last executing test programs: 4m42.464439201s ago: executing program 4 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) flistxattr(r1, &(0x7f0000000500)=""/197, 0xc5) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="15060b00000000001c00128009000100626f6e64000000000c0050800500110001081df741b15736019a3ab5b20000002ef0d5d908ec4d576e5b75228996c75b1362e8f458546e683829a62787057cbd98fd621ffae753822acbaf8a36aff2c2cfc9"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 4m42.251802073s ago: executing program 4 (id=377): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001600010a00000000000000ff810000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 4m42.238964194s ago: executing program 4 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(0x0, 0x70, 0x103301) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB], 0xd0}}, 0x0) 4m41.972313099s ago: executing program 4 (id=387): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0x120423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x7f}, 0x2012, 0x0, 0x80002, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc9) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x0, 0x2, 0x6, 0x3, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) creat(&(0x7f0000000040)='./bus\x00', 0x0) 4m41.588812042s ago: executing program 4 (id=391): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r5, 0x25, 0x0, @val=@tcx}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r6, r8, 0x4, r4}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 4m41.127505018s ago: executing program 4 (id=399): fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0x5b, 0x7, 0x86, "dbcdb5acaad631fbef77aca941bdeec1", "01aba98d2134428cc3a6ec696afe705b87ade67f0bf6152893c74fc4ec246360249ea0755858f1cc920239e054c8d5c64f792aa94e8380a0a6025546db900f6c869474c9ee95"}, 0x5b, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x2, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) unshare(0x22020600) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000600)='./file0\x00', 0x2140840, 0x0, 0x3, 0x0, &(0x7f0000000100)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x1}}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000000100)) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) recvmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/39, 0x27}], 0x5, &(0x7f0000000400)=""/171, 0xab}, 0x400120c0) 4m40.950211669s ago: executing program 32 (id=399): fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0x5b, 0x7, 0x86, "dbcdb5acaad631fbef77aca941bdeec1", "01aba98d2134428cc3a6ec696afe705b87ade67f0bf6152893c74fc4ec246360249ea0755858f1cc920239e054c8d5c64f792aa94e8380a0a6025546db900f6c869474c9ee95"}, 0x5b, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x2, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) unshare(0x22020600) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000600)='./file0\x00', 0x2140840, 0x0, 0x3, 0x0, &(0x7f0000000100)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x1}}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000000100)) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) recvmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/39, 0x27}], 0x5, &(0x7f0000000400)=""/171, 0xab}, 0x400120c0) 4m31.153520088s ago: executing program 2 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000400a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(0x0, 0x70, 0x103301) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000600000000"], 0xd0}}, 0x0) 4m31.002095336s ago: executing program 2 (id=565): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) (async) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0x80000000000000}]) (async) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000100), 0x4) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) fallocate(r2, 0x70, 0x240000, 0x1ff) (async) io_setup(0x2278, &(0x7f0000000180)=0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)='I', 0x1}], 0x1) unshare(0x2040400) socket$inet_mptcp(0x2, 0x1, 0x106) (async) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x80000001) (async) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, 0x0, 0x2d, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r5, 0x0}]) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffcfd, 0xc, 0x3, [@struct]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000003c8b80001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000004e00000082000000009901000c00a16c90de00"/84], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10}, 0x94) 4m30.794637929s ago: executing program 2 (id=566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000100)={0x2, 0x200, 0x3, 0x101, 0x81, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x8887, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000001c0)='\xd9\x16h\xde\xf3|m\xe9^\xf5\"@\x05\xa0\x8f\xaa\x86nwZ\x11**F\xdf\xac\xc6(\x8e>\xbe0\xf1f\xb1\x87\x86!\x9c\xe1\xd2X\x18\xaaO', 0x7) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x2}, 0x94) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x0, 0xfffffffffffffffb, 0x6, 0x1, @scatter={0xa, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000500)=""/173, 0xad}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000000740)=""/119, 0x77}, {&(0x7f0000000940)=""/236, 0xec}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/93, 0x5d}, {&(0x7f0000000ac0)=""/107, 0x6b}, {&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000cc0)=""/211, 0xd3}]}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000080ffff000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018470000fcffffff00000000000000001843000004000000000000000000000018430000fdffffff0000000000000000bf91000000000000b7020000000000008500000084000000b7005792c1171a164640b444aa03d50b000000000000950000000000000034d58d3db14d78c2826bd0294abddde9539b80a121a48f422e0c6d76f5b6b527a3aa0a256a20c6c4e33e0dfd1fdda94df3a72eb2e47ab77b21f7eada8a919428f877"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) socket$phonet(0x23, 0x2, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6}, 0x10) sendto$packet(r6, &(0x7f0000000040), 0x0, 0x4000050, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000840)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@orlov}, {@nobh}, {@nobarrier}, {@errors_remount}, {@jqfmt_vfsv0}], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) 4m30.788349819s ago: executing program 2 (id=567): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) syz_io_uring_setup(0x2afc, &(0x7f00000002c0)={0x0, 0x59cd, 0x13090, 0x0, 0x72}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000040), 0x2) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_clone(0x8000000, &(0x7f0000000380)="0db00b9199697bcd16a6b18c738a4545bf5a330489d7000a01634f96a3820a039f07152d55ebe148339bb41677629de4d19ee0b37bc5d393a4299571ee3cdaa73367f2dc", 0x44, &(0x7f0000000240), &(0x7f0000000400), &(0x7f0000001300)="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") close_range(r3, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 4m30.695787075s ago: executing program 2 (id=568): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) (async) tkill(r0, 0x12) (async) tkill(r0, 0x12) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") 4m29.04746741s ago: executing program 2 (id=587): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000002180), 0x0) 4m28.973373004s ago: executing program 33 (id=587): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000002180), 0x0) 3m16.023274232s ago: executing program 0 (id=1424): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2080d6, &(0x7f0000000540), 0x1, 0x4c0, &(0x7f0000000580)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@fallback, 0xffffffffffffffff, 0x36, 0x601c}, 0x20) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x34}}, 0x20000800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)=0xf) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r7, 0x3}, &(0x7f0000000040)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000005000048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000020800034000000004100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) 3m15.536090641s ago: executing program 0 (id=1432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socket$inet6(0xa, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x34}}, 0x20000000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = socket(0xa, 0x5, 0x0) listen(r6, 0x100) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e2, &(0x7f0000000800)="$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") 3m15.281678225s ago: executing program 0 (id=1437): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@broadcast]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x38, r2, 0x1, 0x100, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x40084503, &(0x7f0000ffcffc)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000000)={r7, 0x3, r6, 0x3fffff, 0x80000}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0xa) 3m14.33495169s ago: executing program 0 (id=1457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140), 0x1, 0x51e, &(0x7f0000000280)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e) write$binfmt_elf64(r1, 0x0, 0x5b0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4101, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xc2, r3, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 3m14.057429706s ago: executing program 0 (id=1458): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000002600)=[{0x3d, 0x1, 0x1, 0x7ffff00c}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) 3m13.675636719s ago: executing program 0 (id=1465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2080d6, &(0x7f0000000540), 0x1, 0x4c0, &(0x7f0000000580)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@fallback, 0xffffffffffffffff, 0x36, 0x601c}, 0x20) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x34}}, 0x20000800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)=0xf) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r7, 0x3}, &(0x7f0000000040)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000005000048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000020800034000000004100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) 3m13.675414379s ago: executing program 34 (id=1465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2080d6, &(0x7f0000000540), 0x1, 0x4c0, &(0x7f0000000580)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@fallback, 0xffffffffffffffff, 0x36, 0x601c}, 0x20) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x34}}, 0x20000800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)=0xf) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r7, 0x3}, &(0x7f0000000040)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000005000048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000020800034000000004100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) 1m52.56238963s ago: executing program 3 (id=3073): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) pread64(r0, &(0x7f0000000040)=""/74, 0x4a, 0x5) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x61) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) (async) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0xe0) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) (async) io_uring_setup(0x2394, &(0x7f0000000180)={0x0, 0xce16, 0x0, 0x2, 0x2e6, 0x0, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xbc, r3, 0x104, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="71a8c00d700d"}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, {0x18, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3c}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x18}}]}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x13, 0x115, "64b8448b7232d6e305ceea81cad402"}], @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}}]}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008004}, 0x40080c1) (async) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000440)={0x15, 0x65, 0xffff, 0xff, 0x8, '9P2000.L'}, 0x15) (async) r6 = getuid() (async) sendfile(r0, r1, &(0x7f0000000480)=0x41, 0xa4e) (async) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x4010) (async) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r7, r6, r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x810) io_uring_enter(r1, 0x745, 0x97d8, 0x60, &(0x7f00000007c0)={[0x7]}, 0x8) (async) linkat(r0, &(0x7f0000000800)='./file0\x00', r0, &(0x7f0000000840)='./file0\x00', 0x1400) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r1) (async) getsockname$packet(r1, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x41040004}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r9, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x40045) (async) setreuid(r7, r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x100010, r2, 0x570e8000) (async) r11 = openat$incfs(r1, &(0x7f0000000a80)='.log\x00', 0x48000, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r11, 0xc0189378, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r12, {r1}}, './file0\x00'}) 1m52.499110825s ago: executing program 3 (id=3074): r0 = socket(0x40000000015, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x843, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x20000000, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) fstatfs(r1, &(0x7f0000001100)=""/4096) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 1m52.498681824s ago: executing program 3 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31040000000000f032001600000018000180140002006e657464657673696d3000000000000005000200010000000500020003000000050003"], 0x44}}, 0x0) 1m52.465799206s ago: executing program 3 (id=3076): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x18}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) write$UHID_INPUT(r2, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0xa, 0x1, 0x7, 0x20, 0x10}], &(0x7f0000000040)='GPL\x00', 0x35, 0x1d, &(0x7f0000000080)=""/29, 0x41000, 0xa, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000540)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, r3], 0x0, 0x10, 0x62c3a0dd}, 0x94) 1m52.302929566s ago: executing program 3 (id=3078): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2080d6, &(0x7f0000000540), 0x1, 0x4c0, &(0x7f0000000580)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@fallback, 0xffffffffffffffff, 0x36, 0x601c}, 0x20) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000), 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x34}}, 0x20000800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)=0xf) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r7, 0x3}, &(0x7f0000000040)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000005000048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000020800034000000004100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r11, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) 1m51.035452849s ago: executing program 3 (id=3095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x71ccbff67d9f0ad, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) 1m50.970672113s ago: executing program 35 (id=3095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x71ccbff67d9f0ad, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) 2.461975597s ago: executing program 5 (id=4897): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000001100)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001000)={'\x00', 0x7f, 0x1d13, 0xfffffffd, 0xf, 0x200, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0xfffd, 0x0) 2.367736422s ago: executing program 5 (id=4898): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x4, 0x8}, &(0x7f00000000c0)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xbcf6}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 2.367372372s ago: executing program 5 (id=4899): unshare(0x22020400) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) fchdir(r0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x1f0, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "4ba04b4d48d1a4096e11876ef68a621bf6e18efa728b13fc7d927feafe584221f90d07c544ddcdcc9d319b481111cee81b2b5a849df2ba28acf6dadf520b17b36ad73559baeca7f678e2e803a2ef47086772aaee31a045e8e181286f6ac4e23ddd42456108e8f871fff040530bcb62b924775fa81f8f51aaf354ca4a5a40d62c2d7ed5cb5389bfa94b1599bfa73de7fa5e1a5350c605a7b7010efdabd0c67d515fb575762fe4ab698be99139b8f6c09667f5eb01b88e9fa888"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xda, 0x6, "d5cc670f412de7785066a89cc23f7b3b072de7f475062b25aed5d343ffa8d035b657b5268718779a2b09f43fe740d33e697e117bd3158ef2a103bce2bf2b0f939e6cd6be3c9695988ea82038f36febc05cb399c58eeaca54f86f33c37303e4a32f72cc80314fbaae9b1f95959007eeea04d9d85a67b82f3a661adfbd6568ad2e31cb748098052bba4ecdc04d69914651580099bafdba262ced527acd28a7991d2337b3c1346f58ce595a85de0716ff3589d0171bd58adf5c5def4ca4f0a9b05a9ebfa301b1d27b1101e63f099a1187d46b64d5bb89ef"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14}}, 0x218}}, 0x0) 2.324310064s ago: executing program 5 (id=4900): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x128108, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) pselect6(0x40, &(0x7f0000000d40)={0x8, 0x9, 0x7, 0x8, 0x1, 0x21, 0x10000, 0x25}, 0x0, 0x0, 0x0, 0x0) 1.54656584s ago: executing program 8 (id=4908): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) socket$key(0xf, 0x3, 0x2) socket(0x28, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 1.502226513s ago: executing program 1 (id=4910): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff07000000000000030000cb1c527e00", @ANYRES32=r0, @ANYBLOB="181100"/13, @ANYRES32=r0, @ANYBLOB="0000000000000000448cb22b0000fa39d086d3ba5400000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000080), 