last executing test programs: 5.368770579s ago: executing program 0 (id=2253): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 5.30174993s ago: executing program 0 (id=2254): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0xff, 0xf06, 0x3, 0x95, 0x7c, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 5.120825845s ago: executing program 4 (id=2255): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xfffffeb1, 0x0, &(0x7f0000000340)="0d86370abf32247356b7e912c850835d1b186d61bc0aca8c751615e618097811249b2a78bb84123ed501af77a9140319ad417fa3cc5e41aef388d1610a2c09000b62d8c7bd3bc51c695ad1bc98eff1d90ae8f35cd21e71690100000000000000f1a13c28c25198206c12da294715a8a1ec3194c27eb2603b9cb10560cacf31d083428b7fd659331419c4cb378a6b14c1682b7e15542e2494f98d2245fcf53d0fbec64dfa95f5d4f9e4f0e63941bfde165747c397af139dd4491f73a10df3439acadcc2a64608c9c8c70a5b570000491accf810cac702b20000000000000000", 0x0, 0x1c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x65) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000000)=0xc6d, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.372779382s ago: executing program 0 (id=2259): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40}, 0x10, r0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRESOCT=0x0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r3, 0x0, 0x0, 0x81, 0x0, 0x0) shutdown(r3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) r4 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc61}}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x8004, 0x72}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) 4.298738984s ago: executing program 1 (id=2260): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000140003050abd7178fddbdf21021f51ff", @ANYRES32=r2, @ANYBLOB="080002007f0000"], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4008000) bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x9, @mcast2, 0x8000, 0x2}, 0x20) sendto$inet_nvme_of_msg(r3, &(0x7f0000000640)={@cmd={{0x4, 0x2, 0x48, 0x41}, {@format={0x80, 0x81, 0x1, 0x96, '\x00', 0x7}}}, @void}, 0x80, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES16, @ANYRES16], 0x1, 0x272, &(0x7f0000000380)="$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") setgroups(0x1, &(0x7f0000000040)=[0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000049c0)='./file1\x00', &(0x7f0000004a00), 0x1000) gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000480)={[{@data_journal}, {@resuid={'resuid', 0x3d, r6}}, {@data_ordered}, {@nombcache}, {@delalloc}, {@quota}], [{@permit_directio}, {@appraise_type}, {@hash}, {@subj_role={'subj_role', 0x3d, 'resuid'}}, {@fowner_lt={'fowner<', r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x39, 0x64, 0x32, 0x66, 0x4, 0x37, 0x30], 0x2d, [0x34, 0x37, 0x38, 0x62], 0x2d, [0x38, 0x39, 0x31, 0x61], 0x2d, [0x61, 0x36, 0x61, 0x64], 0x2d, [0x38, 0x62, 0x65, 0xa0, 0x63, 0x32, 0x52, 0x38]}}}]}, 0x7f, 0x469, &(0x7f0000000580)="$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") lstat(&(0x7f0000004a80)='./file0\x00', &(0x7f0000004ac0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000600)=0xdf8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) 4.151784147s ago: executing program 4 (id=2261): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x2364, &(0x7f0000000040)={0x0, 0x80036d, 0xc000, 0x10, 0xa0002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.090421078s ago: executing program 3 (id=2262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00'}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040080) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r4, 0x3}}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f086dde59b09833318f2cf264e1ebeb5c8bc55a871ea8cc73c95ac7d0aa2e51e0c7c270095aa66db85c299", 0x0, 0x100000a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e26, 0x6, @mcast2, 0xffffffba}, 0x1c) 3.970935291s ago: executing program 4 (id=2263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000640)={0x18, 0xd, 0x1, {{0xdd08682246aec3ce, 0x2, 0x7}, 0x1}}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0xf) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000040)=0x2eb2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="329f44ad3f89"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 3.891882122s ago: executing program 0 (id=2264): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x7b, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000180001"], 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 3.829480684s ago: executing program 1 (id=2265): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x7, 0x0}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRESOCT=0x0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r4, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3", 0xc4, 0x81, 0x0, 0x0) shutdown(r4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) r5 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r5, &(0x7f0000000040)=""/4109, 0x100d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc61}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) 3.032615292s ago: executing program 3 (id=2266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 2.973079613s ago: executing program 2 (id=2267): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) sigaltstack(&(0x7f0000000480)={0x0, 0x80000000, 0xfffffffffffffc88}, &(0x7f0000000040)={0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="0001000800000000001402000000000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x50) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7f, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) 2.950217663s ago: executing program 4 (id=2268): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$incfs(r0, 0x0, 0x100, 0x19a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.901608795s ago: executing program 3 (id=2269): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0xff, 0xf06, 0x3, 0x95, 0x7c, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 2.644753921s ago: executing program 1 (id=2270): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x7, 0x0}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRESOCT=0x0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r4, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3", 0xc4, 0x81, 0x0, 0x0) shutdown(r4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) r5 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r5, &(0x7f0000000040)=""/4109, 0x100d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) 2.493585154s ago: executing program 1 (id=2271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000640)={0x18, 0xd, 0x1, {{0xdd08682246aec3ce, 0x2, 0x7}, 0x1}}, 0x18) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x3, 0xf) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000040)=0x2eb2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="329f44ad3f89"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 2.448908945s ago: executing program 2 (id=2272): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xfffffeb1, 0x0, &(0x7f0000000340)="0d86370abf32247356b7e912c850835d1b186d61bc0aca8c751615e618097811249b2a78bb84123ed501af77a9140319ad417fa3cc5e41aef388d1610a2c09000b62d8c7bd3bc51c695ad1bc98eff1d90ae8f35cd21e71690100000000000000f1a13c28c25198206c12da294715a8a1ec3194c27eb2603b9cb10560cacf31d083428b7fd659331419c4cb378a6b14c1682b7e15542e2494f98d2245fcf53d0fbec64dfa95f5d4f9e4f0e63941bfde165747c397af139dd4491f73a10df3439acadcc2a64608c9c8c70a5b570000491accf810cac702b20000000000000000", 0x0, 0x1c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x65) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000000)=0xc6d, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.318579148s ago: executing program 0 (id=2273): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r1, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x3d) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10c302, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x20000000004}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0x17d4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000002500)={0x80, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000002480)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002780)={0x0, "c0879a3e46163d47b0348f62c03169d0"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000003a40)={r4, 0xffff, 0x1, [0x84, 0x6, 0x80, 0x8, 0xb8], [0x3, 0xc1, 0x8, 0x2, 0x8000, 0x800, 0x13c0000, 0x562, 0x9, 0x6, 0xfff, 0x1, 0x0, 0x100000001, 0x8, 0x100000001, 0xa08, 0x3, 0x8001, 0x1ff, 0x5, 0x60, 0x5, 0x80000001, 0x0, 0x100000001, 0xffffffff, 0x9, 0x22f8, 0x3, 0x2, 0x3, 0xffffffffffffffff, 0x8, 0x3000, 0x1, 0x7, 0xdb3, 0x8000, 0x43, 0x0, 0x7676, 0x5, 0x6, 0x4800, 0x24, 0x400, 0x5, 0x6, 0xeb8c, 0x3, 0xc7d8, 0x9, 0x6, 0x2, 0x2, 0x6, 0xaaf, 0x8, 0xfff, 0xd, 0x100000001, 0x3, 0xffff, 0x6, 0x1, 0x3, 0xc, 0x61f6, 0x0, 0x6, 0x5, 0x489387a7, 0x81a, 0x8000000000000001, 0x1, 0x5, 0x80000001, 0x7, 0x2dce07c2, 0x5, 0x8, 0x2, 0x4, 0xde, 0x1, 0x2, 0x9, 0x101, 0x3, 0x7b5c, 0x52f, 0x7, 0x3, 0x1, 0xfff, 0x9e2, 0xffffffffffc00000, 0x3, 0x34000000000, 0xffff, 0x9, 0x4, 0x5ff, 0x4, 0x40, 0x5, 0xd, 0x10001, 0x1c, 0x32b, 0x1, 0x9, 0x3, 0x0, 0x4, 0x4000000000000000, 0x3d, 0xc27, 0x8000, 0x100]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) socket(0x1, 0x803, 0x0) readv(r1, &(0x7f0000002180), 0x0) 1.745065271s ago: executing program 3 (id=2274): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x2364, &(0x7f0000000040)={0x0, 0x80036d, 0xc000, 0x10, 0xa0002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.523598196s ago: executing program 2 (id=2275): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40}, 0x10, r0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRESOCT=0x0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r3, 0x0, 0x0, 0x81, 0x0, 0x0) shutdown(r3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) r4 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc61}}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x8004, 0x72}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) 1.523427396s ago: executing program 3 (id=2276): socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@canfd={0xd, {{0x1}, 0x1e, 0x0, 0x0, 0x0, "1473911fcc2fd46847d0440004178040e5e1ba503ded6cb5e60a1165ca326ea3e15093e68ef50160ba950d492401293ab04b6e40dbba08891926917f70ae45db"}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r2, 0x1) 1.487634627s ago: executing program 1 (id=2277): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x7b, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000180001"], 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 1.463077387s ago: executing program 0 (id=2278): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xfffffeb1, 0x0, &(0x7f0000000340)="0d86370abf32247356b7e912c850835d1b186d61bc0aca8c751615e618097811249b2a78bb84123ed501af77a9140319ad417fa3cc5e41aef388d1610a2c09000b62d8c7bd3bc51c695ad1bc98eff1d90ae8f35cd21e71690100000000000000f1a13c28c25198206c12da294715a8a1ec3194c27eb2603b9cb10560cacf31d083428b7fd659331419c4cb378a6b14c1682b7e15542e2494f98d2245fcf53d0fbec64dfa95f5d4f9e4f0e63941bfde165747c397af139dd4491f73a10df3439acadcc2a64608c9c8c70a5b570000491accf810cac702b20000000000000000", 0x0, 0x1c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x65) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0xc6d, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x100041a, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a40)="$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") 815.098762ms ago: executing program 2 (id=2279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 771.516523ms ago: executing program 2 (id=2280): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffe) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 644.976006ms ago: executing program 4 (id=2281): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20, &(0x7f0000000340)={[], [{@fowner_lt}, {@appraise_type}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsroot}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") socket$nl_generic(0x10, 0x3, 0x10) gettid() eventfd(0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x400c090) 610.236936ms ago: executing program 3 (id=2282): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x7b, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 579.497067ms ago: executing program 2 (id=2283): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x7b, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000180001"], 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 529.008528ms ago: executing program 4 (id=2284): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0xff, 0xf06, 0x3, 0x95, 0x7c, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 0s ago: executing program 1 (id=2285): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0xf) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000040)=0x2eb2, 0x4) kernel console output (not intermixed with test programs): 8 [ 222.197789][ T8281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1274'. [ 222.199442][ T8281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1274'. [ 222.283932][ T8246] EXT4-fs (loop2): 1 truncate cleaned up [ 222.317590][ T8246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.439677][ T8292] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1265'. [ 223.106294][ T8295] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1278'. [ 223.177127][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'. [ 223.218509][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.220205][ T8298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1277'. [ 223.284679][ T8298] loop3: detected capacity change from 0 to 512 [ 223.324653][ T8304] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1279'. [ 223.331822][ T8298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.331929][ T8298] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.663557][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.727515][ T8283] loop4: detected capacity change from 0 to 512 [ 225.092081][ T8338] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1288'. [ 225.103501][ T8338] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1288'. [ 225.410878][ T8357] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1293'. [ 226.050885][ T8359] bridge3: left promiscuous mode [ 226.050945][ T8359] bridge3: left allmulticast mode [ 226.052459][ T8359] bridge4: left promiscuous mode [ 226.052528][ T8359] bridge4: left allmulticast mode [ 226.537929][ T8367] loop4: detected capacity change from 0 to 512 [ 226.730185][ T8367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.731022][ T8367] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.107213][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.406709][ T8346] loop0: detected capacity change from 0 to 512 [ 227.514173][ T8346] EXT4-fs: Ignoring removed i_version option [ 227.543752][ T8346] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.614157][ T8346] EXT4-fs (loop0): orphan cleanup on readonly fs [ 227.676529][ T8346] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 227.696328][ T8346] Quota error (device loop0): write_blk: dquota write failed [ 227.696989][ T8346] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 227.698290][ T8346] Quota error (device loop0): write_blk: dquota write failed [ 227.698910][ T8346] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 227.700120][ T8346] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1290: Failed to acquire dquot type 1 [ 227.700367][ T8346] loop0: lost filesystem error report for type 5 error -28 [ 227.700779][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 227.701010][ C0] EXT4-fs (loop0): initial error at time 1788923009: ext4_mb_generate_buddy:1317 [ 227.701388][ C0] EXT4-fs (loop0): last error at time 1788923009: ext4_mb_generate_buddy:1317 [ 227.733341][ T8346] EXT4-fs (loop0): 1 truncate cleaned up [ 227.812566][ T8346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.861312][ T8394] __nla_validate_parse: 1 callbacks suppressed [ 227.867819][ T8394] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1302'. [ 227.874298][ T8394] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1302'. [ 227.998620][ T8346] tipc: Enabling of bearer rejected, already enabled [ 228.112865][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1304'. [ 228.183648][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1290'. [ 228.215173][ T8346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1290'. [ 228.303949][ T8405] loop1: detected capacity change from 0 to 512 [ 228.320045][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.503911][ T8414] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1307'. [ 229.645949][ T8430] loop4: detected capacity change from 0 to 512 [ 229.801623][ T8433] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1313'. [ 229.817362][ T8433] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1313'. [ 229.988247][ T8430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.988549][ T8430] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.252668][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.917536][ T8461] loop3: detected capacity change from 0 to 512 [ 231.519049][ T8475] loop1: detected capacity change from 0 to 2048 [ 231.527786][ T8461] EXT4-fs: Ignoring removed i_version option [ 231.588112][ T8475] loop1: detected capacity change from 0 to 4096 [ 231.596467][ T8477] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1325'. [ 231.596871][ T8461] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.603075][ T8477] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1325'. [ 231.628132][ T8475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.659070][ T8482] loop0: detected capacity change from 0 to 1024 [ 231.659426][ T8482] EXT4-fs: Ignoring removed orlov option [ 231.678627][ T8461] EXT4-fs (loop3): orphan cleanup on readonly fs [ 231.690269][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.722977][ T8482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.747298][ T8487] netlink: 'syz.4.1326': attribute type 3 has an invalid length. [ 231.747332][ T8487] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 232.301943][ T8461] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 232.307365][ T8461] Quota error (device loop3): write_blk: dquota write failed [ 232.307395][ T8461] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 232.307996][ T8461] Quota error (device loop3): write_blk: dquota write failed [ 232.308282][ T8461] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 232.308803][ T8461] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1320: Failed to acquire dquot type 1 [ 232.309227][ T8461] loop3: lost filesystem error report for type 5 error -28 [ 232.321125][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 232.321152][ C0] EXT4-fs (loop3): initial error at time 1788923014: ext4_mb_generate_buddy:1317 [ 232.321180][ C0] EXT4-fs (loop3): last error at time 1788923014: ext4_mb_generate_buddy:1317 [ 232.348720][ T8461] EXT4-fs (loop3): 1 truncate cleaned up [ 232.458924][ T8461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.568570][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.137464][ T8461] tipc: Enabling of bearer rejected, already enabled [ 233.317972][ T8509] loop1: detected capacity change from 0 to 512 [ 233.492435][ T8509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.492784][ T8509] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.826701][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.861217][ T8524] macvlan18: entered promiscuous mode [ 233.883175][ T8528] __nla_validate_parse: 1 callbacks suppressed [ 233.883204][ T8528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1337'. [ 233.883646][ T8528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1337'. [ 233.947882][ T8532] loop4: detected capacity change from 0 to 1024 [ 233.951133][ T8532] EXT4-fs: Ignoring removed orlov option [ 233.972647][ T8532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.003203][ T29] audit: type=1400 audit(1788923015.809:623): avc: denied { create } for pid=8535 comm="syz.3.1340" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.004260][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.188453][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.224714][ T8552] loop4: detected capacity change from 0 to 1024 [ 234.225078][ T8552] EXT4-fs: Ignoring removed orlov option [ 234.234046][ T8552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.251822][ T8549] macvlan19: entered promiscuous mode [ 234.480487][ T8562] loop1: detected capacity change from 0 to 1024 [ 234.489642][ T8562] EXT4-fs: Ignoring removed orlov option [ 234.509992][ T8562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.336260][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.478559][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.484819][ T8578] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1349'. [ 235.485843][ T8578] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1349'. [ 235.610162][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1350'. [ 235.702468][ T8586] loop1: detected capacity change from 0 to 512 [ 236.572788][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 236.811603][ T8605] loop2: detected capacity change from 0 to 512 [ 236.870830][ T8605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.871048][ T8605] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.177057][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.191468][ T8617] loop4: detected capacity change from 0 to 1024 [ 237.201786][ T8617] EXT4-fs: Ignoring removed orlov option [ 237.209675][ T8622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1361'. [ 237.221805][ T8622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1361'. [ 237.239151][ T8617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.250854][ T8621] loop3: detected capacity change from 0 to 2048 [ 237.362574][ T8629] loop0: detected capacity change from 0 to 1024 [ 237.362967][ T8629] EXT4-fs: Ignoring removed orlov option [ 237.383314][ T8629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.413591][ T8621] loop3: detected capacity change from 0 to 4096 [ 237.483195][ T8621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.562610][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.671029][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 237.781636][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.792985][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.417839][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1368'. [ 238.475486][ T8666] loop0: detected capacity change from 0 to 512 [ 238.794364][ T8687] netlink: 'syz.3.1376': attribute type 3 has an invalid length. [ 238.794406][ T8687] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 239.398698][ T8689] loop2: detected capacity change from 0 to 512 [ 239.456071][ T8689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.456345][ T8689] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.916115][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.960341][ T8693] loop0: detected capacity change from 0 to 2048 [ 239.970388][ T8697] loop2: detected capacity change from 0 to 1024 [ 239.972616][ T8696] __nla_validate_parse: 3 callbacks suppressed [ 239.972632][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 239.994772][ T8697] EXT4-fs: Ignoring removed orlov option [ 240.018417][ T8697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.031349][ T8693] loop0: detected capacity change from 0 to 4096 [ 240.044440][ T8693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.051439][ T8703] EXT4-fs: Ignoring removed orlov option [ 240.095760][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.141241][ T8703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.461546][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.473912][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.523994][ T8721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1386'. [ 240.524702][ T8721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1386'. [ 241.212650][ T8727] EXT4-fs: Ignoring removed i_version option [ 241.227691][ T8727] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.253648][ T8727] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.261282][ T8727] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 241.261362][ T8727] Quota error (device loop4): write_blk: dquota write failed [ 241.261401][ T8727] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 241.261452][ T8727] Quota error (device loop4): write_blk: dquota write failed [ 241.261479][ T8727] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 241.261553][ T8727] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1387: Failed to acquire dquot type 1 [ 241.261582][ T8727] loop4: lost filesystem error report for type 5 error -28 [ 241.276211][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 241.276252][ C0] EXT4-fs (loop4): initial error at time 1788923023: ext4_mb_generate_buddy:1317 [ 241.276297][ C0] EXT4-fs (loop4): last error at time 1788923023: ext4_acquire_dquot:7069 [ 241.326237][ T8727] EXT4-fs (loop4): 1 truncate cleaned up [ 241.432009][ T8727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.610687][ T8718] tipc: Enabling of bearer rejected, failed to enable media [ 241.790715][ T8746] netlink: 'syz.2.1392': attribute type 3 has an invalid length. [ 241.790753][ T8746] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 241.790790][ T8746] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1392'. [ 242.307355][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.412659][ T8754] set_capacity_and_notify: 2 callbacks suppressed [ 242.412709][ T8754] loop0: detected capacity change from 0 to 1024 [ 242.426444][ T8754] EXT4-fs: Ignoring removed orlov option [ 242.440889][ T8758] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1398'. [ 242.441517][ T8758] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1398'. [ 242.459473][ T8756] loop3: detected capacity change from 0 to 1024 [ 242.462834][ T8756] EXT4-fs: Ignoring removed orlov option [ 242.473738][ T8754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.490921][ T8756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.579013][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.588989][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.963597][ T8793] macvlan15: left promiscuous mode [ 244.016176][ T8794] loop2: detected capacity change from 0 to 512 [ 244.424249][ T8806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1410'. [ 244.426084][ T8806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1410'. [ 244.618755][ T8816] macvlan20: entered promiscuous mode [ 245.224107][ T8824] loop2: detected capacity change from 0 to 1024 [ 245.224505][ T8824] EXT4-fs: Ignoring removed orlov option [ 245.234340][ T8824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.356409][ T8828] loop1: detected capacity change from 0 to 2048 [ 245.381376][ T8832] loop4: detected capacity change from 0 to 1024 [ 245.381787][ T8832] EXT4-fs: Ignoring removed orlov option [ 245.394091][ T8832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.551813][ T8828] loop1: detected capacity change from 0 to 4096 [ 245.583419][ T8828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.837731][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.118539][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.216849][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.316262][ T8848] loop2: detected capacity change from 0 to 1024 [ 246.327896][ T8848] EXT4-fs: Ignoring removed orlov option [ 246.385849][ T8848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.845349][ T8870] macvlan16: entered promiscuous mode [ 246.918185][ T8872] netlink: 'syz.0.1426': attribute type 3 has an invalid length. [ 246.918264][ T8872] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 246.918281][ T8872] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1426'. [ 247.525425][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.713169][ T8887] loop4: detected capacity change from 0 to 2048 [ 247.756393][ T8891] loop0: detected capacity change from 0 to 1024 [ 247.766294][ T8891] EXT4-fs: Ignoring removed orlov option [ 247.797371][ T8891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.019860][ T8887] loop4: detected capacity change from 0 to 4096 [ 248.034722][ T8887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.143802][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.276950][ T8903] netlink: 726 bytes leftover after parsing attributes in process `syz.3.1436'. [ 248.289284][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.436202][ T8929] macvlan21: entered promiscuous mode [ 249.973759][ T8937] loop3: detected capacity change from 0 to 512 [ 250.549234][ T8955] loop0: detected capacity change from 0 to 512 [ 250.843981][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 250.907010][ T8960] loop3: detected capacity change from 0 to 512 [ 251.078321][ T8955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.078401][ T8955] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.012894][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.324274][ T8982] loop1: detected capacity change from 0 to 512 [ 252.541552][ T8993] macvlan17: entered promiscuous mode [ 252.676079][ T8999] loop0: detected capacity change from 0 to 1024 [ 252.676678][ T8999] EXT4-fs: Ignoring removed orlov option [ 252.704754][ T8999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.929223][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 252.941167][ T9013] loop1: detected capacity change from 0 to 512 [ 253.200606][ T9022] loop2: detected capacity change from 0 to 512 [ 253.329485][ T9022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.329803][ T9022] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.535501][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.842273][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.037617][ T9028] loop4: detected capacity change from 0 to 512 [ 254.153543][ T9028] EXT4-fs: Ignoring removed i_version option [ 254.202500][ T9033] loop0: detected capacity change from 0 to 512 [ 254.228927][ T9028] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.339399][ T9028] EXT4-fs (loop4): orphan cleanup on readonly fs [ 254.359944][ T9028] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 254.363659][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 254.363684][ C0] EXT4-fs (loop4): initial error at time 1788923036: ext4_mb_generate_buddy:1317 [ 254.363740][ C0] EXT4-fs (loop4): last error at time 1788923036: ext4_mb_generate_buddy:1317 [ 254.373553][ T9028] Quota error (device loop4): write_blk: dquota write failed [ 254.373586][ T9028] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 254.380973][ T9028] Quota error (device loop4): write_blk: dquota write failed [ 254.381320][ T9028] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 254.381919][ T9028] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1470: Failed to acquire dquot type 1 [ 254.382090][ T9028] loop4: lost filesystem error report for type 5 error -28 [ 254.392304][ T9028] EXT4-fs (loop4): 1 truncate cleaned up [ 254.431171][ T9028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.484595][ T9050] xt_hashlimit: size too large, truncated to 1048576 [ 254.537985][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.793495][ T9062] loop3: detected capacity change from 0 to 256 [ 254.867548][ T9065] SELinux: DCCP has been removed, pid=9065 comm=syz.1.1480 [ 254.960049][ T9067] FAULT_INJECTION: forcing a failure. [ 254.960049][ T9067] name failslab, interval 1, probability 0, space 0, times 0 [ 254.960091][ T9067] CPU: 0 UID: 0 PID: 9067 Comm: syz.1.1480 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.960120][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.960166][ T9067] Call Trace: [ 254.960174][ T9067] [ 254.960184][ T9067] __dump_stack+0x1d/0x30 [ 254.960214][ T9067] dump_stack_lvl+0x95/0xd0 [ 254.960239][ T9067] dump_stack+0x15/0x1b [ 254.960276][ T9067] should_fail_ex+0x262/0x280 [ 254.960303][ T9067] ? __alloc_skb+0x2e0/0x6f0 [ 254.960336][ T9067] should_failslab+0x8c/0xb0 [ 254.960436][ T9067] kmem_cache_alloc_node_noprof+0x82/0x400 [ 254.960471][ T9067] ? should_fail_ex+0xdb/0x280 [ 254.960493][ T9067] ? __alloc_skb+0x2e0/0x6f0 [ 254.960584][ T9067] __alloc_skb+0x2e0/0x6f0 [ 254.960616][ T9067] ? __alloc_skb+0x209/0x6f0 [ 254.960648][ T9067] _sctp_make_chunk+0x59/0x210 [ 254.960749][ T9067] sctp_make_datafrag_empty+0xaf/0x130 [ 254.960801][ T9067] sctp_datamsg_from_user+0x56d/0x940 [ 254.960830][ T9067] sctp_sendmsg_to_asoc+0xa04/0xed0 [ 254.960865][ T9067] ? __rcu_read_unlock+0x4e/0x70 [ 254.960936][ T9067] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 254.961034][ T9067] sctp_sendmsg+0x1350/0x1d00 [ 254.961072][ T9067] ? __pfx_sctp_sendmsg+0x10/0x10 [ 254.961104][ T9067] ? __pfx_inet_sendmsg+0x10/0x10 [ 254.961131][ T9067] inet_sendmsg+0xc5/0xd0 [ 254.961169][ T9067] sock_sendmsg+0x1b9/0x220 [ 254.961201][ T9067] splice_to_socket+0x6e7/0xa40 [ 254.961255][ T9067] ? rw_verify_area+0x8d/0x160 [ 254.961287][ T9067] ? __pfx_splice_to_socket+0x10/0x10 [ 254.961335][ T9067] do_splice+0x92c/0x1050 [ 254.961360][ T9067] ? __rcu_read_unlock+0x4e/0x70 [ 254.961394][ T9067] ? __fget_files+0x184/0x1c0 [ 254.961423][ T9067] __se_sys_splice+0x26c/0x3a0 [ 254.961497][ T9067] __x64_sys_splice+0x78/0x90 [ 254.961522][ T9067] x64_sys_call+0x1797/0x2550 [ 254.961551][ T9067] do_syscall_64+0x112/0x360 [ 254.961627][ T9067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.961691][ T9067] RIP: 0033:0x7f72195fe159 [ 254.961777][ T9067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.961816][ T9067] RSP: 002b:00007f7218036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 254.961843][ T9067] RAX: ffffffffffffffda RBX: 00007f7219886090 RCX: 00007f72195fe159 [ 254.961861][ T9067] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000008 [ 254.961877][ T9067] RBP: 00007f721969503b R08: 000000000000ffff R09: 0000000000000002 [ 254.961894][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.961941][ T9067] R13: 00007f7219886128 R14: 00007f7219886090 R15: 00007ffeecb94008 [ 254.961964][ T9067] [ 255.197895][ T29] audit: type=1400 audit(1788923036.996:624): avc: denied { append } for pid=9061 comm="syz.3.1479" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 255.197988][ T29] audit: type=1400 audit(1788923036.996:625): avc: denied { open } for pid=9061 comm="syz.3.1479" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 255.201784][ T29] audit: type=1400 audit(1788923036.996:626): avc: denied { ioctl } for pid=9061 comm="syz.3.1479" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 255.394928][ T9049] loop2: detected capacity change from 0 to 512 [ 255.489865][ T9075] netlink: 'syz.3.1482': attribute type 3 has an invalid length. [ 255.489902][ T9075] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 255.489922][ T9075] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1482'. [ 255.716525][ T29] audit: type=1400 audit(1788923037.516:627): avc: denied { name_bind } for pid=9079 comm="syz.0.1485" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 255.797899][ T9080] loop0: detected capacity change from 0 to 4096 [ 255.909285][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 255.925781][ T9080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.945741][ T29] audit: type=1400 audit(1788923037.746:628): avc: denied { write } for pid=9079 comm="syz.0.1485" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.043788][ T29] audit: type=1400 audit(1788923037.836:629): avc: denied { ioctl } for pid=9079 comm="syz.0.1485" path="/288/file1/file1" dev="loop0" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.069067][ T99] IPVS: starting estimator thread 0... [ 256.104276][ T9089] loop1: detected capacity change from 0 to 512 [ 256.164321][ T9088] IPVS: using max 2496 ests per chain, 124800 per kthread [ 257.183367][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.225857][ T9100] xt_hashlimit: size too large, truncated to 1048576 [ 257.271158][ T9108] loop2: detected capacity change from 0 to 1024 [ 257.273112][ T9108] EXT4-fs: Ignoring removed orlov option [ 257.374349][ T9108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.563838][ T9123] loop0: detected capacity change from 0 to 512 [ 257.679457][ T9123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.679588][ T9123] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.210338][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.245853][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.371503][ T9143] netlink: 'syz.0.1495': attribute type 3 has an invalid length. [ 258.371527][ T9143] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 258.371564][ T9143] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1495'. [ 259.198288][ T9163] syz.3.1504 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 259.216451][ T9164] netlink: 'syz.1.1503': attribute type 3 has an invalid length. [ 259.216511][ T9164] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 259.216532][ T9164] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1503'. [ 259.306013][ T9169] xt_hashlimit: size too large, truncated to 1048576 [ 259.367517][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 259.506886][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1508'. [ 259.565344][ T9171] loop3: detected capacity change from 0 to 512 [ 259.785959][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'. [ 260.084182][ T3453] IPVS: starting estimator thread 0... [ 260.174466][ T9193] IPVS: using max 2592 ests per chain, 129600 per kthread [ 260.598458][ T9209] xt_hashlimit: size too large, truncated to 1048576 [ 260.721627][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1520'. [ 260.878805][ T9222] netlink: 'syz.0.1521': attribute type 3 has an invalid length. [ 260.878828][ T9222] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 260.878860][ T9222] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1521'. [ 261.461198][ T9208] loop4: detected capacity change from 0 to 512 [ 261.475748][ T9208] EXT4-fs: Ignoring removed i_version option [ 261.576767][ T9208] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.653354][ T9208] EXT4-fs (loop4): orphan cleanup on readonly fs [ 261.744274][ T9208] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 261.749156][ T9208] __quota_error: 1 callbacks suppressed [ 261.749244][ T9208] Quota error (device loop4): write_blk: dquota write failed [ 261.749617][ T9208] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 261.750435][ T9208] Quota error (device loop4): write_blk: dquota write failed [ 261.751278][ T9208] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 261.752657][ T9208] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1519: Failed to acquire dquot type 1 [ 261.752857][ T9208] loop4: lost filesystem error report for type 5 error -28 [ 261.754614][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 261.754634][ C0] EXT4-fs (loop4): initial error at time 1788923043: ext4_mb_generate_buddy:1317 [ 261.754660][ C0] EXT4-fs (loop4): last error at time 1788923043: ext4_mb_generate_buddy:1317 [ 261.769779][ T9208] EXT4-fs (loop4): 1 truncate cleaned up [ 261.799923][ T9208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.999189][ T9246] netlink: 'syz.3.1528': attribute type 3 has an invalid length. [ 261.999216][ T9246] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 261.999238][ T9246] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1528'. [ 262.119455][ T3453] IPVS: starting estimator thread 0... [ 262.217725][ T9248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1519'. [ 262.244416][ T9249] IPVS: using max 2496 ests per chain, 124800 per kthread [ 262.303693][ T9208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1519'. [ 262.409000][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.802938][ T9264] loop1: detected capacity change from 0 to 512 [ 263.305947][ T9270] xt_hashlimit: size too large, truncated to 1048576 [ 263.547579][ T9285] netlink: 'syz.1.1539': attribute type 3 has an invalid length. [ 263.547656][ T9285] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 263.547743][ T9285] __nla_validate_parse: 1 callbacks suppressed [ 263.547767][ T9285] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1539'. [ 265.206860][ T9322] netlink: 'syz.4.1547': attribute type 3 has an invalid length. [ 265.206939][ T9322] netlink: 'syz.4.1547': attribute type 1 has an invalid length. [ 265.207028][ T9322] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1547'. [ 265.421074][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 266.170911][ T9300] loop0: detected capacity change from 0 to 512 [ 266.203937][ T9338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1553'. [ 266.376540][ T9345] xt_hashlimit: size too large, truncated to 1048576 [ 266.434887][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 266.643821][ T9300] EXT4-fs: Ignoring removed i_version option [ 266.878235][ T9300] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 266.972888][ T9300] EXT4-fs (loop0): orphan cleanup on readonly fs [ 267.016639][ T9369] netlink: 'syz.4.1561': attribute type 3 has an invalid length. [ 267.016668][ T9369] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 267.016690][ T9369] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1561'. [ 267.087078][ T9342] loop2: detected capacity change from 0 to 512 [ 267.202111][ T9300] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 267.215143][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 267.215167][ C1] EXT4-fs (loop0): initial error at time 1788923049: ext4_mb_generate_buddy:1317 [ 267.215198][ C1] EXT4-fs (loop0): last error at time 1788923049: ext4_mb_generate_buddy:1317 [ 267.215328][ T9300] Quota error (device loop0): write_blk: dquota write failed [ 267.216465][ T9300] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 267.217958][ T9300] Quota error (device loop0): write_blk: dquota write failed [ 267.218519][ T9300] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 267.219053][ T9300] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1541: Failed to acquire dquot type 1 [ 267.219402][ T9300] loop0: lost filesystem error report for type 5 error -28 [ 267.285334][ T9300] EXT4-fs (loop0): 1 truncate cleaned up [ 267.431739][ T9300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.484651][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.311285][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 268.326611][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1566'. [ 268.497290][ T9398] netlink: 'syz.0.1568': attribute type 3 has an invalid length. [ 268.497314][ T9398] netlink: 'syz.0.1568': attribute type 1 has an invalid length. [ 268.497334][ T9398] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1568'. [ 268.836237][ T9401] xt_hashlimit: size too large, truncated to 1048576 [ 269.066547][ T99] IPVS: starting estimator thread 0... [ 269.175746][ T9412] IPVS: using max 2448 ests per chain, 122400 per kthread [ 269.504400][ T9426] netlink: 'syz.2.1578': attribute type 3 has an invalid length. [ 269.504479][ T9426] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 269.504499][ T9426] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1578'. [ 269.607502][ T9428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1579'. [ 269.932663][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 270.207811][ T9447] xt_hashlimit: size too large, truncated to 1048576 [ 270.239912][ T9448] loop0: detected capacity change from 0 to 512 [ 270.368339][ T99] IPVS: starting estimator thread 0... [ 270.456187][ T9456] IPVS: using max 2544 ests per chain, 127200 per kthread [ 270.644828][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 270.786115][ T9472] netlink: 'syz.4.1591': attribute type 3 has an invalid length. [ 270.786140][ T9472] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 270.786156][ T9472] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1591'. [ 271.409663][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 271.657360][ T9498] xt_hashlimit: size too large, truncated to 1048576 [ 271.864943][ T9511] netlink: 'syz.1.1602': attribute type 3 has an invalid length. [ 271.865045][ T9511] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 271.865062][ T9511] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1602'. [ 271.938962][ T9512] loop0: detected capacity change from 0 to 512 [ 272.344557][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1607'. [ 273.202517][ T9547] xt_hashlimit: size too large, truncated to 1048576 [ 273.362088][ T9561] netlink: 'syz.2.1615': attribute type 3 has an invalid length. [ 273.362112][ T9561] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 273.362135][ T9561] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1615'. [ 273.553922][ T9565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1618'. [ 273.601568][ T9565] loop0: detected capacity change from 0 to 512 [ 274.395450][ T9586] netlink: 'syz.0.1624': attribute type 3 has an invalid length. [ 274.395479][ T9586] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 274.851019][ T9603] xt_hashlimit: size too large, truncated to 1048576 [ 275.568304][ T9627] loop1: detected capacity change from 0 to 512 [ 275.638017][ T9628] __nla_validate_parse: 2 callbacks suppressed [ 275.638047][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1636'. [ 275.685425][ T9631] netlink: 'syz.2.1638': attribute type 3 has an invalid length. [ 275.685456][ T9631] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 275.685476][ T9631] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1638'. [ 276.311250][ T9649] xt_hashlimit: size too large, truncated to 1048576 [ 276.682976][ T9672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 277.085769][ T9670] loop3: detected capacity change from 0 to 512 [ 277.188261][ T9682] netlink: 'syz.2.1652': attribute type 3 has an invalid length. [ 277.188298][ T9682] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 277.188318][ T9682] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1652'. [ 278.673065][ T9711] xt_hashlimit: size too large, truncated to 1048576 [ 278.684172][ T9713] netlink: 'syz.4.1662': attribute type 3 has an invalid length. [ 278.684200][ T9713] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 278.684220][ T9713] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1662'. [ 278.827804][ T9718] loop0: detected capacity change from 0 to 256 [ 279.032277][ T9728] loop3: detected capacity change from 0 to 512 [ 279.064196][ T9728] EXT4-fs: Ignoring removed i_version option [ 279.076049][ T9728] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.086257][ T9728] EXT4-fs (loop3): orphan cleanup on readonly fs [ 279.094319][ T9728] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 279.094415][ T9728] Quota error (device loop3): write_blk: dquota write failed [ 279.094479][ T9728] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 279.094605][ T9728] Quota error (device loop3): write_blk: dquota write failed [ 279.094629][ T9728] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 279.094651][ T9728] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1665: Failed to acquire dquot type 1 [ 279.094674][ T9728] loop3: lost filesystem error report for type 5 error -28 [ 279.110242][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 279.110279][ C0] EXT4-fs (loop3): initial error at time 1788923060: ext4_mb_generate_buddy:1317 [ 279.110337][ C0] EXT4-fs (loop3): last error at time 1788923060: ext4_acquire_dquot:7069 [ 279.192062][ T9728] EXT4-fs (loop3): 1 truncate cleaned up [ 279.202412][ T9728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.301699][ T9728] tipc: Enabling of bearer rejected, already enabled [ 279.356214][ T9728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1665'. [ 279.378625][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1665'. [ 279.597228][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.658830][ T9744] netlink: 'syz.0.1669': attribute type 3 has an invalid length. [ 279.658855][ T9744] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 279.658893][ T9744] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1669'. [ 280.231333][ T9755] loop3: detected capacity change from 0 to 512 [ 280.306240][ T9765] xt_hashlimit: size too large, truncated to 1048576 [ 280.421460][ T9770] loop3: detected capacity change from 0 to 2048 [ 280.472348][ T9770] loop3: detected capacity change from 0 to 4096 [ 280.504559][ T9770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.551937][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.595753][ T9779] loop3: detected capacity change from 0 to 1024 [ 280.598147][ T9779] EXT4-fs: Ignoring removed orlov option [ 280.625761][ T9779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.045454][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.074700][ T9794] netlink: 'syz.0.1684': attribute type 3 has an invalid length. [ 281.074725][ T9794] netlink: 'syz.0.1684': attribute type 1 has an invalid length. [ 281.074747][ T9794] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1684'. [ 281.323311][ T9805] loop2: detected capacity change from 0 to 512 [ 281.463549][ T9812] xt_hashlimit: size too large, truncated to 1048576 [ 281.585115][ T9818] macvlan12: entered promiscuous mode [ 281.904462][ T9828] loop4: detected capacity change from 0 to 1024 [ 281.932325][ T9828] EXT4-fs: Ignoring removed orlov option [ 281.956017][ T9828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.430648][ T9839] netlink: 'syz.2.1694': attribute type 3 has an invalid length. [ 282.430688][ T9839] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 282.430705][ T9839] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1694'. [ 282.856682][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.766026][ T9859] xt_hashlimit: size too large, truncated to 1048576 [ 283.856836][ T9863] loop1: detected capacity change from 0 to 1024 [ 283.857743][ T9863] EXT4-fs: Ignoring removed orlov option [ 283.874024][ T9863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.153293][ T9874] macvlan19: entered promiscuous mode [ 284.254265][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.347084][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1705'. [ 284.347891][ T9884] loop2: detected capacity change from 0 to 1024 [ 284.348273][ T9884] EXT4-fs: Ignoring removed orlov option [ 284.370222][ T9884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.417811][ T9890] netlink: 'syz.3.1706': attribute type 3 has an invalid length. [ 284.426552][ T9890] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 284.435113][ T9890] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1706'. [ 285.460166][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.494992][ T9911] macvlan22: entered promiscuous mode [ 285.599020][ T9916] netlink: 'syz.4.1712': attribute type 3 has an invalid length. [ 285.599045][ T9916] netlink: 'syz.4.1712': attribute type 1 has an invalid length. [ 285.599061][ T9916] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1712'. [ 286.337953][ T9927] xt_hashlimit: size too large, truncated to 1048576 [ 286.537238][ T9936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1721'. [ 287.629361][ T9963] loop4: detected capacity change from 0 to 512 [ 288.130828][ T9983] netlink: 'syz.2.1730': attribute type 3 has an invalid length. [ 288.130855][ T9983] netlink: 'syz.2.1730': attribute type 1 has an invalid length. [ 288.130877][ T9983] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1730'. [ 288.339899][ T9990] macvlan12: left promiscuous mode [ 288.789520][ T9975] loop0: detected capacity change from 0 to 512 [ 288.979359][ T9994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1733'. [ 289.017791][ T9975] EXT4-fs: Ignoring removed i_version option [ 289.048493][ T9975] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.051342][ T9997] xt_hashlimit: size too large, truncated to 1048576 [ 289.375948][ T9975] EXT4-fs (loop0): orphan cleanup on readonly fs [ 289.567031][ T9975] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 289.583938][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 289.583961][ C0] EXT4-fs (loop0): initial error at time 1788923071: ext4_mb_generate_buddy:1317 [ 289.583992][ C0] EXT4-fs (loop0): last error at time 1788923071: ext4_mb_generate_buddy:1317 [ 289.612958][ T9975] Quota error (device loop0): write_blk: dquota write failed [ 289.613539][ T9975] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 289.638737][ T9975] Quota error (device loop0): write_blk: dquota write failed [ 289.641821][ T9975] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 289.644919][ T9975] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1729: Failed to acquire dquot type 1 [ 289.646844][ T9975] loop0: lost filesystem error report for type 5 error -28 [ 289.676361][ T9975] EXT4-fs (loop0): 1 truncate cleaned up [ 289.725600][T10017] netlink: 'syz.4.1738': attribute type 3 has an invalid length. [ 289.725632][T10017] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 289.725652][T10017] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1738'. [ 289.806054][T10019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1739'. [ 289.911125][ T9975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.013569][ T9975] tipc: Enabling of bearer rejected, already enabled [ 290.160254][T10020] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1729'. [ 290.182581][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1729'. [ 290.239248][T10019] loop3: detected capacity change from 0 to 512 [ 290.314274][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.349445][T10042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1744'. [ 291.754821][T10054] loop4: detected capacity change from 0 to 512 [ 291.891073][T10054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.891278][T10054] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.218248][T10062] netlink: 'syz.3.1748': attribute type 3 has an invalid length. [ 292.218273][T10062] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 292.237022][T10062] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1748'. [ 292.318571][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.449386][T10069] xt_hashlimit: size too large, truncated to 1048576 [ 292.901537][T10086] netlink: 'syz.4.1754': attribute type 3 has an invalid length. [ 292.901562][T10086] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 292.901600][T10086] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1754'. [ 293.137326][T10088] loop1: detected capacity change from 0 to 512 [ 293.159026][T10088] EXT4-fs: Ignoring removed i_version option [ 293.182430][T10088] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.216112][T10088] EXT4-fs (loop1): orphan cleanup on readonly fs [ 293.229851][T10088] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 293.236406][T10088] Quota error (device loop1): write_blk: dquota write failed [ 293.236655][T10088] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 293.237936][T10088] Quota error (device loop1): write_blk: dquota write failed [ 293.237983][T10088] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 293.238007][T10088] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.1755: Failed to acquire dquot type 1 [ 293.238031][T10088] loop1: lost filesystem error report for type 5 error -28 [ 293.238473][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 293.238500][ C1] EXT4-fs (loop1): initial error at time 1788923075: ext4_mb_generate_buddy:1317 [ 293.238534][ C1] EXT4-fs (loop1): last error at time 1788923075: ext4_acquire_dquot:7069 [ 293.255852][T10088] EXT4-fs (loop1): 1 truncate cleaned up [ 293.301791][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1756'. [ 293.308686][T10088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 293.595257][T10096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1758'. [ 293.684399][T10102] loop3: detected capacity change from 0 to 512 [ 294.434341][T10107] tipc: Enabling of bearer rejected, failed to enable media [ 294.534276][T10107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1755'. [ 294.577466][T10088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1755'. [ 294.765587][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.847800][T10116] xt_hashlimit: size too large, truncated to 1048576 [ 294.942760][T10120] macvlan18: left promiscuous mode [ 294.944152][T10120] macvlan19: left promiscuous mode [ 294.945435][T10120] macvlan20: left promiscuous mode [ 294.946838][T10120] macvlan21: left promiscuous mode [ 294.948276][T10120] macvlan22: left promiscuous mode [ 295.638170][T10142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1767'. [ 295.808280][T10153] FAULT_INJECTION: forcing a failure. [ 295.808280][T10153] name failslab, interval 1, probability 0, space 0, times 0 [ 295.808352][T10153] CPU: 0 UID: 0 PID: 10153 Comm: syz.0.1770 Not tainted syzkaller #0 PREEMPT(lazy) [ 295.808384][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.808400][T10153] Call Trace: [ 295.808409][T10153] [ 295.808419][T10153] __dump_stack+0x1d/0x30 [ 295.808472][T10153] dump_stack_lvl+0x95/0xd0 [ 295.808497][T10153] dump_stack+0x15/0x1b [ 295.808532][T10153] should_fail_ex+0x262/0x280 [ 295.808632][T10153] ? sctp_datamsg_from_user+0x54/0x940 [ 295.808692][T10153] should_failslab+0x8c/0xb0 [ 295.808793][T10153] __kmalloc_cache_noprof+0x7a/0x400 [ 295.808824][T10153] ? sctp_datamsg_from_user+0x54/0x940 [ 295.808855][T10153] sctp_datamsg_from_user+0x54/0x940 [ 295.808958][T10153] ? __sk_mem_raise_allocated+0x1cc/0x960 [ 295.808983][T10153] ? __sk_mem_schedule+0x80/0xc0 [ 295.809011][T10153] sctp_sendmsg_to_asoc+0xa04/0xed0 [ 295.809049][T10153] ? __rcu_read_unlock+0x4e/0x70 [ 295.809114][T10153] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 295.809148][T10153] sctp_sendmsg+0x1350/0x1d00 [ 295.809211][T10153] ? __pfx_sctp_sendmsg+0x10/0x10 [ 295.809246][T10153] ? __pfx_inet_sendmsg+0x10/0x10 [ 295.809310][T10153] inet_sendmsg+0xc5/0xd0 [ 295.809336][T10153] sock_sendmsg+0x1b9/0x220 [ 295.809370][T10153] splice_to_socket+0x6e7/0xa40 [ 295.809499][T10153] ? rw_verify_area+0x8d/0x160 [ 295.809533][T10153] ? __pfx_splice_to_socket+0x10/0x10 [ 295.809580][T10153] do_splice+0x92c/0x1050 [ 295.809606][T10153] ? __rcu_read_unlock+0x4e/0x70 [ 295.809639][T10153] ? __fget_files+0x184/0x1c0 [ 295.809811][T10153] __se_sys_splice+0x26c/0x3a0 [ 295.809839][T10153] __x64_sys_splice+0x78/0x90 [ 295.809866][T10153] x64_sys_call+0x1797/0x2550 [ 295.809958][T10153] do_syscall_64+0x112/0x360 [ 295.810053][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.810083][T10153] RIP: 0033:0x7f8dd361e159 [ 295.810113][T10153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.810138][T10153] RSP: 002b:00007f8dd2056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 295.810165][T10153] RAX: ffffffffffffffda RBX: 00007f8dd38a6090 RCX: 00007f8dd361e159 [ 295.810207][T10153] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000008 [ 295.810224][T10153] RBP: 00007f8dd36b503b R08: 000000000000ffff R09: 0000000000000002 [ 295.810241][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.810261][T10153] R13: 00007f8dd38a6128 R14: 00007f8dd38a6090 R15: 00007ffea339ae08 [ 295.810285][T10153] [ 295.891968][T10154] netlink: 'syz.2.1768': attribute type 3 has an invalid length. [ 295.891987][T10154] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 295.892000][T10154] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1768'. [ 296.683638][T10167] netlink: 'syz.4.1773': attribute type 3 has an invalid length. [ 