507] syz.3.3167: attempt to access beyond end of device [ 424.607690][T14507] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 424.622998][T14244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.753322][T14543] batadv0: entered promiscuous mode [ 424.776645][T14543] gretap0: entered promiscuous mode [ 424.818899][T14543] batadv0: left promiscuous mode [ 424.866763][T14547] loop4: detected capacity change from 0 to 128 [ 424.959465][T14543] gretap0: left promiscuous mode [ 424.969875][T14547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 425.000562][T14547] FAT-fs (loop4): Filesystem has been set read-only [ 425.007875][T14547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 425.024251][T14547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 425.036756][T12992] udevd[12992]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 425.045864][T12523] udevd[12523]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 425.068596][T13868] udevd[13868]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 425.086143][T12135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.110158][T14552] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3180'. [ 425.130485][T14550] loop0: detected capacity change from 0 to 1024 [ 425.165064][T14550] EXT4-fs: Ignoring removed bh option [ 425.203216][T14550] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 425.260080][T14550] EXT4-fs (loop0): orphan cleanup on readonly fs [ 425.304144][T14550] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.3173: lblock 2 mapped to illegal pblock 2 (length 1) [ 425.900199][T14563] loop5: detected capacity change from 0 to 512 [ 425.908788][T14550] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 425.908981][T14550] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 425.918062][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 425.918089][ C0] EXT4-fs (loop0): initial error at time 1774687744: ext4_map_blocks:776: inode 3: block 2 [ 425.918134][ C0] EXT4-fs (loop0): last error at time 1774687744: ext4_map_blocks:776: inode 3: block 2 [ 426.120376][T14559] loop1: detected capacity change from 0 to 256 [ 426.235833][T14550] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.3173: Invalid inode table block 1 in block_group 0 [ 426.294143][T14550] loop0: lost filesystem error report for type 5 error -117 [ 426.296013][T14550] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 426.323295][T14550] loop0: lost filesystem error report for type 5 error -117 [ 426.324080][T14550] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.3173: mark_inode_dirty error [ 426.395574][T14550] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 426.396702][T14550] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 426.423239][T14573] loop3: detected capacity change from 0 to 512 [ 426.429769][T14550] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3173: Failed to acquire dquot type 0 [ 426.445618][ T28] audit: type=1400 audit(1774687744.538:1858): avc: denied { getopt } for pid=14574 comm="syz.5.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 426.475473][T14550] loop0: lost filesystem error report for type 5 error -117 [ 426.475951][T14573] EXT4-fs: inline encryption not supported [ 426.480302][T14550] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 426.507693][T14550] loop0: lost filesystem error report for type 5 error -117 [ 426.516372][T14550] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.3173: mark_inode_dirty error [ 426.567840][T14573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.580598][T14550] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 426.585244][T14550] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 426.617464][T14550] EXT4-fs (loop0): 1 orphan inode deleted [ 426.617718][T14573] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.623986][ T4033] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 426.649352][ T4033] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 426.655627][ T4033] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 426.681318][ T4033] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 0 [ 426.695132][ T4033] loop0: lost filesystem error report for type 5 error -117 [ 426.696266][T13832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.722788][T14550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 426.769564][T14592] loop1: detected capacity change from 0 to 512 [ 426.780243][ T4033] tipc: Subscription rejected, illegal request [ 426.805830][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.913134][T14604] loop3: detected capacity change from 0 to 1024 [ 426.952133][T14604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.979791][T14608] netlink: 'syz.1.3198': attribute type 1 has an invalid length. [ 427.009622][T13832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.010948][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3190'. [ 427.051320][T14600] loop0: detected capacity change from 0 to 764 [ 427.079476][T14608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 427.109210][T14600] rock: directory entry would overflow storage [ 427.119591][T14613] loop3: detected capacity change from 0 to 4096 [ 427.127647][T14600] rock: sig=0x4f50, size=4, remaining=3 [ 427.134375][T14600] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 427.145136][T14613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.167470][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 427.220479][T13832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.301012][ T28] audit: type=1400 audit(1774687745.418:1859): avc: denied { write } for pid=14622 comm="syz.1.3203" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 