0xdedb, 0x42001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000014c0)={0x5, 0xffffffff, 0x15, 0x14, 0x19f, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8000, 0x0, 0x81, 0x1001, {{0xf, 0x4, 0x1, 0x1, 0x3c, 0x65, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @broadcast, {[@noop, @generic={0x88, 0xa, "b1faddb364fe23d2"}, @noop, @lsrr={0x83, 0xf, 0xd9, [@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @rr={0x7, 0xb, 0xe7, [@multicast2, @multicast1]}, @noop]}}}}}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000140)={0x79c, 0x9, 0xffff, 0x3, 0x8}) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x29, 0x0, 0x40000) keyctl$set_timeout(0xf, r5, 0x7ffe) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.501537423s ago: executing program 8 (id=4911): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d3c9b, 0x0, 0x80, 0x0, &(0x7f0000000600)) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file3\x00', 0x2) 1.431768967s ago: executing program 8 (id=4912): shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(0x0, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r0, &(0x7f0000000300)=""/207, 0xfdef) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b000000000100405700000006000000000000", 0x46}, {&(0x7f00000002c0)="1c393502dda1a67d", 0x8}], 0x2}, 0x9cdc2384016f48f8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="54000000020600000000000000000000000000080900020073797a3200000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c080072742c6e65740000000d06ef2abc15bbe9d196130a02af7695b4a2ed57421f9a1da9c3100ee0b3d25052149f41ae9a7e3737a2b46ef36a7e18"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000090601020000000000000000030000000900020073797a3100000000050001000700000054000780060004404e1f0000180014801400024000000000000000000000000000000000050007003a000000050015000600000008000840000000021800018014000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.430989756s ago: executing program 1 (id=4914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) writev(r8, 0x0, 0x0) 1.421771297s ago: executing program 1 (id=4915): pause() r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000000)=0x78, 0x54) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x20000003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) r2 = dup2(r0, r1) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000892f00000000491f015600650000063290787f00000164010100440849d00000000201004424a681e000000100000007e000000100000fffac14143c291a091cac1414bb00001414aa7f000001ac14142de0000001e00000010a010102ac14142e0000009cb9f39cfca6cd894d21b90397ad53409e96095d21518cbf44c6bd4ca8fe1eef12fbe231c363652ebe8e15b943350d5757c33da529e2688afbf1355f406b21329036b9ac939965fc151894cf7ac620ac332dcb0f56eeabb899fb8027e337b156de878bd5993c3e1e2a950141bb41f03526d55ac89ef3fa889aeb7cc075a0ac83b5e7c007844aac02eaf1a3c8a2a28aae54d0aa0af078e4a50454f158cdf1298908452a812b9d022666574c549c2788edfc45b86c892712b93189b26bd9a099c21b4e67bb5edd698abf123eabc0019b9620bf6d1bc6f6174a319ed8d3939ac0946faf02e14e918a801a726d404dd307e3da8e000000000000"], 0x15e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffe}) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) write$tun(r3, &(0x7f0000002040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800e911ff20010000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x123) 1.411871907s ago: executing program 5 (id=4916): pause() r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x20000003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800e911ff20010000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x123) 1.138637453s ago: executing program 7 (id=4921): timerfd_create(0x0, 0x800) r0 = timerfd_create(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044800) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x40000000, 0x4, 0x0, 0x0, 0x5e, 0x3, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x9, 0xbe2, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.066733378s ago: executing program 7 (id=4922): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 1.005389111s ago: executing program 7 (id=4924): stat(&(0x7f0000000000)='./file1\x00', 0x0) 1.000257741s ago: executing program 6 (id=4925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) writev(r8, &(0x7f00000000c0), 0x0) 911.683527ms ago: executing program 7 (id=4926): syz_emit_ethernet(0x46, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1}}}}}}, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e1f, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000000000001100000067"], 0xa0}}], 0x1, 0x400c0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000ac0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0xfe, 0x44f, &(0x7f0000001400)="$eJzs3M9rHFUcAPDvTDbpbxu1/mhtNVrF4o+kSX8evFQUPCgIeqh4iklaareNNhFsKVo9xKMUvItHwb/Ak4KIehK86l0KRXJpFYSVmZ1J42Y3zSabbtv9fGCS92be5r3vzLzdN/N2EkDPGsp+JBFbI+L3iNhez/6/wFD91/X5ixN/z1+cSKJWe+OvJC93bf7iRFm0fN2WeqZWK/IbmtQ793bEeLU6da7Ij8yeeW9k5vyF50+dGT85dXLq7NjRowcP7Bk4PHaoI3FmcV3b9dH07p2vvHX5tYnjl9/5+ZusvVuL7fU4NkVEpSP1Rb7bhlpue6pjtdweti1KJ53bhayzvuKM78/6f0NH3R4vf9qtdgHrr1ar1bJu/0PzzZdqwF0siW63AOiO8oM+u/4tl1s4/Oi6q8ci3j9Sj/96sdS3VCItyvQ3XN920lBEHL/0z5fZEg33UwAA1sN3xyLiuWbjvzQeXFTunmIOZTAi7o2I+yLi/ojYEREPRORlH4qIh9usv3GGZOn4J72yqsBWKBv/vVDMbS2M//6t5fEXBvuK3LY8/v7kxKnq1P5in+yL/g1ZfnSZOr5/6bfPW21bPP7Llqz+cixYl16pNNyXnxyfHV9j2AuufhKxq9IQfy5ZmAlLImJnROxq6y/fuMI49czXu1uVunn8y+jAPFPtq4in68f/UjTEX0pazk+OHjk8dmhkY1Sn9o+UZ8VSv/w693qr+tcUfwdkx39z4/mfW4h/MNkYMXP+wul8vnam/Trm/vis5TXNas//geTNPD1QrPtwfHb23GjEQPLq0vVjN15b5svyWfz79jaLP83f48o98UhEZCfxnoh4NCIeK9r+eEQ8ERF7l4n/pxeffLf9+JvNmndeFv/kzY5/LD7+7Sf6Tv/4bfvxl7LjfzBP7SvWrOT9b6UNXMu+AwAAgDtFmn8HPkmHF9JpOjxc/w7/jticVqdnZp89Mf3B2cn6d+UHoz8t73RtX3Q/dLS4N1zmxxryB4r7xl/0bcrzwxPT1cluBw89bkuL/p/5s6/brQPWnee1oHfp/9C79H/oXfo/9C79H3pWkjRZ+XEXGgLcej7/oXfp/9C79H/oXfo/9KSWz8ana3rkX+KuT0Ta/qsqcZs0/k5KVFb8zyxWmdjQdFO335kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6478AAAD//0ys7uo=") (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @private0, 0x9}}, 0x24) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r5, 0x1, 0x70bd27, 0x4, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x24}}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) (async) sendto$packet(r7, &(0x7f00000000c0)="46b8", 0x2, 0x0, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0xe0}, 0x14) (async) socket$igmp6(0xa, 0x3, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0x1, 0x0, &(0x7f00000007c0)) 911.466166ms ago: executing program 6 (id=4927): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 910.367857ms ago: executing program 7 (id=4928): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20) eventfd(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1c0) fcntl$notify(r1, 0x402, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r1, r1, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@remote, @local, @void, {@x25={0x805, {0x3, 0x5, 0xf7, "29f4b72d680318d1b09c9abc8aa518e0569069bf5324dc339f90b6e6a7c3b4751f47ad52e1f97573304ddb582db6c683d69235c2495bf67ffa695be421"}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x10, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}], 0x0, 0x2}, 0x20) 873.777778ms ago: executing program 6 (id=4929): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setresuid(0xee00, 0xee01, 0xee01) setfsuid(0xee00) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="10000000000000000b0100000000000010000000000000001001"], 0x20}, 0x0) 853.56346ms ago: executing program 6 (id=4930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() getpriority(0x1, r1) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0x6, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0xfffffffb}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x3, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x8, 0xffffffffffffffff, 0x2, 0xc5, 0x4, 0x0, 0x9d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x66}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) process_vm_readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/107, 0x6b}], 0x1, &(0x7f0000002680)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000002500)=""/148, 0x94}], 0xa, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008847"], 0x24}}, 0x10) 731.621477ms ago: executing program 6 (id=4931): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004380)=@newtaction={0x2ac, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x220, 0x1, [@m_xt={0x9c, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x8b, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xb0, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x75, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b16"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x78, 0x1, [@m_nat={0x74, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d3"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000002180)="120000001200e7ef007b00000000000000a1", 0x12, 0x40488c4, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x401}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xed, &(0x7f00000006c0)=""/237, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x4, 0x4, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)=[0x1], 0x0, 0x10, 0x7}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x21, 0x700, 0x0, 0x7fff, {{0x10, 0x4, 0x0, 0x9, 0x40, 0x68, 0x0, 0x7f, 0x2f, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x0, [{@multicast1, 0xc8}, {@multicast1, 0xa}, {@multicast1, 0xff}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xd5d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex=r2, 0x37, 0x1, 0x400, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f00000041c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x240040c0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001f40)={0x0, 0x7}, 0x8) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@fallback=r4, r1, 0x17, 0x8, 0xffffffffffffffff, @void, @value=r5, @void, @void, r3}, 0x20) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 731.295787ms ago: executing program 6 (id=4932): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x100000, 0xffffffc1) 563.369977ms ago: executing program 8 (id=4933): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x57, 0x0}, 0x0, 0x120, 0x1}) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x1, '4k\x00'}) write$UHID_INPUT(r5, &(0x7f0000000a00)={0xf, {"a2e3ad21ed0d1bf91b28090955f70e06d038e7ff7fc6e5539b0d650e8b089b3f360768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07450936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xfffffffffffffd6a}}, 0x1006) syz_io_uring_setup(0x49b, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0x1, 0xa85}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0xfffffdc9}, 0x0, 0x40}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x6, 0x13, r0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180)=""/58, 0x3a}], 0x3, &(0x7f0000000240)=""/147, 0x93}, 0x0, 0x40000102, 0x1, {0x3, r9}}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000002000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105007f000001000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000e50000bb000000003c"], 0x1fc}}, 0x0) 516.12954ms ago: executing program 8 (id=4934): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) 498.27579ms ago: executing program 5 (id=4935): socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="710b7b2b2a05954980315201"], 0x34}, 0x1, 0x0, 0x0, 0x40800d4}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = open(0x0, 0x249c2, 0x0) r6 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) r7 = accept4$x25(r5, &(0x7f0000000000), &(0x7f00000000c0)=0x12, 0x80000) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000200)=r6) tkill(r6, 0x7) set_mempolicy(0x4000, &(0x7f0000000040)=0xa, 0x5) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x20000000) r8 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) setreuid(0x0, 0xee00) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @private1, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000100)="0700a4158888cc8f914022629042087134db4e40bdb31ce8754069b5a56c031801da3a213dad6429fd43c7bd96ac009953b433afee9269812341c7f21508dfdb1a33e7c1c34dfb0d2ae16f9629c68203bd4002045871e1e0b1e60deabaa36ebcbab23cbc8d678f47442f55e88809ba4ef1d7f8851db4351aa53e49885914a3b6104fa3641ea76b565c9ac756c90b281616ac0def82d9d1696e9514f246b74d607fbb2fefaf07d5f17a35fb279cf32892065f4cbf58ed200731b855311a84661ee65c8b70c8d0929b4b59b0a2068c34bd59dc1679ec9c48a9a35eb8b701b3d79665dd0dba68da0052a2ba91c00000000000", 0xf1}], 0x1}, 0x4048042) 451.949523ms ago: executing program 1 (id=4936): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x0, @link_local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 448.250904ms ago: executing program 8 (id=4937): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25df5bfd, {}, [@NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001a00040029bd7000fbdb5d76df2580402003fc00fe0600260000"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket(0x2a, 0x2, 0x0) sendto(r4, &(0x7f00000001c0)="cfab3cbb33ce214558ee007c9a12630650a9220160d016fdd90cae64604d03283fa7187931ee3faee20afcd1ab557ba35fcc8cf21027ad43", 0x38, 0x28044, &(0x7f0000000440)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/103, 0x67) lsetxattr$security_selinux(0x0, 0x0, &(0x7f000000c580)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40081, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, 0x0) r7 = open$dir(0x0, 0x400400, 0x1) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f000000ca80), 0x40, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r8, 0x80083314, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', r7, &(0x7f0000000340)='./file0\x00') sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x60000480) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) 154.34471ms ago: executing program 1 (id=4938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) writev(r8, &(0x7f00000000c0), 0x0) 61.700976ms ago: executing program 1 (id=4939): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYRES64, @ANYRESHEX, @ANYRESOCT=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 7 (id=4940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) close(0xffffffffffffffff) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183082, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) (async) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x66) kernel console output (not intermixed with test programs): ] loop8: detected capacity change from 0 to 512 [ 298.061182][T16395] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 298.088864][T16393] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 298.125136][T16393] EXT4-fs (loop8): orphan cleanup on readonly fs [ 298.181977][T16393] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4127: Failed to acquire dquot type 1 [ 298.223652][T16393] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4127: bg 0: block 40: padding at end of block bitmap is not set [ 298.300962][T16393] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 298.372627][T16393] EXT4-fs (loop8): 1 truncate cleaned up [ 298.384110][T16393] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.548934][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.784407][T16402] lo speed is unknown, defaulting to 1000 [ 298.794828][T16402] lo speed is unknown, defaulting to 1000 [ 298.805799][T16402] lo speed is unknown, defaulting to 1000 [ 298.822316][T16402] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 298.853921][T16402] lo speed is unknown, defaulting to 1000 [ 298.860026][T16402] lo speed is unknown, defaulting to 1000 [ 298.889837][T16402] lo speed is unknown, defaulting to 1000 [ 298.907459][T16402] lo speed is unknown, defaulting to 1000 [ 298.918103][T16402] lo speed is unknown, defaulting to 1000 [ 298.939892][T16402] lo speed is unknown, defaulting to 1000 [ 299.086782][T16418] __nla_validate_parse: 10 callbacks suppressed [ 299.086803][T16418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4134'. [ 299.420509][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4142'. [ 299.448228][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 299.448245][ T29] audit: type=1326 audit(1769875600.181:26437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.7.4142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ad9e8aeb9 code=0x0 [ 299.591959][T16455] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4146'. [ 299.631445][T16453] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.758231][T16453] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.838179][T16453] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.924494][T16463] FAULT_INJECTION: forcing a failure. [ 299.924494][T16463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.937738][T16463] CPU: 0 UID: 0 PID: 16463 Comm: syz.1.4149 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 299.937812][T16463] Tainted: [W]=WARN [ 299.937821][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.937926][T16463] Call Trace: [ 299.937934][T16463] [ 299.937944][T16463] __dump_stack+0x1d/0x30 [ 299.937973][T16463] dump_stack_lvl+0x95/0xd0 [ 299.937995][T16463] dump_stack+0x15/0x1b [ 299.938042][T16463] should_fail_ex+0x263/0x280 [ 299.938078][T16463] should_fail+0xb/0x20 [ 299.938108][T16463] should_fail_usercopy+0x1a/0x20 [ 299.938189][T16463] _copy_from_user+0x1c/0xb0 [ 299.938213][T16463] do_ipv6_setsockopt+0x124/0x21d0 [ 299.938250][T16463] ? kstrtoull+0x111/0x140 [ 299.938286][T16463] ? __rcu_read_unlock+0x4e/0x70 [ 299.938395][T16463] ? avc_has_perm_noaudit+0xab/0x130 [ 299.938436][T16463] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 299.938465][T16463] ipv6_setsockopt+0x59/0x130 [ 299.938500][T16463] tcp_setsockopt+0x98/0xb0 [ 299.938606][T16463] sock_common_setsockopt+0x69/0x80 [ 299.938633][T16463] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 299.938805][T16463] __sys_setsockopt+0x184/0x200 [ 299.938845][T16463] __x64_sys_setsockopt+0x64/0x80 [ 299.938890][T16463] x64_sys_call+0x21d5/0x3000 [ 299.938968][T16463] do_syscall_64+0xc0/0x2a0 [ 299.939006][T16463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.939030][T16463] RIP: 0033:0x7f134797aeb9 [ 299.939073][T16463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.939094][T16463] RSP: 002b:00007f13463d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.939122][T16463] RAX: ffffffffffffffda RBX: 00007f1347bf5fa0 RCX: 00007f134797aeb9 [ 299.939194][T16463] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 299.939207][T16463] RBP: 00007f13463d7090 R08: 0000000000000004 R09: 0000000000000000 [ 299.939292][T16463] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 299.939309][T16463] R13: 00007f1347bf6038 R14: 00007f1347bf5fa0 R15: 00007ffe197f5668 [ 299.939329][T16463] [ 300.181053][T16453] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.251845][ T52] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.264907][ T52] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.287283][ T364] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.295609][ T364] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.437582][ T29] audit: type=1326 audit(1769875601.107:26438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16478 comm="syz.8.4155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03409aaeb9 code=0x0 [ 300.493189][T16481] loop6: detected capacity change from 0 to 1024 [ 300.500295][T16481] EXT4-fs: Ignoring removed orlov option [ 300.514326][T16481] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.4156: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 300.542922][T16481] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.4156: Bad quota inode: 4, type: 1 [ 300.557655][T16481] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 300.580475][T16481] EXT4-fs (loop6): mount failed [ 300.794127][T16494] loop6: detected capacity change from 0 to 512 [ 300.802399][T16494] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 300.824614][T16494] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 300.853227][T16494] EXT4-fs (loop6): 1 truncate cleaned up [ 300.864657][T16494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.878388][T16497] netlink: 'syz.7.4161': attribute type 13 has an invalid length. [ 300.900100][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.948452][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4162'. [ 300.965213][T16500] tipc: Enabling of bearer rejected, failed to enable media [ 301.001628][ T3423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.032454][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4159'. [ 301.048469][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4159'. [ 301.059312][T16507] GUP no longer grows the stack in syz.7.4163 (16507): 200000004000-200000005000 (200000001000) [ 301.069906][T16507] CPU: 1 UID: 0 PID: 16507 Comm: syz.7.4163 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 301.069944][T16507] Tainted: [W]=WARN [ 301.069952][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.069970][T16507] Call Trace: [ 301.069978][T16507] [ 301.069988][T16507] __dump_stack+0x1d/0x30 [ 301.070035][T16507] dump_stack_lvl+0x95/0xd0 [ 301.070065][T16507] dump_stack+0x15/0x1b [ 301.070091][T16507] __get_user_pages+0x195b/0x1ea0 [ 301.070213][T16507] ? trace_event_reg+0xe0/0x190 [ 301.070239][T16507] ? perf_trace_add+0x176/0x1a0 [ 301.070315][T16507] __gup_longterm_locked+0x8d7/0xe30 [ 301.070349][T16507] ? __rcu_read_unlock+0x33/0x70 [ 301.070429][T16507] ? try_get_folio+0x369/0x3b0 [ 301.070513][T16507] ? try_grab_folio_fast+0xdc/0x370 [ 301.070543][T16507] gup_fast_fallback+0x1f3/0x13c0 [ 301.070586][T16507] get_user_pages_fast+0x5f/0x90 [ 301.070612][T16507] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 301.070646][T16507] ? __rcu_read_unlock+0x4e/0x70 [ 301.070686][T16507] iov_iter_get_pages2+0x5e/0xa0 [ 301.070715][T16507] __se_sys_vmsplice+0x538/0xf90 [ 301.070767][T16507] __x64_sys_vmsplice+0x55/0x70 [ 301.070794][T16507] x64_sys_call+0x2344/0x3000 [ 301.070861][T16507] do_syscall_64+0xc0/0x2a0 [ 301.070902][T16507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.070930][T16507] RIP: 0033:0x7f0ad9e8aeb9 [ 301.070951][T16507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.070975][T16507] RSP: 002b:00007f0ad88e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 301.071066][T16507] RAX: ffffffffffffffda RBX: 00007f0ada105fa0 RCX: 00007f0ad9e8aeb9 [ 301.071085][T16507] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007 [ 301.071101][T16507] RBP: 00007f0ad9ef8c1f R08: 0000000000000000 R09: 0000000000000000 [ 301.071118][T16507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.071163][T16507] R13: 00007f0ada106038 R14: 00007f0ada105fa0 R15: 00007ffe891d5148 [ 301.071189][T16507] [ 301.349940][T16515] loop8: detected capacity change from 0 to 128 [ 301.369624][T16518] loop6: detected capacity change from 0 to 1024 [ 301.398093][T16518] EXT4-fs: Ignoring removed orlov option [ 301.416509][T16515] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.429069][T16515] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.467194][T16518] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.4165: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 301.486195][T16518] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.4165: Bad quota inode: 4, type: 1 [ 301.497898][T16518] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 301.513091][T16518] EXT4-fs (loop6): mount failed [ 301.529207][T16515] EXT4-fs error (device loop8): __ext4_new_inode:1073: comm syz.8.4166: reserved inode found cleared - inode=2 [ 301.542660][ T29] audit: type=1400 audit(1769875602.136:26439): avc: denied { create } for pid=16514 comm="syz.8.4166" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 301.576645][T13109] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.648412][ T3423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.656468][T16509] Set syz1 is full, maxelem 65536 reached [ 301.726370][T16527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16527 comm=syz.7.4169 [ 301.797850][T16535] loop6: detected capacity change from 0 to 512 [ 301.856340][T16541] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.867056][T16535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.885842][T16535] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.918945][ T29] audit: type=1326 audit(1769875602.492:26440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.6.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ab1eaeb9 code=0x7ffc0000 [ 301.942727][ T29] audit: type=1326 audit(1769875602.492:26441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.6.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f81ab1eaeb9 code=0x7ffc0000 [ 301.966803][ T29] audit: type=1326 audit(1769875602.492:26442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.6.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ab1eaeb9 code=0x7ffc0000 [ 301.990553][ T29] audit: type=1326 audit(1769875602.492:26443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.6.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81ab1eaeb9 code=0x7ffc0000 [ 302.014519][ T29] audit: type=1326 audit(1769875602.492:26444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.6.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ab1eaeb9 code=0x7ffc0000 [ 302.038361][ T29] audit: type=1326 audit(1769875602.492:26445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.6.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81ab1eaeb9 code=0x7ffc0000 [ 302.062212][ T29] audit: type=1326 audit(1769875602.492:26446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.6.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ab1eaeb9 code=0x7ffc0000 [ 302.094401][T16553] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4176'. [ 302.128622][T16556] geneve0: Caught tx_queue_len zero misconfig [ 302.134834][T16556] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4178'. [ 302.168422][T16561] bond3: entered promiscuous mode [ 302.173578][T16561] bond3: entered allmulticast mode [ 302.179194][T16561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.234235][T16566] loop8: detected capacity change from 0 to 512 [ 302.240385][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.250732][T16566] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 302.282360][T16568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16568 comm=syz.5.4183 [ 302.298774][T16566] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4184: inode has both inline data and extents flags [ 302.317848][T16566] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4184: couldn't read orphan inode 15 (err -117) [ 302.364152][T16566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.377141][T16572] loop6: detected capacity change from 0 to 1024 [ 302.389645][T16572] EXT4-fs: Ignoring removed orlov option [ 302.442247][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.454100][T16572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.676959][T16583] loop8: detected capacity change from 0 to 1024 [ 302.688703][T16583] EXT4-fs: Ignoring removed orlov option [ 302.696747][T16583] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #4: comm syz.8.4187: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 302.715419][T16583] EXT4-fs error (device loop8): ext4_quota_enable:7180: comm syz.8.4187: Bad quota inode: 4, type: 1 [ 302.727528][T16583] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 302.742575][T16583] EXT4-fs (loop8): mount failed [ 302.861916][T16593] loop8: detected capacity change from 0 to 1024 [ 302.868946][T16593] EXT4-fs: Ignoring removed bh option [ 302.888378][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.889291][T16593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.919555][T16593] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.4189: Allocating blocks 497-513 which overlap fs metadata [ 302.936490][T16593] EXT4-fs (loop8): Remounting filesystem read-only [ 302.988329][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.095736][T16609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16609 comm=syz.7.4195 [ 303.162522][T16603] syzkaller1: entered promiscuous mode [ 303.168138][T16603] syzkaller1: entered allmulticast mode [ 303.280845][T16628] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4201'. [ 303.334229][T16634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.378927][T16638] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4205'. [ 303.411152][T16634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.500206][T16634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.570812][T16634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.617870][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.630237][T16205] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.642140][T16205] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.654410][T16205] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.749999][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.117677][T16671] loop6: detected capacity change from 0 to 512 [ 304.137471][T16671] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 304.148070][T16671] EXT4-fs (loop6): orphan cleanup on readonly fs [ 304.249178][T16671] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.4216: corrupted inode contents [ 304.290506][T16671] EXT4-fs (loop6): Remounting filesystem read-only [ 304.306011][T16671] EXT4-fs (loop6): 1 truncate cleaned up [ 304.312097][ T52] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 304.322789][ T52] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 304.340406][ T52] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 304.351631][T16671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.387471][T16686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16686 comm=syz.1.4223 [ 304.499322][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.668402][T16709] __nla_validate_parse: 1 callbacks suppressed [ 304.668425][T16709] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4231'. [ 304.693101][T16710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.722492][T16710] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.738957][T16710] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 304.754165][T16710] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 304.766401][T16710] EXT4-fs (loop6): This should not happen!! Data will be lost [ 304.766401][T16710] [ 304.776187][T16710] EXT4-fs (loop6): Total free blocks count 0 [ 304.782216][T16710] EXT4-fs (loop6): Free/Dirty block details [ 304.788224][T16710] EXT4-fs (loop6): free_blocks=65280 [ 304.793602][T16710] EXT4-fs (loop6): dirty_blocks=2 [ 304.798859][T16710] EXT4-fs (loop6): Block reservation details [ 304.804933][T16710] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 304.851414][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.965551][T16698] Set syz1 is full, maxelem 65536 reached [ 305.000360][T16731] bridge1: entered promiscuous mode [ 305.005784][T16731] bridge1: entered allmulticast mode [ 305.012758][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4238'. [ 305.022852][T16731] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4237'. [ 305.043483][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4238'. [ 305.073066][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4238'. [ 305.130356][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4242'. [ 305.405009][T16754] autofs4:pid:16754:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(951.8), cmd(0xc018937e) [ 305.418704][T16754] autofs4:pid:16754:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 305.437143][T16758] netlink: 'syz.5.4246': attribute type 1 has an invalid length. [ 305.454096][T16758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4246'. [ 305.463988][T16758] bond4: entered promiscuous mode [ 305.469176][T16758] bond4: entered allmulticast mode [ 305.475613][T16758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.578579][T16773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16773 comm=syz.1.4252 [ 305.750378][T16780] wireguard0: entered promiscuous mode [ 305.756009][T16780] wireguard0: entered allmulticast mode [ 305.804079][T16783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.821193][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4255'. [ 305.830219][T16783] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4255'. [ 305.843816][T16784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.862565][T16766] Set syz1 is full, maxelem 65536 reached [ 305.901390][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.928700][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 305.928719][ T29] audit: type=1326 audit(1769875862.239:26504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 305.961656][ T29] audit: type=1326 audit(1769875862.268:26505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 305.985648][ T29] audit: type=1326 audit(1769875862.268:26506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 306.009466][ T29] audit: type=1326 audit(1769875862.268:26507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 306.034067][T16795] netlink: 'syz.8.4257': attribute type 11 has an invalid length. [ 306.038604][ T29] audit: type=1326 audit(1769875862.268:26508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 306.065674][ T29] audit: type=1326 audit(1769875862.277:26509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 306.089531][ T29] audit: type=1326 audit(1769875862.277:26510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 306.113138][ T29] audit: type=1326 audit(1769875862.277:26511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 306.136756][ T29] audit: type=1326 audit(1769875862.277:26512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 306.160664][ T29] audit: type=1326 audit(1769875862.296:26513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.8.