296.683661][T10167] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 296.683680][T10167] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1773'. [ 297.065117][T10176] xt_hashlimit: size too large, truncated to 1048576 [ 297.575865][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1777'. [ 297.880096][T10190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1779'. [ 298.004990][T10182] loop2: detected capacity change from 0 to 512 [ 298.420178][T10199] loop3: detected capacity change from 0 to 512 [ 298.582305][T10199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.582387][T10199] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.653579][T10169] loop0: detected capacity change from 0 to 512 [ 298.877934][T10169] EXT4-fs: Ignoring removed i_version option [ 298.941211][T10169] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.989735][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.035559][T10169] EXT4-fs (loop0): orphan cleanup on readonly fs [ 299.097714][T10169] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 299.116699][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 299.116723][ C1] EXT4-fs (loop0): initial error at time 1788923080: ext4_mb_generate_buddy:1317 [ 299.116748][ C1] EXT4-fs (loop0): last error at time 1788923080: ext4_mb_generate_buddy:1317 [ 299.146538][T10169] Quota error (device loop0): write_blk: dquota write failed [ 299.148228][T10169] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 299.239385][T10218] FAULT_INJECTION: forcing a failure. [ 299.239385][T10218] name failslab, interval 1, probability 0, space 0, times 0 [ 299.239491][T10218] CPU: 0 UID: 0 PID: 10218 Comm: syz.3.1784 Not tainted syzkaller #0 PREEMPT(lazy) [ 299.239522][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.239537][T10218] Call Trace: [ 299.239545][T10218] [ 299.239553][T10218] __dump_stack+0x1d/0x30 [ 299.239583][T10218] dump_stack_lvl+0x95/0xd0 [ 299.239642][T10218] dump_stack+0x15/0x1b [ 299.239713][T10218] should_fail_ex+0x262/0x280 [ 299.239744][T10218] ? sctp_datamsg_from_user+0x54/0x940 [ 299.239833][T10218] should_failslab+0x8c/0xb0 [ 299.239893][T10218] __kmalloc_cache_noprof+0x7a/0x400 [ 299.239929][T10218] ? sctp_datamsg_from_user+0x54/0x940 [ 299.239999][T10218] sctp_datamsg_from_user+0x54/0x940 [ 299.240025][T10218] ? __sk_mem_raise_allocated+0x1cc/0x960 [ 299.240107][T10218] ? __sk_mem_schedule+0x80/0xc0 [ 299.240132][T10218] sctp_sendmsg_to_asoc+0xa04/0xed0 [ 299.240167][T10218] ? __rcu_read_unlock+0x4e/0x70 [ 299.240222][T10218] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 299.240255][T10218] sctp_sendmsg+0x1350/0x1d00 [ 299.240293][T10218] ? __pfx_sctp_sendmsg+0x10/0x10 [ 299.240324][T10218] ? __pfx_inet_sendmsg+0x10/0x10 [ 299.240350][T10218] inet_sendmsg+0xc5/0xd0 [ 299.240431][T10218] sock_sendmsg+0x1b9/0x220 [ 299.240478][T10218] splice_to_socket+0x6e7/0xa40 [ 299.240545][T10218] ? rw_verify_area+0x8d/0x160 [ 299.240620][T10218] ? __pfx_splice_to_socket+0x10/0x10 [ 299.240659][T10218] do_splice+0x92c/0x1050 [ 299.240683][T10218] ? __rcu_read_unlock+0x4e/0x70 [ 299.240717][T10218] ? __fget_files+0x184/0x1c0 [ 299.240768][T10218] __se_sys_splice+0x26c/0x3a0 [ 299.240794][T10218] __x64_sys_splice+0x78/0x90 [ 299.240814][T10218] x64_sys_call+0x1797/0x2550 [ 299.240881][T10218] do_syscall_64+0x112/0x360 [ 299.240917][T10218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.240948][T10218] RIP: 0033:0x7f2b52b1e159 [ 299.241002][T10218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.241040][T10218] RSP: 002b:00007f2b51556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 299.241066][T10218] RAX: ffffffffffffffda RBX: 00007f2b52da6090 RCX: 00007f2b52b1e159 [ 299.241083][T10218] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000008 [ 299.241098][T10218] RBP: 00007f2b52bb503b R08: 000000000000ffff R09: 0000000000000002 [ 299.241114][T10218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.241144][T10218] R13: 00007f2b52da6128 R14: 00007f2b52da6090 R15: 00007ffc3cb87d58 [ 299.241166][T10218] [ 299.242788][T10169] Quota error (device loop0): write_blk: dquota write failed [ 299.243382][T10169] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 299.244182][T10169] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1774: Failed to acquire dquot type 1 [ 299.244275][T10169] loop0: lost filesystem error report for type 5 error -28 [ 299.250237][T10169] EXT4-fs (loop0): 1 truncate cleaned up [ 299.284990][T10169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 300.008779][T10169] tipc: Enabling of bearer rejected, already enabled [ 300.115761][T10169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1774'. [ 300.122913][T10229] xt_hashlimit: size too large, truncated to 1048576 [ 300.130122][T10174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1774'. [ 300.186624][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.191157][T10233] netlink: 'syz.2.1787': attribute type 3 has an invalid length. [ 300.191175][T10233] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 300.191188][T10233] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1787'. [ 300.410335][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1790'. [ 300.707211][T10250] loop0: detected capacity change from 0 to 1024 [ 300.715974][T10250] EXT4-fs: Ignoring removed orlov option [ 300.744259][T10250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.910582][T10258] loop4: detected capacity change from 0 to 512 [ 301.291520][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.390040][T10271] FAULT_INJECTION: forcing a failure. [ 301.390040][T10271] name failslab, interval 1, probability 0, space 0, times 0 [ 301.390082][T10271] CPU: 1 UID: 0 PID: 10271 Comm: syz.4.1798 Not tainted syzkaller #0 PREEMPT(lazy) [ 301.390266][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.390283][T10271] Call Trace: [ 301.390292][T10271] [ 301.390302][T10271] __dump_stack+0x1d/0x30 [ 301.390334][T10271] dump_stack_lvl+0x95/0xd0 [ 301.390364][T10271] dump_stack+0x15/0x1b [ 301.390397][T10271] should_fail_ex+0x262/0x280 [ 301.390421][T10271] ? sctp_datamsg_from_user+0x54/0x940 [ 301.390451][T10271] should_failslab+0x8c/0xb0 [ 301.390563][T10271] __kmalloc_cache_noprof+0x7a/0x400 [ 301.390594][T10271] ? sctp_datamsg_from_user+0x54/0x940 [ 301.390619][T10271] sctp_datamsg_from_user+0x54/0x940 [ 301.390665][T10271] ? __sk_mem_raise_allocated+0x1cc/0x960 [ 301.390692][T10271] ? __sk_mem_schedule+0x80/0xc0 [ 301.390720][T10271] sctp_sendmsg_to_asoc+0xa04/0xed0 [ 301.390794][T10271] ? __rcu_read_unlock+0x4e/0x70 [ 301.390858][T10271] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 301.390895][T10271] sctp_sendmsg+0x1350/0x1d00 [ 301.390958][T10271] ? __pfx_sctp_sendmsg+0x10/0x10 [ 301.391002][T10271] ? __pfx_inet_sendmsg+0x10/0x10 [ 301.391024][T10271] inet_sendmsg+0xc5/0xd0 [ 301.391048][T10271] sock_sendmsg+0x1b9/0x220 [ 301.391155][T10271] splice_to_socket+0x6e7/0xa40 [ 301.391261][T10271] ? rw_verify_area+0x8d/0x160 [ 301.391288][T10271] ? __pfx_splice_to_socket+0x10/0x10 [ 301.391367][T10271] do_splice+0x92c/0x1050 [ 301.391393][T10271] ? __rcu_read_unlock+0x4e/0x70 [ 301.391429][T10271] ? __fget_files+0x184/0x1c0 [ 301.391476][T10271] __se_sys_splice+0x26c/0x3a0 [ 301.391505][T10271] __x64_sys_splice+0x78/0x90 [ 301.391574][T10271] x64_sys_call+0x1797/0x2550 [ 301.391607][T10271] do_syscall_64+0x112/0x360 [ 301.391750][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.391775][T10271] RIP: 0033:0x7fe4479fe159 [ 301.391797][T10271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.391882][T10271] RSP: 002b:00007fe446436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 301.391917][T10271] RAX: ffffffffffffffda RBX: 00007fe447c86090 RCX: 00007fe4479fe159 [ 301.391937][T10271] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000008 [ 301.391954][T10271] RBP: 00007fe447a9503b R08: 000000000000ffff R09: 0000000000000002 [ 301.391971][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.392015][T10271] R13: 00007fe447c86128 R14: 00007fe447c86090 R15: 00007ffd284d0ee8 [ 301.392039][T10271] [ 303.818068][T10314] loop2: detected capacity change from 0 to 1024 [ 303.821511][T10314] EXT4-fs: Ignoring removed orlov option [ 303.830921][T10314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.755110][T10329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1811'. [ 304.828826][T10329] macvlan16: left promiscuous mode [ 304.830432][T10329] macvlan17: left promiscuous mode [ 304.936802][T10329] loop3: detected capacity change from 0 to 512 [ 304.940219][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1812'. [ 305.118213][T10329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.118309][T10329] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.354104][T10317] loop0: detected capacity change from 0 to 512 [ 306.028522][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.119164][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.207216][T10350] macvlan16: entered promiscuous mode [ 306.228140][T10352] netlink: 'syz.1.1816': attribute type 3 has an invalid length. [ 306.228163][T10352] netlink: 'syz.1.1816': attribute type 1 has an invalid length. [ 306.228196][T10352] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1816'. [ 306.242447][T10351] loop2: detected capacity change from 0 to 512 [ 306.567347][T10360] xt_hashlimit: size too large, truncated to 1048576 [ 306.823039][T10369] loop4: detected capacity change from 0 to 1024 [ 306.831550][T10369] EXT4-fs: Ignoring removed orlov option [ 306.844466][T10369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.424973][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.087757][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1830'. [ 308.154720][T10401] loop0: detected capacity change from 0 to 512 [ 308.279138][T10408] xt_hashlimit: size too large, truncated to 1048576 [ 309.270692][T10424] loop1: detected capacity change from 0 to 512 [ 309.281766][T10424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.281881][T10424] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.543117][T10439] netlink: 'syz.4.1839': attribute type 3 has an invalid length. [ 309.543146][T10439] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 309.543165][T10439] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1839'. [ 309.611696][T10440] macvlan19: left promiscuous mode [ 309.921463][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.106657][T10449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1842'. [ 310.192830][T10457] netlink: 'syz.2.1843': attribute type 3 has an invalid length. [ 310.192870][T10457] netlink: 'syz.2.1843': attribute type 1 has an invalid length. [ 310.192944][T10457] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1843'. [ 311.148929][T10471] xt_hashlimit: size too large, truncated to 1048576 [ 311.183389][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1848'. [ 311.213576][T10472] loop1: detected capacity change from 0 to 512 [ 311.336999][T10453] loop3: detected capacity change from 0 to 512 [ 311.356724][T10453] EXT4-fs: Ignoring removed i_version option [ 311.445527][T10453] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.508791][T10453] EXT4-fs (loop3): orphan cleanup on readonly fs [ 311.536076][T10453] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 311.552284][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 311.552310][ C0] EXT4-fs (loop3): initial error at time 1788923093: ext4_mb_generate_buddy:1317 [ 311.552364][ C0] EXT4-fs (loop3): last error at time 1788923093: ext4_mb_generate_buddy:1317 [ 311.601080][T10453] Quota error (device loop3): write_blk: dquota write failed [ 311.609813][T10453] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 311.643654][T10453] Quota error (device loop3): write_blk: dquota write failed [ 311.645134][T10453] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 311.664625][T10453] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1844: Failed to acquire dquot type 1 [ 311.664816][T10453] loop3: lost filesystem error report for type 5 error -28 [ 311.709918][T10453] EXT4-fs (loop3): 1 truncate cleaned up [ 311.775199][T10453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.985889][T10490] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1844'. [ 312.073398][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1844'. [ 312.176539][T10498] loop0: detected capacity change from 0 to 512 [ 312.195699][T10498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.195840][T10498] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.482805][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.648575][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1857'. [ 312.898569][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.916352][T10523] netlink: 'syz.4.1859': attribute type 3 has an invalid length. [ 312.916450][T10523] netlink: 'syz.4.1859': attribute type 1 has an invalid length. [ 312.916468][T10523] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1859'. [ 312.939423][T10526] xt_hashlimit: size too large, truncated to 1048576 [ 313.026691][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1861'. [ 313.073884][T10534] netlink: 'syz.0.1860': attribute type 3 has an invalid length. [ 313.073902][T10534] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 313.073926][T10534] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1860'. [ 313.117304][T10531] loop1: detected capacity change from 0 to 512 [ 314.698707][T10550] loop3: detected capacity change from 0 to 512 [ 314.833467][T10550] EXT4-fs: Ignoring removed i_version option [ 314.871756][T10550] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.920583][T10550] EXT4-fs (loop3): orphan cleanup on readonly fs [ 314.961010][T10550] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 314.975678][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 314.975698][ C1] EXT4-fs (loop3): initial error at time 1788923096: ext4_mb_generate_buddy:1317 [ 314.975731][ C1] EXT4-fs (loop3): last error at time 1788923096: ext4_mb_generate_buddy:1317 [ 315.006250][T10550] Quota error (device loop3): write_blk: dquota write failed [ 315.015173][T10550] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 315.027393][T10550] Quota error (device loop3): write_blk: dquota write failed [ 315.036210][T10550] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 315.049278][T10550] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1867: Failed to acquire dquot type 1 [ 315.049449][T10550] loop3: lost filesystem error report for type 5 error -28 [ 315.071076][T10550] EXT4-fs (loop3): 1 truncate cleaned up [ 315.617531][T10579] loop2: detected capacity change from 0 to 512 [ 315.647555][T10550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.661719][T10579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.661809][T10579] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.720246][T10587] xt_hashlimit: size too large, truncated to 