last executing test programs: 2m13.60530947s ago: executing program 4 (id=305): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002001800000000000000000"], 0x0, 0x4}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b08"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x8010) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, 0x0, 0x0) write$binfmt_misc(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1000000, &(0x7f0000000880)={[], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 2m13.42352122s ago: executing program 4 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2204d, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) 2m13.350614724s ago: executing program 4 (id=310): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000b40)={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9a0311}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "0c5efd"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) (async, rerun: 32) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x81, 0x0}, @remote, @loopback, 0x6, 0x0, 0x8, 0x0, 0x6, 0x80910200}) (rerun: 32) 2m13.24641998s ago: executing program 4 (id=313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c001}, 0x24040801) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="189ef37c0000000a0000000000000004000000850000002e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffffff000008000000b70300000700000085000000060000009500000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[], 0xa0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x0, 0x24004080) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="94000000000105050000000010000000000000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c9810a50a4912565a000100000000002c00018014000300ff0200000000001000000000000000011400040000000000000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r3, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000410c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d80"], 0xa0}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth0_virt_wifi\x00', 0x3}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x61, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m13.058717182s ago: executing program 4 (id=316): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303001d0000000000000015000010"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x810) 2m12.978804876s ago: executing program 4 (id=318): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r3, &(0x7f00000059c0)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/152, 0x98}], 0x8, &(0x7f0000000700)=""/6, 0x6}, 0x4}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/59, 0x3b}], 0x2}, 0x5}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/25, 0x19}, {&(0x7f0000000940)=""/224, 0xe0}, {&(0x7f0000000a40)=""/229, 0xe5}], 0x3}, 0xc0000}, {{&(0x7f0000000b80)=@nfc_llcp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/81, 0x51}], 0x4, &(0x7f0000000ec0)=""/157, 0x9d}, 0x1000}, {{&(0x7f0000000f80)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000001000)=""/235, 0xeb}, {&(0x7f0000001100)=""/178, 0xb2}, {&(0x7f00000011c0)=""/151, 0x97}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/206, 0xce}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/59, 0x3b}], 0x7}, 0x9}, {{&(0x7f0000003440)=@tipc=@id, 0x80, &(0x7f0000004680)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/22, 0x16}, {&(0x7f0000004500)=""/111, 0x6f}, {&(0x7f0000004580)=""/222, 0xde}], 0x4, &(0x7f00000046c0)=""/5, 0x5}, 0xd127}, {{&(0x7f0000004700)=@nl=@unspec, 0x80, &(0x7f0000005880)=[{&(0x7f0000004780)=""/8, 0x8}, {&(0x7f00000047c0)=""/54, 0x36}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/72, 0x48}], 0x4, &(0x7f00000058c0)=""/244, 0xf4}, 0x383d}], 0x7, 0x40002120, &(0x7f0000005b80)) (async) recvmmsg(r3, &(0x7f00000059c0)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/152, 0x98}], 0x8, &(0x7f0000000700)=""/6, 0x6}, 0x4}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/59, 0x3b}], 0x2}, 0x5}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/25, 0x19}, {&(0x7f0000000940)=""/224, 0xe0}, {&(0x7f0000000a40)=""/229, 0xe5}], 0x3}, 0xc0000}, {{&(0x7f0000000b80)=@nfc_llcp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/81, 0x51}], 0x4, &(0x7f0000000ec0)=""/157, 0x9d}, 0x1000}, {{&(0x7f0000000f80)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000001000)=""/235, 0xeb}, {&(0x7f0000001100)=""/178, 0xb2}, {&(0x7f00000011c0)=""/151, 0x97}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/206, 0xce}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/59, 0x3b}], 0x7}, 0x9}, {{&(0x7f0000003440)=@tipc=@id, 0x80, &(0x7f0000004680)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/22, 0x16}, {&(0x7f0000004500)=""/111, 0x6f}, {&(0x7f0000004580)=""/222, 0xde}], 0x4, &(0x7f00000046c0)=""/5, 0x5}, 0xd127}, {{&(0x7f0000004700)=@nl=@unspec, 0x80, &(0x7f0000005880)=[{&(0x7f0000004780)=""/8, 0x8}, {&(0x7f00000047c0)=""/54, 0x36}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/72, 0x48}], 0x4, &(0x7f00000058c0)=""/244, 0xf4}, 0x383d}], 0x7, 0x40002120, &(0x7f0000005b80)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 2m12.930189069s ago: executing program 32 (id=318): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r3, &(0x7f00000059c0)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/152, 0x98}], 0x8, &(0x7f0000000700)=""/6, 0x6}, 0x4}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/59, 0x3b}], 0x2}, 0x5}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/25, 0x19}, {&(0x7f0000000940)=""/224, 0xe0}, {&(0x7f0000000a40)=""/229, 0xe5}], 0x3}, 0xc0000}, {{&(0x7f0000000b80)=@nfc_llcp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/81, 0x51}], 0x4, &(0x7f0000000ec0)=""/157, 0x9d}, 0x1000}, {{&(0x7f0000000f80)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000001000)=""/235, 0xeb}, {&(0x7f0000001100)=""/178, 0xb2}, {&(0x7f00000011c0)=""/151, 0x97}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/206, 0xce}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/59, 0x3b}], 0x7}, 0x9}, {{&(0x7f0000003440)=@tipc=@id, 0x80, &(0x7f0000004680)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/22, 0x16}, {&(0x7f0000004500)=""/111, 0x6f}, {&(0x7f0000004580)=""/222, 0xde}], 0x4, &(0x7f00000046c0)=""/5, 0x5}, 0xd127}, {{&(0x7f0000004700)=@nl=@unspec, 0x80, &(0x7f0000005880)=[{&(0x7f0000004780)=""/8, 0x8}, {&(0x7f00000047c0)=""/54, 0x36}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/72, 0x48}], 0x4, &(0x7f00000058c0)=""/244, 0xf4}, 0x383d}], 0x7, 0x40002120, &(0x7f0000005b80)) (async) recvmmsg(r3, &(0x7f00000059c0)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/152, 0x98}], 0x8, &(0x7f0000000700)=""/6, 0x6}, 0x4}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/59, 0x3b}], 0x2}, 0x5}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/25, 0x19}, {&(0x7f0000000940)=""/224, 0xe0}, {&(0x7f0000000a40)=""/229, 0xe5}], 0x3}, 0xc0000}, {{&(0x7f0000000b80)=@nfc_llcp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/81, 0x51}], 0x4, &(0x7f0000000ec0)=""/157, 0x9d}, 0x1000}, {{&(0x7f0000000f80)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000001000)=""/235, 0xeb}, {&(0x7f0000001100)=""/178, 0xb2}, {&(0x7f00000011c0)=""/151, 0x97}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/206, 0xce}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/59, 0x3b}], 0x7}, 0x9}, {{&(0x7f0000003440)=@tipc=@id, 0x80, &(0x7f0000004680)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/22, 0x16}, {&(0x7f0000004500)=""/111, 0x6f}, {&(0x7f0000004580)=""/222, 0xde}], 0x4, &(0x7f00000046c0)=""/5, 0x5}, 0xd127}, {{&(0x7f0000004700)=@nl=@unspec, 0x80, &(0x7f0000005880)=[{&(0x7f0000004780)=""/8, 0x8}, {&(0x7f00000047c0)=""/54, 0x36}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/72, 0x48}], 0x4, &(0x7f00000058c0)=""/244, 0xf4}, 0x383d}], 0x7, 0x40002120, &(0x7f0000005b80)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 56.073308854s ago: executing program 3 (id=609): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)={0x14, r4, 0xe29, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x60044095}, 0x24040044) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x40010) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r5, 0x200, 0x70bd2c, 0x3, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf9ea}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc8080}, 0x8001) 55.866518546s ago: executing program 3 (id=613): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001740)=')', 0x1}], 0x1) 55.7962996s ago: executing program 3 (id=614): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x29, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x7, 0x1, 0x9, 0x4, 0x6, 0x8, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0xb, 0x3, 0x3, 0x50, 0xfffffffffffffff0}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000300)=0x4, 0x4) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1000000000fe, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x30, r9, 0x1, 0x70bd25, 0x35dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x4080080) 55.768374302s ago: executing program 3 (id=617): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) 55.751558213s ago: executing program 3 (id=618): r0 = syz_clone(0x22000100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5e) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5e) syz_clone(0x6012a500, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) (async) tkill(r0, 0x9) setresgid(0x0, 0xee00, 0xffffffffffffffff) syz_clone(0x1423c091, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) (async) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x8, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1) getdents64(r3, 0x0, 0x0) getdents(r3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r6, r7/1000+10000}}, 0x0) (async) utimensat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r6, r7/1000+10000}}, 0x0) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x0, 0x2, 0x0, 0x1, r2}]) (async) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x0, 0x2, 0x0, 0x1, r2}]) rt_sigqueueinfo(0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x2, 0x0, 0xfffffff7}) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(r3, &(0x7f00000001c0)='./file0\x00', 0x20) syz_clone(0x2a000400, 0x0, 0x0, 0x0, 0x0, 0x0) 55.47238528s ago: executing program 3 (id=625): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a8e000/0x1000)=nil, 0x1000, 0x1000008, 0xc5054dee95ab75b8, 0xffffffffffffffff, 0x8000000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x18, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x48040) 40.449609188s ago: executing program 33 (id=625): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a8e000/0x1000)=nil, 0x1000, 0x1000008, 0xc5054dee95ab75b8, 0xffffffffffffffff, 0x8000000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x18, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x48040) 11.682527439s ago: executing program 5 (id=1585): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468105f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2004c000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000040040000140012800900010076657468000000000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) getdents64(r0, &(0x7f0000002040)=""/4109, 0x100d) 11.208063777s ago: executing program 5 (id=1593): setuid(0xee00) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00') exit(0x7000000000000) (async) pread64(r0, 0x0, 0x0, 0x793) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x30e, &(0x7f0000000400)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.3067137s ago: executing program 5 (id=1611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x800, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000140)=0x400, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r4 = dup3(r2, r3, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) fcntl$getflags(r1, 0x408) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x17}}, 0xc) write$binfmt_script(r5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = getpid() process_vm_readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x24, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@getpolicy={0x58, 0x15, 0x1, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x0, 0x4e24, 0x0, 0x0, 0xb0, 0x80, 0x29, 0x0, 0xee01}, 0x6e6bb3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c4}, 0x80) syz_usb_connect(0x0, 0x33, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r10, 0x40084504, 0x0) r11 = socket(0x10, 0x4, 0x2) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x1b061}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x110, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xdc, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}, @NFTA_MATCH_INFO={0xa4, 0x3, "7f5bc45b8d598cb39ac0225791ac5b4740335777571ec6e9ef5c6e9430e7deaba6589f432b1b3d4b20ab1ffb3637cf1abb0c92427a81d36923045f19627dcd98437befaf2585bec5e08df3592f687ba1ae39cab1769c01c7e5e83d51ec3d78a11b56e9741f2f9a97cff9ed78d938468058da059a65778f45b2c016358f36aee1ecbe368ad19379d6e57edd4ad2364ee471e2dba47b80f8f697f3c3ec54e08207"}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9d"}]}], {0x14}}, 0x138}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 9.662399098s ago: executing program 5 (id=1621): socket$kcm(0x21, 0x5, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffc9c, &(0x7f0000000e80)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc0000001900010000000000ffdbdf25e000000200000000000000000000000020010000000000000000000000000001000000004e2300000a00802087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xcc}}, 0x2c0008c4) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015001f0f"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}, {}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x1, 0x0, 0x8, 0x4, 0xffffffffffffffff, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xe, &(0x7f0000000080)=""/14, 0x41000, 0x10, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xd, 0x5, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000440)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x5, 0xa, 0xc}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x1, 0xb, 0x8}, {0x4, 0x5, 0xc, 0x8}, {0x4, 0x1, 0xe, 0x3}], 0x10, 0x7}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[], 0x27) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, r2, 0x4, r3}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000006c0)={0x0, 0x7, 0x5}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={r6, 0xa}, &(0x7f0000000780)=0x8) socket$kcm(0x21, 0x5, 0xa) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffc9c, &(0x7f0000000e80)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc0000001900010000000000ffdbdf25e000000200000000000000000000000020010000000000000000000000000001000000004e2300000a00802087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000004000000ffffffffffffff7f00000000000000505766520000000000000000000000000000000000000000000000000000000000f9ffffffffffffff02000000f9ffffff0400000000000000000000000000000200000000000000000000000000000000000103020000000008001f00020000000c0015005e07350005000000f20dc84587e52e1db46ff8c9c496ebd73b1d1f330ef44b2a2359ca9ec5b4d397d04136aa192c998e595ccf01e5e66d4821bcb3999b81ca8e3f03647d785976449b235ee750b31dbea5664c1ce7d7ffab6f8a50188e63bfcb8ef6cc091f4f0a57489bdc024ccd5a407acd2aa40feb57f2cc9bbb179ee3882c465acd282da311b39b06e2dee7bc18199f321a"], 0xcc}}, 0x2c0008c4) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015001f0f"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}, {}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x1, 0x0, 0x8, 0x4, 0xffffffffffffffff, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xe, &(0x7f0000000080)=""/14, 0x41000, 0x10, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xd, 0x5, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000440)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x5, 0xa, 0xc}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x1, 0xb, 0x8}, {0x4, 0x5, 0xc, 0x8}, {0x4, 0x1, 0xe, 0x3}], 0x10, 0x7}, 0x94) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[], 0x27) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, r2, 0x4, r3}, 0x10) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000006c0)={0x0, 0x7, 0x5}, &(0x7f00000007c0)=0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={r6, 0xa}, &(0x7f0000000780)=0x8) (async) 9.63201194s ago: executing program 5 (id=1623): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() r2 = socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r3, &(0x7f0000000080)) close(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2fbc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x420482) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xff0a, 0x0) fcntl$setlease(r2, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setopts(0x4200, r8, 0x5, 0x85565d0b4f4c053e) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) 9.399976174s ago: executing program 5 (id=1628): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x120c002, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0) pidfd_getfd(r1, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)) signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x120c002, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0) (async) pidfd_getfd(r1, r0, 0x0) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) (async) gettid() (async) rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)) (async) 7.839093336s ago: executing program 2 (id=1672): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) (async, rerun: 32) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (rerun: 32) syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0xa, &(0x7f0000000000), 0x0, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x10000000, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071002c000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 7.742953592s ago: executing program 2 (id=1675): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) writev(r0, &(0x7f0000000580)=[{}], 0x1) 7.715916123s ago: executing program 2 (id=1677): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103b7e, 0x2, @perf_bp={0x0, 0x4}, 