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 306.177074][T16799] netlink: 'syz.7.4260': attribute type 1 has an invalid length. [ 306.210575][T16801] set_capacity_and_notify: 2 callbacks suppressed [ 306.210626][T16801] loop8: detected capacity change from 0 to 512 [ 306.228093][T16799] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4260'. [ 306.237361][T16801] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 306.239281][T16799] bond8: entered promiscuous mode [ 306.252703][T16799] bond8: entered allmulticast mode [ 306.258988][T16799] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.296540][T16801] EXT4-fs (loop8): 1 truncate cleaned up [ 306.302719][T16801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.412631][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.658460][T16833] vhci_hcd vhci_hcd.0: Wrong hub descriptor type for USB 3.0 roothub. [ 306.735392][T16814] Set syz1 is full, maxelem 65536 reached [ 306.826424][T16833] syzkaller0: entered promiscuous mode [ 306.832221][T16833] syzkaller0: entered allmulticast mode [ 306.872060][ T52] syzkaller0: tun_net_xmit 48 [ 306.881272][T16838] netlink: 'syz.1.4274': attribute type 66 has an invalid length. [ 306.970074][T16844] netlink: 'syz.5.4276': attribute type 1 has an invalid length. [ 307.000533][T16844] bond5: entered promiscuous mode [ 307.005668][T16844] bond5: entered allmulticast mode [ 307.014449][T16844] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.140959][T16851] FAULT_INJECTION: forcing a failure. [ 307.140959][T16851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.154247][T16851] CPU: 0 UID: 0 PID: 16851 Comm: syz.8.4279 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.154364][T16851] Tainted: [W]=WARN [ 307.154372][T16851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.154385][T16851] Call Trace: [ 307.154449][T16851] [ 307.154460][T16851] __dump_stack+0x1d/0x30 [ 307.154487][T16851] dump_stack_lvl+0x95/0xd0 [ 307.154534][T16851] dump_stack+0x15/0x1b [ 307.154562][T16851] should_fail_ex+0x263/0x280 [ 307.154632][T16851] should_fail+0xb/0x20 [ 307.154663][T16851] should_fail_usercopy+0x1a/0x20 [ 307.154706][T16851] _copy_from_user+0x1c/0xb0 [ 307.154767][T16851] ___sys_sendmsg+0xc1/0x1e0 [ 307.154801][T16851] __x64_sys_sendmsg+0xd4/0x160 [ 307.154898][T16851] x64_sys_call+0x17ba/0x3000 [ 307.154929][T16851] do_syscall_64+0xc0/0x2a0 [ 307.155047][T16851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.155071][T16851] RIP: 0033:0x7f03409aaeb9 [ 307.155088][T16851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.155107][T16851] RSP: 002b:00007f033f407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.155131][T16851] RAX: ffffffffffffffda RBX: 00007f0340c25fa0 RCX: 00007f03409aaeb9 [ 307.155162][T16851] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 307.155226][T16851] RBP: 00007f033f407090 R08: 0000000000000000 R09: 0000000000000000 [ 307.155290][T16851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.155307][T16851] R13: 00007f0340c26038 R14: 00007f0340c25fa0 R15: 00007ffe93dfee68 [ 307.155335][T16851] [ 307.350795][T16854] loop6: detected capacity change from 0 to 1764 [ 307.386163][T16854] bridge0: entered allmulticast mode [ 307.469509][T16866] bond_slave_0: entered promiscuous mode [ 307.475276][T16866] bond_slave_1: entered promiscuous mode [ 307.484933][T16865] tls_set_device_offload_rx: netdev not found [ 307.510410][T16866] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 307.545647][T16866] bond_slave_0: left promiscuous mode [ 307.551127][T16866] bond_slave_1: left promiscuous mode [ 307.612215][T16880] netlink: 'syz.7.4290': attribute type 1 has an invalid length. [ 307.649536][T16880] bond9: entered promiscuous mode [ 307.654798][T16880] bond9: entered allmulticast mode [ 307.680878][T16880] 8021q: adding VLAN 0 to HW filter on device bond9 [ 307.710048][T16883] No such timeout policy "syz1" [ 307.889811][T16899] netlink: 'syz.5.4299': attribute type 21 has an invalid length. [ 307.898342][T16900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=16900 comm=syz.7.4298 [ 307.925724][T16900] team0: Device ipvlan0 failed to register rx_handler [ 307.940332][T16893] loop6: detected capacity change from 0 to 1024 [ 307.961036][T16893] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 307.972160][T16893] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 308.003865][T16893] EXT4-fs (loop6): invalid journal inode [ 308.013127][T16893] EXT4-fs (loop6): can't get journal size [ 308.034560][T16893] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 308.051704][T16893] EXT4-fs (loop6): mount failed [ 308.082471][T16892] uprobe: syz.6.4295:16892 failed to unregister, leaking uprobe [ 308.217647][T16918] mmap: syz.6.4306 (16918): VmData 29204480 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 308.459303][T16941] ip6gre1: entered promiscuous mode [ 308.464698][T16941] ip6gre1: entered allmulticast mode [ 308.681944][T16960] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 308.688168][T16960] syzkaller0: linktype set to 4 [ 308.739758][T16968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16968 comm=syz.7.4327 [ 308.764168][T16969] tipc: Invalid UDP bearer configuration [ 308.764193][T16969] tipc: Enabling of bearer rejected, failed to enable media [ 308.780275][T16972] tipc: Invalid UDP bearer configuration [ 308.780299][T16972] tipc: Enabling of bearer rejected, failed to enable media [ 308.856930][T16976] netlink: 'syz.5.4329': attribute type 11 has an invalid length. [ 308.922638][T16982] wg1 speed is unknown, defaulting to 1000 [ 308.937640][T16982] lo speed is unknown, defaulting to 1000 [ 308.963554][T16989] x_tables: duplicate underflow at hook 3 [ 309.380982][T17013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17013 comm=syz.7.4342 [ 309.392996][T17011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17011 comm=syz.1.4341 [ 309.548101][T17021] veth1_to_bond: entered allmulticast mode [ 309.554122][T16982] __vm_enough_memory: pid: 16982, comm: syz.8.4330, bytes: 11727051481088 not enough memory for the allocation [ 309.595302][T17021] veth1_to_bond: left allmulticast mode [ 309.731762][T17037] pim6reg: entered allmulticast mode [ 309.844765][T17044] netlink: 'syz.5.4355': attribute type 1 has an invalid length. [ 309.892400][T17039] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 309.920316][T17044] bond6: entered promiscuous mode [ 309.925455][T17044] bond6: entered allmulticast mode [ 309.956869][T17044] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.037361][T17049] __nla_validate_parse: 13 callbacks suppressed [ 310.037431][T17049] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4357'. [ 310.104465][T17056] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17056 comm=syz.7.4359 [ 310.341114][T17059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4360'. [ 310.349478][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4361'. [ 310.362123][T17059] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4360'. [ 310.387127][T17059] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.394517][T17059] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.429798][T17060] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4360'. [ 310.441013][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4364'. [ 310.580495][T17076] wg1 speed is unknown, defaulting to 1000 [ 310.608404][T17076] lo speed is unknown, defaulting to 1000 [ 310.629081][T17078] xt_hashlimit: size too large, truncated to 1048576 [ 310.946792][T17089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17089 comm=syz.6.4371 [ 311.024194][T17093] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4373'. [ 311.077810][T17096] loop6: detected capacity change from 0 to 1024 [ 311.137777][T17096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.191336][T17106] syzkaller0: entered promiscuous mode [ 311.197112][T17106] syzkaller0: entered allmulticast mode [ 311.637824][T17000] loop8: detected capacity change from 0 to 256 [ 311.655933][T17000] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.701671][T17126] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17126 comm=syz.5.4384 [ 311.725722][T17000] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.781127][T17128] wg1 speed is unknown, defaulting to 1000 [ 311.813894][T17128] lo speed is unknown, defaulting to 1000 [ 312.017030][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.153250][T17147] loop6: detected capacity change from 0 to 512 [ 312.193809][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4393'. [ 312.247299][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 312.247319][ T29] audit: type=1400 audit(1769875868.152:26721): avc: denied { nlmsg_write } for pid=17150 comm="syz.7.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 312.377497][T17156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17156 comm=syz.7.4396 [ 312.425447][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4397'. [ 312.457933][T17147] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 312.496732][T17147] EXT4-fs (loop6): orphan cleanup on readonly fs [ 312.533827][T17147] EXT4-fs error (device loop6): ext4_quota_enable:7173: comm syz.6.4390: Bad quota inum: 5, type: 1 [ 312.566037][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4399'. [ 312.597337][T17147] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 312.622840][T17147] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 312.630460][T17147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.689051][T17169] No such timeout policy "syz1" [ 312.752619][T17179] netlink: 'syz.1.4405': attribute type 11 has an invalid length. [ 312.872780][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.958779][T17191] hub 6-0:1.0: USB hub found [ 312.964382][T17191] hub 6-0:1.0: 8 ports detected [ 313.084701][T17201] loop6: detected capacity change from 0 to 512 [ 313.094128][T17201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.172950][T17206] batadv_slave_1: entered promiscuous mode [ 313.186776][T17205] batadv_slave_1: left promiscuous mode [ 313.241186][T17201] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4413: bg 0: block 458: padding at end of block bitmap is not set [ 313.288545][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.297788][T17210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17210 comm=syz.8.4415 [ 313.423096][ T29] audit: type=1326 audit(1769875869.255:26722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.8.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 313.461757][T17218] xt_HMARK: proto mask must be zero with L3 mode [ 313.475686][T17220] tls_set_device_offload_rx: netdev not found [ 313.486149][ T29] audit: type=1326 audit(1769875869.283:26723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.8.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 313.510030][ T29] audit: type=1326 audit(1769875869.283:26724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.8.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 313.533798][ T29] audit: type=1326 audit(1769875869.283:26725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.8.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 313.557342][ T29] audit: type=1326 audit(1769875869.283:26726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.8.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 313.581269][ T29] audit: type=1326 audit(1769875869.283:26727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.8.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 313.605623][ T29] audit: type=1326 audit(1769875869.283:26728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.8.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 313.629785][ T29] audit: type=1326 audit(1769875869.283:26729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.8.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 313.653519][ T29] audit: type=1326 audit(1769875869.283:26730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.8.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 313.690135][T17226] loop6: detected capacity change from 0 to 512 [ 313.708653][T17226] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 313.743777][T17226] EXT4-fs (loop6): 1 truncate cleaned up [ 313.752145][T17226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.893831][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.160695][T17247] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17247 comm=syz.6.4429 [ 314.178896][T17253] hsr0: entered promiscuous mode [ 314.191187][T17253] macsec1: entered promiscuous mode [ 314.196800][T17253] macsec1: entered allmulticast mode [ 314.202344][T17253] hsr0: entered allmulticast mode [ 314.207470][T17253] hsr_slave_0: entered allmulticast mode [ 314.213133][T17253] hsr_slave_1: entered allmulticast mode [ 314.279789][T17253] hsr0: left allmulticast mode [ 314.284714][T17253] hsr_slave_0: left allmulticast mode [ 314.290259][T17253] hsr_slave_1: left allmulticast mode [ 314.456701][T17264] hub 6-0:1.0: USB hub found [ 314.462434][T17264] hub 6-0:1.0: 8 ports detected [ 314.709362][T17280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17280 comm=syz.1.4442 [ 314.984159][T17286] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.019768][T17286] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.216909][T17292] loop6: detected capacity change from 0 to 512 [ 315.317644][T17292] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 315.343844][T17292] EXT4-fs (loop6): 1 truncate cleaned up [ 315.365209][T17297] loop8: detected capacity change from 0 to 512 [ 315.378021][T17292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.452078][T17292] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 315.482498][T17292] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 315.541873][T17297] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #17: comm syz.8.4448: iget: immutable or append flags not allowed on symlinks [ 315.562497][T17297] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4448: couldn't read orphan inode 17 (err -117) [ 315.579680][T17292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17292 comm=syz.6.4446 [ 315.594885][T17297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.650388][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.709648][T17309] __nla_validate_parse: 6 callbacks suppressed [ 315.709672][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4451'. [ 315.725270][T17309] netlink: 'syz.6.4451': attribute type 26 has an invalid length. [ 315.733218][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4451'. [ 315.804054][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.256401][T17321] loop6: detected capacity change from 0 to 1024 [ 316.287990][T17321] EXT4-fs: Ignoring removed orlov option [ 316.307745][T17321] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.4455: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 316.338224][T17321] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.4455: Bad quota inode: 4, type: 1 [ 316.364157][T17321] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 316.439174][T17321] EXT4-fs (loop6): mount failed [ 316.576707][T17333] loop6: detected capacity change from 0 to 8192 [ 316.752631][T17340] netlink: 'syz.1.4461': attribute type 1 has an invalid length. [ 316.795094][T17340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4461'. [ 316.913195][T17343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4461'. [ 316.941788][T17343] bond3: entered promiscuous mode [ 316.947022][T17343] bond3: entered allmulticast mode [ 316.965866][T17342] loop8: detected capacity change from 0 to 1024 [ 316.995164][T17343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.043735][T17342] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 317.053647][T17342] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 317.080022][T17342] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 317.092468][T17342] EXT4-fs error (device loop8): ext4_get_journal_inode:5849: inode #32: comm syz.8.4452: iget: special inode unallocated [ 317.113267][T17342] EXT4-fs (loop8): no journal found [ 317.118547][T17342] EXT4-fs (loop8): can't get journal size [ 317.130377][T17348] loop6: detected capacity change from 0 to 512 [ 317.145363][T17342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.182684][T17348] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.4462: iget: immutable or append flags not allowed on symlinks [ 317.234527][T17348] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4462: couldn't read orphan inode 17 (err -117) [ 317.352009][T17348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.460751][T17360] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4467'. [ 317.498529][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.549531][T17365] wg1 speed is unknown, defaulting to 1000 [ 317.560201][T17365] lo speed is unknown, defaulting to 1000 [ 317.606995][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.683979][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 317.683998][ T29] audit: type=1326 audit(1769875873.240:26845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 317.714324][ T29] audit: type=1326 audit(1769875873.240:26846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 317.735164][T17376] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4474'. [ 317.756345][T17383] FAULT_INJECTION: forcing a failure. [ 317.756345][T17383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.769585][T17383] CPU: 0 UID: 0 PID: 17383 Comm: syz.1.4477 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 317.769632][T17383] Tainted: [W]=WARN [ 317.769640][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.769657][T17383] Call Trace: [ 317.769666][T17383] [ 317.769677][T17383] __dump_stack+0x1d/0x30 [ 317.769745][T17383] dump_stack_lvl+0x95/0xd0 [ 317.769768][T17383] dump_stack+0x15/0x1b [ 317.769793][T17383] should_fail_ex+0x263/0x280 [ 317.769836][T17383] should_fail+0xb/0x20 [ 317.769865][T17383] should_fail_usercopy+0x1a/0x20 [ 317.769900][T17383] _copy_to_user+0x20/0xa0 [ 317.769927][T17383] simple_read_from_buffer+0xb5/0x130 [ 317.770057][T17383] proc_fail_nth_read+0x10e/0x150 [ 317.770126][T17383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.770270][T17383] vfs_read+0x1ab/0x7f0 [ 317.770294][T17383] ? __rcu_read_unlock+0x4e/0x70 [ 317.770368][T17383] ? __fget_files+0x184/0x1c0 [ 317.770396][T17383] ? mutex_lock+0x57/0x90 [ 317.770421][T17383] ksys_read+0xdc/0x1a0 [ 317.770441][T17383] __x64_sys_read+0x40/0x50 [ 317.770533][T17383] x64_sys_call+0x2889/0x3000 [ 317.770585][T17383] do_syscall_64+0xc0/0x2a0 [ 317.770689][T17383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.770719][T17383] RIP: 0033:0x7f134793b78e [ 317.770736][T17383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 317.770755][T17383] RSP: 002b:00007f13463d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.770775][T17383] RAX: ffffffffffffffda RBX: 00007f13463d76c0 RCX: 00007f134793b78e [ 317.770790][T17383] RDX: 000000000000000f RSI: 00007f13463d70a0 RDI: 0000000000000004 [ 317.770856][T17383] RBP: 00007f13463d7090 R08: 0000000000000000 R09: 0000000000000000 [ 317.770874][T17383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.770892][T17383] R13: 00007f1347bf6038 R14: 00007f1347bf5fa0 R15: 00007ffe197f5668 [ 317.770920][T17383] [ 317.798557][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4474'. [ 317.820786][ T29] audit: type=1326 audit(1769875873.278:26847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 317.824850][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4474'. [ 317.829214][ T29] audit: type=1326 audit(1769875873.278:26848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 317.989860][T17376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.005743][ T29] audit: type=1326 audit(1769875873.278:26849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 318.069098][ T29] audit: type=1326 audit(1769875873.278:26850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 318.092771][ T29] audit: type=1326 audit(1769875873.278:26851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 318.116541][ T29] audit: type=1326 audit(1769875873.278:26852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 318.140190][ T29] audit: type=1326 audit(1769875873.278:26853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 318.163931][ T29] audit: type=1326 audit(1769875873.278:26854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.8.