1048576 [ 315.945186][T10599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1867'. [ 315.945568][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'. [ 315.955011][T10598] loop4: detected capacity change from 0 to 512 [ 315.978169][T10550] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1867'. [ 316.049852][T10602] netlink: 'syz.0.1877': attribute type 3 has an invalid length. [ 316.049879][T10602] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 316.049902][T10602] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1877'. [ 316.086146][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.232377][T10608] netlink: 'syz.3.1878': attribute type 3 has an invalid length. [ 316.232432][T10608] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 316.232475][T10608] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1878'. [ 316.522875][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.109379][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1883'. [ 318.142760][T10646] loop1: detected capacity change from 0 to 1024 [ 318.166691][T10646] EXT4-fs: Ignoring removed orlov option [ 318.187411][T10647] loop2: detected capacity change from 0 to 512 [ 318.203628][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1891'. [ 318.218046][T10647] EXT4-fs: Ignoring removed i_version option [ 318.225277][T10647] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 318.245523][T10651] loop3: detected capacity change from 0 to 512 [ 318.258572][T10646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.277641][T10647] EXT4-fs (loop2): orphan cleanup on readonly fs [ 318.288613][T10647] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 318.288924][T10647] Quota error (device loop2): write_blk: dquota write failed [ 318.288953][T10647] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 318.289013][T10647] Quota error (device loop2): write_blk: dquota write failed [ 318.289071][T10647] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 318.289116][T10647] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1889: Failed to acquire dquot type 1 [ 318.289155][T10647] loop2: lost filesystem error report for type 5 error -28 [ 318.303435][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 318.303490][ C0] EXT4-fs (loop2): initial error at time 1788923100: ext4_mb_generate_buddy:1317 [ 318.303513][ C0] EXT4-fs (loop2): last error at time 1788923100: ext4_acquire_dquot:7069 [ 318.371318][T10647] EXT4-fs (loop2): 1 truncate cleaned up [ 318.405854][T10647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.652260][T10647] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1889'. [ 318.712266][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1889'. [ 318.840093][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1894'. [ 318.860501][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.916621][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.063395][T10686] netlink: 'syz.3.1897': attribute type 3 has an invalid length. [ 319.063421][T10686] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 320.681509][T10711] macvlan16: left promiscuous mode [ 321.427276][T10726] loop2: detected capacity change from 0 to 512 [ 321.427723][T10726] EXT4-fs: Ignoring removed i_version option [ 321.433869][T10726] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 321.435255][T10726] EXT4-fs (loop2): orphan cleanup on readonly fs [ 321.436408][T10726] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 321.436490][T10726] Quota error (device loop2): write_blk: dquota write failed [ 321.436504][T10726] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 321.436580][T10726] Quota error (device loop2): write_blk: dquota write failed [ 321.436608][T10726] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 321.436651][T10726] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1906: Failed to acquire dquot type 1 [ 321.436736][T10726] loop2: lost filesystem error report for type 5 error -28 [ 321.437496][T10726] EXT4-fs (loop2): 1 truncate cleaned up [ 321.438949][T10726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.591817][T10727] __nla_validate_parse: 2 callbacks suppressed [ 321.591844][T10727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1906'. [ 321.606788][T10726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1906'. [ 321.695694][T10733] loop4: detected capacity change from 0 to 2048 [ 321.711346][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.741367][T10737] xt_hashlimit: size too large, truncated to 1048576 [ 321.748699][T10733] Alternate GPT is invalid, using primary GPT. [ 321.748937][T10733] loop4: p2 p3 p7 [ 321.823028][T10725] loop3: detected capacity change from 0 to 512 [ 322.004841][T10749] FAULT_INJECTION: forcing a failure. [ 322.004841][T10749] name failslab, interval 1, probability 0, space 0, times 0 [ 322.004881][T10749] CPU: 1 UID: 0 PID: 10749 Comm: syz.4.1913 Not tainted syzkaller #0 PREEMPT(lazy) [ 322.004932][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.004948][T10749] Call Trace: [ 322.004956][T10749] [ 322.004965][T10749] __dump_stack+0x1d/0x30 [ 322.005069][T10749] dump_stack_lvl+0x95/0xd0 [ 322.005097][T10749] dump_stack+0x15/0x1b [ 322.005221][T10749] should_fail_ex+0x262/0x280 [ 322.005245][T10749] ? _sctp_make_chunk+0xbf/0x210 [ 322.005277][T10749] should_failslab+0x8c/0xb0 [ 322.005353][T10749] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 322.005433][T10749] ? _sctp_make_chunk+0xbf/0x210 [ 322.005463][T10749] _sctp_make_chunk+0xbf/0x210 [ 322.005492][T10749] sctp_make_datafrag_empty+0xaf/0x130 [ 322.005521][T10749] sctp_datamsg_from_user+0x56d/0x940 [ 322.005651][T10749] sctp_sendmsg_to_asoc+0xa04/0xed0 [ 322.005684][T10749] ? __rcu_read_unlock+0x4e/0x70 [ 322.005721][T10749] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 322.005753][T10749] sctp_sendmsg+0x1350/0x1d00 [ 322.005813][T10749] ? __pfx_sctp_sendmsg+0x10/0x10 [ 322.005842][T10749] ? __pfx_inet_sendmsg+0x10/0x10 [ 322.005866][T10749] inet_sendmsg+0xc5/0xd0 [ 322.005889][T10749] sock_sendmsg+0x1b9/0x220 [ 322.005998][T10749] splice_to_socket+0x6e7/0xa40 [ 322.006117][T10749] ? rw_verify_area+0x8d/0x160 [ 322.006147][T10749] ? __pfx_splice_to_socket+0x10/0x10 [ 322.006192][T10749] do_splice+0x92c/0x1050 [ 322.006226][T10749] ? __rcu_read_unlock+0x4e/0x70 [ 322.006291][T10749] ? __fget_files+0x184/0x1c0 [ 322.006316][T10749] __se_sys_splice+0x26c/0x3a0 [ 322.006412][T10749] __x64_sys_splice+0x78/0x90 [ 322.006435][T10749] x64_sys_call+0x1797/0x2550 [ 322.006463][T10749] do_syscall_64+0x112/0x360 [ 322.006557][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.006582][T10749] RIP: 0033:0x7fe4479fe159 [ 322.006601][T10749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.006620][T10749] RSP: 002b:00007fe446436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 322.006721][T10749] RAX: ffffffffffffffda RBX: 00007fe447c86090 RCX: 00007fe4479fe159 [ 322.006769][T10749] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000008 [ 322.006784][T10749] RBP: 00007fe447a9503b R08: 000000000000ffff R09: 0000000000000002 [ 322.006800][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.006884][T10749] R13: 00007fe447c86128 R14: 00007fe447c86090 R15: 00007ffd284d0ee8 [ 322.006903][T10749] [ 322.021879][T10740] xt_hashlimit: size too large, truncated to 1048576 [ 322.106140][T10752] netlink: 'syz.1.1914': attribute type 3 has an invalid length. [ 322.106161][T10752] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 322.106173][T10752] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1914'. [ 324.538455][T10788] loop0: detected capacity change from 0 to 2048 [ 324.555677][T10789] loop1: detected capacity change from 0 to 2048 [ 324.618077][T10785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1922'. [ 324.661731][T10789] Alternate GPT is invalid, using primary GPT. [ 324.662027][T10789] loop1: p2 p3 p7 [ 324.683858][T10788] loop0: detected capacity change from 0 to 4096 [ 324.708524][T10788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.776099][T10800] xt_hashlimit: size too large, truncated to 1048576 [ 324.802642][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.345841][T10794] loop4: detected capacity change from 0 to 512 [ 325.577278][T10820] netlink: 'syz.2.1929': attribute type 3 has an invalid length. [ 325.577302][T10820] netlink: 'syz.2.1929': attribute type 1 has an invalid length. [ 325.577331][T10820] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1929'. [ 325.972103][T10807] loop0: detected capacity change from 0 to 512 [ 326.044880][T10807] EXT4-fs: Ignoring removed i_version option [ 326.064211][T10807] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.229423][T10807] EXT4-fs (loop0): orphan cleanup on readonly fs [ 326.249364][T10826] loop1: detected capacity change from 0 to 512 [ 326.359917][T10830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1932'. [ 326.562199][T10826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.562421][T10826] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.721937][T10807] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 326.736747][T10807] Quota error (device loop0): write_blk: dquota write failed [ 326.736775][T10807] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 326.736810][T10807] Quota error (device loop0): write_blk: dquota write failed [ 326.736842][T10807] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 326.736870][T10807] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1927: Failed to acquire dquot type 1 [ 326.736903][T10807] loop0: lost filesystem error report for type 5 error -28 [ 326.742026][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 326.742054][ C0] EXT4-fs (loop0): initial error at time 1788923108: ext4_mb_generate_buddy:1317 [ 326.742084][ C0] EXT4-fs (loop0): last error at time 1788923108: ext4_acquire_dquot:7069 [ 326.750329][T10807] EXT4-fs (loop0): 1 truncate cleaned up [ 326.861755][T10807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.005077][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.376940][T10848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1936'. [ 327.585159][T10809] tipc: Enabling of bearer rejected, already enabled [ 327.649583][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1927'. [ 327.704055][T10809] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1927'. [ 327.820677][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.862869][T10854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1937'. [ 327.895444][T10857] loop4: detected capacity change from 0 to 2048 [ 327.980469][T10857] loop4: detected capacity change from 0 to 4096 [ 328.034895][T10857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.275787][T10865] loop3: detected capacity change from 0 to 2048 [ 328.322927][T10867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1938'. [ 328.331338][T10867] loop0: detected capacity change from 0 to 512 [ 328.674153][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.695869][T10867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.695942][T10867] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.915928][T10887] netlink: 'syz.2.1945': attribute type 3 has an invalid length. [ 328.915983][T10887] netlink: 'syz.2.1945': attribute type 1 has an invalid length. [ 328.916062][T10887] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1945'. [ 329.470967][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.357909][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1953'. [ 333.786900][T10917] netlink: 'syz.0.1955': attribute type 3 has an invalid length. [ 333.786929][T10917] netlink: 'syz.0.1955': attribute type 1 has an invalid length. [ 333.786947][T10917] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1955'. [ 334.425726][T10919] loop3: detected capacity change from 0 to 2048 [ 334.487666][T10919] loop3: detected capacity change from 0 to 4096 [ 334.500380][T10919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.531162][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.508035][T10942] netlink: 'syz.0.1963': attribute type 3 has an invalid length. [ 337.508061][T10942] netlink: 'syz.0.1963': attribute type 1 has an invalid length. [ 337.508077][T10942] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1963'. [ 338.403221][T10954] netlink: 'syz.2.1966': attribute type 3 has an invalid length. [ 338.403246][T10954] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1966'. [ 339.631936][T10992] loop4: detected capacity change from 0 to 1024 [ 339.639053][T10992] EXT4-fs: Ignoring removed orlov option [ 339.659058][T10931] loop3: detected capacity change from 0 to 512 [ 339.660141][T10992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.703190][T10931] EXT4-fs: Ignoring removed i_version option [ 339.729931][T10997] netlink: 'syz.0.1978': attribute type 3 has an invalid length. [ 339.729956][T10997] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 339.729997][T10997] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1978'. [ 340.240117][T10931] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 340.263735][T10931] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 340.283716][T10931] EXT4-fs: failed to create workqueue [ 340.283802][T10931] EXT4-fs (loop3): mount failed [ 340.508372][T11003] macvlan13: entered promiscuous mode [ 341.393538][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.640466][T11052] loop0: detected capacity change from 0 to 1024 [ 342.649817][T11052] EXT4-fs: Ignoring removed orlov option [ 342.676292][T11052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.368791][T11049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1991'. [ 343.481343][T11061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1992'. [ 343.556894][T11061] macvlan13: left promiscuous mode [ 343.940454][T11074] xt_hashlimit: size too large, truncated to 1048576 [ 344.245904][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.788007][T11088] netlink: 'syz.0.2001': attribute type 3 has an invalid length. [ 344.788042][T11088] netlink: 'syz.0.2001': attribute type 1 has an invalid length. [ 344.788066][T11088] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2001'. [ 345.699001][T11103] loop1: detected capacity change from 0 to 2048 [ 345.767180][T11103] loop1: detected capacity change from 0 to 4096 [ 345.786465][T11103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.817637][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.267728][T11122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2009'. [ 346.402052][T11120] loop0: detected capacity change from 0 to 1024 [ 346.413713][T11120] EXT4-fs: Ignoring removed orlov option [ 346.519297][T11120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.172609][T11142] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2010'. [ 347.279552][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.572855][T11138] xt_hashlimit: size too large, truncated to 1048576 [ 347.815449][T11155] loop1: detected capacity change from 0 to 1024 [ 347.818283][T11155] EXT4-fs: Ignoring removed orlov option [ 347.832431][T11155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.004475][T11161] loop4: detected capacity change from 0 to 2048 [ 348.157203][T11161] loop4: detected capacity change from 0 to 4096 [ 348.182446][T11161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.238773][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.250615][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.272903][T11175] loop0: detected capacity change from 0 to 1024 [ 348.273337][T11175] EXT4-fs: Ignoring removed orlov option [ 348.281048][T11174] macvlan23: entered promiscuous mode [ 348.317148][T11175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.540501][T11182] loop1: detected capacity change from 0 to 512 [ 348.542481][T11182] EXT4-fs: Ignoring removed i_version option [ 348.575096][T11182] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.651270][T11193] macvlan24: entered promiscuous mode [ 348.829583][T11182] EXT4-fs (loop1): orphan cleanup on readonly fs [ 348.836634][T11182] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 348.836853][T11182] Quota error (device loop1): write_blk: dquota write failed [ 348.836873][T11182] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 348.836970][T11182] Quota error (device loop1): write_blk: dquota write failed [ 348.836997][T11182] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 348.837075][T11182] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.2022: Failed to acquire dquot type 1 [ 348.837098][T11182] loop1: lost filesystem error report for type 5 error -28 [ 348.846987][T11182] EXT4-fs (loop1): 1 truncate cleaned up [ 348.851265][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 348.851291][ C0] EXT4-fs (loop1): initial error at time 1788923130: ext4_mb_generate_buddy:1317 [ 348.851321][ C0] EXT4-fs (loop1): last error at time 1788923130: ext4_acquire_dquot:7069 [ 349.201424][T11198] xt_hashlimit: size too large, truncated to 1048576 [ 349.450409][T11182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.451962][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.586445][T11211] loop3: detected capacity change from 0 to 1024 [ 349.586907][T11211] EXT4-fs: Ignoring removed orlov option [ 349.589861][T11182] tipc: Enabling of bearer rejected, failed to enable media [ 349.626627][T11211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.679266][T11182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2022'. [ 349.691952][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.726980][T11221] loop0: detected capacity change from 0 to 2048 [ 349.788481][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.838891][T11232] EXT4-fs: Ignoring removed orlov option [ 349.865005][T11232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.750727][T11252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2040'. [ 350.753879][T11252] set_capacity_and_notify: 1 callbacks suppressed [ 350.753907][T11252] loop4: detected capacity change from 0 to 512 [ 350.982177][T11252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.982252][T11252] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.988193][T11250] loop0: detected capacity change from 0 to 512 [ 350.988590][T11250] ext4: Unknown parameter 'gr' [ 351.023861][T11257] loop3: detected capacity change from 0 to 1024 [ 351.026190][T11257] EXT4-fs: Ignoring removed orlov option [ 351.036467][T11257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.070629][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.087171][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.130940][T11264] loop3: detected capacity change from 0 to 2048 [ 351.240757][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.246877][T11269] xt_hashlimit: size too large, truncated to 1048576 [ 351.828591][T11273] loop1: detected capacity change from 0 to 512 [ 351.993750][T11273] EXT4-fs: Ignoring removed i_version option [ 352.032591][T11273] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 352.052248][T11273] EXT4-fs (loop1): orphan cleanup on readonly fs [ 352.084677][T11273] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 352.094946][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 352.094994][ C1] EXT4-fs (loop1): initial error at time 1788923133: ext4_mb_generate_buddy:1317 [ 352.095033][ C1] EXT4-fs (loop1): last error at time 1788923133: ext4_mb_generate_buddy:1317 [ 352.104675][T11273] Quota error (device loop1): write_blk: dquota write failed [ 352.107117][T11273] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 352.111886][T11273] Quota error (device loop1): write_blk: dquota write failed [ 352.176391][T11273] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 352.177776][T11273] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.2050: Failed to acquire dquot type 1 [ 352.181631][T11273] loop1: lost filesystem error report for type 5 error -28 [ 352.271503][T11273] EXT4-fs (loop1): 1 truncate cleaned up [ 352.697507][T11273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.731006][T11297] loop4: detected capacity change from 0 to 1024 [ 352.741313][T11297] EXT4-fs: Ignoring removed orlov option [ 352.767866][T11297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.828069][T11303] loop0: detected capacity change from 0 to 1024 [ 352.830510][T11303] EXT4-fs: Ignoring removed orlov option [ 352.836488][T11303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.892574][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2050'. [ 352.945225][T11313] xt_hashlimit: size too large, truncated to 1048576 [ 352.956642][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.967545][T11309] loop2: detected capacity change from 0 to 2048 [ 353.011834][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.022388][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.382527][T11337] loop0: detected capacity change from 0 to 512 [ 353.439244][T11337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.439339][T11337] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.768575][T11346] macvlan17: entered promiscuous mode [ 354.028729][T11351] loop4: detected capacity change from 0 to 1024 [ 354.050235][T11351] EXT4-fs: Ignoring removed orlov option [ 354.127997][T11351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.369778][T11357] EXT4-fs: Ignoring removed orlov option [ 354.389399][T11357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.559253][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.590370][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.794775][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.831593][T11369] EXT4-fs: Ignoring removed i_version option [ 355.873962][T11369] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 355.920026][T11405] set_capacity_and_notify: 3 callbacks suppressed [ 355.920066][T11405] loop2: detected capacity change from 0 to 1024 [ 355.920547][T11405] EXT4-fs: Ignoring removed orlov option [ 355.933736][T11369] EXT4-fs (loop0): orphan cleanup on readonly fs [ 355.949782][T11369] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 355.959416][T11369] Quota error (device loop0): write_blk: dquota write failed [ 355.959705][T11369] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 355.961004][T11369] Quota error (device loop0): write_blk: dquota write failed [ 355.961116][T11369] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 355.961140][T11369] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.2073: Failed to acquire dquot type 1 [ 355.961164][T11369] loop0: lost filesystem error report for type 5 error -28 [ 355.961545][T11369] EXT4-fs (loop0): 1 truncate cleaned up [ 355.965592][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 355.966253][ C1] EXT4-fs (loop0): initial error at time 1788923137: ext4_mb_generate_buddy:1317 [ 355.966492][ C1] EXT4-fs (loop0): last error at time 1788923137: ext4_acquire_dquot:7069 [ 355.982509][T11369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 356.013379][T11405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.077727][T11410] netlink: 'syz.1.2083': attribute type 3 has an invalid length. [ 356.077747][T11410] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 356.077760][T11410] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2083'. [ 356.220660][T11376] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2073'. [ 356.639911][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.825131][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.962612][T11423] loop2: detected capacity change from 0 to 1024 [ 356.963009][T11423] EXT4-fs: Ignoring removed orlov option [ 356.978616][T11423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.371161][T11430] loop0: detected capacity change from 0 to 2048 [ 357.432645][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.656557][T11444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2093'. [ 357.800033][T11449] loop3: detected capacity change from 0 to 2048 [ 357.902091][T11449] loop3: detected capacity change from 0 to 4096 [ 357.921153][T11449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.992341][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.219824][T11462] loop4: detected capacity change from 0 to 1024 [ 358.226749][T11462] EXT4-fs: Ignoring removed orlov option [ 358.252775][T11463] loop1: detected capacity change from 0 to 512 [ 358.254691][T11463] EXT4-fs: Ignoring removed i_version option [ 358.267656][T11463] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 358.270400][T11462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.270920][T11463] EXT4-fs (loop1): orphan cleanup on readonly fs [ 358.273211][T11463] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 358.273283][T11463] Quota error (device loop1): write_blk: dquota write failed [ 358.273334][T11463] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 358.273359][T11463] Quota error (device loop1): write_blk: dquota write failed [ 358.273381][T11463] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 358.273404][T11463] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.2098: Failed to acquire dquot type 1 [ 358.273452][T11463] loop1: lost filesystem error report for type 5 error -28 [ 358.275634][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 358.275655][ C0] EXT4-fs (loop1): initial error at time 1788923140: ext4_mb_generate_buddy:1317 [ 358.275692][ C0] EXT4-fs (loop1): last error at time 1788923140: ext4_acquire_dquot:7069 [ 358.276171][T11463] EXT4-fs (loop1): 1 truncate cleaned up [ 358.276710][T11463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.375005][T11459] tipc: Enabling of bearer rejected, failed to enable media [ 358.521073][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2098'. [ 358.728484][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.203829][T11477] loop1: detected capacity change from 0 to 512 [ 359.289483][T11477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.289655][T11477] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.730651][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.784190][T11483] loop0: detected capacity change from 0 to 1024 [ 359.784684][T11483] EXT4-fs: Ignoring removed orlov option [ 359.798275][T11485] loop4: detected capacity change from 0 to 1024 [ 359.798587][T11485] EXT4-fs: Ignoring removed orlov option [ 359.817738][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.819522][T11485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.825379][T11483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.038312][T11499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2106'. [ 360.937064][T11511] macvlan23: left promiscuous mode [ 360.938961][T11511] macvlan24: left promiscuous mode [ 361.193549][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.208814][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.528868][T11523] loop1: detected capacity change from 0 to 512 [ 361.949694][T11523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.949809][T11523] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.038326][T11531] loop3: detected capacity change from 0 to 1024 [ 362.038767][T11531] EXT4-fs: Ignoring removed orlov option [ 362.063476][T11531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.173081][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.277938][T11536] macvlan25: entered promiscuous mode [ 362.380610][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2117'. [ 362.756448][T11552] loop0: detected capacity change from 0 to 1024 [ 362.757650][T11552] EXT4-fs: Ignoring removed orlov option [ 362.809261][T11552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.003930][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2120'. [ 363.012337][T11560] loop1: detected capacity change from 0 to 512 [ 363.162442][T11560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.162598][T11560] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.538360][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.538887][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.673732][T11576] macvlan26: entered promiscuous mode [ 363.677932][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2124'. [ 363.739787][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.823308][T11580] macvlan18: entered promiscuous mode [ 364.541531][T11592] macvlan20: entered promiscuous mode [ 364.707782][T11573] loop3: detected capacity change from 0 to 512 [ 364.881761][T11601] loop4: detected capacity change from 0 to 1024 [ 364.882190][T11601] EXT4-fs: Ignoring removed orlov option [ 364.994869][T11601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.347462][T11617] loop2: detected capacity change from 0 to 512 [ 365.573673][T11617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.573956][T11617] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.351743][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.361684][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.437035][T11632] macvlan19: entered promiscuous mode [ 366.513213][T11637] macvlan21: entered promiscuous mode [ 366.733342][T11641] loop2: detected capacity change from 0 to 1024 [ 366.741796][T11641] EXT4-fs: Ignoring removed orlov option [ 367.479826][T11657] macvlan18: entered promiscuous mode [ 369.051247][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2153'. [ 369.439104][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'. [ 370.083497][T11705] loop2: detected capacity change from 0 to 512 [ 370.665577][T11721] loop0: detected capacity change from 0 to 512 [ 370.792778][T11721] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.358079][T11732] loop4: detected capacity change from 0 to 512 [ 371.535606][T11735] macvlan14: entered promiscuous mode [ 371.690871][T11732] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.774602][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2169'. [ 372.094782][T11754] macvlan25: left