0x204, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x0, 0x35}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$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") 6.92672287s ago: executing program 2 (id=1686): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xd0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaa0100aaaabb0800450000300000000000019078ac1414bbac1414aa080090787f000001450000000000000000000000ac1414aae0000001"], 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) unshare(0x22020000) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x0, 0xfff9}, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0xffffffff, 0x25) 6.818126497s ago: executing program 2 (id=1690): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept(r2, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20048894}, 0x400c041) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002c003a00ff070009050035000500000005002f0000000000060028000200"/46], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x4080) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r9 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x85, &(0x7f00000061c0)={r10, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) sendmsg$unix(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r7, @ANYRES32=r7, @ANYRES32=r8], 0x18, 0x40000}, 0x4000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x80, 0x4) 6.450533708s ago: executing program 6 (id=1697): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) (async) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) (async) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7, 0x7, 0x1, 0x4, 0x0, 0x23c, 0x4, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000000), 0xf1002e4d0fa9aeef}, 0x200, 0xf, 0x1, 0x4, 0x3, 0x400, 0x6, 0x0, 0xc, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x80, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b7000) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40900, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r4}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) 6.448348208s ago: executing program 6 (id=1698): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000100)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/201, 0xc9}], 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000001740)=')', 0x1}], 0x1) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x9def, 0x10100, 0xfffffffc, 0xdc, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000180)={0x2, 0x7fff}) 6.445331168s ago: executing program 6 (id=1699): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)='#', 0x1}], 0x1) (fail_nth: 1) 6.432214139s ago: executing program 6 (id=1700): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x84481, 0x21) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000004000a000200aaaaaaaaaa1b"], 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000b6ba2b5fbe60a0000000045b60ee43eb2549d0c252a3c40ef4f59a8d9b5a3790d754355053c2a4bd7c2fcbe6e456388bdaed2ea2448c96833cf1aa5c0ed5bc2eb85d353c56b3b3225d89e50c3ff550e16e6b0521dbac9ca570b62bfa87cddee8c0c1e9d54870cbbcdff32e89aae57c23eb9ca0ed329500"/139], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, 0x0, 0x177) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8010661b, 0x0) r7 = socket$inet6(0xa, 0x804, 0x100) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x4a, 0x100000, 0x3, 0x3}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) ptrace$setregs(0xd, r8, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r8, 0x80000001, 0x4) setsockopt$sock_attach_bpf(r7, 0x29, 0x12, 0x0, 0x0) 6.290266938s ago: executing program 2 (id=1703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000060000bf00000000000000000e000000020000130400000006000000ff7f0d6851fc2a9c5efd03f3c07f00001a00000005000000000000000100000000002e30305f2e00"], &(0x7f0000000500)=""/123, 0x50, 0x7b, 0x0, 0x3, 0x10000}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000000200)=ANY=[], 0x0) r8 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) write$cgroup_pid(r8, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@empty, 0xfffe, 0x6, 0x4e23, 0x9, 0xa, 0x0, 0x30, 0x6, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81b5}, {0x0, 0x400000000000, 0x0, 0x2}, 0x3, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in6=@remote, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9}}, 0xe8) sendmmsg$inet6(r9, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9}) writev(r10, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) 6.265966129s ago: executing program 6 (id=1704): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x960c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x40b, 0x0, 0x0, 0x0, 0x220000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 6.24312496s ago: executing program 34 (id=1703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000060000bf00000000000000000e000000020000130400000006000000ff7f0d6851fc2a9c5efd03f3c07f00001a00000005000000000000000100000000002e30305f2e00"], &(0x7f0000000500)=""/123, 0x50, 0x7b, 0x0, 0x3, 0x10000}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000000200)=ANY=[], 0x0) r8 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) write$cgroup_pid(r8, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@empty, 0xfffe, 0x6, 0x4e23, 0x9, 0xa, 0x0, 0x30, 0x6, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81b5}, {0x0, 0x400000000000, 0x0, 0x2}, 0x3, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in6=@remote, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9}}, 0xe8) sendmmsg$inet6(r9, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9}) writev(r10, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) 5.57397645s ago: executing program 6 (id=1714): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x108802, 0x0) r0 = syz_clone(0x22000100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x11) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x248000, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x541, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x93}}, './file0/file0/..\x00'}) syz_emit_ethernet(0x335, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x4, [0xf18, 0x965, 0xc2d, 0xa45]}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r5 = syz_open_procfs(r0, &(0x7f0000000080)='net/netlink\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x22000, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdo=', @ANYRESHEX=r5]) r6 = msgget$private(0x0, 0x152) stat(&(0x7f0000000140)='./file0/file0/../file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x25, 0xa, 0x400009) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r9) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r10) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/..\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd59e, 0x1, 0x40000002, 0xbc}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r13, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000380)=[r12, 0xffffffffffffffff], 0x2, 0x0, 0x1}) io_uring_enter(r13, 0x47f6, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x1, r7, r9, r10, r11, 0x1, 0x88}, 0x0, 0x0, 0xffffffffffff9339, 0x7fffffff, 0xff, 0x5, 0x71e98693, 0x2, 0x1000, 0x1, r0, r0}) 5.533245693s ago: executing program 35 (id=1714): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x108802, 0x0) r0 = syz_clone(0x22000100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x11) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x248000, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x541, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x93}}, './file0/file0/..\x00'}) syz_emit_ethernet(0x335, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x4, [0xf18, 0x965, 0xc2d, 0xa45]}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r5 = syz_open_procfs(r0, &(0x7f0000000080)='net/netlink\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x22000, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdo=', @ANYRESHEX=r5]) r6 = msgget$private(0x0, 0x152) stat(&(0x7f0000000140)='./file0/file0/../file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x25, 0xa, 0x400009) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r9) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r10) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/..\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd59e, 0x1, 0x40000002, 0xbc}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r13, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000380)=[r12, 0xffffffffffffffff], 0x2, 0x0, 0x1}) io_uring_enter(r13, 0x47f6, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x1, r7, r9, r10, r11, 0x1, 0x88}, 0x0, 0x0, 0xffffffffffff9339, 0x7fffffff, 0xff, 0x5, 0x71e98693, 0x2, 0x1000, 0x1, r0, r0}) 1.874991319s ago: executing program 0 (id=1745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 1.874316509s ago: executing program 0 (id=1746): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0x4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8003) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.51477911s ago: executing program 7 (id=1705): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd41, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = creat(&(0x7f0000000040)='./bus\x00', 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000001c0)=0x0) ftruncate(r3, 0x81fe) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000, 0xa00}]) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x4000011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtaction={0x1d8, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0xec, 0x1, [@m_simple={0xe8, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0xad, 0x6, "c92acebef543cf5eac95ff99fdfe71226f0f8ca3945cf1e27303fef4d7edee9dc07b9c204234f1518f815a1e6f9900be0653c30ee7044fc49940d26166aca9768a60e2633236607ed8e41497a644f35e0d2494ec2432e189bde8a31ee3c25d98a9d5eabb59832b6b5d302ef8dbee798a364094b288f82acbcd5acc3d37148318dc5491c9505a46e3387d31e31c2a8f31a806aff980e9556c76256efb4a5cd9c0b1d305d220c3ba3063"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xd8, 0x1, [@m_simple={0x80, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x51, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x54, 0x17, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_LABELS={0x14, 0x7, "1fc075f6ec8940afab5885e58057ae3f"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="2400000003030209000009000000000003ce000109000340000000000800034000000000921a3a622c7298d287a5fe345e7f8b5bbb92f3ab9ee3e695dcc9aebf753848d028db181c2d9b7fd0e6ba942c825236e7d1ab239008d596a06a3629331a9d46e23785be76ba1bac8717707bfbdd1ea7ab17bc155d71d5f8d7469b7fe5ccbd8dfb355f2b1ce5869ee61d0246abdf740f0f1e0b07512af8273266983e5603b2e01d6b678b63bd2c24f7dbf37c5dd1db56dff08056363b7af93645a776fd5272eeb8838237f73bbb448c6e369bda7c4398b0e4f10812764b4d34d6609046b86e214ce575739bd9"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000540)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.354435119s ago: executing program 8 (id=1715): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@size={'size', 0x3d, [0x25]}}]}) 1.17468549s ago: executing program 8 (id=1748): madvise(&(0x7f0000ccb000/0x3000)=nil, 0x3000, 0xb) 1.17381066s ago: executing program 8 (id=1749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000010c0)={r0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5, 0x6c033, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000000000)=""/223, 0xdf) writev(r0, &(0x7f00000022c0)=[{&(0x7f0000001100)="1bae72c99d036201b5ffa79cce59fab72777cc4f6340e55ffa1032743824ebf0acdc32a8e5aeb2f783da972edfb947d0acaf1bfaf7053eb947211c3f02363544d28e9f1cedd2ab1dc53e7da8821da1a052c3721f5b6f7aad8945b29579b5904d51d40ba96ecfa1b5f5545258582e36c40855a0f3e985cc6637657b975767a7edb61da9c3ce369526dc0a6895877b3738906c3115c61652f793c2e7", 0x9b}, {&(0x7f00000011c0)="4c2aa74b37ce540b27f6fc9a803b39d63ec7372b7e8318ec1ebb6dbdc70651508287291198cb632c87c50c40f65c83c865b459222a9cf654c959ca67bfff3530cb7f87d7f275ac894dda44a0fbb82d57665ca1a229661f75658ce90ac07b28243bb3ba5d5f4ff98c7483f5232bebdd3c89393075dde5a082b0c7057fcaf5b761fd598166f203ef1a220b6377b9dfde224377f9df11abaa190f10e0e043bab96ff0295c60e0404bff4e995d84805373006705301bbd5bc33f043e5376421fa7a3f4412a7365f363ecd34dc90c84c168ee210a5d18c459eca7ff0d76bce70edd8d14bcb0a7d48e5c650eb8e044", 0xec}, {&(0x7f00000012c0)="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", 0x1000}], 0x3) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) unshare(0x68040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0xc001) syz_clone(0x20000400, &(0x7f0000000000)="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", 0x1000, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="ab0cf182730f37d7bfd2b2693b62c9abfa3443f97cd952b158ae311a75d191e5e53975a79a4e0808746ab7cde15ba5afe28c9b1de23af72ef1") 1.153482191s ago: executing program 0 (id=1750): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005"], 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x2c}}, 0x2001) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x17c, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x95a7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xafc}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe6e7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x44091}, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x84084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0xfffffffffffffffe, 0x3c, 0x5, 0x0, 0x0, 0x0, 0x46}, r0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x2, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x4, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x4, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x100}}, @tfcpad={0x8, 0x16, 0x8}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_getscheduler(0x0) 1.001516101s ago: executing program 0 (id=1751): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x104}], 0x1, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) pread64(r1, &(0x7f0000000480), 0x1, 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x808002, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fowner_lt}, {@obj_role={'obj_role', 0x3d, ']#:)'}}]}}) 921.961675ms ago: executing program 0 (id=1753): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x85494000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 795.085343ms ago: executing program 1 (id=1755): r0 = dup(0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r3 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000200f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000200)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setreuid(0x0, 0xee01) r5 = semget$private(0x0, 0x6, 0x20c) setresuid(0x0, 0x0, 0x0) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000021c0)={{0x2, 0x0, 0x0, 0x0, 0xee00, 0x20, 0x3468}, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0xae07}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x2) semctl$IPC_RMID(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb00000000006eb29012e6b02f2666d0e4a0710000000000000000000001010000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000200010028000000000000004c001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/257], 0x13c}, 0x1, 0x0, 0x0, 0xd0}, 0xc0) r6 = syz_create_resource$binfmt(&(0x7f0000001540)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x510d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="1400000010000100000000000100000a20000000000a01040000000000000000010000040900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800c00010062697477697365001c00028008000340000000020800024000000012080001400000000e0900010073797a3000000000140000001100010000000000000000000700000a00000000abf4"], 0xcc}}, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 650.933681ms ago: executing program 1 (id=1756): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)='#', 0x1}], 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0xc7, 0xf, 0x2, 0xc5, 0x4, 0x0, 0x9d}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) write$selinux_load(0xffffffffffffffff, 0x0, 0xffaf) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x33, 0x43a1bd76, 0x7, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001e00"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r3, 0x27, 0x7f, 0x0, &(0x7f0000001100)="f888a8ba98b5fa2f73dfa05f8aacba871996ec3422fd5f3a7b07adc1aae0709f3589a399ed903e7897f5d87f42fddc5bbb9d9d228c1898eb94da6b09eabd42ed9bd832d75c57dc2b82ff642bf30bb153b588b7cc7bd179cae7dad587b27a7ec0b44f722fe6fb7271d5a12a75b3527b7d7a651cd90d6690a1e56bbea1391b9e", 0x0, 0x10000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x5, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x12002) r6 = getpid() sendmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x8841) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000001000), &(0x7f0000001040)=0x4) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r8 = accept$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f00000000c0)={'veth0_to_hsr\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 617.264383ms ago: executing program 8 (id=1757): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async, rerun: 32) munlock(&(0x7f0000315000/0x4000)=nil, 0x4000) (async, rerun: 32) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 482.491651ms ago: executing program 8 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x28014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xfffd8a45, 0x4013, 0xfffffffd, 0x10a}) 427.189894ms ago: executing program 7 (id=1759): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="f7c3bff77d00631edb0f008265163e82e04e405e8a56d639e955a6618526cc5b0800e5a2e9d2eb041bd4635262aed7c0c1b71c5fdc2817d4490a5f1d", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf09000000000000550901000000000095000000000000003509ffff0800000018000000090000000000000004000000bf91000000000000b702000002000000850000002a000000b7000000000000079500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x7, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x6}, 0x2b00, 0x36, 0x43a1bd76, 0x5, 0x3, 0x1, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) close_range(r2, r2, 0x2) unshare(0x22020600) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 389.030256ms ago: executing program 1 (id=1760): madvise(&(0x7f0000ccb000/0x3000)=nil, 0x3000, 0xb) 278.347463ms ago: executing program 1 (id=1761): r0 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x8070bd2a, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359401}, @TCA_CAKE_RAW={0x8}]}}, @qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x33}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x4}]}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0xc7, 0x5, 0xa, 0x0, 0xa57, 0x7, 0x7}}, {0x12, 0x2, [0x6, 0x8001, 0xfff8, 0x2, 0x80, 0x5, 0x5]}}, {{0x1c, 0x1, {0x1, 0xd, 0x3, 0x9, 0x2, 0x0, 0x4, 0x4}}, {0xc, 0x2, [0x9, 0x7, 0xe22d, 0x100]}}, {{0x1c, 0x1, {0x0, 0x0, 0xbb, 0x8, 0x1, 0x1, 0xffffffff, 0x3}}, {0xa, 0x2, [0x1ff, 0x1, 0x3ff]}}, {{0x1c, 0x1, {0x8, 0x5, 0x10, 0xb4, 0x2, 0xb0, 0x7, 0x6}}, {0x10, 0x2, [0x1, 0xfffa, 0x0, 0x6d6, 0x6, 0x5]}}, {{0x1c, 0x1, {0x2, 0x7, 0xa014, 0x5, 0x1, 0x4, 0x9, 0x4}}, {0xc, 0x2, [0x6, 0xd68, 0x4, 0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x14c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = socket$unix(0x1, 0x5, 0x0) r9 = dup2(r8, r7) close_range(r9, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x14, &(0x7f0000000000)=[0xffffffff], 0x2) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x25) setxattr$security_ima(&(0x7f0000000080)='.