427.356625][ T28] audit: type=1400 audit(1774687745.448:1860): avc: denied { map } for pid=14622 comm="syz.1.3203" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 427.380942][T14625] SET target dimension over the limit! [ 427.398460][T14623] lo speed is unknown, defaulting to 1000 [ 427.418591][T14600] Symlink component flag not implemented [ 427.442906][T14600] Symlink component flag not implemented (129) [ 427.465453][T14631] loop5: detected capacity change from 0 to 2048 [ 427.479235][T14600] rock: directory entry would overflow storage [ 427.487618][T14600] rock: sig=0x4f50, size=4, remaining=3 [ 427.494624][T14600] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 427.499450][T14631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.523352][T14631] EXT4-fs (loop5): shut down requested (2) [ 427.617579][T13554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.775461][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 427.779616][T14649] ip6gretap0: entered promiscuous mode [ 427.789798][ T28] audit: type=1400 audit(1774687745.888:1863): avc: denied { name_bind } for pid=14648 comm="syz.5.3213" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 428.639508][T14676] batadv0: entered promiscuous mode [ 428.655207][ T28] audit: type=1400 audit(1774687745.968:1864): avc: denied { ioctl } for pid=14652 comm="syz.4.3214" path="socket:[46514]" dev="sockfs" ino=46514 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 428.685844][T14676] gretap0: entered promiscuous mode [ 428.702887][ T28] audit: type=1400 audit(1774687745.968:1865): avc: denied { accept } for pid=14652 comm="syz.4.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 428.724665][ T28] audit: type=1400 audit(1774687745.968:1866): avc: denied { write } for pid=14652 comm="syz.4.3214" path="socket:[46514]" dev="sockfs" ino=46514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 428.749222][ T28] audit: type=1400 audit(1774687746.228:1867): avc: denied { write } for pid=14660 comm="syz.5.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 428.918799][T14682] EXT4-fs: Ignoring removed orlov option [ 428.953697][T14682] EXT4-fs: Ignoring removed bh option [ 428.983307][T14684] FAULT_INJECTION: forcing a failure. [ 428.983307][T14684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.022983][T14684] CPU: 1 UID: 0 PID: 14684 Comm: syz.4.3224 Tainted: G W syzkaller #0 PREEMPT(full) [ 429.023022][T14684] Tainted: [W]=WARN [ 429.023032][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.023045][T14684] Call Trace: [ 429.023053][T14684] [ 429.023062][T14684] __dump_stack+0x1d/0x30 [ 429.023092][T14684] dump_stack_lvl+0x95/0xd0 [ 429.023118][T14684] dump_stack+0x15/0x1b [ 429.023165][T14684] should_fail_ex+0x263/0x280 [ 429.023201][T14684] should_fail+0xb/0x20 [ 429.023229][T14684] should_fail_usercopy+0x1a/0x20 [ 429.023319][T14684] _copy_from_user+0x1c/0xb0 [ 429.023350][T14684] kstrtouint_from_user+0x69/0xf0 [ 429.023377][T14684] proc_fail_nth_write+0x50/0x160 [ 429.023478][T14684] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 429.023508][T14684] vfs_write+0x269/0x9f0 [ 429.023526][T14684] ? __rcu_read_unlock+0x4e/0x70 [ 429.023552][T14684] ? __fget_files+0x184/0x1c0 [ 429.023656][T14684] ? mutex_lock+0x57/0x90 [ 429.023778][T14684] ksys_write+0xdc/0x1a0 [ 429.023797][T14684] __x64_sys_write+0x40/0x50 [ 429.023816][T14684] x64_sys_call+0x27e1/0x3020 [ 429.023914][T14684] do_syscall_64+0x12c/0x370 [ 429.023942][T14684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.024030][T14684] RIP: 0033:0x7f7941aecfce [ 429.024051][T14684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 429.024072][T14684] RSP: 002b:00007f7940586fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.024094][T14684] RAX: ffffffffffffffda RBX: 00007f79405876c0 RCX: 00007f7941aecfce [ 429.024177][T14684] RDX: 0000000000000001 RSI: 00007f79405870a0 RDI: 0000000000000003 [ 429.024216][T14684] RBP: 00007f7940587090 R08: 0000000000000000 R09: 0000000000000000 [ 429.024229][T14684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.024246][T14684] R13: 00007f7941da6038 R14: 00007f7941da5fa0 R15: 00007ffee9e01a58 [ 429.024269][T14684] [ 429.247014][T14687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3225'. [ 429.262090][T14682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.516160][T14676] batadv0: left promiscuous mode [ 429.544950][T14676] gretap0: left promiscuous mode [ 429.581485][T14692] netlink: 'syz.1.3227': attribute type 4 has an invalid length. [ 429.697353][T14705] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 429.700498][T14697] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3226'. [ 429.706239][T14696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3226'. [ 429.752081][T14705] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 429.769190][T14705] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3231: bad orphan inode 4 [ 429.827181][T14705] loop1: lost filesystem error report for type 5 error -117 [ 429.827505][T14705] EXT4-fs (loop1): 1 orphan inode deleted [ 429.840696][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 429.840718][ C1] EXT4-fs (loop1): initial error at time 1774687747: ext4_orphan_get:1417 [ 429.840746][ C1] EXT4-fs (loop1): last error at time 1774687747: ext4_orphan_get:1417 [ 429.870319][T14710] 9p: Could not find request transport: EEa [ 429.946413][T14705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.993705][T14715] set_capacity_and_notify: 3 callbacks suppressed [ 429.993728][T14715] loop5: detected capacity change from 0 to 4096 [ 430.027322][T14719] loop0: detected capacity change from 0 to 4096 [ 