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 318.251441][T17384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.276456][T17384] bond4: (slave bond0): Enslaving as an active interface with an up link [ 318.285104][T17385] bridge0: port 3(syz_tun) entered blocking state [ 318.291892][T17385] bridge0: port 3(syz_tun) entered disabled state [ 318.327886][T17394] loop6: detected capacity change from 0 to 512 [ 318.346882][T17396] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4480'. [ 318.356957][T17394] EXT4-fs: Ignoring removed nobh option [ 318.381610][T17385] syz_tun: entered allmulticast mode [ 318.388295][T17385] syz_tun: entered promiscuous mode [ 318.394069][T17385] bridge0: port 3(syz_tun) entered blocking state [ 318.400667][T17385] bridge0: port 3(syz_tun) entered forwarding state [ 318.430895][T17394] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.4479: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 318.510452][T17394] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.4479: Bad quota inode: 4, type: 1 [ 318.551172][T17394] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 318.599366][T17394] EXT4-fs (loop6): mount failed [ 318.625518][T17394] netlink: 'syz.6.4479': attribute type 11 has an invalid length. [ 318.633466][T17394] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4479'. [ 318.716370][T17415] syzkaller0: entered promiscuous mode [ 318.721950][T17415] syzkaller0: entered allmulticast mode [ 319.041285][T17431] xt_TCPMSS: Only works on TCP SYN packets [ 319.083498][T17430] loop8: detected capacity change from 0 to 764 [ 319.099796][T17420] Set syz1 is full, maxelem 65536 reached [ 319.188553][T17437] loop6: detected capacity change from 0 to 512 [ 319.197339][T17440] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17440 comm=syz.1.4494 [ 319.269970][T17437] EXT4-fs (loop6): 1 orphan inode deleted [ 319.288199][T17437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.300973][ T52] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 319.319248][T17444] loop8: detected capacity change from 0 to 1024 [ 319.321813][T17452] batadv_slave_1: entered promiscuous mode [ 319.341677][T17452] bond0: (slave bridge_slave_1): Releasing backup interface [ 319.349244][T17437] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.378878][T17444] EXT4-fs: Ignoring removed orlov option [ 319.398130][T17437] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.4493: iget: bad i_size value: 360287970189639690 [ 319.422520][T17444] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #4: comm syz.8.4496: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 319.444834][T17452] batadv_slave_1: left promiscuous mode [ 319.459466][T17444] EXT4-fs error (device loop8): ext4_quota_enable:7180: comm syz.8.4496: Bad quota inode: 4, type: 1 [ 319.476415][T17461] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #12: block 13: comm syz.6.4493: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 319.523827][T17444] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.567873][T17444] EXT4-fs (loop8): mount failed [ 319.575386][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.580400][T17468] netlink: 'syz.7.4502': attribute type 2 has an invalid length. [ 319.592341][T17468] netlink: 'syz.7.4502': attribute type 1 has an invalid length. [ 319.635450][T17468] netlink: 'syz.7.4502': attribute type 2 has an invalid length. [ 319.642938][T17470] loop6: detected capacity change from 0 to 512 [ 319.643399][T17468] netlink: 'syz.7.4502': attribute type 1 has an invalid length. [ 319.686225][T17470] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 319.712756][T17470] EXT4-fs (loop6): 1 truncate cleaned up [ 319.719063][T17470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.805740][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.849978][T17482] FAULT_INJECTION: forcing a failure. [ 319.849978][T17482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.863210][T17482] CPU: 0 UID: 0 PID: 17482 Comm: syz.6.4505 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 319.863256][T17482] Tainted: [W]=WARN [ 319.863265][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.863332][T17482] Call Trace: [ 319.863339][T17482] [ 319.863348][T17482] __dump_stack+0x1d/0x30 [ 319.863380][T17482] dump_stack_lvl+0x95/0xd0 [ 319.863466][T17482] dump_stack+0x15/0x1b [ 319.863492][T17482] should_fail_ex+0x263/0x280 [ 319.863528][T17482] should_fail+0xb/0x20 [ 319.863557][T17482] should_fail_usercopy+0x1a/0x20 [ 319.863679][T17482] _copy_from_user+0x1c/0xb0 [ 319.863707][T17482] do_fcntl+0x667/0xf80 [ 319.863751][T17482] __se_sys_fcntl+0xb1/0x120 [ 319.863864][T17482] __x64_sys_fcntl+0x43/0x50 [ 319.863895][T17482] x64_sys_call+0x2d6f/0x3000 [ 319.863921][T17482] do_syscall_64+0xc0/0x2a0 [ 319.863962][T17482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.864031][T17482] RIP: 0033:0x7f81ab1eaeb9 [ 319.864052][T17482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.864076][T17482] RSP: 002b:00007f81a9c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 319.864100][T17482] RAX: ffffffffffffffda RBX: 00007f81ab465fa0 RCX: 00007f81ab1eaeb9 [ 319.864115][T17482] RDX: 00002000000000c0 RSI: 0000000000000006 RDI: 0000000000000003 [ 319.864177][T17482] RBP: 00007f81a9c47090 R08: 0000000000000000 R09: 0000000000000000 [ 319.864194][T17482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.864210][T17482] R13: 00007f81ab466038 R14: 00007f81ab465fa0 R15: 00007fff11b757b8 [ 319.864236][T17482] [ 320.191156][T17474] Set syz1 is full, maxelem 65536 reached [ 320.204419][T17483] loop8: detected capacity change from 0 to 1024 [ 320.223774][T17483] EXT4-fs: Ignoring removed orlov option [ 320.242003][T17483] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #4: comm syz.8.4504: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 320.263213][T17483] EXT4-fs error (device loop8): ext4_quota_enable:7180: comm syz.8.4504: Bad quota inode: 4, type: 1 [ 320.274427][T17483] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 320.289514][T17483] EXT4-fs (loop8): mount failed [ 320.402025][T17490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17490 comm=syz.8.4508 [ 320.447246][T16255] bond0: (slave syz_tun): Releasing backup interface [ 320.497319][T17497] tmpfs: Bad value for 'nr_inodes' [ 320.535621][ T364] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.600349][ T364] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.613692][ T3423] IPVS: starting estimator thread 0... [ 320.664960][T17493] wg1 speed is unknown, defaulting to 1000 [ 320.673777][ T364] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.768495][T17507] IPVS: using max 2352 ests per chain, 117600 per kthread [ 320.809903][T17493] lo speed is unknown, defaulting to 1000 [ 320.872137][ T364] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.939247][T17493] chnl_net:caif_netlink_parms(): no params data found [ 320.951266][T17516] loop8: detected capacity change from 0 to 1024 [ 320.982371][T17516] EXT4-fs: Ignoring removed orlov option [ 321.004708][T17516] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #4: comm syz.8.4514: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 321.046570][T17516] EXT4-fs error (device loop8): ext4_quota_enable:7180: comm syz.8.4514: Bad quota inode: 4, type: 1 [ 321.057835][T17516] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 321.072997][T17516] EXT4-fs (loop8): mount failed [ 321.087604][ T364] bridge_slave_1: left allmulticast mode [ 321.093357][ T364] bridge_slave_1: left promiscuous mode [ 321.099350][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.118658][ T364] bridge_slave_0: left allmulticast mode [ 321.124560][ T364] bridge_slave_0: left promiscuous mode [ 321.130322][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.342178][ T364] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 321.362499][T17544] xt_hashlimit: size too large, truncated to 1048576 [ 321.577553][T17554] loop8: detected capacity change from 0 to 1024 [ 321.604786][T17554] EXT4-fs: Ignoring removed orlov option [ 321.689102][ T364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.697899][T17536] Set syz1 is full, maxelem 65536 reached [ 321.711000][ T364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.720025][T17554] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #4: comm syz.8.4517: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 321.747851][T17554] EXT4-fs error (device loop8): ext4_quota_enable:7180: comm syz.8.4517: Bad quota inode: 4, type: 1 [ 321.759841][T17554] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 321.760435][ T364] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 321.786914][ T364] bond0 (unregistering): Released all slaves [ 321.794899][ T364] bond1 (unregistering): Released all slaves [ 321.803439][ T364] bond2 (unregistering): Released all slaves [ 321.812011][ T364] bond3 (unregistering): Released all slaves [ 321.820713][ T364] bond4 (unregistering): Released all slaves [ 321.830150][ T364] bond5 (unregistering): Released all slaves [ 321.839143][ T364] bond6 (unregistering): Released all slaves [ 321.848572][ T364] bond7 (unregistering): Released all slaves [ 321.857633][ T364] bond8 (unregistering): Released all slaves [ 321.868968][ T364] bond9 (unregistering): Released all slaves [ 321.879293][T17554] EXT4-fs (loop8): mount failed [ 321.974677][ T364] tipc: Disabling bearer [ 321.983084][ T364] tipc: Left network mode [ 322.006883][T17493] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.014105][T17581] loop8: detected capacity change from 0 to 164 [ 322.014369][T17493] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.027813][T17493] bridge_slave_0: entered allmulticast mode [ 322.034549][T17493] bridge_slave_0: entered promiscuous mode [ 322.041285][ T364] IPVS: stopping backup sync thread 10740 ... [ 322.050790][T17493] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.058421][T17493] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.066684][T17493] bridge_slave_1: entered allmulticast mode [ 322.074756][T17493] bridge_slave_1: entered promiscuous mode [ 322.094646][T17493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.121731][T17493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.139267][ T364] hsr_slave_0: left promiscuous mode [ 322.148433][ T364] hsr_slave_1: left promiscuous mode [ 322.165040][ T364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.303628][ T364] team0 (unregistering): Port device team_slave_1 removed [ 322.315212][ T364] team0 (unregistering): Port device team_slave_0 removed [ 322.424165][T17493] team0: Port device team_slave_0 added [ 322.434942][T17493] team0: Port device team_slave_1 added [ 322.465237][T17493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.472579][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.500126][T17493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.511997][T17493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.519056][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.545028][T17493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.621265][T17493] hsr_slave_0: entered promiscuous mode [ 322.627625][T17493] hsr_slave_1: entered promiscuous mode [ 322.634157][T17493] debugfs: 'hsr0' already exists in 'hsr' [ 322.640171][T17493] Cannot create hsr debugfs directory [ 322.645923][T17621] bridge_slave_1: left allmulticast mode [ 322.651836][T17621] bridge_slave_1: left promiscuous mode [ 322.657637][T17621] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.668285][T17621] bridge_slave_0: left allmulticast mode [ 322.674010][T17621] bridge_slave_0: left promiscuous mode [ 322.679973][T17621] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.743498][ T364] IPVS: stop unused estimator thread 0... [ 322.849341][T17634] __nla_validate_parse: 1 callbacks suppressed [ 322.849357][T17634] netlink: 71 bytes leftover after parsing attributes in process `syz.5.4535'. [ 323.130160][T17493] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 323.159205][T17493] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.185753][T17670] loop8: detected capacity change from 0 to 128 [ 323.197655][T17493] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 323.211602][T17670] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 323.225179][T17493] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 323.381649][T17493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.424824][T17493] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.451806][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.459021][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.474752][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.481904][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.504408][T17701] tipc: Started in network mode [ 323.509423][T17701] tipc: Node identity 42e2f00277f3, cluster identity 4711 [ 323.516686][T17701] tipc: Enabled bearer , priority 0 [ 323.757941][T17703] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 323.802704][T17703] bond4 (unregistering): Released all slaves [ 323.866423][T17722] syzkaller0: mtu greater than device maximum [ 323.878190][T17493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.892624][T17700] tipc: Resetting bearer [ 323.923593][T17700] tipc: Disabling bearer [ 324.129682][T17493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.229900][T17670] loop8: detected capacity change from 0 to 512 [ 324.413734][T17733] Set syz1 is full, maxelem 65536 reached [ 324.603456][T17670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.657169][T17670] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.674399][T17493] veth0_vlan: entered promiscuous mode [ 324.685695][T17493] veth1_vlan: entered promiscuous mode [ 324.728224][T17493] veth0_macvtap: entered promiscuous mode [ 324.741133][T17792] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17792 comm=syz.5.4556 [ 324.767334][T17493] veth1_macvtap: entered promiscuous mode [ 324.791881][T17493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.818245][T17493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.856098][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.882936][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.923348][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.950422][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.023140][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4559'. [ 325.134177][T17818] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 325.149022][T17818] loop6: detected capacity change from 0 to 512 [ 325.170223][T17818] EXT4-fs: inline encryption not supported [ 325.201372][T17811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 325.226571][T17818] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 325.253921][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.280539][T17818] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4561: invalid indirect mapped block 2683928664 (level 1) [ 325.358656][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 325.359229][T17818] EXT4-fs (loop6): 1 truncate cleaned up [ 325.387494][T17818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.447905][T17818] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.4561: invalid fast symlink length 39 [ 325.482160][T17818] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4561: Invalid block bitmap block 3 in block_group 0 [ 325.584029][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 325.584050][ T29] audit: type=1400 audit(1769875880.631:26945): avc: denied { execute } for pid=17814 comm="syz.6.4561" path="/147/file0/file0/file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 325.584831][T17818] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 