\x00', &(0x7f0000000140), &(0x7f00000002c0)=@md5={0x1, "0ff54721823264017d9b62e08ca5f969"}, 0x11, 0x2) unshare(0x20060400) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r11}, 0x4) 181.245129ms ago: executing program 0 (id=1762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0xf, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd22, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6dde}]}, 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 164.5274ms ago: executing program 1 (id=1763): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3000846, &(0x7f0000000300)={[{@nobarrier}, {@block_validity}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@nobh}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@grpquota}]}, 0x1, 0x566, &(0x7f0000000400)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) unshare(0x28020480) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sync_file_range(r3, 0x2, 0x7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x329e01, 0x95) syz_emit_ethernet(0x1df, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) 70.609546ms ago: executing program 7 (id=1764): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x104}], 0x1, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) pread64(r1, &(0x7f0000000480), 0x1, 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x808002, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fowner_lt}, {@obj_role={'obj_role', 0x3d, ']#:)'}}]}}) 59.696786ms ago: executing program 7 (id=1765): r0 = semget(0x2, 0x3, 0x88e) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f00000000c0)=""/46) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xb, 0x0, 0x3}]}}, 0x0, 0x4e}, 0x28) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xee01, 0xffffffffffffffff) ioprio_set$uid(0x3, 0xee01, 0x2000) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000001a40)={0x3ff, 0x0, 0x1, 0x0, 0xfffe, 0x6}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x410c84, &(0x7f0000000100), 0x1, 0x783, &(0x7f0000000d80)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000010300001400030064756d6d7930eda1160d00000000000005cd1356bdd3986fe13ef7b82dbddb870eee6e2d83f26e9a2c8043b4f399a70a824b307f7ab7aefba7836ee0d1e8b6f87e3aafcc47"], 0x34}}, 0x800) 0s ago: executing program 1 (id=1766): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext2\x00', &(0x7f0000000780)='./bus\x00', 0xe, &(0x7f0000000a00)={[{@noinit_itable}, {@grpjquota}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1000}}, {@nomblk_io_submit}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'n\x00\x00\x00\x00\x00\x00\x00\x80'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x0, 0x33, 0x33, 0x39, 0x1, 0x66], 0x2d, [0x66, 0x30, 0x30, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x39], 0x2d, [0x38, 0x34, 0x51, 0x35], 0x2d, [0x30, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@seclabel}]}, 0x0, 0x479, &(0x7f0000001300)="$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") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, 0x0) getsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) recvmsg(r4, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.797105][ T6974] netem: change failed [ 136.806634][ T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.815117][ T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.823441][ T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.858936][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 137.219865][ T6854] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 137.235120][ T6854] EXT4-fs (loop5): Remounting filesystem read-only [ 137.510173][ T6957] net_ratelimit: 541 callbacks suppressed [ 137.510192][ T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.524810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.529079][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'. [ 137.533387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.550870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.559106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.567991][ T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.601713][ T4811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.654295][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 137.663300][ T7003] netlink: 288 bytes leftover after parsing attributes in process `syz.2.825'. [ 137.682244][ T7006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.689512][ T7006] IPv6: NLM_F_CREATE should be set when creating new route [ 137.696766][ T7006] IPv6: NLM_F_CREATE should be set when creating new route [ 137.747715][ T7008] loop2: detected capacity change from 0 to 512 [ 137.754564][ T7008] ext4: Unknown parameter 'measure' [ 137.785623][ T7012] xt_bpf: check failed: parse error [ 137.804692][ T7012] netlink: 'syz.1.828': attribute type 3 has an invalid length. [ 137.821429][ T7014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=488 sclass=netlink_route_socket pid=7014 comm=syz.2.829 [ 137.838978][ T7014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=488 sclass=netlink_route_socket pid=7014 comm=syz.2.829 [ 137.858375][ T7016] netlink: 'syz.5.830': attribute type 6 has an invalid length. [ 137.948338][ T7025] loop5: detected capacity change from 0 to 164 [ 137.959757][ T7025] isofs_fill_super: root inode is not a directory. Corrupted media? [ 138.004230][ T7038] netlink: 'syz.0.837': attribute type 9 has an invalid length. [ 138.027437][ T7029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7029 comm=syz.2.834 [ 138.121078][ T7060] FAULT_INJECTION: forcing a failure. [ 138.121078][ T7060] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.134643][ T7060] CPU: 1 UID: 0 PID: 7060 Comm: syz.5.846 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 138.134669][ T7060] Tainted: [W]=WARN [ 138.134674][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 138.134682][ T7060] Call Trace: [ 138.134687][ T7060] [ 138.134693][ T7060] __dump_stack+0x1d/0x30 [ 138.134749][ T7060] dump_stack_lvl+0x95/0xd0 [ 138.134764][ T7060] dump_stack+0x15/0x1b [ 138.134778][ T7060] should_fail_ex+0x263/0x280 [ 138.134799][ T7060] should_fail+0xb/0x20 [ 138.134886][ T7060] should_fail_usercopy+0x1a/0x20 [ 138.134975][ T7060] _copy_from_user+0x1c/0xb0 [ 138.134990][ T7060] ___sys_sendmsg+0xc1/0x1e0 [ 138.135012][ T7060] __x64_sys_sendmsg+0xd4/0x160 [ 138.135028][ T7060] x64_sys_call+0x17ba/0x3000 [ 138.135125][ T7060] do_syscall_64+0xc0/0x2a0 [ 138.135154][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.135187][ T7060] RIP: 0033:0x7ff04fd1aeb9 [ 138.135200][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.135225][ T7060] RSP: 002b:00007ff04e76f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.135241][ T7060] RAX: ffffffffffffffda RBX: 00007ff04ff95fa0 RCX: 00007ff04fd1aeb9 [ 138.135252][ T7060] RDX: 0000000020008080 RSI: 00002000000029c0 RDI: 0000000000000003 [ 138.135328][ T7060] RBP: 00007ff04e76f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.135337][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.135345][ T7060] R13: 00007ff04ff96038 R14: 00007ff04ff95fa0 R15: 00007ffcafd5dd48 [ 138.135358][ T7060] [ 138.331418][ T7073] loop5: detected capacity change from 0 to 256 [ 138.338220][ T7073] vfat: Unknown parameter '' [ 138.361078][ T7071] netlink: 424 bytes leftover after parsing attributes in process `syz.1.849'. [ 138.371187][ T7071] 9p: Bad value for 'wfdno' [ 138.438149][ T7089] loop5: detected capacity change from 0 to 512 [ 138.444376][ T7080] netlink: 'syz.1.853': attribute type 4 has an invalid length. [ 138.464445][ T7080] netlink: 'syz.1.853': attribute type 4 has an invalid length. [ 138.470503][ T6049] kernel read not supported for file bpf-prog (pid: 6049 comm: kworker/1:7) [ 138.740217][ T7120] netlink: 'syz.0.864': attribute type 83 has an invalid length. [ 138.751974][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 138.768694][ T7096] loop5: detected capacity change from 0 to 128 [ 138.822641][ T7129] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 138.910354][ T7129] team0: Device vxcan1 is of different type [ 138.954783][ T7129] loop2: detected capacity change from 0 to 512 [ 138.967126][ T7129] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 139.006493][ T7129] EXT4-fs (loop2): 1 truncate cleaned up [ 139.013020][ T7129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.090206][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.257958][ T7151] vfat: Unknown parameter '' [ 139.362163][ T7151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.389356][ T7151] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.415018][ T7151] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.875: corrupted inode contents [ 139.450749][ T7151] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.875: mark_inode_dirty error [ 139.468075][ T7151] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.875: corrupted inode contents [ 139.493606][ T7151] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.875: mark_inode_dirty error [ 139.519093][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 139.519167][ T29] audit: type=1400 audit(1770602890.390:2016): avc: denied { create } for pid=7150 comm="syz.2.875" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.579131][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.650233][ T7160] vfat: Unknown parameter '0x0000000000000005' [ 139.863546][ T7171] lo speed is unknown, defaulting to 1000 [ 139.881403][ T7171] lo speed is unknown, defaulting to 1000 [ 139.897642][ T7171] lo speed is unknown, defaulting to 1000 [ 139.917592][ T7171] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.953939][ T7171] lo speed is unknown, defaulting to 1000 [ 139.956283][ T29] audit: type=1400 audit(1770602890.830:2017): avc: denied { ioctl } for pid=7170 comm="syz.0.883" path="socket:[19625]" dev="sockfs" ino=19625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.960285][ T7171] lo speed is unknown, defaulting to 1000 [ 139.995351][ T7171] lo speed is unknown, defaulting to 1000 [ 140.001560][ T7171] lo speed is unknown, defaulting to 1000 [ 140.007667][ T7171] lo speed is unknown, defaulting to 1000 [ 140.014389][ T7173] openvswitch: netlink: Missing key (keys=40, expected=100) [ 140.329776][ T29] audit: type=1400 audit(1770602891.190:2018): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 140.683690][ T7213] __nla_validate_parse: 3 callbacks suppressed [ 140.683710][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.893'. [ 140.704384][ T29] audit: type=1400 audit(1770602891.580:2019): avc: denied { lock } for pid=7212 comm="syz.1.893" path="socket:[19667]" dev="sockfs" ino=19667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 140.739463][ T7215] lo speed is unknown, defaulting to 1000 [ 140.743464][ T7217] netlink: 324 bytes leftover after parsing attributes in process `syz.1.895'. [ 140.772880][ T7219] tipc: Enabling of bearer rejected, failed to enable media [ 140.782404][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 140.907836][ T7229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.898'. [ 140.917546][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.899'. [ 140.988805][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 141.170573][ T7243] netlink: 112 bytes leftover after parsing attributes in process `syz.2.903'. [ 141.248542][ T7245] set_capacity_and_notify: 4 callbacks suppressed [ 141.248564][ T7245] loop2: detected capacity change from 0 to 512 [ 141.292543][ T7245] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.301883][ T29] audit: type=1326 audit(1770602892.180:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.0.906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x0 [ 141.340049][ T7245] EXT4-fs error (device loop2): __ext4_iget:5426: inode #3: block 127754: comm syz.2.905: invalid block [ 141.351976][ T7245] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.905: Bad quota inode: 3, type: 0 [ 141.363081][ T7245] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 141.368126][ T7096] loop5: detected capacity change from 0 to 4096 [ 141.378139][ T7245] EXT4-fs (loop2): mount failed [ 141.480846][ T7256] syzkaller0: entered promiscuous mode [ 141.486467][ T7256] syzkaller0: entered allmulticast mode [ 141.553680][ T7264] netlink: 100 bytes leftover after parsing attributes in process `syz.5.909'. [ 141.601135][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.911'. [ 141.611458][ T29] audit: type=1400 audit(1770602892.490:2021): avc: denied { getopt } for pid=7267 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.613904][ T7269] loop2: detected capacity change from 0 to 512 [ 141.654766][ T7269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 141.663270][ T7269] System zones: 1-12 [ 141.667548][ T7269] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.911: Directory hole found for htree index block 0 [ 141.689295][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.912'. [ 141.692489][ T7269] EXT4-fs (loop2): Remounting filesystem read-only [ 141.705645][ T7269] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 141.714104][ T7269] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 141.722888][ T7269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.748253][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.775318][ T29] audit: type=1400 audit(1770602892.650:2022): avc: denied { ioctl } for pid=7278 comm="syz.5.915" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 141.830895][ T7285] loop2: detected capacity change from 0 to 512 [ 141.837655][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.846042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.854215][ T7285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.874219][ T7285] EXT4-fs error (device loop2): __ext4_iget:5426: inode #3: block 127754: comm syz.2.917: invalid block [ 141.886614][ T7285] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.917: Bad quota inode: 3, type: 0 [ 141.909023][ T7285] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 141.947242][ T7285] EXT4-fs (loop2): mount failed [ 142.136774][ T7308] xt_hashlimit: size too large, truncated to 1048576 [ 142.165421][ T7310] ------------[ cut here ]------------ [ 142.171182][ T7310] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x0] s64=[0x0, 0x0] u32=[0x80632f4, 0x0] s32=[0x0, 0x0] var_off=(0x0, 0x0) [ 142.187910][ T7310] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.1.925/7310 [ 142.199198][ T7310] Modules linked in: [ 142.203253][ T7310] CPU: 1 UID: 0 PID: 7310 Comm: syz.1.925 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.214722][ T7310] Tainted: [W]=WARN [ 142.218549][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 142.228946][ T7310] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 142.235438][ T7310] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 142.255601][ T7310] RSP: 0018:ffffc900072fb388 EFLAGS: 00010246 [ 142.261962][ T7310] RAX: ffff88810d8c4c90 RBX: 0000000000000000 RCX: 0000000000000000 [ 142.270333][ T7310] RDX: ffffffff867f0c86 RSI: ffffffff866bb997 RDI: ffffffff86fb99b0 [ 142.278422][ T7310] RBP: ffff88810df662e0 R08: 0000000000000000 R09: 0000000000000000 [ 142.286631][ T7310] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88810df662a0 [ 142.295094][ T7310] R13: 0000000000000000 R14: ffff88810df662ec R15: ffff88810df662d8 [ 142.303399][ T7310] FS: 00007ff8f7de76c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 142.307738][ T29] audit: type=1400 audit(1770602893.180:2023): avc: denied { mount } for pid=7313 comm="syz.5.926" name="/" dev="rpc_pipefs" ino=19832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 142.312404][ T7310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.312426][ T7310] CR2: 00002000000054c0 CR3: 000000011d1a0000 CR4: 00000000003506f0 [ 142.312446][ T7310] DR0: 00000000000003ff DR1: 0000000000000000 DR2: 0000000000000000 [ 142.359418][ T7310] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 142.367549][ T7310] Call Trace: [ 142.370862][ T7310] [ 142.373884][ T7310] reg_set_min_max+0x1c8/0x260 [ 142.378743][ T7310] check_cond_jmp_op+0x13bd/0x1a80 [ 142.384057][ T7310] do_check+0x440c/0x9060 [ 142.388517][ T7310] do_check_common+0xd0f/0x1630 [ 142.393523][ T7310] bpf_check+0x2f6d/0xc7e0 [ 142.398272][ T7310] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 142.404388][ T7310] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 142.410178][ T7310] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 142.416425][ T7310] ? _find_next_zero_bit+0x29/0xa0 [ 142.421579][ T7310] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 142.428029][ T7310] ? _find_next_zero_bit+0x29/0xa0 [ 142.433422][ T7310] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 142.439598][ T7310] ? css_rstat_updated+0xbb/0x280 [ 142.444714][ T7310] ? mod_memcg_state+0x182/0x260 [ 142.449844][ T7310] ? __rcu_read_unlock+0x4e/0x70 [ 142.454934][ T7310] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 