430.140588][T14715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.223858][T14722] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 4: comm syz.1.3231: lblock 0 mapped to illegal pblock 4 (length 1) [ 430.247633][ T28] audit: type=1400 audit(1774687748.338:1868): avc: denied { create } for pid=14704 comm="syz.1.3231" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 430.405233][T14725] loop0: detected capacity change from 0 to 512 [ 430.707387][T14725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 430.776416][T12135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.789398][T13832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.799179][T13554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.833117][T13303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.863053][ T28] audit: type=1400 audit(1774687748.978:1869): avc: denied { ioctl } for pid=14740 comm="syz.4.3243" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 430.923556][T14751] veth1_to_bridge: entered promiscuous mode [ 430.945801][T14751] veth1_to_bridge: left promiscuous mode [ 430.983255][T14756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14756 comm=syz.5.3244 [ 431.012143][T14756] loop5: detected capacity change from 0 to 512 [ 431.060467][T13868] ================================================================== [ 431.068930][T13868] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 431.076136][T13868] [ 431.076219][T14759] loop0: detected capacity change from 0 to 4096 [ 431.078500][T13868] write to 0xffff8881059dac8c of 4 bytes by task 12992 on cpu 1: [ 431.092871][T13868] simple_unlink+0x54/0x80 [ 431.097331][T13868] shmem_unlink+0x12d/0x140 [ 431.102150][T13868] shmem_rename2+0x18e/0x310 [ 431.106864][T13868] vfs_rename+0x97f/0xad0 [ 431.111236][T13868] filename_renameat2+0x3b6/0x6e0 [ 431.116286][T13868] __se_sys_rename+0x4a/0x1c0 [ 431.121019][T13868] __x64_sys_rename+0x31/0x40 [ 431.125800][T13868] x64_sys_call+0x2b3/0x3020 [ 431.130412][T13868] do_syscall_64+0x12c/0x370 [ 431.135113][T13868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.141022][T13868] [ 431.143354][T13868] read to 0xffff8881059dac8c of 4 bytes by task 13868 on cpu 0: [ 431.151255][T13868] fill_mg_cmtime+0x5b/0x270 [ 431.156436][T13868] generic_fillattr+0x24a/0x340 [ 431.161660][T13868] shmem_getattr+0x181/0x200 [ 431.166374][T13868] vfs_getattr_nosec+0x146/0x1e0 [ 431.171333][T13868] vfs_getattr+0x48/0x60 [ 431.175685][T13868] vfs_statx_path+0x28/0x140 [ 431.180307][T13868] vfs_statx+0xc4/0x170 [ 431.184582][T13868] vfs_fstatat+0x118/0x170 [ 431.189009][T13868] __se_sys_newfstatat+0x55/0x3e0 [ 431.194137][T13868] __x64_sys_newfstatat+0x55/0x70 [ 431.199180][T13868] x64_sys_call+0x2c64/0x3020 [ 431.204159][T13868] do_syscall_64+0x12c/0x370 [ 431.208876][T13868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.214884][T13868] [ 431.217217][T13868] value changed: 0x0af95b58 -> 0x0afd3c87 [ 431.223027][T13868] [ 431.225354][T13868] Reported by Kernel Concurrency Sanitizer on: [ 431.231508][T13868] CPU: 0 UID: 0 PID: 13868 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 431.242370][T13868] Tainted: [W]=WARN [ 431.246264][T13868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.256502][T13868] ================================================================== [ 431.317871][T14756] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 431.346072][T14756] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 431.368823][T14762] loop1: detected capacity change from 0 to 1024 [ 431.375590][T14756] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3244: Corrupt directory, running e2fsck is recommended [ 431.389487][T14762] EXT4-fs: Ignoring removed orlov option [ 431.396776][T14756] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 431.415594][T14756] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.3244: corrupted in-inode xattr: e_name out of bounds [ 431.430063][T14756] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 431.435511][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 431.451190][ C1] EXT4-fs (loop5): initial error at time 1774687749: ext4_iget_extra_inode:5025: inode 15 [ 431.461441][ C1] EXT4-fs (loop5): last error at time 1774687749: ext4_iget_extra_inode:5025: inode 15 [ 431.475869][T14762] EXT4-fs: Ignoring removed bh option [ 431.491164][T14756] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3244: couldn't read orphan inode 15 (err -117) [ 431.503847][T14756] loop5: lost filesystem error report for type 5 error -117 [ 431.504798][T14756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.556837][T14762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.573789][T14756] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 431.597324][T14756] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 431.616102][T14756] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3244: Corrupt directory, running e2fsck is recommended [ 431.631608][T14756] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 431.663905][T14756] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 431.688373][T14756] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3244: Corrupt directory, running e2fsck is recommended [ 431.848166][T14756] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 431.860125][T14756] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 431.882216][T14756] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3244: Corrupt directory, running e2fsck is recommended [ 431.920330][T14770] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 431.984550][T13554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.314352][T12135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.