last executing test programs: 5m56.686852235s ago: executing program 32 (id=2389): connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) dup(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x300, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 5m34.454656057s ago: executing program 33 (id=2698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x1360, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xc}, {}, {0x7, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x123c, 0x2, [@TCA_CGROUP_EMATCHES={0xe8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa97, 0x8, 0x9}, {0x3, 0x1, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0xff}, {0xff, 0x1, 0x4, 0x2, 0x6, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0xfff9}, {0x3, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0xa}, {{}, {0x1}}}}, @TCF_EM_META={0x70, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="91a1333e730371f75217", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ac4bc1"]}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_VAR="edf6a59b", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c7bedc917be2bef7ad", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="b8b86f1cd5fafbf7677c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x81, 0x1}, {0x7, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x6}, {0x8, 0x5, 0x1}}}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x8, 0x9, 0xffff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_CGROUP_EMATCHES={0x1150, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x8000}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_CONTAINER={0x84, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x2f72}, "501234d69ad28c4ac7e33bf7b659b1fdfa9539784d0d29586ad74c6032563bfcc9fec5eb760d0e7e542f41f9eca203f2e42e05982561f4c4187b4b27d05a74c9bee973b539203c60d9a348c749bbc096e4e559219795467c1733ca39aee4a5aadaced1873e10ab87e7d37208aecb7d06bb75a8e32185"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1000, 0x7, 0x7ff}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x1090, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x200, 0x1, 0x7}, {0x70000, 0x2, 0x2, 0x6, 0x0, 0x0, 0x2}}}, @TCF_EM_IPT={0x1060, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x41, 0x5, "9910d68bbc2e62f801bfefc4bb5963e9fc6a53c0c9a4865c1e7f20d962d7fc9485774fe1e822862865fe508ba6f3ad23ae582cbb583600c05faf85ebfe"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x1001, 0x5, "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"/4093}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfff9, 0x7, 0x401}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}]}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0xc0, 0x2, [@TCA_U32_SEL={0xb4, 0x5, {0x5, 0x8, 0xb, 0x1, 0x7ff, 0x3ff, 0x4, 0x100, [{0xcb93, 0x1810, 0xa92, 0x4}, {0xfc8e, 0x8, 0x0, 0x8}, {0x9, 0x49ed, 0x0, 0x10001}, {0x0, 0x1, 0xffffa834, 0xcbe}, {0x7, 0x1, 0x38, 0x3a0}, {0x0, 0x58f0, 0xd, 0x5}, {0xe37, 0x2, 0x2, 0x5}, {0x3ff, 0x3, 0x40, 0x9}, {0x622, 0x6, 0xc, 0x79e14f7e}, {0x1000, 0xf8d0, 0xffffffff, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0x6}}]}}]}, 0x1360}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5m22.026125545s ago: executing program 34 (id=2876): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10011, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@policy_type={0xa}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x148}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="20000000020000e3ffffff000000000101"], 0x50) syz_emit_ethernet(0xb4, &(0x7f00000001c0)={@random="f7db23f8a402", @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0x3}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "a902", "dd4a87", 0x88a2, "57ebac81f3b94e19608b88642f1a6e37ce58b3095fd37bf790064549f0dda7b8aac9346cea6b700038f4d1130bf4f9903e73aff94d40e3ae5670a98e2c345799233c852b671d48a12abca9c01ba83a94e0bca5330b540c04f88fd14623ee33f0952a72fc51cfcc012254e66b80f3cb3361b40db83670034858b52829ceb613e0df20e1ee96b3292b76fbb571e9104f550f5693206c"}}}}}, &(0x7f0000000040)={0x0, 0x1, [0xb90, 0x929, 0xb59, 0xa12]}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28081}, 0x8000002) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0x14, r1, 0x719, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 5m16.156885923s ago: executing program 35 (id=2969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 4m3.440625974s ago: executing program 36 (id=4223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xfe}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2m11.328206986s ago: executing program 7 (id=6195): syz_io_uring_setup(0x45b8, &(0x7f0000000300)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140), &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x21118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffbfffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2414, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8e, 