142.461085][ T7310] ? pcpu_alloc_noprof+0xb08/0x1010 [ 142.466341][ T7310] ? should_fail_ex+0x30/0x280 [ 142.471247][ T7310] ? __kmalloc_noprof+0x2a3/0x580 [ 142.476423][ T7310] ? security_bpf_prog_load+0x60/0x140 [ 142.481966][ T7310] ? selinux_bpf_prog_load+0xac/0xd0 [ 142.487462][ T7310] ? security_bpf_prog_load+0x9e/0x140 [ 142.493050][ T7310] bpf_prog_load+0xf76/0x1140 [ 142.497778][ T7310] ? security_bpf+0x2b/0x90 [ 142.502427][ T7310] __sys_bpf+0x469/0x7b0 [ 142.506751][ T7310] __x64_sys_bpf+0x41/0x50 [ 142.511422][ T7310] x64_sys_call+0x28e1/0x3000 [ 142.516123][ T7310] do_syscall_64+0xc0/0x2a0 [ 142.521017][ T7310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.526946][ T7310] RIP: 0033:0x7ff8f938aeb9 [ 142.531491][ T7310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.551552][ T7310] RSP: 002b:00007ff8f7de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.560112][ T7310] RAX: ffffffffffffffda RBX: 00007ff8f9605fa0 RCX: 00007ff8f938aeb9 [ 142.568188][ T7310] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 142.576332][ T7310] RBP: 00007ff8f93f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 142.584447][ T7310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.592445][ T7310] R13: 00007ff8f9606038 R14: 00007ff8f9605fa0 R15: 00007ffd684f2348 [ 142.600803][ T7310] [ 142.603958][ T7310] ---[ end trace 0000000000000000 ]--- [ 142.650998][ T29] audit: type=1326 audit(1770602893.530:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 142.674749][ T29] audit: type=1326 audit(1770602893.530:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 142.707858][ T7324] x_tables: duplicate underflow at hook 3 [ 142.771055][ T7333] loop2: detected capacity change from 0 to 512 [ 142.780479][ T7333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.804853][ T7333] EXT4-fs error (device loop2): __ext4_iget:5426: inode #3: block 127754: comm syz.2.932: invalid block [ 142.824032][ T7333] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.932: Bad quota inode: 3, type: 0 [ 142.835297][ T7333] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 142.850586][ T7333] EXT4-fs (loop2): mount failed [ 142.880180][ T7347] xt_hashlimit: size too large, truncated to 1048576 [ 143.020914][ T7362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7362 comm=syz.5.941 [ 143.057092][ T7370] loop5: detected capacity change from 0 to 1024 [ 143.064551][ T7370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.100594][ T7370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.113382][ T7376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7376 comm=syz.2.944 [ 143.197873][ T7383] loop2: detected capacity change from 0 to 8192 [ 143.282349][ T7383] loop2: p2 p3 p4 [ 143.286366][ T7383] loop2: p2 start 2531787010 is beyond EOD, truncated [ 143.293230][ T7383] loop2: p3 size 100663552 extends beyond EOD, truncated [ 143.301390][ T7383] loop2: p4 size 50331648 extends beyond EOD, truncated [ 143.349786][ T5296] udevd[5296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 143.349786][ T5303] udevd[5303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 143.373693][ T7390] loop2: detected capacity change from 0 to 512 [ 143.387238][ T7390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.424557][ T7390] EXT4-fs error (device loop2): __ext4_iget:5426: inode #3: block 127754: comm syz.2.949: invalid block [ 143.449124][ T7390] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.949: Bad quota inode: 3, type: 0 [ 143.460165][ T7396] xt_hashlimit: size too large, truncated to 1048576 [ 143.460299][ T7390] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 143.482395][ T7390] EXT4-fs (loop2): mount failed [ 143.598842][ T7397] lo speed is unknown, defaulting to 1000 [ 143.668194][ T7397] chnl_net:caif_netlink_parms(): no params data found [ 143.721587][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.728781][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.729092][ T7432] loop2: detected capacity change from 0 to 512 [ 143.736067][ T7397] bridge_slave_0: entered allmulticast mode [ 143.750894][ T7397] bridge_slave_0: entered promiscuous mode [ 143.768470][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.775642][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.795854][ T7423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7423 comm=syz.2.955 [ 143.799133][ T7397] bridge_slave_1: entered allmulticast mode [ 143.815926][ T7397] bridge_slave_1: entered promiscuous mode [ 143.836085][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.853809][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.883810][ T7397] team0: Port device team_slave_0 added [ 143.898123][ T7397] team0: Port device team_slave_1 added [ 143.924194][ T7449] xt_hashlimit: size too large, truncated to 1048576 [ 143.926648][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.937976][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.964396][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.978768][ T7451] loop2: detected capacity change from 0 to 512 [ 143.986604][ T7451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.996403][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.003389][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.029935][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.060254][ T7459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3144 sclass=netlink_route_socket pid=7459 comm=syz.0.964 [ 144.073196][ T7451] EXT4-fs error (device loop2): __ext4_iget:5426: inode #3: block 127754: comm syz.2.963: invalid block [ 144.091128][ T7451] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.963: Bad quota inode: 3, type: 0 [ 144.116606][ T7451] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 144.132215][ T7451] EXT4-fs (loop2): mount failed [ 144.148348][ T4811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.183021][ T7397] hsr_slave_0: entered promiscuous mode [ 144.203887][ T7397] hsr_slave_1: entered promiscuous mode [ 144.210217][ T7463] xt_limit: Overflow, try lower: 167772/2147483648 [ 144.218743][ T7397] debugfs: 'hsr0' already exists in 'hsr' [ 144.224561][ T7397] Cannot create hsr debugfs directory [ 144.379114][ T7483] xt_hashlimit: size too large, truncated to 1048576 [ 144.404461][ T7397] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 144.420932][ T7397] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 144.478328][ T7397] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 144.498245][ T7397] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 144.560820][ T7493] lo speed is unknown, defaulting to 1000 [ 144.572573][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.579658][ T7397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.587149][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.594350][ T7397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.724319][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.733253][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.739608][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.765969][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.789252][ T7397] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.819691][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.826845][ T5058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.848852][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.856051][ T5058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.867277][ T7508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.925540][ T7508] EXT4-fs error (device loop5): __ext4_iget:5426: inode #3: block 127754: comm syz.5.978: invalid block [ 145.112623][ T7508] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.978: Bad quota inode: 3, type: 0 [ 145.129694][ T7508] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 145.180136][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 145.180164][ T29] audit: type=1326 audit(1770602896.060:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.0.982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f0a61aeb9 code=0x0 [ 145.186510][ T7508] EXT4-fs (loop5): mount failed [ 145.289693][ T7520] netlink: 'syz.2.981': attribute type 21 has an invalid length. [ 145.320244][ T7397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.401273][ T7541] program syz.5.983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.401652][ T29] audit: type=1400 audit(1770602896.270:2100): avc: denied { accept } for pid=7531 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.503336][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 145.556824][ T7397] veth0_vlan: entered promiscuous mode [ 145.592598][ T7397] veth1_vlan: entered promiscuous mode [ 145.616046][ T7397] veth0_macvtap: entered promiscuous mode [ 145.635714][ T7397] veth1_macvtap: entered promiscuous mode [ 145.657329][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.689339][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.689425][ T7561] sd 0:0:1:0: device reset [ 145.713922][ T5047] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.764991][ T29] audit: type=1400 audit(1770602896.640:2101): avc: denied { mount } for pid=7397 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.789398][ T5047] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.801772][ T5047] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.817107][ T5047] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.904528][ T7590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.922769][ T7590] EXT4-fs error (device loop6): __ext4_iget:5426: inode #3: block 127754: comm syz.6.993: invalid block [ 145.977900][ T7590] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.993: Bad quota inode: 3, type: 0 [ 146.053016][ T7590] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 146.083893][ T7605] xt_hashlimit: size too large, truncated to 1048576 [ 146.150216][ T7613] bond0: (slave syz_tun): Releasing backup interface [ 146.174036][ T7613] bridge_slave_0: left allmulticast mode [ 146.179960][ T7613] bridge_slave_0: left promiscuous mode [ 146.185762][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.196272][ T7590] EXT4-fs (loop6): mount failed [ 146.227164][ T7613] bridge_slave_1: left allmulticast mode [ 146.232915][ T7613] bridge_slave_1: left promiscuous mode [ 146.238703][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.266235][ T7626] __nla_validate_parse: 18 callbacks suppressed [ 146.266301][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 146.288808][ T7613] bond0: (slave bond_slave_0): Releasing backup interface [ 146.320901][ T7613] bond0: (slave bond_slave_1): Releasing backup interface [ 146.324000][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1002'. [ 146.341149][ T29] audit: type=1400 audit(1770602897.220:2102): avc: granted { setsecparam } for pid=7628 comm="syz.5.1003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 146.362781][ T7613] team0: Port device team_slave_0 removed [ 146.369732][ T29] audit: type=1400 audit(1770602897.250:2103): avc: granted { setsecparam } for pid=7628 comm="syz.5.1003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 146.420229][ T7613] team0: Port device 26 removed [ 146.438123][ T7639] set_capacity_and_notify: 3 callbacks suppressed [ 146.438142][ T7639] loop5: detected capacity change from 0 to 2048 [ 146.439018][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.446421][ T29] audit: type=1400 audit(1770602897.300:2104): avc: denied { getopt } for pid=7638 comm="syz.5.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 146.451450][ T7613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.507810][ T7613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.524101][ T6053] lo speed is unknown, defaulting to 1000 [ 146.542503][ T29] audit: type=1326 audit(1770602897.420:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7c05aeb9 code=0x7ffc0000 [ 146.543846][ T7627] team0: Mode changed to "loadbalance" [ 146.566234][ T29] audit: type=1326 audit(1770602897.420:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7c05aeb9 code=0x7ffc0000 [ 146.608711][ T29] audit: type=1326 audit(1770602897.450:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7c05aeb9 code=0x7ffc0000 [ 146.632762][ T29] audit: type=1326 audit(1770602897.450:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7c05aeb9 code=0x7ffc0000 [ 146.715051][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1006'. [ 146.767988][ T7648] loop2: detected capacity change from 0 to 128 [ 146.785626][ T7648] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 146.793936][ T7648] FAT-fs (loop2): Filesystem has been set read-only [ 147.099080][ T7667] xt_hashlimit: size too large, truncated to 1048576 [ 147.339313][ T7677] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 147.345940][ T7677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.353906][ T7677] vhci_hcd vhci_hcd.0: Device attached [ 147.435733][ T3313] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 147.450137][ T7677] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 147.456921][ T7677] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 147.464454][ T7677] vhci_hcd vhci_hcd.0: Device attached [ 147.517113][ T7682] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(18) [ 147.523772][ T7682] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 147.531911][ T7682] vhci_hcd vhci_hcd.0: Device attached [ 147.576624][ T7697] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1022'. [ 147.597397][ T7677] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(17) [ 147.604306][ T7677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.612048][ T7677] vhci_hcd vhci_hcd.0: Device attached [ 147.617594][ T6053] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 147.641360][ T7698] vhci_hcd: connection closed [ 147.642026][ T7692] vhci_hcd: connection closed [ 147.645107][ T52] vhci_hcd vhci_hcd.5: stop threads [ 147.656950][ T52] vhci_hcd vhci_hcd.5: release socket [ 147.662692][ T52] vhci_hcd vhci_hcd.5: disconnect device [ 147.668909][ T7687] vhci_hcd: connection closed [ 147.692430][ T52] vhci_hcd vhci_hcd.5: stop threads [ 147.702599][ T52] vhci_hcd vhci_hcd.5: release socket [ 147.708109][ T52] vhci_hcd vhci_hcd.5: disconnect device [ 147.719946][ T7678] vhci_hcd: connection reset by peer [ 147.727718][ T52] vhci_hcd vhci_hcd.5: stop threads [ 147.733273][ T52] vhci_hcd vhci_hcd.5: release socket [ 147.738817][ T52] vhci_hcd vhci_hcd.5: disconnect device [ 147.752541][ T7707] loop2: detected capacity change from 0 to 512 [ 147.759445][ T7707] EXT4-fs: Ignoring removed nobh option [ 147.767138][ T52] vhci_hcd vhci_hcd.5: stop threads [ 147.772499][ T52] vhci_hcd vhci_hcd.5: release socket [ 147.778079][ T52] vhci_hcd vhci_hcd.5: disconnect device [ 147.786814][ T7707] EXT4-fs (loop2): 1 orphan inode deleted [ 147.793169][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.807205][ T7707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.845657][ T7714] xt_hashlimit: size too large, truncated to 1048576 [ 148.081710][ T7704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.145900][ T7732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1033'. [ 148.157249][ T7704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.231367][ T7704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.312016][ T7742] dummy0: entered allmulticast mode [ 148.325773][ T7740] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 148.336980][ T7740] bond2 (unregistering): Released all slaves [ 148.361004][ T7704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.371674][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1036'. [ 148.399022][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 148.448111][ T3441] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.460149][ T3441] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.472334][ T3441] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.484371][ T5047] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.593932][ T7754] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 148.616967][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'. [ 148.690559][ T7771] 9p: Bad value for 'wfdno' [ 148.748570][ T7773] loop5: detected capacity change from 0 to 8192 [ 148.817215][ T7783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1050'. [ 148.867782][ T7785] netlink: 'syz.1.1051': attribute type 3 has an invalid length. [ 149.025428][ T7801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29184 sclass=netlink_route_socket pid=7801 comm=syz.1.1058 [ 149.080025][ T7736] dummy0: left allmulticast mode [ 149.085519][ T7811] xt_hashlimit: max too large, truncated to 1048576 [ 149.135929][ T7817] loop2: detected capacity change from 0 to 1024 [ 149.142051][ T7811] xt_hashlimit: size too large, truncated to 1048576 [ 149.149232][ T7811] xt_hashlimit: overflow, try lower: 3/0 [ 149.160521][ T7817] EXT4-fs: Ignoring removed bh option [ 149.165645][ T7819] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1063'. [ 149.179742][ T7817] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 149.187793][ T7816] lo speed is unknown, defaulting to 1000 [ 149.391178][ T7851] loop6: detected capacity change from 0 to 512 [ 149.429629][ T7851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.470912][ T7845] loop5: detected capacity change from 0 to 8192 [ 149.478707][ T7851] EXT4-fs error (device loop6): __ext4_iget:5426: inode #3: block 127754: comm syz.6.1074: invalid block [ 149.524923][ T7845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.533261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.543413][ T7851] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.1074: Bad quota inode: 3, type: 0 [ 149.554792][ T7851] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 149.571592][ T7851] EXT4-fs (loop6): mount failed [ 149.645209][ T7871] loop6: detected capacity change from 0 to 1024 [ 149.655521][ T7871] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.675978][ T7871] EXT4-fs (loop6): Invalid log block size: 50331648 [ 149.738736][ T7885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7885 comm=syz.0.1085 [ 150.028461][ T6076] IPVS: starting estimator thread 0... [ 150.129764][ T7919] IPVS: using max 2448 ests per chain, 122400 per kthread [ 150.207636][ T7927] can0: slcan on ttyS3. [ 150.290186][ T7926] can0 (unregistered): slcan off ttyS3. [ 150.354176][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 150.354192][ T29] audit: type=1326 audit(1770602901.230:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.2.