325.656903][T17818] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4561: invalid indirect mapped block 2683928664 (level 1) [ 325.771451][T17818] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.828236][T17818] bridge_slave_1 (unregistering): left allmulticast mode [ 325.835980][T17818] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.836590][T17823] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 325.868484][T17823] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 325.956209][T17832] Set syz1 is full, maxelem 65536 reached [ 326.009010][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.060818][T17849] SELinux: policydb magic number 0xf97eff8c does not match expected magic number 0xf97cff8c [ 326.074695][T17848] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17848 comm=syz.5.4566 [ 326.084389][T17849] SELinux: failed to load policy [ 326.149672][ T29] audit: type=1326 audit(1769875881.164:26946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17854 comm="syz.1.4571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f134797aeb9 code=0x0 [ 326.196886][ T29] audit: type=1400 audit(1769875881.182:26947): avc: denied { bind } for pid=17852 comm="syz.7.4569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 326.229134][T17860] batman_adv: batadv0: Adding interface: dummy0 [ 326.235497][T17860] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.260967][T17860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: vlan2 [ 326.270813][T17860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.284140][T17860] batman_adv: batadv0: Interface activated: dummy0 [ 326.300702][T17860] batadv0: mtu less than device minimum [ 326.307231][T17860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.318683][T17860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.329596][T17860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.340722][T17860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.352097][T17860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.411006][T17867] loop7: detected capacity change from 0 to 512 [ 326.427703][T17867] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 326.476667][ T29] audit: type=1400 audit(1769875881.463:26948): avc: denied { read } for pid=17869 comm="syz.6.4575" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 326.499775][ T29] audit: type=1400 audit(1769875881.463:26949): avc: denied { open } for pid=17869 comm="syz.6.4575" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 326.785791][T17867] EXT4-fs (loop7): 1 truncate cleaned up [ 326.793552][T17867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.958278][T17493] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.289433][T17889] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4581'. [ 327.448371][T17891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17891 comm=syz.7.4582 [ 327.525395][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 327.554615][T17896] loop6: detected capacity change from 0 to 8192 [ 327.612278][ T29] audit: type=1400 audit(1769875882.529:26950): avc: denied { mounton } for pid=17895 comm="syz.6.4583" path="/152/file2/bus" dev="loop6" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 327.698269][T15094] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 327.706482][T15094] FAT-fs (loop6): Filesystem has been set read-only [ 327.720495][ T29] audit: type=1400 audit(1769875882.632:26951): avc: denied { unmount } for pid=15094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 327.800951][T17906] loop7: detected capacity change from 0 to 512 [ 327.809478][T17902] loop6: detected capacity change from 0 to 512 [ 327.828981][T17906] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 327.845415][T17902] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.4586: iget: immutable or append flags not allowed on symlinks [ 327.867175][T17902] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4586: couldn't read orphan inode 17 (err -117) [ 327.915685][T17906] EXT4-fs (loop7): 1 truncate cleaned up [ 327.921991][T17902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.935000][T17906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.995307][T17493] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.016558][T17908] loop8: detected capacity change from 0 to 8192 [ 328.045922][T17908] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 328.054763][T17908] FAT-fs (loop8): Filesystem has been set read-only [ 328.055462][T17914] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4591'. [ 328.071678][T17908] FAULT_INJECTION: forcing a failure. [ 328.071678][T17908] name failslab, interval 1, probability 0, space 0, times 0 [ 328.084742][T17908] CPU: 1 UID: 0 PID: 17908 Comm: syz.8.4589 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 328.084783][T17908] Tainted: [W]=WARN [ 328.084863][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.084877][T17908] Call Trace: [ 328.084884][T17908] [ 328.084893][T17908] __dump_stack+0x1d/0x30 [ 328.084924][T17908] dump_stack_lvl+0x95/0xd0 [ 328.084964][T17908] dump_stack+0x15/0x1b [ 328.084991][T17908] should_fail_ex+0x263/0x280 [ 328.085029][T17908] should_failslab+0x8c/0xb0 [ 328.085058][T17908] __kmalloc_noprof+0xb8/0x580 [ 328.085137][T17908] ? alloc_pipe_info+0x1c8/0x340 [ 328.085158][T17908] ? alloc_pipe_info+0xad/0x340 [ 328.085180][T17908] alloc_pipe_info+0x1c8/0x340 [ 328.085268][T17908] splice_direct_to_actor+0x591/0x670 [ 328.085305][T17908] ? kstrtouint_from_user+0xa8/0xf0 [ 328.085346][T17908] ? __pfx_direct_splice_actor+0x10/0x10 [ 328.085409][T17908] ? avc_policy_seqno+0x15/0x30 [ 328.085461][T17908] ? selinux_file_permission+0x1f2/0x690 [ 328.085508][T17908] do_splice_direct+0x119/0x1a0 [ 328.085535][T17908] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 328.085605][T17908] do_sendfile+0x382/0x650 [ 328.085645][T17908] __x64_sys_sendfile64+0x105/0x150 [ 328.085681][T17908] x64_sys_call+0x2db1/0x3000 [ 328.085786][T17908] do_syscall_64+0xc0/0x2a0 [ 328.085830][T17908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.085859][T17908] RIP: 0033:0x7f03409aaeb9 [ 328.085876][T17908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.085920][T17908] RSP: 002b:00007f033f407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 328.085948][T17908] RAX: ffffffffffffffda RBX: 00007f0340c25fa0 RCX: 00007f03409aaeb9 [ 328.085977][T17908] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 328.085990][T17908] RBP: 00007f033f407090 R08: 0000000000000000 R09: 0000000000000000 [ 328.086003][T17908] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 328.086017][T17908] R13: 00007f0340c26038 R14: 00007f0340c25fa0 R15: 00007ffe93dfee68 [ 328.086042][T17908] [ 328.306880][T17917] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4592'. [ 328.329269][T17917] ip6gre2: entered promiscuous mode [ 328.334534][T17917] ip6gre2: entered allmulticast mode [ 328.352022][ T29] audit: type=1400 audit(1769875883.222:26952): avc: denied { ioctl } for pid=17919 comm="syz.7.4594" path="socket:[52983]" dev="sockfs" ino=52983 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.427157][T17925] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17925 comm=syz.5.4595 [ 328.475910][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.534739][T17933] loop8: detected capacity change from 0 to 1024 [ 328.570869][T17933] EXT4-fs: Ignoring removed bh option [ 328.584336][T17933] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 328.613101][T17940] loop6: detected capacity change from 0 to 512 [ 328.622272][T17933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.644104][T17940] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 328.686415][T17940] EXT4-fs (loop6): 1 truncate cleaned up [ 328.727923][T17940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.741317][ T29] audit: type=1400 audit(1769875883.587:26953): avc: denied { create } for pid=17930 comm="syz.8.4598" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.801369][T17948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4604'. [ 328.840528][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.870862][T17933] 9p: Bad value for 'port' [ 328.874671][ T29] audit: type=1400 audit(1769875883.699:26954): avc: denied { mounton } for pid=17930 comm="syz.8.4598" path="/248/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 328.948087][T17960] loop6: detected capacity change from 0 to 512 [ 328.956641][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.986818][T17960] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.4609: iget: immutable or append flags not allowed on symlinks [ 329.046738][T17965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17965 comm=syz.8.4610 [ 329.115959][T17960] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4609: couldn't read orphan inode 17 (err -117) [ 329.191416][T17960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.208705][T17973] netlink: 'syz.5.4613': attribute type 21 has an invalid length. [ 329.224519][T17973] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4613'. [ 329.404925][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 329.405417][T17990] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4622'. [ 329.449314][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.573849][T17987] loop8: detected capacity change from 0 to 8192 [ 329.635559][T17998] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17998 comm=syz.5.4624 [ 329.661464][T17987] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 329.670604][T17987] FAT-fs (loop8): Filesystem has been set read-only [ 329.822373][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4626'. [ 329.897744][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4630'. [ 329.944893][T18014] loop8: detected capacity change from 0 to 512 [ 329.962355][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4630'. [ 329.972498][T18014] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #17: comm syz.8.4633: iget: immutable or append flags not allowed on symlinks [ 330.011196][T18014] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4633: couldn't read orphan inode 17 (err -117) [ 330.034971][T18020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4634'. [ 330.144298][T18014] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.210621][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4638'. [ 330.410382][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.675855][T18064] loop6: detected capacity change from 0 to 512 [ 330.703937][T18064] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 330.750600][T18064] EXT4-fs (loop6): 1 truncate cleaned up [ 330.770050][T18064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.928660][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.457525][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 331.457545][ T29] audit: type=1400 audit(1769875886.122:26990): avc: denied { create } for pid=18103 comm="syz.5.4669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 331.529377][ T29] audit: type=1400 audit(1769875886.187:26991): avc: denied { nlmsg_read } for pid=18103 comm="syz.5.4669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 331.564805][T18112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=18112 comm=syz.6.4670 [ 331.744847][T18131] netlink: 'syz.8.4678': attribute type 46 has an invalid length. [ 331.779366][T18070] batman_adv: batadv0: Adding interface: ipvlan2 [ 331.786098][T18070] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.811701][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.822216][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.842867][T18070] batman_adv: batadv0: Interface activated: ipvlan2 [ 331.961428][T18146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18146 comm=syz.1.4681 [ 332.058701][T18153] netlink: 'syz.1.4685': attribute type 5 has an invalid length. [ 332.091668][T18149] syzkaller0: entered promiscuous mode [ 332.097229][T18149] syzkaller0: entered allmulticast mode [ 332.126970][T18153] ip6erspan0: entered promiscuous mode [ 332.232729][T18151] loop8: detected capacity change from 0 to 2048 [ 332.303545][T13086] loop8: p1 < > [ 332.315449][T18151] loop8: p1 < > [ 332.328360][ T3001] loop8: p1 < > [ 332.364932][T18142] 9pnet_fd: Insufficient options for proto=fd [ 332.667876][T18186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18186 comm=syz.7.4695 [ 332.924266][T18194] FAULT_INJECTION: forcing a failure. [ 332.924266][T18194] name failslab, interval 1, probability 0, space 0, times 0 [ 332.937956][T18194] CPU: 0 UID: 0 PID: 18194 Comm: syz.6.4698 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.937999][T18194] Tainted: [W]=WARN [ 332.938009][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.938028][T18194] Call Trace: [ 332.938037][T18194] [ 332.938048][T18194] __dump_stack+0x1d/0x30 [ 332.938107][T18194] dump_stack_lvl+0x95/0xd0 [ 332.938130][T18194] dump_stack+0x15/0x1b [ 332.938157][T18194] should_fail_ex+0x263/0x280 [ 332.938251][T18194] should_failslab+0x8c/0xb0 [ 332.938293][T18194] __kvmalloc_node_noprof+0x148/0x680 [ 332.938332][T18194] ? __nf_hook_entries_try_shrink+0x24c/0x410 [ 332.938427][T18194] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 332.938496][T18194] __nf_hook_entries_try_shrink+0x24c/0x410 [ 332.938530][T18194] __nf_unregister_net_hook+0x2db/0x370 [ 332.938582][T18194] nf_unregister_net_hook+0x88/0xa0 [ 332.938666][T18194] nft_rcv_nl_event+0x47a/0x830 [ 332.938705][T18194] ? __pfx_nfulnl_rcv_nl_event+0x10/0x10 [ 332.938756][T18194] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 332.938828][T18194] blocking_notifier_call_chain+0x9b/0x1f0 [ 332.938880][T18194] netlink_release+0xa97/0xf10 [ 332.938928][T18194] sock_close+0x6b/0x150 [ 332.938951][T18194] ? __pfx_sock_close+0x10/0x10 [ 332.938992][T18194] __fput+0x29b/0x650 [ 332.939032][T18194] fput_close_sync+0xad/0x190 [ 332.939072][T18194] __x64_sys_close+0x55/0xf0 [ 332.939194][T18194] x64_sys_call+0x2c25/0x3000 [ 332.939222][T18194] do_syscall_64+0xc0/0x2a0 [ 332.939315][T18194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.939391][T18194] RIP: 0033:0x7f81ab1eaeb9 [ 332.939413][T18194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.939439][T18194] RSP: 002b:00007f81a9c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 332.939462][T18194] RAX: ffffffffffffffda RBX: 00007f81ab465fa0 RCX: 00007f81ab1eaeb9 [ 332.939477][T18194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 332.939489][T18194] RBP: 00007f81a9c47090 R08: 0000000000000000 R09: 0000000000000000 [ 332.939531][T18194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.939625][T18194] R13: 00007f81ab466038 R14: 00007f81ab465fa0 R15: 00007fff11b757b8 [ 332.939656][T18194] [ 333.234472][T18211] netlink: 'syz.7.4704': attribute type 10 has an invalid length. [ 333.254316][ T29] audit: type=1400 audit(1769875887.740:26992): avc: denied { setattr } for pid=18204 comm="syz.8.4702" name="PF_CAIF" dev="sockfs" ino=53712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 333.327211][T18211] net_ratelimit: 34 callbacks suppressed [ 333.327228][T18211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.343786][ T29] audit: type=1326 audit(1769875887.843:26993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18204 comm="syz.8.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 333.372026][ T29] audit: type=1326 audit(1769875887.843:26994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18204 comm="syz.8.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 333.396045][ T29] audit: type=1326 audit(1769875887.843:26995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18204 comm="syz.8.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 333.420418][ T29] audit: type=1326 audit(1769875887.843:26996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18204 comm="syz.8.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 333.444134][ T29] audit: type=1326 audit(1769875887.843:26997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18204 comm="syz.8.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 333.467895][ T29] audit: type=1326 audit(1769875887.843:26998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18204 comm="syz.8.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 333.491824][ T29] audit: type=1326 audit(1769875887.843:26999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18204 comm="syz.8.