promiscuous mode [ 372.096268][T11754] macvlan26: left promiscuous mode [ 372.429179][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 372.429297][T11758] netlink: 'syz.1.2171': attribute type 30 has an invalid length. [ 372.433356][T11758] vxlan0: entered promiscuous mode [ 372.437479][T11758] vxlan0: entered allmulticast mode [ 372.468377][ T99] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.468439][ T99] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.468488][ T99] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.468579][ T99] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.535912][T11764] macvlan15: entered promiscuous mode [ 372.549987][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 372.676675][T11768] loop3: detected capacity change from 0 to 512 [ 372.987923][T11775] loop0: detected capacity change from 0 to 1024 [ 372.998303][T11775] EXT4-fs: Ignoring removed orlov option [ 373.043171][T11775] EXT4-fs mount: 6 callbacks suppressed [ 373.043222][T11775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.976301][T11790] loop4: detected capacity change from 0 to 1024 [ 373.986118][T11790] EXT4-fs: Ignoring removed orlov option [ 374.156573][T11794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2180'. [ 374.157374][T11792] macvlan16: entered promiscuous mode [ 374.210359][T11790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.261147][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 374.261183][T11801] netlink: 'syz.2.2183': attribute type 30 has an invalid length. [ 374.439145][T11808] loop3: detected capacity change from 0 to 512 [ 374.699717][T11808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.700165][T11808] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.050284][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.110308][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.252526][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.256984][T11822] loop2: detected capacity change from 0 to 2048 [ 375.365148][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'. [ 375.395342][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'. [ 375.944240][T11829] loop3: detected capacity change from 0 to 512 [ 376.009457][T11840] loop2: detected capacity change from 0 to 512 [ 376.018229][T11840] EXT4-fs: Ignoring removed i_version option [ 376.027043][T11840] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 376.089573][T11840] EXT4-fs (loop2): orphan cleanup on readonly fs [ 376.097133][T11840] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 376.097286][T11840] Quota error (device loop2): write_blk: dquota write failed [ 376.097306][T11840] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 376.097333][T11840] Quota error (device loop2): write_blk: dquota write failed [ 376.097374][T11840] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 376.097409][T11840] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.2191: Failed to acquire dquot type 1 [ 376.097438][T11840] loop2: lost filesystem error report for type 5 error -28 [ 376.111665][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 376.111689][ C0] EXT4-fs (loop2): initial error at time 1788923157: ext4_mb_generate_buddy:1317 [ 376.111718][ C0] EXT4-fs (loop2): last error at time 1788923157: ext4_acquire_dquot:7069 [ 376.178751][T11828] loop1: detected capacity change from 0 to 512 [ 376.191799][T11840] EXT4-fs (loop2): 1 truncate cleaned up [ 376.199750][T11840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 376.292842][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2192'. [ 376.393691][T11831] tipc: Enabling of bearer rejected, failed to enable media [ 376.565486][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2191'. [ 376.601577][T11831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2191'. [ 376.684628][T11857] macvlan20: left promiscuous mode [ 376.685676][T11857] macvlan21: left promiscuous mode [ 376.806709][T11859] macvlan17: left promiscuous mode [ 376.808525][T11859] macvlan18: left promiscuous mode [ 376.809798][T11859] macvlan19: left promiscuous mode [ 376.853838][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.143100][T11867] macvlan17: entered promiscuous mode [ 377.587332][T11875] loop0: detected capacity change from 0 to 512 [ 377.732792][T11875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.733162][T11875] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.327430][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.387513][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2202'. [ 378.458628][T11885] loop1: detected capacity change from 0 to 2048 [ 378.639334][T11891] loop1: detected capacity change from 0 to 1024 [ 378.671642][T11891] EXT4-fs: Ignoring removed orlov option [ 378.694990][T11891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.762001][T11899] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 378.762031][T11899] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 378.762056][T11899] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2206'. [ 379.258074][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 379.506279][T11883] loop4: detected capacity change from 0 to 512 [ 379.570653][T11902] loop3: detected capacity change from 0 to 512 [ 379.696084][T11905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2208'. [ 379.745599][T11907] macvlan22: entered promiscuous mode [ 380.343877][T11918] loop2: detected capacity change from 0 to 512 [ 380.472500][T11918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.472677][T11918] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.871248][T11926] macvlan23: entered promiscuous mode [ 381.009592][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.105101][T11930] macvlan27: entered promiscuous mode [ 382.509826][T11952] macvlan27: left promiscuous mode [ 382.996000][T11959] netlink: 'syz.0.2219': attribute type 3 has an invalid length. [ 382.996031][T11959] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 382.996049][T11959] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2219'. [ 383.303427][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.401423][T11961] macvlan28: entered promiscuous mode [ 383.463356][T11964] loop4: detected capacity change from 0 to 512 [ 383.483856][T11964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.484096][T11964] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.125528][T11986] netlink: 'syz.2.2227': attribute type 3 has an invalid length. [ 384.125611][T11986] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2227'. [ 384.284151][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.480476][T11991] macvlan18: entered promiscuous mode [ 384.543957][T11994] macvlan19: entered promiscuous mode [ 384.618007][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 384.626129][T11996] loop4: detected capacity change from 0 to 512 [ 384.632678][T11998] loop0: detected capacity change from 0 to 1024 [ 384.634523][T11998] EXT4-fs: Ignoring removed orlov option [ 384.654787][T11998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.060836][T12012] netlink: 'syz.2.2234': attribute type 3 has an invalid length. [ 385.060870][T12012] netlink: 'syz.2.2234': attribute type 1 has an invalid length. [ 385.060889][T12012] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2234'. [ 385.203296][T12014] macvlan19: entered promiscuous mode [ 385.466225][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.719255][T12022] loop3: detected capacity change from 0 to 1024 [ 385.726330][T12022] EXT4-fs: Ignoring removed orlov option [ 385.735964][T12023] loop0: detected capacity change from 0 to 512 [ 385.776376][T12022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.790324][T12023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.790483][T12023] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.869901][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.278341][T12048] netlink: 'syz.3.2243': attribute type 3 has an invalid length. [ 386.278439][T12048] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2243'. [ 386.778260][T12049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2242'. [ 386.884558][T12049] macvlan28: left promiscuous mode [ 387.204473][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 387.342590][T12056] loop1: detected capacity change from 0 to 512 [ 387.359294][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.413389][T12060] macvlan20: entered promiscuous mode [ 387.502156][T12065] loop2: detected capacity change from 0 to 512 [ 387.509895][T12065] EXT4-fs: Ignoring removed i_version option [ 387.526013][T12065] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 387.539656][T12065] EXT4-fs (loop2): orphan cleanup on readonly fs [ 387.540196][T12065] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 387.540317][T12065] Quota error (device loop2): write_blk: dquota write failed [ 387.540332][T12065] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 387.540356][T12065] Quota error (device loop2): write_blk: dquota write failed [ 387.540420][T12065] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 387.540442][T12065] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.2246: Failed to acquire dquot type 1 [ 387.540465][T12065] loop2: lost filesystem error report for type 5 error -28 [ 387.548954][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 387.548982][ C0] EXT4-fs (loop2): initial error at time 1788923169: ext4_mb_generate_buddy:1317 [ 387.549015][ C0] EXT4-fs (loop2): last error at time 1788923169: ext4_acquire_dquot:7069 [ 387.566912][T12065] EXT4-fs (loop2): 1 truncate cleaned up [ 387.567805][T12065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.662094][T12075] xt_hashlimit: size too large, truncated to 1048576 [ 387.799973][T12065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2246'. [ 387.811742][T12080] macvlan20: entered promiscuous mode [ 388.353131][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.384347][T12092] loop2: detected capacity change from 0 to 1024 [ 388.384740][T12092] EXT4-fs: Ignoring removed orlov option [ 388.411963][T12092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.713655][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.803315][T12104] macvlan20: left promiscuous mode [ 388.949802][T12111] loop3: detected capacity change from 0 to 512 [ 389.047597][T12111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.047874][T12111] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.109766][T12113] loop2: detected capacity change from 0 to 512 [ 389.134013][T12113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.147198][T12113] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.365226][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 389.464326][T12122] loop1: detected capacity change from 0 to 512 [ 389.543936][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.439516][T12141] netlink: 'syz.0.2264': attribute type 3 has an invalid length. [ 390.439931][T12141] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 390.439950][T12141] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2264'. [ 390.619839][T12143] macvlan20: entered promiscuous mode [ 390.683672][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.740345][T12149] loop4: detected capacity change from 0 to 1024 [ 390.740882][T12149] EXT4-fs: Ignoring removed orlov option [ 390.756959][T12149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.021243][T12167] macvlan21: entered promiscuous mode [ 392.285037][T12193] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2277'. [ 392.912477][T12203] loop0: detected capacity change from 0 to 512 [ 392.945905][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.959638][T12203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.959769][T12203] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.013711][T12210] loop4: detected capacity change from 0 to 2048 [ 393.159830][T12222] netlink: 'syz.3.2282': attribute type 3 has an invalid length. [ 393.159854][T12222] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 393.159898][T12222] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2282'. [ 393.223323][T12223] netlink: 'syz.2.2283': attribute type 3 has an invalid length. [ 393.232437][T12223] netlink: 'syz.2.2283': attribute type 1 has an invalid length. [ 393.240564][T12223] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2283'. [ 393.711449][T12222] ================================================================== [ 393.711491][T12222] BUG: KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_dispatch_rq_list [ 393.711538][T12222] [ 393.711546][T12222] read-write to 0xffff888101755ef8 of 4 bytes by task 2943 on cpu 1: [ 393.711567][T12222] blk_mq_dispatch_rq_list+0xc3e/0xef0 [ 393.711595][T12222] __blk_mq_sched_dispatch_requests+0x86c/0xce0 [ 393.711623][T12222] blk_mq_sched_dispatch_requests+0x86/0x120 [ 393.711656][T12222] blk_mq_run_work_fn+0x66/0xe0 [ 393.711695][T12222] process_scheduled_works+0x56a/0xa50 [ 393.711731][T12222] worker_thread+0x569/0x750 [ 393.711767][T12222] kthread+0x223/0x270 [ 393.711791][T12222] ret_from_fork+0x146/0x330 [ 393.711821][T12222] ret_from_fork_asm+0x1a/0x30 [ 393.711846][T12222] [ 393.711853][T12222] read-write to 0xffff888101755ef8 of 4 bytes by task 12222 on cpu 0: [ 393.711870][T12222] blk_mq_dispatch_rq_list+0xc3e/0xef0 [ 393.711900][T12222] __blk_mq_sched_dispatch_requests+0x86c/0xce0 [ 393.711933][T12222] blk_mq_sched_dispatch_requests+0x86/0x120 [ 393.711960][T12222] blk_mq_run_hw_queue+0x17d/0x220 [ 393.711985][T12222] blk_mq_dispatch_list+0x83d/0x9f0 [ 393.712034][T12222] blk_mq_flush_plug_list+0x2cd/0x320 [ 393.712067][T12222] blk_add_rq_to_plug+0xe4/0x360 [ 393.712096][T12222] blk_mq_submit_bio+0xc01/0x1120 [ 393.712127][T12222] __submit_bio+0x54/0x3d0 [ 393.712159][T12222] submit_bio_noacct_nocheck+0x1c6/0x620 [ 393.712194][T12222] submit_bio_noacct+0x760/0x980 [ 393.712223][T12222] submit_bio+0x2a4/0x2c0 [ 393.712261][T12222] bio_chain_and_submit+0x84/0xb0 [ 393.712284][T12222] __blkdev_issue_zero_pages+0x1f7/0x240 [ 393.712305][T12222] blkdev_issue_zeroout+0x3a1/0x4f0 [ 393.712325][T12222] blkdev_common_ioctl+0x1a07/0x2060 [ 393.712360][T12222] blkdev_ioctl+0x31f/0x460 [ 393.712389][T12222] __se_sys_ioctl+0xce/0x140 [ 393.712416][T12222] __x64_sys_ioctl+0x43/0x50 [ 393.712445][T12222] x64_sys_call+0x239d/0x2550 [ 393.712475][T12222] do_syscall_64+0x112/0x360 [ 393.712504][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.712532][T12222] [ 393.712538][T12222] value changed: 0x00000007 -> 0x00000008 [ 393.712552][T12222] [ 393.712557][T12222] Reported by Kernel Concurrency Sanitizer on: [ 393.712570][T12222] CPU: 0 UID: 0 PID: 12222 Comm: syz.3.2282 Not tainted syzkaller #0 PREEMPT(lazy) [ 393.712602][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.712617][T12222] ================================================================== [ 393.806257][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.