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7c05aeb9 code=0x7ffc0000 [ 150.483684][ T7971] loop5: detected capacity change from 0 to 512 [ 150.585175][ T7971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.627730][ T7992] loop2: detected capacity change from 0 to 512 [ 150.639831][ T7992] EXT4-fs (loop2): orphan cleanup on readonly fs [ 150.646638][ T7992] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 150.655967][ T7992] EXT4-fs (loop2): 1 truncate cleaned up [ 150.662177][ T7992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.693074][ T6076] kernel write not supported for file bpf-prog (pid: 6076 comm: kworker/0:13) [ 150.736262][ T7971] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.747515][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.760070][ T7971] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 150.789617][ T7971] Quota error (device loop5): write_blk: dquota write failed [ 150.797166][ T7971] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 150.807107][ T7971] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1107: Failed to acquire dquot type 0 [ 150.943074][ T4811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.970185][ T8016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.987142][ T8016] EXT4-fs error (device loop6): __ext4_iget:5426: inode #3: block 127754: comm syz.6.1118: invalid block [ 151.006911][ T8016] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.1118: Bad quota inode: 3, type: 0 [ 151.036070][ T8016] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 151.038402][ T8028] netlink: 'syz.2.1120': attribute type 41 has an invalid length. [ 151.052289][ T8016] EXT4-fs (loop6): mount failed [ 151.200360][ T29] audit: type=1400 audit(1770602902.080:2672): avc: denied { create } for pid=8035 comm="syz.6.1124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netrom_socket permissive=1 [ 151.393991][ T8052] x_tables: duplicate underflow at hook 1 [ 151.420588][ T8050] __nla_validate_parse: 7 callbacks suppressed [ 151.420608][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1129'. [ 151.436599][ T8050] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1129'. [ 151.445793][ T8050] netlink: 264 bytes leftover after parsing attributes in process `syz.6.1129'. [ 151.455109][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1129'. [ 151.464862][ T8050] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1129'. [ 151.474202][ T8050] netlink: 264 bytes leftover after parsing attributes in process `syz.6.1129'. [ 151.485221][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1129'. [ 151.495907][ T8057] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 151.510074][ T8057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.519397][ T8050] veth1: entered allmulticast mode [ 151.530996][ T8050] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1129'. [ 151.549999][ T8050] netlink: zone id is out of range [ 151.555287][ T8050] netlink: zone id is out of range [ 151.572982][ T8057] macvlan2: entered promiscuous mode [ 151.578653][ T8057] macvlan2: entered allmulticast mode [ 151.584614][ T8050] netlink: zone id is out of range [ 151.589917][ T8050] netlink: zone id is out of range [ 151.595255][ T8050] netlink: zone id is out of range [ 151.600536][ T8050] netlink: zone id is out of range [ 151.607275][ T8057] bond2: entered promiscuous mode [ 151.612810][ T8057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.621389][ T8050] netlink: zone id is out of range [ 151.629158][ T8057] bond2: left promiscuous mode [ 151.635556][ T8059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=8059 comm=syz.2.1131 [ 151.665404][ T8059] bond2: (slave ip6gretap1): making interface the new active one [ 151.673904][ T8050] netlink: zone id is out of range [ 151.679199][ T8050] netlink: zone id is out of range [ 151.685443][ T8059] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 151.694731][ T8050] netlink: zone id is out of range [ 151.768991][ T8069] set_capacity_and_notify: 1 callbacks suppressed [ 151.769012][ T8069] loop6: detected capacity change from 0 to 512 [ 151.794563][ T8069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.841746][ T8069] EXT4-fs error (device loop6): __ext4_iget:5426: inode #3: block 127754: comm syz.6.1134: invalid block [ 151.857626][ T8069] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.1134: Bad quota inode: 3, type: 0 [ 151.870146][ T8069] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 151.885311][ T8069] EXT4-fs (loop6): mount failed [ 151.891259][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 151.967911][ T8099] loop2: detected capacity change from 0 to 2048 [ 152.023407][ T8108] loop5: detected capacity change from 0 to 512 [ 152.061888][ T8108] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1145: corrupted inode contents [ 152.091547][ T8108] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 152.111930][ T8108] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1145: corrupted inode contents [ 152.134526][ T8108] EXT4-fs error (device loop5): ext4_evict_inode:301: inode #15: comm syz.5.1145: mark_inode_dirty error [ 152.147703][ T8108] EXT4-fs (loop5): 1 orphan inode deleted [ 152.155411][ T8108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.219828][ T4811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.434801][ T8145] netlink: 'syz.5.1155': attribute type 4 has an invalid length. [ 152.476375][ T8139] bond1: left promiscuous mode [ 152.481233][ T8139] bond1: left allmulticast mode [ 152.670961][ T8162] program syz.0.1161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.731022][ T8172] loop5: detected capacity change from 0 to 128 [ 152.739573][ T6053] usb 11-1: enqueue for inactive port 0 [ 152.745260][ T6053] usb 11-1: enqueue for inactive port 0 [ 152.771101][ T8172] msdos: Unknown parameter '18446744073709551615' [ 152.797637][ T29] audit: type=1400 audit(1770602903.670:2673): avc: denied { bind } for pid=8170 comm="syz.5.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.817186][ T29] audit: type=1400 audit(1770602903.670:2674): avc: denied { name_bind } for pid=8170 comm="syz.5.1162" src=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 152.838173][ T29] audit: type=1400 audit(1770602903.670:2675): avc: denied { node_bind } for pid=8170 comm="syz.5.1162" src=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 152.869131][ T6053] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 152.889537][ T29] audit: type=1400 audit(1770602903.740:2676): avc: denied { getopt } for pid=8184 comm="syz.1.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.937923][ T29] audit: type=1400 audit(1770602903.800:2677): avc: denied { setopt } for pid=8182 comm="syz.6.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.957778][ T29] audit: type=1400 audit(1770602903.810:2678): avc: denied { connect } for pid=8184 comm="syz.1.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.033920][ T8200] loop6: detected capacity change from 0 to 512 [ 153.047338][ T8200] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.062514][ T8204] 9p: Bad value for 'wfdno' [ 153.086659][ T8200] EXT4-fs error (device loop6): __ext4_iget:5426: inode #3: block 127754: comm syz.6.1172: invalid block [ 153.095268][ T8207] xt_hashlimit: size too large, truncated to 1048576 [ 153.135177][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 153.145028][ T8200] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.1172: Bad quota inode: 3, type: 0 [ 153.239929][ T8200] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 153.256385][ T8200] EXT4-fs (loop6): mount failed [ 153.433301][ T8250] xt_hashlimit: size too large, truncated to 1048576 [ 153.654274][ T8284] loop6: detected capacity change from 0 to 512 [ 153.678354][ T8284] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1190: invalid indirect mapped block 256 (level 2) [ 153.709952][ T8284] EXT4-fs (loop6): 2 truncates cleaned up [ 153.722510][ T8284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.764008][ T7397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.922120][ T8320] loop5: detected capacity change from 0 to 512 [ 153.946063][ T8320] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 153.958166][ T8328] xt_hashlimit: size too large, truncated to 1048576 [ 153.960217][ T8320] EXT4-fs (loop5): orphan cleanup on readonly fs [ 153.971823][ T8320] EXT4-fs (loop5): 1 truncate cleaned up [ 153.977961][ T8320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 154.095436][ T8337] 9p: Bad value for 'wfdno' [ 154.141258][ T4811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.388505][ T8348] xt_hashlimit: max too large, truncated to 1048576 [ 154.406679][ T8353] netlink: 'syz.6.1210': attribute type 7 has an invalid length. [ 154.435773][ T8354] lo speed is unknown, defaulting to 1000 [ 154.442365][ T8354] lo speed is unknown, defaulting to 1000 [ 154.449083][ T8354] lo speed is unknown, defaulting to 1000 [ 154.491459][ T8354] infiniband syz0: set down [ 154.496109][ T8354] infiniband syz0: added lo [ 154.501039][ T6053] lo speed is unknown, defaulting to 1000 [ 154.527366][ T8354] RDS/IB: syz0: added [ 154.533919][ T8354] smc: adding ib device syz0 with port count 1 [ 154.540681][ T8354] smc: ib device syz0 port 1 has no pnetid [ 154.547090][ T6075] lo speed is unknown, defaulting to 1000 [ 154.553724][ T8354] lo speed is unknown, defaulting to 1000 [ 154.656372][ T8354] lo speed is unknown, defaulting to 1000 [ 154.775329][ T8367] syzkaller0: entered promiscuous mode [ 154.780992][ T8367] syzkaller0: entered allmulticast mode [ 154.812390][ T8354] lo speed is unknown, defaulting to 1000 [ 154.924767][ T8354] lo speed is unknown, defaulting to 1000 [ 154.939811][ T5042] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.956667][ T8375] xt_hashlimit: size too large, truncated to 1048576 [ 155.068800][ T8354] lo speed is unknown, defaulting to 1000 [ 155.164259][ T8354] lo speed is unknown, defaulting to 1000 [ 155.222055][ T8391] netlink: 'syz.1.1220': attribute type 1 has an invalid length. [ 155.253410][ T8391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.265008][ T8390] batman_adv: batadv0: Interface deactivated: dummy0 [ 155.290835][ T8390] batman_adv: batadv0: Removing interface: dummy0 [ 155.325845][ T8390] bond2: (slave dummy0): making interface the new active one [ 155.341664][ T8390] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 155.352140][ T8400] tipc: Started in network mode [ 155.357220][ T8400] tipc: Node identity ac14140f, cluster identity 4711 [ 155.364942][ T8400] tipc: New replicast peer: 100.1.1.0 [ 155.370644][ T8400] tipc: Enabled bearer , priority 10 [ 155.437339][ T8368] lo speed is unknown, defaulting to 1000 [ 155.470109][ T8368] lo speed is unknown, defaulting to 1000 [ 155.533148][ T8405] xt_CT: No such helper "snmp_trap" [ 155.539206][ T6060] kernel read not supported for file /vcs (pid: 6060 comm: kworker/1:14) [ 155.584631][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 155.584724][ T29] audit: type=1400 audit(1770602906.460:2684): avc: denied { mounton } for pid=8413 comm="syz.1.1228" path="/212/file0" dev="tmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 155.616593][ T8416] loop5: detected capacity change from 0 to 1024 [ 155.625289][ T8416] EXT4-fs: inline encryption not supported [ 155.647450][ T8416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.685536][ T4811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.721423][ T8421] xt_hashlimit: size too large, truncated to 1048576 [ 155.874816][ T8425] loop5: detected capacity change from 0 to 1024 [ 155.904015][ T8425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.920567][ T8425] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.934186][ T29] audit: type=1400 audit(1770602906.810:2685): avc: denied { append } for pid=8424 comm="syz.5.1230" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.995056][ T29] audit: type=1400 audit(1770602906.870:2686): avc: denied { accept } for pid=8430 comm="syz.0.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.049916][ T4811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.244959][ T8457] 9p: Bad value for 'wfdno' [ 156.247438][ T8454] xt_hashlimit: size too large, truncated to 1048576 [ 156.369533][ T6077] tipc: Node number set to 2886997007 [ 156.548428][ T29] audit: type=1326 audit(1770602907.420:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8469 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 156.571969][ T29] audit: type=1326 audit(1770602907.420:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8469 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 156.604667][ T29] audit: type=1326 audit(1770602907.420:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8469 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 156.628254][ T29] audit: type=1326 audit(1770602907.420:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8469 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 156.651863][ T29] audit: type=1326 audit(1770602907.420:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8469 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 156.675366][ T29] audit: type=1326 audit(1770602907.420:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8469 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 156.698873][ T29] audit: type=1326 audit(1770602907.420:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8469 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 156.980258][ T4707] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.005254][ T8481] __nla_validate_parse: 3 callbacks suppressed [ 157.005270][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1249'. [ 157.061785][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1249'. [ 157.098987][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1249'. [ 157.123291][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1249'. [ 157.215557][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 157.225453][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1251'. [ 157.232969][ T8495] loop6: detected capacity change from 0 to 164 [ 157.234948][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1251'. [ 157.250085][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1251'. [ 157.264289][ T8495] iso9660: Bad value for 'check' [ 157.306936][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1254'. [ 157.343451][ T8498] xt_hashlimit: size too large, truncated to 1048576 [ 157.425871][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1257'. [ 157.438345][ T8509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1050 sclass=netlink_route_socket pid=8509 comm=syz.6.1257 [ 157.517455][ T8521] net_ratelimit: 21 callbacks suppressed [ 157.517475][ T8521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.550671][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.562580][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.571934][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.582116][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.591924][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.603548][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.613194][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.622097][ T8534] 9p: Bad value for 'wfdno' [ 157.636920][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.639969][ T8537] loop5: detected capacity change from 0 to 1024 [ 157.659091][ T8537] EXT4-fs: Ignoring removed nobh option [ 157.665159][ T8537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.682529][ T8545] batadv1: entered promiscuous mode [ 157.691795][ T8537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.720396][ T4811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.765453][ T8550] lo speed is unknown, defaulting to 1000 [ 157.771713][ T8550] lo speed is unknown, defaulting to 1000 [ 157.829906][ T8552] netlink: 'syz.1.1268': attribute type 2 has an invalid length. [ 157.842299][ T8555] sg_write: data in/out 32732/14 bytes for SCSI command 0x0-- guessing data in; [ 157.842299][ T8555] program syz.5.1267 not setting count and/or reply_len properly [ 158.039909][ T8571] xt_hashlimit: size too large, truncated to 1048576 [ 158.195074][ T8582] veth1_to_bridge: mtu greater than device maximum [ 158.458091][ T8608] 9p: Bad value for 'wfdno' [ 158.463708][ T8611] bridge: RTM_NEWNEIGH with invalid ether address [ 158.484830][ T8608] loop6: detected capacity change from 0 to 128 [ 158.509057][ T8613] xt_hashlimit: size too large, truncated to 1048576 [ 158.702399][ T8619] netlink: 'syz.0.1288': attribute type 1 has an invalid length. [ 158.788232][ T8630] ipip0: entered promiscuous mode [ 158.998036][ T8642] 9p: Bad value for 'wfdno' [ 159.137782][ T8650] xt_hashlimit: size too large, truncated to 1048576 [ 159.332693][ T8608] syz.6.1283 (8608) used greatest stack depth: 6208 bytes left [ 159.422627][ T8656] loop6: detected capacity change from 0 to 512 [ 159.441316][ T8656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.472398][ T8656] EXT4-fs error (device loop6): __ext4_iget:5426: inode #3: block 127754: comm syz.6.1300: invalid block [ 159.484228][ T8656] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.1300: Bad quota inode: 3, type: 0 [ 159.511292][ T8656] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 159.556945][ T8656] EXT4-fs (loop6): mount failed [ 159.612379][ T8665] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 159.647830][ T8667] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 159.748031][ T8675] cgroup2: Unexpected value for 'memory_localevents' [ 159.784380][ T8679] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 159.980685][ T8716] netlink: 'syz.0.1323': attribute type 29 has an invalid length. [ 160.010050][ T8716] netlink: 'syz.0.1323': attribute type 29 has an invalid length. [ 160.050409][ T8727] x_tables: duplicate entry at hook 3 [ 160.109772][ T8725] loop6: detected capacity change from 0 to 1024 [ 160.231548][ T8725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.248903][ T8725] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.261106][ T8725] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.1324: lblock 3 mapped to illegal pblock 3 (length 1) [ 160.276051][ T8725] EXT4-fs (loop6): Remounting filesystem read-only [ 160.411969][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8748 comm=syz.2.1330 [ 160.536587][ T8745] bridge0: port 3(dummy0) entered disabled state [ 160.543198][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.659661][ T8745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.704421][ T8745] hsr0: left promiscuous mode [ 160.754950][ T8745] veth1_macvtap: left allmulticast mode [ 160.778944][ T5041] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.805676][ T5041] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.836968][ T5041] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.880564][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 160.880581][ T29] audit: type=1400 audit(1770603167.764:2729): avc: denied { getopt } for pid=8762 comm="syz.0.