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03409aaeb9 code=0x7ffc0000 [ 333.527296][T18222] af_packet: tpacket_rcv: packet too big, clamped from 65339 to 3952. macoff=96 [ 333.564595][T18227] xt_l2tp: v2 doesn't support IP mode [ 333.713778][T18239] __nla_validate_parse: 16 callbacks suppressed [ 333.713800][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4713'. [ 333.749283][T18243] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18243 comm=syz.8.4715 [ 333.857378][T18250] loop8: detected capacity change from 0 to 1024 [ 333.893755][T18250] EXT4-fs: inline encryption not supported [ 333.928788][T18250] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.994717][T18250] netlink: 'syz.8.4718': attribute type 39 has an invalid length. [ 334.004851][T18250] bridge0: port 3(syz_tun) entered disabled state [ 334.036903][T18250] syz_tun (unregistering): left allmulticast mode [ 334.043476][T18250] syz_tun (unregistering): left promiscuous mode [ 334.049966][T18250] bridge0: port 3(syz_tun) entered disabled state [ 334.082688][T18263] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 334.098130][T18263] EXT4-fs (loop8): Remounting filesystem read-only [ 334.131723][T18266] netlink: 'syz.7.4722': attribute type 13 has an invalid length. [ 334.199889][T13109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.230988][T18268] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 334.241252][T18268] syzkaller0: entered promiscuous mode [ 334.246866][T18268] syzkaller0: entered allmulticast mode [ 334.265814][T18266] tipc: Started in network mode [ 334.271040][T18266] tipc: Node identity 46f13cf6cf75, cluster identity 4711 [ 334.278297][T18266] tipc: Enabled bearer , priority 0 [ 334.302028][T18265] tipc: Resetting bearer [ 334.310207][T18265] tipc: Disabling bearer [ 334.350151][T18272] FAULT_INJECTION: forcing a failure. [ 334.350151][T18272] name failslab, interval 1, probability 0, space 0, times 0 [ 334.362998][T18272] CPU: 0 UID: 0 PID: 18272 Comm: syz.6.4725 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 334.363043][T18272] Tainted: [W]=WARN [ 334.363052][T18272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.363136][T18272] Call Trace: [ 334.363144][T18272] [ 334.363153][T18272] __dump_stack+0x1d/0x30 [ 334.363179][T18272] dump_stack_lvl+0x95/0xd0 [ 334.363203][T18272] dump_stack+0x15/0x1b [ 334.363230][T18272] should_fail_ex+0x263/0x280 [ 334.363305][T18272] should_failslab+0x8c/0xb0 [ 334.363339][T18272] __kmalloc_cache_noprof+0x64/0x4a0 [ 334.363420][T18272] ? cgroup_pidlist_start+0x471/0x850 [ 334.363520][T18272] cgroup_pidlist_start+0x471/0x850 [ 334.363558][T18272] cgroup_seqfile_start+0x58/0x70 [ 334.363631][T18272] kernfs_seq_start+0xb4/0x170 [ 334.363677][T18272] traverse+0xf4/0x3a0 [ 334.363784][T18272] seq_read_iter+0x85f/0x940 [ 334.363816][T18272] ? _parse_integer+0x27/0x40 [ 334.363978][T18272] kernfs_fop_read_iter+0xc1/0x330 [ 334.364012][T18272] ? avc_policy_seqno+0x15/0x30 [ 334.364118][T18272] ? selinux_file_permission+0x1f2/0x690 [ 334.364147][T18272] do_iter_readv_writev+0x4fd/0x5a0 [ 334.364182][T18272] vfs_readv+0x1f4/0x6e0 [ 334.364315][T18272] __x64_sys_preadv+0xfd/0x1c0 [ 334.364344][T18272] x64_sys_call+0x2805/0x3000 [ 334.364372][T18272] do_syscall_64+0xc0/0x2a0 [ 334.364451][T18272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.364505][T18272] RIP: 0033:0x7f81ab1eaeb9 [ 334.364523][T18272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.364543][T18272] RSP: 002b:00007f81a9c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 334.364569][T18272] RAX: ffffffffffffffda RBX: 00007f81ab465fa0 RCX: 00007f81ab1eaeb9 [ 334.364589][T18272] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000004 [ 334.364625][T18272] RBP: 00007f81a9c47090 R08: 0000000000000000 R09: 0000000000000000 [ 334.364639][T18272] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 334.364651][T18272] R13: 00007f81ab466038 R14: 00007f81ab465fa0 R15: 00007fff11b757b8 [ 334.364726][T18272] [ 334.601685][T18280] dns_resolver: Unsupported content type (231) [ 334.629349][T18281] 9p: Bad value for 'rfdno' [ 334.736026][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4730'. [ 334.746782][T18291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18291 comm=syz.6.4728 [ 334.906619][T18300] tipc: Enabled bearer , priority 0 [ 334.913721][T18300] syzkaller0: entered promiscuous mode [ 334.919236][T18300] syzkaller0: entered allmulticast mode [ 334.933721][T18301] netlink: 'syz.1.4734': attribute type 1 has an invalid length. [ 334.942968][T18300] syzkaller0: mtu less than device minimum [ 334.964742][T18304] netlink: 'syz.8.4735': attribute type 11 has an invalid length. [ 334.995241][T18298] tipc: Resetting bearer [ 335.009898][T18298] tipc: Disabling bearer [ 335.036787][T18308] loop6: detected capacity change from 0 to 512 [ 335.093814][T18308] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.4737: iget: immutable or append flags not allowed on symlinks [ 335.157307][T18308] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4737: couldn't read orphan inode 17 (err -117) [ 335.170865][T18308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.320129][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4746'. [ 335.387235][T18336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18336 comm=syz.7.4747 [ 335.457285][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.502288][T18338] netlink: 'syz.6.4748': attribute type 1 has an invalid length. [ 335.536990][T18338] bond1: (slave gretap1): making interface the new active one [ 335.545163][T18338] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 335.564668][T18344] netlink: 488 bytes leftover after parsing attributes in process `syz.7.4751'. [ 335.676075][T18348] netlink: 'syz.7.4752': attribute type 11 has an invalid length. [ 335.835713][T18357] loop8: detected capacity change from 0 to 8192 [ 335.966679][T18370] netlink: 'syz.7.4757': attribute type 4 has an invalid length. [ 335.981231][T18370] netlink: 'syz.7.4757': attribute type 4 has an invalid length. [ 336.031026][T18374] loop6: detected capacity change from 0 to 128 [ 336.138513][T18389] netlink: 'syz.7.4763': attribute type 1 has an invalid length. [ 336.167892][T18389] bond1: (slave gretap1): making interface the new active one [ 336.176224][T18389] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 336.250661][T18396] netlink: 'syz.7.4766': attribute type 11 has an invalid length. [ 336.330486][T18411] loop6: detected capacity change from 0 to 512 [ 336.341131][T18409] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4771'. [ 336.350261][T18411] EXT4-fs error (device loop6): __ext4_iget:5426: inode #11: block 1: comm syz.6.4772: invalid block [ 336.366271][T18411] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4772: couldn't read orphan inode 11 (err -117) [ 336.381290][T18411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.387731][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4771'. [ 336.402801][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4771'. [ 336.415875][T18411] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.4772: Directory hole found for htree leaf block 0 [ 336.458989][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.481357][T18418] netlink: 'syz.8.4776': attribute type 1 has an invalid length. [ 336.542921][T18425] FAULT_INJECTION: forcing a failure. [ 336.542921][T18425] name failslab, interval 1, probability 0, space 0, times 0 [ 336.555652][T18425] CPU: 0 UID: 0 PID: 18425 Comm: syz.8.4778 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 336.555772][T18425] Tainted: [W]=WARN [ 336.555781][T18425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.555800][T18425] Call Trace: [ 336.555809][T18425] [ 336.555818][T18425] __dump_stack+0x1d/0x30 [ 336.555947][T18425] dump_stack_lvl+0x95/0xd0 [ 336.555975][T18425] dump_stack+0x15/0x1b [ 336.556002][T18425] should_fail_ex+0x263/0x280 [ 336.556081][T18425] should_failslab+0x8c/0xb0 [ 336.556106][T18425] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 336.556137][T18425] ? __alloc_skb+0x2f0/0x4b0 [ 336.556176][T18425] __alloc_skb+0x2f0/0x4b0 [ 336.556228][T18425] ? __alloc_skb+0x219/0x4b0 [ 336.556258][T18425] netlink_alloc_large_skb+0xbf/0xf0 [ 336.556300][T18425] netlink_sendmsg+0x40c/0x6f0 [ 336.556340][T18425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.556359][T18425] ____sys_sendmsg+0x5af/0x600 [ 336.556384][T18425] ___sys_sendmsg+0x195/0x1e0 [ 336.556491][T18425] __x64_sys_sendmsg+0xd4/0x160 [ 336.556521][T18425] x64_sys_call+0x17ba/0x3000 [ 336.556551][T18425] do_syscall_64+0xc0/0x2a0 [ 336.556593][T18425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.556738][T18425] RIP: 0033:0x7f03409aaeb9 [ 336.556755][T18425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.556778][T18425] RSP: 002b:00007f033f407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.556829][T18425] RAX: ffffffffffffffda RBX: 00007f0340c25fa0 RCX: 00007f03409aaeb9 [ 336.556843][T18425] RDX: 0000000000048810 RSI: 00002000000001c0 RDI: 0000000000000003 [ 336.556857][T18425] RBP: 00007f033f407090 R08: 0000000000000000 R09: 0000000000000000 [ 336.556872][T18425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.556944][T18425] R13: 00007f0340c26038 R14: 00007f0340c25fa0 R15: 00007ffe93dfee68 [ 336.556972][T18425] [ 336.595611][T18429] loop7: detected capacity change from 0 to 512 [ 336.760860][T18429] ext4: Unknown parameter 'fsname' [ 336.783891][T18435] ip6gre0: Caught tx_queue_len zero misconfig [ 336.800080][T18435] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 336.839127][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 336.839146][ T29] audit: type=1400 audit(1769875891.164:27129): avc: granted { setsecparam } for pid=18436 comm="syz.7.4782" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 336.902844][T18441] netlink: 'syz.8.4784': attribute type 11 has an invalid length. [ 337.038243][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4787'. [ 337.047266][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4787'. [ 337.050709][T18449] netlink: 'syz.8.4788': attribute type 1 has an invalid length. [ 337.108054][ T29] audit: type=1400 audit(1769875891.407:27130): avc: denied { accept } for pid=18451 comm="syz.7.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 337.132294][T18453] loop7: detected capacity change from 0 to 512 [ 337.139755][T18453] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 337.171271][T18453] EXT4-fs (loop7): orphan cleanup on readonly fs [ 337.187632][ T29] audit: type=1400 audit(1769875891.463:27131): avc: denied { getopt } for pid=18456 comm="syz.8.4791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 337.207687][ T29] audit: type=1400 audit(1769875891.463:27132): avc: denied { setopt } for pid=18456 comm="syz.8.4791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 337.228128][T18453] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4789: Block bitmap for bg 0 marked uninitialized [ 337.231536][T18457] loop8: detected capacity change from 0 to 8192 [ 337.252711][T18453] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 337.261921][T18453] EXT4-fs (loop7): 1 orphan inode deleted [ 337.268584][T18453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 337.282801][T18453] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 337.293159][T18453] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 337.301928][T13086] loop8: p1 p2 p4 [ 337.305832][T13086] loop8: p1 start 2130708480 is beyond EOD, truncated [ 337.312749][T13086] loop8: p2 size 8388608 extends beyond EOD, truncated [ 337.321001][T18453] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4789: Block bitmap for bg 0 marked uninitialized [ 337.334872][T13086] loop8: p4 size 262144 extends beyond EOD, truncated [ 337.342578][T18453] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4789: Block bitmap for bg 0 marked uninitialized [ 337.361656][T18457] loop8: p1 p2 p4 [ 337.365524][T18457] loop8: p1 start 2130708480 is beyond EOD, truncated [ 337.372395][T18457] loop8: p2 size 8388608 extends beyond EOD, truncated [ 337.382761][T18453] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4789: Block bitmap for bg 0 marked uninitialized [ 337.392158][T18457] loop8: p4 size 262144 extends beyond EOD, truncated [ 337.400731][T18453] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4789: Block bitmap for bg 0 marked uninitialized [ 337.449529][T18453] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4789: Block bitmap for bg 0 marked uninitialized [ 337.475630][T18453] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4789: Block bitmap for bg 0 marked uninitialized [ 337.527757][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4799'. [ 337.550948][T18501] netlink: 'syz.8.4798': attribute type 11 has an invalid length. [ 337.646798][T17493] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.699592][ T29] audit: type=1326 audit(1769875891.959:27133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.7.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c545aeb9 code=0x7ffc0000 [ 337.723373][ T29] audit: type=1326 audit(1769875891.959:27134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.7.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23c545aeb9 code=0x7ffc0000 [ 337.747076][ T29] audit: type=1326 audit(1769875891.959:27135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.7.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c545aeb9 code=0x7ffc0000 [ 337.770902][ T29] audit: type=1326 audit(1769875891.959:27136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.7.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c545aeb9 code=0x7ffc0000 [ 337.780879][T18548] loop6: detected capacity change from 0 to 1024 [ 337.794664][ T29] audit: type=1326 audit(1769875891.959:27137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.7.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23c545aeb9 code=0x7ffc0000 [ 337.794720][ T29] audit: type=1326 audit(1769875891.959:27138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.7.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c545aeb9 code=0x7ffc0000 [ 337.858770][T13086] udevd[13086]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 337.870950][T13087] udevd[13087]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 337.886415][T12500] udevd[12500]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 337.886919][T13086] udevd[13086]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 337.971889][T18548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 337.990102][T18548] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.002889][T18548] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.4806: lblock 0 mapped to illegal pblock 0 (length 1) [ 338.017057][T18548] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 338.029484][T18548] EXT4-fs (loop6): This should not happen!! Data will be lost [ 338.029484][T18548] [ 338.040208][T18548] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.4806: lblock 0 mapped to illegal pblock 0 (length 1) [ 338.054885][T18548] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.4806: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.069520][T18548] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 338.081957][T18548] EXT4-fs (loop6): This should not happen!! Data will be lost [ 338.081957][T18548] [ 338.093875][T18548] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.4806: lblock 0 mapped to illegal pblock 0 (length 1) [ 338.107399][T18548] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.4806: lblock 0 mapped to illegal pblock 0 (length 1) [ 338.121461][T18548] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.4806: lblock 0 mapped to illegal pblock 0 (length 1) [ 338.139693][T18548] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.4806: lblock 0 mapped to illegal pblock 0 (length 1) [ 338.151100][T18556] loop8: detected capacity change from 0 to 512 [ 338.162860][T18556] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 338.171907][T18548] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.4806: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.199929][T18548] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.4806: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 338.213241][T18556] EXT4-fs (loop8): 1 truncate cleaned up [ 338.228519][T18556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.254726][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 338.304242][T18570] SELinux: policydb string length -421003256 does not match expected length 8 [ 338.317762][T18550] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 338.343100][T18570] SELinux: failed to load policy [ 338.355004][T18556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.418515][T18578] loop6: detected capacity change from 0 to 512 [ 338.429106][T18578] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.4818: iget: immutable or append flags not allowed on symlinks [ 338.444416][T18581] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 338.471934][T18581] EXT4-fs (loop7): 1 truncate cleaned up [ 338.478297][T18578] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4818: couldn't read orphan inode 17 (err -117) [ 338.501265][T18581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.510687][T18586] tipc: Enabling of bearer rejected, failed to enable media [ 338.519412][T18581] 9p: Bad value for 'rfdno' [ 338.535341][T18578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.551704][T17493] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.638571][T18590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.664864][T18590] bond1: (slave bond0): making interface the new active one [ 338.675031][T18590] bond1: (slave bond0): Enslaving as an active interface with an up link [ 338.695046][T18597] 9p: Bad value for 'wfdno' [ 338.784146][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.800605][T18595] infiniband syz1: set active [ 338.805421][T18595] infiniband syz1: added syz_tun [ 338.820511][T18595] RDS/IB: syz1: added [ 338.828200][T18595] smc: adding ib device syz1 with port count 1 [ 338.854015][T18595] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 338.925092][T18609] FAULT_INJECTION: forcing a failure. [ 338.925092][T18609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.938291][T18609] CPU: 1 UID: 0 PID: 18609 Comm: syz.6.4828 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 338.938343][T18609] Tainted: [W]=WARN [ 338.938351][T18609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.938369][T18609] Call Trace: [ 338.938378][T18609] [ 338.938389][T18609] __dump_stack+0x1d/0x30 [ 338.938424][T18609] dump_stack_lvl+0x95/0xd0 [ 338.938529][T18609] dump_stack+0x15/0x1b [ 338.938612][T18609] should_fail_ex+0x263/0x280 [ 338.938655][T18609] should_fail+0xb/0x20 [ 338.938699][T18609] should_fail_usercopy+0x1a/0x20 [ 338.938744][T18609] _copy_to_user+0x20/0xa0 [ 338.938809][T18609] simple_read_from_buffer+0xb5/0x130 [ 338.938859][T18609] proc_fail_nth_read+0x10e/0x150 [ 338.938896][T18609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.938963][T18609] vfs_read+0x1ab/0x7f0 [ 338.939034][T18609] ? __rcu_read_unlock+0x4e/0x70 [ 338.939075][T18609] ? __fget_files+0x184/0x1c0 [ 338.939158][T18609] ? mutex_lock+0x57/0x90 [ 338.939191][T18609] ksys_read+0xdc/0x1a0 [ 338.939217][T18609] __x64_sys_read+0x40/0x50 [ 338.939239][T18609] x64_sys_call+0x2889/0x3000 [ 338.939274][T18609] do_syscall_64+0xc0/0x2a0 [ 338.939391][T18609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.939421][T18609] RIP: 0033:0x7f81ab1ab78e [ 338.939443][T18609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 338.939506][T18609] RSP: 002b:00007f81a9c46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.939538][T18609] RAX: ffffffffffffffda RBX: 00007f81a9c476c0 RCX: 00007f81ab1ab78e [ 338.939558][T18609] RDX: 000000000000000f RSI: 00007f81a9c470a0 RDI: 000000000000000a [ 338.939647][T18609] RBP: 00007f81a9c47090 R08: 0000000000000000 R09: 0000000000000000 [ 338.939666][T18609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.939704][T18609] R13: 00007f81ab466038 R14: 00007f81ab465fa0 R15: 00007fff11b757b8 [ 338.939727][T18609] [ 339.222543][T18615] __nla_validate_parse: 11 callbacks suppressed [ 339.222568][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4831'. [ 339.556285][T18626] delete_channel: no stack [ 339.688840][T18634] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.4837: iget: immutable or append flags not allowed on symlinks [ 339.768972][T18634] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4837: couldn't read orphan inode 17 (err -117) [ 339.842939][T18634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.051332][T18644] netlink: 'syz.1.4840': attribute type 7 has an invalid length. [ 340.205517][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.241018][T18647] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4841'. [ 340.250064][T18647] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4841'. [ 340.259092][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4841'. [ 340.333724][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4843'. [ 340.836708][ T4806] IPVS: starting estimator thread 0... [ 340.950632][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4855'. [ 340.959772][T18678] IPVS: using max 2400 ests per chain, 120000 per kthread [ 341.277820][T18696] set_capacity_and_notify: 2 callbacks suppressed [ 341.277840][T18696] loop6: detected capacity change from 0 to 1024 [ 341.291577][T18696] EXT4-fs: inline encryption not supported [ 341.297915][T18696] EXT4-fs: Ignoring removed i_version option [ 341.335098][T18696] EXT4-fs: Ignoring removed bh option [ 341.391655][T18696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.535427][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.564196][T18700] ip6erspan0: entered allmulticast mode [ 341.606190][T18703] loop6: detected capacity change from 0 to 512 [ 341.642011][T18703] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.4862: iget: immutable or append flags not allowed on symlinks [ 341.678096][T18703] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4862: couldn't read orphan inode 17 (err -117) [ 341.693403][T18703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.921937][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.092958][T18730] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4872'. [ 342.197200][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 342.197226][ T29] audit: type=1326 audit(1769875896.168:27200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18733 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134797aeb9 code=0x7ffc0000 [ 342.227148][ T29] audit: type=1326 audit(1769875896.168:27201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18733 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134797aeb9 code=0x7ffc0000 [ 342.256488][T18736] sctp: [Deprecated]: syz.1.4875 (pid 18736) Use of int in max_burst socket option. [ 342.256488][T18736] Use struct sctp_assoc_value instead [ 342.302905][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4877'. [ 342.772050][T18757] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4883'. [ 342.838801][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4888'. [ 343.097540][T18793] loop7: detected capacity change from 0 to 512 [ 343.120082][T18793] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 343.129247][T18793] EXT4-fs (loop7): filesystem is read-only [ 343.185915][T18800] sch_fq: defrate 7 ignored. [ 343.416518][ T29] audit: type=1326 audit(1769875897.310:27202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.7.4902" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23c545aeb9 code=0x0 [ 343.888036][T18811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18811 comm=syz.6.4903 [ 343.942587][ T29] audit: type=1400 audit(1769875897.805:27203): avc: denied { listen } for pid=18814 comm="syz.8.4905" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.966882][T18817] loop6: detected capacity change from 0 to 512 [ 343.974488][T18817] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 343.994475][T18817] EXT4-fs (loop6): 1 truncate cleaned up [ 344.005514][T18817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.043231][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.078340][T18825] netlink: 'syz.6.4909': attribute type 3 has an invalid length. [ 344.088645][T18825] netlink: 'syz.6.4909': attribute type 3 has an invalid length. [ 344.137097][T18841] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18841 comm=syz.1.4914 [ 344.203521][T18850] loop6: detected capacity change from 0 to 512 [ 344.215762][T18850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 344.230464][T18850] ext4 filesystem being mounted at /221/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.244543][ T29] audit: type=1400 audit(1769875898.095:27204): avc: denied { module_load } for pid=18849 comm="syz.6.4917" path="/221/file2/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 344.273011][T18850] Invalid ELF header magic: != ELF [ 344.322784][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 344.336714][T18861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18861 comm=syz.7.4918 [ 344.350808][T18860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18860 comm=syz.7.4918 [ 344.430696][T18864] netlink: 'syz.6.4919': attribute type 11 has an invalid length. [ 344.505998][T18877] loop6: detected capacity change from 0 to 512 [ 344.514608][T18877] EXT4-fs: inline encryption not supported [ 344.533707][T18877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.533760][T18875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=18875 comm=syz.7.4922 [ 344.547464][T18877] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.589665][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.613353][T18883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18883 comm=syz.6.4925 [ 344.656785][T18890] netlink: 'syz.6.4927': attribute type 1 has an invalid length. [ 344.679798][ T29] audit: type=1326 audit(1769875898.488:27205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18891 comm="syz.7.4928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23c545aeb9 code=0x0 [ 344.746670][T18899] loop6: detected capacity change from 0 to 1024 [ 344.754030][T18899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.763389][T18899] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 344.771826][T18899] System zones: 0-1, 3-36 [ 344.777454][T18899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.793822][T18899] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 344.812259][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.864002][T18904] loop6: detected capacity change from 0 to 1024 [ 344.876474][T18904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.100932][T18913] batadv_slave_1: entered promiscuous mode [ 345.125685][T18913] bridge0: entered promiscuous mode [ 345.132124][T18913] bridge0: port 1(macvtap1) entered blocking state [ 345.139344][T18913] bridge0: port 1(macvtap1) entered disabled state [ 345.164553][T18913] macvtap1: entered allmulticast mode [ 345.170056][T18913] bridge0: entered allmulticast mode [ 345.185811][T18913] macvtap1: left allmulticast mode [ 345.191069][T18913] bridge0: left allmulticast mode [ 345.208936][T18913] bridge0: left promiscuous mode [ 345.266001][T18911] batadv_slave_1: left promiscuous mode [ 345.459983][T18921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18921 comm=syz.1.4938 [ 345.540748][T18924] netlink: 'syz.1.4939': attribute type 1 has an invalid length. [ 345.605531][T18926] __nla_validate_parse: 9 callbacks suppressed [ 345.605589][T18926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4939'. [ 345.636780][T15094] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 345.647810][T15094] CPU: 1 UID: 0 PID: 15094 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.647847][T15094] Tainted: [W]=WARN [ 345.647877][T15094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.647896][T15094] Call Trace: [ 345.647904][T15094] [ 345.647915][T15094] __dump_stack+0x1d/0x30 [ 345.648028][T15094] dump_stack_lvl+0x95/0xd0 [ 345.648058][T15094] dump_stack+0x15/0x1b [ 345.648085][T15094] dump_header+0x80/0x240 [ 345.648114][T15094] oom_kill_process+0x295/0x350 [ 345.648158][T15094] out_of_memory+0x97d/0xb80 [ 345.648185][T15094] try_charge_memcg+0x62e/0xa10 [ 345.648214][T15094] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 345.648263][T15094] __read_swap_cache_async+0x17b/0x2d0 [ 345.648313][T15094] swap_cluster_readahead+0x362/0x3c0 [ 345.648357][T15094] swapin_readahead+0xde/0x840 [ 345.648401][T15094] ? __perf_event_task_sched_in+0xa65/0xad0 [ 345.648489][T15094] ? __rcu_read_unlock+0x4e/0x70 [ 345.648552][T15094] ? swap_cache_get_folio+0x26f/0x280 [ 345.648628][T15094] do_swap_page+0x59b/0x2a50 [ 345.648721][T15094] ? finish_task_switch+0x79/0x280 [ 345.648760][T15094] ? __schedule+0x82d/0xc90 [ 345.648792][T15094] ? __rcu_read_lock+0x36/0x50 [ 345.648904][T15094] ? __pfx_default_wake_function+0x10/0x10 [ 345.648938][T15094] handle_mm_fault+0xb40/0x3030 [ 345.649108][T15094] ? vma_start_read+0x1c7/0x2c0 [ 345.649151][T15094] do_user_addr_fault+0x62f/0x1050 [ 345.649184][T15094] exc_page_fault+0x62/0xa0 [ 345.649258][T15094] asm_exc_page_fault+0x26/0x30 [ 345.649279][T15094] RIP: 0033:0x7f81ab1a60d7 [ 345.649297][T15094] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 345.649323][T15094] RSP: 002b:00007fff11b75ab0 EFLAGS: 00010202 [ 345.649346][T15094] RAX: 0000000000000000 RBX: 0000555561c37500 RCX: 00007f81ab1a60d7 [ 345.649458][T15094] RDX: 00007fff11b75af0 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.649476][T15094] RBP: 00007fff11b75b5c R08: 0000000000000000 R09: 0000000000000000 [ 345.649495][T15094] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 345.649512][T15094] R13: 00000000000927c0 R14: 0000000000053541 R15: 00007fff11b75bb0 [ 345.649539][T15094] [ 345.649549][T15094] memory: usage 307200kB, limit 307200kB, failcnt 5940 [ 345.679010][T18904] ================================================================== [ 345.681802][T15094] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 345.686291][T18904] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 345.690984][T15094] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 345.695014][T18904] [ 345.695022][T18904] read-write to 0xffffffff86a09a00 of 8 bytes by interrupt on cpu 1: [ 345.699500][T15094] Memory cgroup stats for [ 345.704313][T18904] tick_do_update_jiffies64+0x113/0x1c0 [ 345.709008][T15094] /syz6 [ 345.713783][T18904] tick_nohz_handler+0x8d/0x3d0 [ 345.720045][T15094] : [ 345.725350][T18904] __hrtimer_run_queues+0x20f/0x590 [ 345.776217][T15094] cache 16384 [ 345.777007][T18904] hrtimer_interrupt+0x269/0x810 [ 345.781879][T15094] rss 0 [ 345.781890][T15094] shmem 0 [ 345.786739][T18904] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 345.786791][T18904] sysvec_apic_timer_interrupt+0x6f/0x80 [ 345.791904][T15094] mapped_file 0 [ 345.796428][T18904] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.796461][T18904] console_flush_all+0x540/0x6c0 [ 345.801336][T15094] dirty 0 [ 345.801348][T15094] writeback 0 [ 345.805766][T18904] console_unlock+0xa1/0x280 [ 345.805806][T18904] vprintk_emit+0x3e4/0x600 [ 345.825742][T15094] workingset_refault_anon 358 [ 345.831598][T18904] vprintk_default+0x26/0x30 [ 345.839965][T15094] workingset_refault_file 8594 [ 345.848018][T18904] vprintk+0x1d/0x30 [ 345.848046][T18904] _printk+0x79/0xa0 [ 345.848067][T18904] mem_cgroup_print_oom_meminfo+0x84/0x260 [ 345.848096][T18904] dump_header+0xa2/0x240 [ 345.848115][T18904] oom_kill_process+0x295/0x350 [ 345.848141][T18904] out_of_memory+0x97d/0xb80 [ 345.856310][T15094] swap 733184 [ 345.856325][T15094] swapcached 0 [ 345.864398][T18904] try_charge_memcg+0x62e/0xa10 [ 345.864429][T18904] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 345.864473][T18904] __read_swap_cache_async+0x17b/0x2d0 [ 345.864506][T18904] swap_cluster_readahead+0x362/0x3c0 [ 345.872735][T15094] pgpgin 524008 [ 345.876133][T18904] swapin_readahead+0xde/0x840 [ 345.883216][T15094] pgpgout 523999 [ 345.891425][T18904] do_swap_page+0x59b/0x2a50 [ 345.891472][T18904] handle_mm_fault+0xb40/0x3030 [ 345.899362][T15094] pgfault 306420 [ 345.899374][T15094] pgmajfault 256 [ 345.909167][T18904] do_user_addr_fault+0x62f/0x1050 [ 345.909204][T18904] exc_page_fault+0x62/0xa0 [ 345.916539][T15094] inactive_anon 0 [ 345.918850][T18904] asm_exc_page_fault+0x26/0x30 [ 345.926983][T15094] active_anon 0 [ 345.931349][T18904] [ 345.931360][T18904] read to 0xffffffff86a09a00 of 8 bytes by task 18904 on cpu 0: [ 345.936966][T15094] inactive_file 36864 [ 345.939932][T18904] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 345.944855][T15094] active_file 0 [ 345.947225][T18904] count_shadow_nodes+0x6a/0x230 [ 345.952449][T15094] unevictable 0 [ 345.952462][T15094] hierarchical_memory_limit 314572800 [ 345.955749][T18904] do_shrink_slab+0x63/0x670 [ 345.955781][T18904] shrink_slab+0x538/0x880 [ 345.961060][T15094] hierarchical_memsw_limit 9223372036854771712 [ 345.963599][T18904] shrink_node+0x6cb/0x2000 [ 345.966651][T15094] total_cache 16384 [ 345.972450][T18904] do_try_to_free_pages+0x404/0xcc0 [ 345.978157][T15094] total_rss 0 [ 345.981564][T18904] try_to_free_mem_cgroup_pages+0x222/0x470 [ 345.981605][T18904] try_charge_memcg+0x37e/0xa10 [ 345.981624][T18904] obj_cgroup_charge_pages+0x23/0xc0 [ 345.981655][T18904] __memcg_kmem_charge_page+0x9e/0x170 [ 345.987807][T15094] total_shmem 0 [ 345.992665][T18904] __alloc_frozen_pages_noprof+0x18a/0x350 [ 345.992703][T18904] alloc_pages_mpol+0xb3/0x260 [ 345.992734][T18904] alloc_pages_noprof+0x8f/0x130 [ 345.995678][T15094] total_mapped_file 0 [ 345.995691][T15094] total_dirty 0 [ 345.998973][T18904] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 345.999016][T18904] __kvmalloc_node_noprof+0x471/0x680 [ 346.003623][T15094] total_writeback 0 [ 346.008132][T18904] ip_set_alloc+0x24/0x30 [ 346.008175][T18904] hash_netiface_create+0x282/0x740 [ 346.008210][T18904] ip_set_create+0x3cf/0x970 [ 346.008231][T18904] nfnetlink_rcv_msg+0x509/0x5d0 [ 346.008264][T18904] netlink_rcv_skb+0x123/0x220 [ 346.008297][T18904] nfnetlink_rcv+0x167/0x1720 [ 346.008324][T18904] netlink_unicast+0x5c0/0x690 [ 346.013150][T15094] total_workingset_refault_anon 358 [ 346.017751][T18904] netlink_sendmsg+0x5c8/0x6f0 [ 346.022599][T15094] total_workingset_refault_file 8594 [ 346.026699][T18904] ____sys_sendmsg+0x5af/0x600 [ 346.030700][T15094] total_swap 733184 [ 346.036459][T18904] ___sys_sendmsg+0x195/0x1e0 [ 346.040888][T15094] total_swapcached 0 [ 346.045673][T18904] __x64_sys_sendmsg+0xd4/0x160 [ 346.050329][T15094] total_pgpgin 524008 [ 346.053571][T18904] x64_sys_call+0x17ba/0x3000 [ 346.057039][T15094] total_pgpgout 523999 [ 346.061846][T18904] do_syscall_64+0xc0/0x2a0 [ 346.061893][T18904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.067998][T15094] total_pgfault 306420 [ 346.073579][T18904] [ 346.073590][T18904] value changed: 0x0000000100001011 -> 0x0000000100001012 [ 346.073607][T18904] [ 346.073612][T18904] Reported by Kernel Concurrency Sanitizer on: [ 346.073633][T18904] CPU: 0 UID: 0 PID: 18904 Comm: syz.6.4932 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 346.079057][T15094] total_pgmajfault 256 [ 346.079074][T15094] total_inactive_anon 0 [ 346.082634][T18904] Tainted: [W]=WARN [ 346.082645][T18904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.082663][T18904] ================================================================== [ 346.423368][T15094] total_active_anon 0 [ 346.427582][T15094] total_inactive_file 36864 [ 346.432360][T15094] total_active_file 0 [ 346.436444][T15094] total_unevictable 0 [ 346.440526][T15094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4932,pid=18903,uid=0 [ 346.455341][T15094] Memory cgroup out of memory: Killed process 18903 (syz.6.4932) total-vm:94132kB, anon-rss:1180kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 346.473271][T18926] bond5: entered promiscuous mode [ 346.478423][T18926] bond5: entered allmulticast mode [ 346.487660][T18926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 346.921692][T15094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.