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.947903][ T5041] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.979959][ T29] audit: type=1400 audit(1770603167.794:2730): avc: denied { map } for pid=8762 comm="syz.0.1336" path="socket:[24393]" dev="sockfs" ino=24393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.988455][ T8759] loop2: detected capacity change from 0 to 1024 [ 161.064782][ T8759] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.076864][ T8759] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 161.132202][ T8759] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.1334: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 161.177765][ T8779] lo speed is unknown, defaulting to 1000 [ 161.199122][ T8779] lo speed is unknown, defaulting to 1000 [ 161.213291][ T8759] EXT4-fs (loop2): no journal found [ 161.223190][ T29] audit: type=1400 audit(1770603168.104:2731): avc: denied { setopt } for pid=8767 comm="syz.5.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.336687][ T8786] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 161.361152][ T8786] bond3 (unregistering): Released all slaves [ 161.491217][ T8807] netlink: 'syz.5.1349': attribute type 29 has an invalid length. [ 161.507339][ T29] audit: type=1400 audit(1770603168.384:2732): avc: denied { getopt } for pid=8775 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.528992][ T8807] netlink: 'syz.5.1349': attribute type 29 has an invalid length. [ 161.550260][ T8807] unsupported nla_type 66 [ 161.577928][ T8816] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8816 comm=syz.2.1351 [ 161.577934][ T8815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8815 comm=syz.2.1351 [ 161.681105][ T8828] raw_sendmsg: syz.1.1355 forgot to set AF_INET. Fix it! [ 161.725834][ T8830] loop2: detected capacity change from 0 to 1024 [ 161.770000][ T8830] EXT4-fs: Ignoring removed orlov option [ 161.784057][ T8830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.809134][ T29] audit: type=1400 audit(1770603168.684:2733): avc: denied { setattr } for pid=8829 comm="syz.2.1356" name="secretmem" dev="secretmem" ino=24862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.856893][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.866773][ T29] audit: type=1326 audit(1770603168.714:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7c05aeb9 code=0x7ffc0000 [ 161.890587][ T29] audit: type=1326 audit(1770603168.714:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a7c05aeb9 code=0x7ffc0000 [ 161.914810][ T29] audit: type=1326 audit(1770603168.714:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7c05aeb9 code=0x7ffc0000 [ 161.938582][ T29] audit: type=1326 audit(1770603168.714:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7c05aeb9 code=0x7ffc0000 [ 161.962434][ T29] audit: type=1400 audit(1770603168.714:2738): avc: denied { unlink } for pid=8829 comm="syz.2.1356" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.017295][ T8847] lo speed is unknown, defaulting to 1000 [ 162.024119][ T8847] lo speed is unknown, defaulting to 1000 [ 162.439659][ T7397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.092924][ T8917] xt_hashlimit: size too large, truncated to 1048576 [ 163.111411][ T8920] xt_hashlimit: size too large, truncated to 1048576 [ 163.270071][ T8915] xt_hashlimit: size too large, truncated to 1048576 [ 163.439255][ T8954] SET target dimension over the limit! [ 163.471205][ T8959] netlink: 'syz.6.1396': attribute type 5 has an invalid length. [ 163.479176][ T8959] __nla_validate_parse: 8 callbacks suppressed [ 163.479200][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1396'. [ 163.500316][ T8959] ip6erspan0: entered promiscuous mode [ 163.511673][ T8965] sctp: [Deprecated]: syz.0.1398 (pid 8965) Use of int in maxseg socket option. [ 163.511673][ T8965] Use struct sctp_assoc_value instead [ 163.750441][ T8988] xt_hashlimit: size too large, truncated to 1048576 [ 163.822389][ T9005] lo speed is unknown, defaulting to 1000 [ 163.829090][ T9006] FAULT_INJECTION: forcing a failure. [ 163.829090][ T9006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.842381][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.0.1409 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.842414][ T9006] Tainted: [W]=WARN [ 163.842463][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 163.842476][ T9006] Call Trace: [ 163.842485][ T9006] [ 163.842493][ T9006] __dump_stack+0x1d/0x30 [ 163.842520][ T9006] dump_stack_lvl+0x95/0xd0 [ 163.842550][ T9006] dump_stack+0x15/0x1b [ 163.842585][ T9006] should_fail_ex+0x263/0x280 [ 163.842641][ T9006] should_fail+0xb/0x20 [ 163.842667][ T9006] should_fail_usercopy+0x1a/0x20 [ 163.842752][ T9006] _copy_from_iter+0xcf/0xea0 [ 163.842773][ T9006] ? alloc_pages_mpol+0x217/0x260 [ 163.842809][ T9006] copy_page_from_iter+0x178/0x2a0 [ 163.842855][ T9006] tun_get_user+0xbbd/0x27c0 [ 163.842882][ T9006] ? ref_tracker_alloc+0x1f2/0x2f0 [ 163.842930][ T9006] tun_chr_write_iter+0x15e/0x210 [ 163.842953][ T9006] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 163.842978][ T9006] vfs_write+0x5a6/0x9f0 [ 163.843054][ T9006] ksys_write+0xdc/0x1a0 [ 163.843074][ T9006] __x64_sys_write+0x40/0x50 [ 163.843095][ T9006] x64_sys_call+0x2847/0x3000 [ 163.843195][ T9006] do_syscall_64+0xc0/0x2a0 [ 163.843231][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.843254][ T9006] RIP: 0033:0x7f5f0a5db78e [ 163.843272][ T9006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.843370][ T9006] RSP: 002b:00007f5f0904dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.843392][ T9006] RAX: ffffffffffffffda RBX: 00007f5f0904e6c0 RCX: 00007f5f0a5db78e [ 163.843460][ T9006] RDX: 000000000000003e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 163.843474][ T9006] RBP: 00007f5f0904e090 R08: 0000000000000000 R09: 0000000000000000 [ 163.843487][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.843500][ T9006] R13: 00007f5f0a896128 R14: 00007f5f0a896090 R15: 00007ffc82e5c498 [ 163.843523][ T9006] [ 163.843996][ T9005] lo speed is unknown, defaulting to 1000 [ 163.964624][ T8999] xt_hashlimit: size too large, truncated to 1048576 [ 164.328606][ T9036] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1423'. [ 164.338125][ T9042] xt_hashlimit: size too large, truncated to 1048576 [ 164.340611][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1423'. [ 164.489033][ T9050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.535306][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1420'. [ 164.544337][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1420'. [ 164.553628][ T9044] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1420'. [ 164.566249][ T9055] loop6: detected capacity change from 0 to 512 [ 164.596789][ T9058] netlink: 'syz.5.1428': attribute type 10 has an invalid length. [ 164.624062][ T9058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.644030][ T9055] EXT4-fs (loop6): filesystem is read-only [ 164.651040][ T9058] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 164.675354][ T9060] xt_hashlimit: size too large, truncated to 1048576 [ 164.701439][ T9055] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 164.738934][ T9055] EXT4-fs (loop6): filesystem is read-only [ 164.744965][ T9055] EXT4-fs (loop6): orphan cleanup on readonly fs [ 164.772700][ T9055] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1418: bg 0: block 64: padding at end of block bitmap is not set [ 164.797430][ T9055] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 164.816470][ T9055] EXT4-fs (loop6): 1 orphan inode deleted [ 164.827565][ T9055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 164.873144][ T9068] xt_hashlimit: size too large, truncated to 1048576 [ 164.881323][ T9069] loop5: detected capacity change from 0 to 512 [ 165.007234][ T9069] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1431: inode has both inline data and extents flags [ 165.025876][ T9069] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1431: couldn't read orphan inode 15 (err -117) [ 165.060828][ T9069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.086651][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1434'. [ 165.089898][ T9082] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 165.168821][ T7397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.179413][ T4811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.282532][ T9130] xt_hashlimit: size too large, truncated to 1048576 [ 165.423133][ T9146] loop6: detected capacity change from 0 to 512 [ 165.477412][ T9146] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 165.503868][ T9146] EXT4-fs (loop6): 1 truncate cleaned up [ 165.519770][ T9146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.563721][ T9157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=9157 comm=syz.2.1451 [ 165.644134][ T7397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.726411][ T9175] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1458'. [ 165.748459][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1459'. [ 165.757464][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1459'. [ 165.772037][ T9175] lo speed is unknown, defaulting to 1000 [ 165.784267][ T9179] 9p: Bad value for 'rfdno' [ 165.789373][ T9175] lo speed is unknown, defaulting to 1000 [ 165.876808][ T9184] netlink: 'syz.6.1462': attribute type 10 has an invalid length. [ 165.891460][ T9184] batman_adv: batadv0: Adding interface: netdevsim1 [ 165.898114][ T9184] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.923912][ T9184] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 165.939676][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 165.939695][ T29] audit: type=1400 audit(1770603172.814:2919): avc: denied { ioctl } for pid=9178 comm="syz.2.1460" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 166.083821][ T9206] xt_hashlimit: size too large, truncated to 1048576 [ 166.202771][ T9216] loop6: detected capacity change from 0 to 256 [ 166.310723][ T9226] x_tables: duplicate underflow at hook 1 [ 166.323967][ T9221] netlink: 'syz.5.1474': attribute type 5 has an invalid length. [ 166.555115][ T9248] xt_hashlimit: size too large, truncated to 1048576 [ 166.680322][ T9257] sctp: [Deprecated]: syz.0.1487 (pid 9257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.680322][ T9257] Use struct sctp_sack_info instead [ 166.748101][ T9259] tmpfs: Bad value for 'mpol' [ 166.748112][ T29] audit: type=1400 audit(1770603173.624:2920): avc: denied { mounton } for pid=9254 comm="syz.2.1486" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 166.848517][ T29] audit: type=1326 audit(1770603173.724:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 166.872944][ T29] audit: type=1326 audit(1770603173.724:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 166.897034][ T29] audit: type=1326 audit(1770603173.734:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 166.920592][ T29] audit: type=1326 audit(1770603173.734:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 166.944427][ T29] audit: type=1326 audit(1770603173.734:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 166.969780][ T29] audit: type=1326 audit(1770603173.784:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 166.993605][ T29] audit: type=1326 audit(1770603173.784:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5f0a61ac22 code=0x7ffc0000 [ 167.016936][ T29] audit: type=1326 audit(1770603173.784:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9262 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5f0a61acb7 code=0x7ffc0000 [ 167.620593][ T9283] loop2: detected capacity change from 0 to 1024 [ 167.630191][ T9283] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 167.642905][ T9283] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 167.653579][ T9283] EXT4-fs (loop2): invalid journal inode [ 167.659668][ T9283] EXT4-fs (loop2): can't get journal size [ 167.666439][ T9283] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 17104912: comm syz.2.1494: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 167.682788][ T9283] EXT4-fs (loop2): failed to initialize system zone (-117) [ 167.690248][ T9283] EXT4-fs (loop2): mount failed [ 167.707910][ T9283] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29210 sclass=netlink_xfrm_socket pid=9283 comm=syz.2.1494 [ 167.909345][ T9294] xt_hashlimit: size too large, truncated to 1048576 [ 168.144955][ T9310] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 168.433373][ T9344] xt_hashlimit: size too large, truncated to 1048576 [ 168.484778][ T9337] loop6: detected capacity change from 0 to 8192 [ 168.550597][ T9337] loop6: p1[EZD] p2 p3 p4 [ 168.571409][ T9337] loop6: p3 start 117772289 is beyond EOD, truncated [ 168.578230][ T9337] loop6: p4 size 262144 extends beyond EOD, truncated [ 168.721343][ T5337] udevd[5337]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 168.733233][ T5296] udevd[5296]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 168.744435][ T5303] udevd[5303]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 168.759772][ T9358] __nla_validate_parse: 6 callbacks suppressed [ 168.759792][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1521'. [ 168.772439][ T9354] loop6: detected capacity change from 0 to 1024 [ 168.812345][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 168.822791][ T9354] EXT4-fs: Ignoring removed oldalloc option [ 168.828840][ T9354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.878610][ T9361] lo speed is unknown, defaulting to 1000 [ 168.886376][ T9361] lo speed is unknown, defaulting to 1000 [ 168.893334][ T9354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.938957][ T7397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.242126][ T9373] lo speed is unknown, defaulting to 1000 [ 169.272681][ T9373] lo speed is unknown, defaulting to 1000 [ 169.384126][ T9364] loop2: detected capacity change from 0 to 32768 [ 169.636535][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 169.637259][ T9364] loop2: p1 p2 p3 < p5 > [ 169.698495][ T9364] loop2: p1 size 242222080 extends beyond EOD, truncated [ 169.748674][ T9364] loop2: p2 start 16777215 is beyond EOD, truncated [ 169.829600][ T9383] lo speed is unknown, defaulting to 1000 [ 169.835908][ T9383] lo speed is unknown, defaulting to 1000 [ 170.153867][ T5303] udevd[5303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 170.156510][ T5337] udevd[5337]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 170.176885][ T5296] udevd[5296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 170.186718][ T9381] xt_hashlimit: size too large, truncated to 1048576 [ 170.209451][ T9406] SELinux: Context : is not valid (left unmapped). [ 170.341758][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 170.504033][ T9427] loop5: detected capacity change from 0 to 764 [ 170.540280][ T9434] block device autoloading is deprecated and will be removed. [ 170.591562][ T9436] netlink: 'syz.1.1549': attribute type 21 has an invalid length. [ 170.599553][ T9436] netlink: 'syz.1.1549': attribute type 4 has an invalid length. [ 170.618194][ T9441] loop0: detected capacity change from 0 to 256 [ 170.627452][ T9436] rdma_op ffff8881049cbd80 conn xmit_rdma 0000000000000000 [ 170.635643][ T9441] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.678497][ T9441] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.832742][ T9454] loop0: detected capacity change from 0 to 1764 [ 170.849387][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 170.858351][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 170.983419][ T9470] loop0: detected capacity change from 0 to 8192 [ 171.024828][ T9450] loop6: detected capacity change from 0 to 1764 [ 171.040200][ T5296] loop0: p1 p2 p4 < > [ 171.044311][ T5296] loop0: partition table partially beyond EOD, truncated [ 171.053415][ T5296] loop0: p1 start 16777216 is beyond EOD, truncated [ 171.060107][ T5296] loop0: p2 size 515840 extends beyond EOD, truncated [ 171.067783][ T5296] loop0: p4 start 16777216 is beyond EOD, truncated [ 171.083851][ T9470] loop0: p1 p2 p4 < > [ 171.087971][ T9470] loop0: partition table partially beyond EOD, truncated [ 171.102714][ T9484] FAULT_INJECTION: forcing a failure. [ 171.102714][ T9484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.111137][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 171.111204][ T29] audit: type=1400 audit(1770603177.984:3446): avc: denied { bind } for pid=9485 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 171.116138][ T9484] CPU: 0 UID: 0 PID: 9484 Comm: syz.2.1565 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.116173][ T9484] Tainted: [W]=WARN [ 171.116180][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 171.116194][ T9484] Call Trace: [ 171.116200][ T9484] [ 171.116209][ T9484] __dump_stack+0x1d/0x30 [ 171.116383][ T9484] dump_stack_lvl+0x95/0xd0 [ 171.116414][ T9484] dump_stack+0x15/0x1b [ 171.116436][ T9484] should_fail_ex+0x263/0x280 [ 171.116491][ T9484] should_fail+0xb/0x20 [ 171.116571][ T9484] should_fail_usercopy+0x1a/0x20 [ 171.116605][ T9484] _copy_from_user+0x1c/0xb0 [ 171.116630][ T9484] snd_seq_write+0x1d5/0x560 [ 171.116707][ T9484] vfs_writev+0x42b/0x900 [ 171.116734][ T9484] ? __pfx_snd_seq_write+0x10/0x10 [ 171.116765][ T9484] do_writev+0xe9/0x210 [ 171.116793][ T9484] __x64_sys_writev+0x45/0x50 [ 171.116831][ T9484] x64_sys_call+0x1ba5/0x3000 [ 171.116857][ T9484] do_syscall_64+0xc0/0x2a0 [ 171.116888][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.116924][ T9484] RIP: 0033:0x7f0a7c05aeb9 [ 171.116985][ T9484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.117046][ T9484] RSP: 002b:00007f0a7aab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 171.117069][ T9484] RAX: ffffffffffffffda RBX: 00007f0a7c2d5fa0 RCX: 00007f0a7c05aeb9 [ 171.117085][ T9484] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 171.117099][ T9484] RBP: 00007f0a7aab7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.117114][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.117198][ T9484] R13: 00007f0a7c2d6038 R14: 00007f0a7c2d5fa0 R15: 00007ffe172b8fe8 [ 171.117223][ T9484] [ 171.117464][ T9470] loop0: p1 start 16777216 is beyond EOD, [ 171.181260][ T9450] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 171.182609][ T9470] truncated [ 171.182620][ T9470] loop0: p2 size 515840 extends beyond EOD, truncated [ 171.183475][ T9470] loop0: p4 start 16777216 is beyond EOD, [ 171.231151][ T9494] xt_hashlimit: size too large, truncated to 1048576 [ 171.231708][ T9470] truncated [ 171.386506][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 171.455581][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 171.522866][ T9502] loop6: detected capacity change from 0 to 512 [ 171.538072][ T9502] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 171.548080][ T9502] FAT-fs (loop6): Filesystem has been set read-only [ 171.562282][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1570'. [ 171.630416][ T9509] loop6: detected capacity change from 0 to 512 [ 171.653684][ T9509] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.1572: iget: bogus i_mode (10) [ 171.675058][ T9509] EXT4-fs (loop6): get root inode failed [ 171.681012][ T9509] EXT4-fs (loop6): mount failed [ 171.695520][ T9521] tmpfs: Bad value for 'mpol' [ 171.703735][ T9520] netlink: 'syz.5.1575': attribute type 27 has an invalid length. [ 171.747129][ T9526] 9p: Bad value for 'wfdno' [ 171.760784][ T29] audit: type=1400 audit(1770603178.644:3447): avc: denied { write } for pid=9527 comm="syz.5.1578" path="socket:[29595]" dev="sockfs" ino=29595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.805725][ T9531] FAULT_INJECTION: forcing a failure. [ 171.805725][ T9531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.819128][ T9531] CPU: 1 UID: 0 PID: 9531 Comm: syz.5.1579 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.819236][ T9531] Tainted: [W]=WARN [ 171.819243][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 171.819255][ T9531] Call Trace: [ 171.819264][ T9531] [ 171.819273][ T9531] __dump_stack+0x1d/0x30 [ 171.819297][ T9531] dump_stack_lvl+0x95/0xd0 [ 171.819376][ T9531] dump_stack+0x15/0x1b [ 171.819395][ T9531] should_fail_ex+0x263/0x280 [ 171.819440][ T9531] should_fail+0xb/0x20 [ 171.819478][ T9531] should_fail_usercopy+0x1a/0x20 [ 171.819514][ T9531] _copy_from_user+0x1c/0xb0 [ 171.819540][ T9531] snd_seq_write+0x1d5/0x560 [ 171.819629][ T9531] vfs_writev+0x42b/0x900 [ 171.819660][ T9531] ? __pfx_snd_seq_write+0x10/0x10 [ 171.819697][ T9531] do_writev+0xe9/0x210 [ 171.819765][ T9531] __x64_sys_writev+0x45/0x50 [ 171.819792][ T9531] x64_sys_call+0x1ba5/0x3000 [ 171.819821][ T9531] do_syscall_64+0xc0/0x2a0 [ 171.819856][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.819883][ T9531] RIP: 0033:0x7ff04fd1aeb9 [ 171.819918][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.819937][ T9531] RSP: 002b:00007ff04e76f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 171.820000][ T9531] RAX: ffffffffffffffda RBX: 00007ff04ff95fa0 RCX: 00007ff04fd1aeb9 [ 171.820096][ T9531] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 171.820119][ T9531] RBP: 00007ff04e76f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.820135][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.820149][ T9531] R13: 00007ff04ff96038 R14: 00007ff04ff95fa0 R15: 00007ffcafd5dd48 [ 171.820167][ T9531] [ 172.032641][ T9536] loop0: detected capacity change from 0 to 1024 [ 172.039632][ T9536] EXT4-fs: Ignoring removed oldalloc option [ 172.077540][ T9538] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1582'. [ 172.104981][ T9536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.126757][ T9551] loop5: detected capacity change from 0 to 256 [ 172.169636][ T9551] FAT-fs (loop5): Directory bread(block 64) failed [ 172.173103][ T9540] loop2: detected capacity change from 0 to 1024 [ 172.181744][ T9551] FAT-fs (loop5): Directory bread(block 65) failed [ 172.196184][ T29] audit: type=1400 audit(1770603179.074:3448): avc: denied { mounton } for pid=9539 comm="syz.2.1583" path="/file1" dev="ramfs" ino=29627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 172.210359][ T9551] FAT-fs (loop5): Directory bread(block 66) failed [ 172.228264][ T9553] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 172.243136][ T29] audit: type=1326 audit(1770603179.114:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.6.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123403aeb9 code=0x7ffc0000 [ 172.243639][ T9551] FAT-fs (loop5): Directory bread(block 67) failed [ 172.266856][ T29] audit: type=1326 audit(1770603179.124:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.6.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123403aeb9 code=0x7ffc0000 [ 172.274324][ T9551] FAT-fs (loop5): Directory bread(block 68) failed [ 172.296910][ T29] audit: type=1326 audit(1770603179.124:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.6.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123403aeb9 code=0x7ffc0000 [ 172.303991][ T9551] FAT-fs (loop5): Directory bread(block 69) failed [ 172.338722][ T9551] FAT-fs (loop5): Directory bread(block 70) failed [ 172.345531][ T9551] FAT-fs (loop5): Directory bread(block 71) failed [ 172.347342][ T29] audit: type=1326 audit(1770603179.204:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.6.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123403aeb9 code=0x7ffc0000 [ 172.358787][ T9553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.375689][ T29] audit: type=1326 audit(1770603179.204:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.6.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f123403ac22 code=0x7ffc0000 [ 172.382759][ T9551] FAT-fs (loop5): Directory bread(block 72) failed [ 172.405959][ T29] audit: type=1326 audit(1770603179.204:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.6.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f123403acb7 code=0x7ffc0000 [ 172.413956][ T9551] FAT-fs (loop5): Directory bread(block 73) failed [ 172.436147][ T29] audit: type=1326 audit(1770603179.204:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.6.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1233ff7c51 code=0x7ffc0000 [ 172.444850][ T9540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.483789][ T9540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.517713][ T9557] openvswitch: netlink: Missing key (keys=40, expected=100) [ 172.561225][ T9572] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 172.571465][ T9572] EXT4-fs (loop2): group descriptors corrupted! [ 172.669535][ T9584] xt_hashlimit: size too large, truncated to 1048576 [ 172.689831][ T9586] FAULT_INJECTION: forcing a failure. [ 172.689831][ T9586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.703176][ T9586] CPU: 1 UID: 0 PID: 9586 Comm: syz.2.1595 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.703212][ T9586] Tainted: [W]=WARN [ 172.703219][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 172.703335][ T9586] Call Trace: [ 172.703344][ T9586] [ 172.703353][ T9586] __dump_stack+0x1d/0x30 [ 172.703384][ T9586] dump_stack_lvl+0x95/0xd0 [ 172.703484][ T9586] dump_stack+0x15/0x1b [ 172.703509][ T9586] should_fail_ex+0x263/0x280 [ 172.703540][ T9586] should_fail+0xb/0x20 [ 172.703568][ T9586] should_fail_usercopy+0x1a/0x20 [ 172.703753][ T9586] _copy_from_user+0x1c/0xb0 [ 172.703777][ T9586] snd_seq_write+0x1d5/0x560 [ 172.703804][ T9586] vfs_writev+0x42b/0x900 [ 172.703885][ T9586] ? __pfx_snd_seq_write+0x10/0x10 [ 172.703934][ T9586] do_writev+0xe9/0x210 [ 172.703963][ T9586] __x64_sys_writev+0x45/0x50 [ 172.704036][ T9586] x64_sys_call+0x1ba5/0x3000 [ 172.704066][ T9586] do_syscall_64+0xc0/0x2a0 [ 172.704157][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.704258][ T9586] RIP: 0033:0x7f0a7c05aeb9 [ 172.704279][ T9586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.704326][ T9586] RSP: 002b:00007f0a7aab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 172.704354][ T9586] RAX: ffffffffffffffda RBX: 00007f0a7c2d5fa0 RCX: 00007f0a7c05aeb9 [ 172.704372][ T9586] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 172.704425][ T9586] RBP: 00007f0a7aab7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.704439][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.704453][ T9586] R13: 00007f0a7c2d6038 R14: 00007f0a7c2d5fa0 R15: 00007ffe172b8fe8 [ 172.704518][ T9586] [ 172.870020][ T9592] random: crng reseeded on system resumption [ 172.872724][ T9592] Unrecognized hibernate image header format! [ 172.872773][ T9592] PM: hibernation: Image mismatch: architecture specific data [ 172.998003][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.087550][ T9613] lo speed is unknown, defaulting to 1000 [ 173.098465][ T9613] lo speed is unknown, defaulting to 1000 [ 173.159170][ T9605] bond0: entered promiscuous mode [ 173.164336][ T9605] bond_slave_0: entered promiscuous mode [ 173.170092][ T9605] bond_slave_1: entered promiscuous mode [ 173.178097][ T9605] bond0: left promiscuous mode [ 173.183118][ T9605] bond_slave_0: left promiscuous mode [ 173.188649][ T9605] bond_slave_1: left promiscuous mode [ 173.464218][ T9635] xt_hashlimit: size too large, truncated to 1048576 [ 173.681437][ T9651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.694850][ T9651] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.735210][ T9651] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1613: corrupted xattr block 6: invalid header [ 173.748958][ T9651] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 173.758299][ T9651] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1613: corrupted xattr block 6: invalid header [ 173.772744][ T9651] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 173.782618][ T9651] EXT4-fs error (device loop6): ext4_xattr_block_find:1879: inode #12: comm syz.6.1613: corrupted xattr block 6: invalid header [ 173.801318][ T9651] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.1613: corrupted xattr block 6: invalid header [ 173.814953][ T9651] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 173.824352][ T9651] EXT4-fs error (device loop6): ext4_get_inode_usage:888: inode #12: comm syz.6.1613: corrupted xattr block 6: invalid header [ 173.840800][ T9656] lo speed is unknown, defaulting to 1000 [ 173.847717][ T9656] lo speed is unknown, defaulting to 1000 [ 173.863564][ T7397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.921286][ T9667] __nla_validate_parse: 3 callbacks suppressed [ 173.921306][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 173.936598][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 173.946830][ T9667] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 173.996640][ T9671] tmpfs: Bad value for 'mpol' [ 174.067109][ T9669] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 174.079145][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1618'. [ 174.118580][ T9669] EXT4-fs error (device loop6): ext4_init_orphan_info:583: comm syz.6.1617: inode #0: comm syz.6.1617: iget: illegal inode # [ 174.136096][ T9674] bond3: entered promiscuous mode [ 174.150562][ T9669] EXT4-fs (loop6): get orphan inode failed [ 174.157517][ T9669] EXT4-fs (loop6): mount failed [ 174.158999][ T9680] 9p: Bad value for 'wfdno' [ 174.307571][ T9687] xt_hashlimit: size too large, truncated to 1048576 [ 174.321307][ T9698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1626'. [ 174.419786][ T9698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1626'. [ 174.429733][ T9698] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1626'. [ 174.542068][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 174.563369][ T9717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1631'. [ 174.574579][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1629'. [ 174.599878][ T9723] msdos: Bad value for 'time_offset' [ 174.761712][ T9750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.832085][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.858885][ T9775] veth2: entered allmulticast mode [ 174.908405][ T9777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.931075][ T9777] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.972923][ T9797] netlink: 'syz.2.1655': attribute type 16 has an invalid length. [ 174.980878][ T9797] netlink: 'syz.2.1655': attribute type 17 has an invalid length. [ 174.989950][ T7397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.037129][ T9797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.054418][ T9797] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.076592][ T9797] bridge0: port 3(dummy0) entered blocking state [ 175.083091][ T9797] bridge0: port 3(dummy0) entered forwarding state [ 175.099029][ T9797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.133146][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.148851][ T9797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.159741][ T9797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.175364][ T9797] veth1_vlan: left promiscuous mode [ 175.181710][ T9797] veth0_vlan: left promiscuous mode [ 175.187599][ T9797] veth0_vlan: entered promiscuous mode [ 175.196489][ T9797] veth1_vlan: entered promiscuous mode [ 175.205281][ T9797] veth1_macvtap: left promiscuous mode [ 175.211741][ T9797] veth0_macvtap: left promiscuous mode [ 175.218094][ T9797] veth0_macvtap: entered promiscuous mode [ 175.224875][ T9797] veth1_macvtap: entered promiscuous mode [ 175.230672][ T9797] veth1_macvtap: entered allmulticast mode [ 175.247234][ T9797] vlan3: left allmulticast mode [ 175.252362][ T9797] macsec0: left allmulticast mode [ 175.257422][ T9797] veth1_macvtap: left allmulticast mode [ 175.263822][ T9797] batadv0: entered promiscuous mode [ 175.270993][ T9797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.285553][ T9797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.297113][ T9797] bond3: left promiscuous mode [ 175.302147][ T9797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.312204][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.319324][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.354464][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.361571][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.396447][ T5058] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.405078][ T5058] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.425201][ T5058] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.464101][ T9814] lo speed is unknown, defaulting to 1000 [ 175.469765][ T5058] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.475878][ T9820] Unsupported NM flag settings (240) [ 175.498061][ T9814] lo speed is unknown, defaulting to 1000 [ 175.500741][ T9820] Unsupported NM flag settings (240) [ 175.616130][ T9836] set_capacity_and_notify: 7 callbacks suppressed [ 175.616148][ T9836] loop0: detected capacity change from 0 to 512 [ 175.652351][ T9836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.675169][ T9836] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.717818][ T9836] lo speed is unknown, defaulting to 1000 [ 175.724468][ T9836] lo speed is unknown, defaulting to 1000 [ 175.805413][ T9814] lo speed is unknown, defaulting to 1000 [ 175.828951][ T9814] lo speed is unknown, defaulting to 1000 [ 175.846378][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.905365][ T9846] 9p: Bad value for 'wfdno' [ 175.962122][ T9859] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 176.186137][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1678'. [ 176.205629][ T9879] loop2: detected capacity change from 0 to 512 [ 176.243136][ T9879] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1677: corrupted inode contents [ 176.255779][ T9879] EXT4-fs (loop2): Remounting filesystem read-only [ 176.263832][ T9879] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 176.274188][ T9879] EXT4-fs (loop2): 1 orphan inode deleted [ 176.280388][ T9879] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.353029][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 176.353048][ T29] audit: type=1326 audit(1770603183.234:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f938aeb9 code=0x7ffc0000 [ 176.383045][ T29] audit: type=1326 audit(1770603183.234:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f938aeb9 code=0x7ffc0000 [ 176.458575][ T29] audit: type=1326 audit(1770603183.284:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f938aeb9 code=0x7ffc0000 [ 176.482627][ T29] audit: type=1326 audit(1770603183.284:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f938aeb9 code=0x7ffc0000 [ 176.506227][ T29] audit: type=1326 audit(1770603183.294:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff8f938aeb9 code=0x7ffc0000 [ 176.529976][ T29] audit: type=1326 audit(1770603183.294:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8f938ac22 code=0x7ffc0000 [ 176.553619][ T29] audit: type=1326 audit(1770603183.294:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff8f934b78e code=0x7ffc0000 [ 176.577100][ T29] audit: type=1326 audit(1770603183.294:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff8f938ace7 code=0x7ffc0000 [ 176.600886][ T29] audit: type=1326 audit(1770603183.294:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8f934b78e code=0x7ffc0000 [ 176.625092][ T29] audit: type=1326 audit(1770603183.294:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff8f934b78e code=0x7ffc0000 [ 176.869978][ T3313] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 176.936552][ T9905] tipc: Trying to set illegal importance in message [ 177.043753][ T9914] 9p: Bad value for 'wfdno' [ 177.418429][ T9949] loop6: detected capacity change from 0 to 1024 [ 177.432113][ T9949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 177.451376][ T9949] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.526919][ T7397] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /153/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 177.562048][ T5041] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.581336][ T7397] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /153/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 177.634664][ T7397] EXT4-fs error (device loop6): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 177.657540][ T9957] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1700: bg 0: block 112: padding at end of block bitmap is not set [ 177.672321][ T7397] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /153/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 177.696624][ T5041] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.717012][ T7397] EXT4-fs error (device loop6): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 177.737381][ T7397] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /153/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 177.761144][ T7397] EXT4-fs error (device loop6): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 177.781722][ T5041] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.792217][ T7397] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /153/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 177.848450][ T9963] lo speed is unknown, defaulting to 1000 [ 177.859892][ T9963] lo speed is unknown, defaulting to 1000 [ 177.866086][ T7397] EXT4-fs error (device loop6): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 177.886684][ T5041] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.040003][ T9989] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 178.086083][ T5041] dummy0: left allmulticast mode [ 178.095417][ T5041] dummy0: left promiscuous mode [ 178.100719][ T5041] bridge0: port 3(dummy0) entered disabled state [ 178.120085][ T5041] bridge_slave_1: left allmulticast mode [ 178.125784][ T5041] bridge_slave_1: left promiscuous mode [ 178.131700][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.152186][ T5041] bridge_slave_0: left allmulticast mode [ 178.158062][ T5041] bridge_slave_0: left promiscuous mode [ 178.163990][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.219260][ T5041] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 178.244219][ T7397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.354376][ T5041] bond1 (unregistering): (slave bridge1): Releasing active interface [ 178.494512][ T5041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.520977][ T5041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.540309][ T5041] bond0 (unregistering): Released all slaves [ 178.548040][ T5041] bond1 (unregistering): Released all slaves [ 178.572453][ T5041] bond2 (unregistering): Released all slaves [ 178.591666][ T5041] bond3 (unregistering): Released all slaves [ 178.724124][ T9963] chnl_net:caif_netlink_parms(): no params data found [ 178.767973][ T5041] hsr_slave_0: left promiscuous mode [ 178.787268][ T5041] hsr_slave_1: left promiscuous mode [ 178.800805][ T5041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.808279][ T5041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.840242][ T5041] batadv0: left promiscuous mode [ 178.845424][ T5041] veth1_macvtap: left promiscuous mode [ 178.868479][ T5041] veth0_macvtap: left promiscuous mode [ 178.881395][ T5041] veth1_vlan: left promiscuous mode [ 178.886803][ T5041] veth0_vlan: left promiscuous mode [ 178.898113][T10036] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.972851][ T5041] team0 (unregistering): Port device team_slave_1 removed [ 178.985280][ T5041] team0 (unregistering): Port device team_slave_0 removed [ 179.049562][T10013] lo speed is unknown, defaulting to 1000 [ 179.058825][T10013] lo speed is unknown, defaulting to 1000 [ 179.081371][ T9963] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.088563][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.119137][ T9963] bridge_slave_0: entered allmulticast mode [ 179.133410][ T9963] bridge_slave_0: entered promiscuous mode [ 179.148271][ T9963] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.155639][ T9963] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.166720][ T9963] bridge_slave_1: entered allmulticast mode [ 179.179903][ T9963] bridge_slave_1: entered promiscuous mode [ 179.240358][ T9963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.258911][ T9963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.282012][ T9963] team0: Port device team_slave_0 added [ 179.293679][ T5041] IPVS: stop unused estimator thread 0... [ 179.300232][T10013] chnl_net:caif_netlink_parms(): no params data found [ 179.319254][ T9963] team0: Port device team_slave_1 added [ 179.356176][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.363192][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.389429][ T9963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.401441][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.408572][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.434860][ T9963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.457086][ T5041] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.482670][T10013] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.489824][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.497235][T10013] bridge_slave_0: entered allmulticast mode [ 179.504894][T10013] bridge_slave_0: entered promiscuous mode [ 179.525176][ T9963] hsr_slave_0: entered promiscuous mode [ 179.531322][ T9963] hsr_slave_1: entered promiscuous mode [ 179.537223][ T9963] debugfs: 'hsr0' already exists in 'hsr' [ 179.543013][ T9963] Cannot create hsr debugfs directory [ 179.551236][ T5041] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.562630][T10013] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.569772][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.577019][T10013] bridge_slave_1: entered allmulticast mode [ 179.583643][T10013] bridge_slave_1: entered promiscuous mode [ 179.610548][T10013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.625170][ T5041] batman_adv: batadv0: Removing interface: netdevsim1 [ 179.632518][ T5041] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.652885][T10013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.680182][ T5041] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.707224][T10013] team0: Port device team_slave_0 added [ 179.740908][T10013] team0: Port device team_slave_1 added [ 179.763859][T10013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.770902][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.797580][T10013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.875389][T10013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.882608][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.908985][T10013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.961165][T10013] hsr_slave_0: entered promiscuous mode [ 179.981901][T10013] hsr_slave_1: entered promiscuous mode [ 179.988151][T10013] debugfs: 'hsr0' already exists in 'hsr' [ 179.993927][T10013] Cannot create hsr debugfs directory [ 180.027137][ T5041] bridge_slave_1: left allmulticast mode [ 180.033003][ T5041] bridge_slave_1: left promiscuous mode [ 180.038734][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.060022][ T5041] bridge_slave_0: left allmulticast mode [ 180.065905][ T5041] bridge_slave_0: left promiscuous mode [ 180.071827][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.391493][ T5041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.401787][ T5041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.411430][ T5041] bond0 (unregistering): Released all slaves [ 180.462823][ T9963] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 180.506816][ T9963] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 180.559561][ T5041] hsr_slave_0: left promiscuous mode [ 180.566035][ T5041] hsr_slave_1: left promiscuous mode [ 180.573987][ T5041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.581849][ T5041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.598372][ T5041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.606036][ T5041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.629679][ T5041] veth1_macvtap: left promiscuous mode [ 180.635327][ T5041] veth0_macvtap: left promiscuous mode [ 180.648061][ T5041] veth1_vlan: left promiscuous mode [ 180.653649][ T5041] veth0_vlan: left promiscuous mode [ 180.740207][ T5041] team0 (unregistering): Port device team_slave_1 removed [ 180.750978][ T5041] team0 (unregistering): Port device team_slave_0 removed [ 180.785746][ T9963] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 180.796730][T10127] tipc: Enabling of bearer rejected, media not registered [ 180.809155][ T9963] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 180.861793][T10157] lo speed is unknown, defaulting to 1000 [ 180.873251][T10157] lo speed is unknown, defaulting to 1000 [ 180.887958][T10013] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 180.897853][T10013] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 180.924888][T10013] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 180.938104][T10013] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 180.964318][T10167] lo speed is unknown, defaulting to 1000 [ 180.977748][T10167] lo speed is unknown, defaulting to 1000 [ 181.026771][ T9963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.077634][ T9963] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.099965][T10013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.111899][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.119086][ T5041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.139641][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.146912][ T5041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.166051][T10192] loop0: detected capacity change from 0 to 512 [ 181.176885][T10192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.191527][T10013] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.201342][T10192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.214343][T10192] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.226740][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.233928][ T5055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.265678][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.272936][ T5058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.295267][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.363740][T10209] loop0: detected capacity change from 0 to 512 [ 181.373167][ T9963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.386172][T10209] msdos: Bad value for 'check' [ 181.459530][T10013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.522762][T10228] __nla_validate_parse: 69 callbacks suppressed [ 181.522783][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1740'. [ 181.639071][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 181.639090][ T29] audit: type=1400 audit(1770603188.514:3760): avc: denied { write } for pid=10243 comm="syz.0.1742" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.669049][ T29] audit: type=1400 audit(1770603188.514:3761): avc: denied { open } for pid=10243 comm="syz.0.1742" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.725443][T10258] netlink: 'syz.1.1743': attribute type 8 has an invalid length. [ 181.742695][ T9963] veth0_vlan: entered promiscuous mode [ 181.771475][ T9963] veth1_vlan: entered promiscuous mode [ 181.806155][ T9963] veth0_macvtap: entered promiscuous mode [ 181.831192][ T9963] veth1_macvtap: entered promiscuous mode [ 181.847568][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'. [ 181.877824][ T9963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.888893][T10013] veth0_vlan: entered promiscuous mode [ 181.899176][T10013] veth1_vlan: entered promiscuous mode [ 181.917587][ T9963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.951121][ T5047] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.976709][ T5047] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.996665][ T5047] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.997017][ T29] audit: type=1326 audit(1770603188.874:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 182.006514][ T5047] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.029297][ T29] audit: type=1326 audit(1770603188.874:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 182.029331][ T29] audit: type=1326 audit(1770603188.874:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 182.085464][ T29] audit: type=1326 audit(1770603188.874:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 182.109178][ T29] audit: type=1326 audit(1770603188.874:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 182.120113][T10277] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 182.132963][ T29] audit: type=1326 audit(1770603188.874:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 182.164815][ T29] audit: type=1326 audit(1770603188.874:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 182.188353][ T29] audit: type=1326 audit(1770603188.874:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5f0a61aeb9 code=0x7ffc0000 [ 182.224864][T10277] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 182.238279][T10013] veth0_macvtap: entered promiscuous mode [ 182.249363][T10013] veth1_macvtap: entered promiscuous mode [ 182.275013][T10277] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 182.284952][T10274] lo speed is unknown, defaulting to 1000 [ 182.288248][T10013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.304923][T10277] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 182.314894][T10274] lo speed is unknown, defaulting to 1000 [ 182.333947][T10013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.369997][T10277] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 182.382392][ T5041] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.402896][ T5041] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.414262][T10277] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 182.429999][ T5041] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.441536][T10277] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 182.460004][T10277] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 182.469024][ T5041] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.485536][T10284] loop7: detected capacity change from 0 to 8192 [ 182.492546][T10277] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 182.593526][T10289] devtmpfs: Too few inodes for current use [ 182.696964][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 182.869726][T10301] lo speed is unknown, defaulting to 1000 [ 182.921498][T10307] 9p: Bad value for 'rfdno' [ 182.931927][T10301] lo speed is unknown, defaulting to 1000 [ 182.940107][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1752'. [ 183.570180][T10333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.578833][T10333] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.797687][T10339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.864594][T10346] loop7: detected capacity change from 0 to 2048 [ 183.922269][T10346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.318984][ T9963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.332697][ T9963] ================================================================== [ 184.340906][ T9963] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 184.348742][ T9963] [ 184.351247][ T9963] read-write to 0xffff888237d26468 of 1 bytes by task 10323 on cpu 1: [ 184.359408][ T9963] folio_add_lru+0xa4/0x1e0 [ 184.363928][ T9963] shmem_get_folio_gfp+0x7b0/0xd60 [ 184.369312][ T9963] shmem_write_begin+0xfc/0x1f0 [ 184.374184][ T9963] generic_perform_write+0x183/0x490 [ 184.379571][ T9963] shmem_file_write_iter+0xc5/0xf0 [ 184.384875][ T9963] __kernel_write_iter+0x319/0x590 [ 184.390104][ T9963] dump_user_range+0xa7d/0xdb0 [ 184.395057][ T9963] elf_core_dump+0x21a2/0x2330 [ 184.399852][ T9963] coredump_write+0xacf/0xdf0 [ 184.404633][ T9963] vfs_coredump+0x26bc/0x3120 [ 184.409323][ T9963] get_signal+0xd7b/0xf60 [ 184.413747][ T9963] arch_do_signal_or_restart+0x96/0x450 [ 184.419389][ T9963] irqentry_exit+0xf7/0x510 [ 184.423902][ T9963] asm_exc_page_fault+0x26/0x30 [ 184.428937][ T9963] [ 184.431263][ T9963] read to 0xffff888237d26468 of 1 bytes by task 9963 on cpu 0: [ 184.438896][ T9963] __lru_add_drain_all+0x17e/0x450 [ 184.444108][ T9963] lru_add_drain_all+0x10/0x20 [ 184.448976][ T9963] invalidate_bdev+0x47/0x70 [ 184.453666][ T9963] ext4_put_super+0x624/0x7d0 [ 184.458358][ T9963] generic_shutdown_super+0xe6/0x210 [ 184.463655][ T9963] kill_block_super+0x2a/0x70 [ 184.468470][ T9963] ext4_kill_sb+0x42/0x80 [ 184.472913][ T9963] deactivate_locked_super+0x75/0x1c0 [ 184.478388][ T9963] deactivate_super+0x97/0xa0 [ 184.483171][ T9963] cleanup_mnt+0x2bb/0x330 [ 184.487774][ T9963] __cleanup_mnt+0x19/0x20 [ 184.492201][ T9963] task_work_run+0x130/0x1a0 [ 184.496985][ T9963] exit_to_user_mode_loop+0x1f7/0x6f0 [ 184.502378][ T9963] do_syscall_64+0x1d3/0x2a0 [ 184.507070][ T9963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.513067][ T9963] [ 184.515401][ T9963] value changed: 0x05 -> 0x06 [ 184.520084][ T9963] [ 184.522404][ T9963] Reported by Kernel Concurrency Sanitizer on: [ 184.528554][ T9963] CPU: 0 UID: 0 PID: 9963 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.540035][ T9963] Tainted: [W]=WARN [ 184.543837][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 184.553897][ T9963] ==================================================================