0x41}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0x1, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x6, 0x7ffc0001}]}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x355) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="090000000300000000000000492d42d71e84fa6b7b7a97320200108500000007ddffff9480ce8914089e575a9940f50e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m11.117779999s ago: executing program 7 (id=6201): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8015, &(0x7f0000000000), 0x64, 0x51d, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0x10fff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe}, {0x4, 0xfff1}, {0x9, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000001400078008001740fffff8010800084000000030050001000600000005000500070000000d0003006c6973743a736574000000000900020073797a3100000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x15c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x7b, 0x6, "201de87f8f160b708194d005317d16860bd31665487bcacc7581178f690003459cf1beccdedd2e949cbf4fc9c3738c1e8fa8ba77fbc7c9550fced04be52c5568c1ed6c711994c52da48cc4eb2cbb9332f401cb58c1a07436034ccbc2f0a94b6dd3dad566865a9a874db4f13f156f1d49a0dbcd3bd309b3"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "6655c700d5d7601c42a7c696bc8718badd9ece98d160909d792031f603e77a9b07c9751a6e7386f01bdb012545a63c2f2cbf584fa23efa44b40b5eff02ac0f79d2ff5a745105eb4e05b6839fa6c806fc8861c2d4a111376656bf5f199217ace688fc7bd23e32fef6f92f172f9d01b6d91e7404582e8ed03b4206061c3199733fc946ce53210579e4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x184}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0xe2c, 0x1) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 2m10.104825008s ago: executing program 7 (id=6210): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1000000, &(0x7f0000000540)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@resgid}, {@usrjquota}]}, 0xfe, 0x453, &(0x7f0000001380)="$eJzs3MuPFMUfAPBv98wu79/uT/EBgq6ikfjYZZfnwQtGEw+amOgB42ndXQgysMquiRCi6AGPhsS78WjiX+BJL0Y9mXjVuyEhhgtoYjKme7qXcZhZdthZBpjPJ2momq6h6tvdNV1dNUMAA2ss+yOJ2BwRv0XESCP73wJjjb+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi3ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d/blwvg7cw5LodwuA/ihv9Nnzb7ndpqHHHeHy4Yj3Dzbiv1ZsjT3VSIsyQy3Pt700FhFHzv/9ZbbFGs1DAAA0++5wRDzXbvyXxoNN5f5XrKGMRsT/I+K+iLg/IrZGxAMRedmHIuLhLutvXSG5cfyTXrqlwFYoG/+9UKxtLY3//qnn8RdGK0VuSx7/UHL0eG1uT3FMdsfQuiw/uUwd37/06+ed9jWP/7Itq78cCzakl6otE3Sz04vTqwx7yeVPIrZXW+LPJVEu4yQRsS0itnf1L19/wjj+zNc7OpW6efzL6ME6U/2riKcb5/98tMRfSjquT04ePDC1f2J91Ob2TJRXxY1+/uXC653qX1X8PZCd/42t139uKf7RZH3EwpmzJ/L12oXu67jw+2cdn2lu9fofTt7M08PFax9OLy6enowYTl698fWp6+8t82X5LP7du9rFn+afceWReCQisot4Z0Q8GhGPFW1/PCKeiIhdy8T/44tPvtt9/MvMyvdQFv/szc5/NJ//7hOVEz982338pez878tTu4tXVvL5t9IGrubYAQAAwN0izb8Dn6TjS+k0HR9vfId/a2xMa/MLi88enf/g1Gzju/KjMZSWM10jTfOhk8XccJmfasnvLeaNv6hsyPPjM/O12X4HDwNuU4f+n/mj0u/WAWvO77VgcOn/MLj0fxhc+j8MLv0fBle7/v9xH9oB3H7u/zC49H8YXCvs/8latwO4/dz/YSB1/G18uqqf/Evc84lIu39XNe6Qxt9NieqK/zOLW0ysa7ur359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfFvAAAA///74+4w") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) shutdown(r0, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 2m9.852875673s ago: executing program 7 (id=6215): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d0500000300000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000200)={0xe1, 0x11, &(0x7f0000000700)="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"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000280)={0x6, 0x8}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="58000000df0505000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004", @ANYRESHEX=r0, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000040)={r9}, &(0x7f0000000100)=0x8) listen(r6, 0xffff) r10 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r12 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setuid(0xee00) tgkill(r12, r12, 0x0) dup3(r11, r10, 0x0) 2m9.177335274s ago: executing program 7 (id=6226): socket$inet(0x2, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x20000000) 2m8.797634826s ago: executing program 7 (id=6234): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="0500", @ANYRESOCT], 0x10) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) socket$inet6_sctp(0xa, 0x1, 0x84) timer_settime(r1, 0x0, &(0x7f0000000880)={{0x77359400}}, &(0x7f00000009c0)) 2m8.773838048s ago: executing program 37 (id=6234): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="0500", @ANYRESOCT], 0x10) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) socket$inet6_sctp(0xa, 0x1, 0x84) timer_settime(r1, 0x0, &(0x7f0000000880)={{0x77359400}}, &(0x7f00000009c0)) 1m36.764347939s ago: executing program 8 (id=6699): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000008c0)={[{@jqfmt_vfsv1}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") unshare(0x22020600) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) creat(&(0x7f00000000c0)='./bus\x00', 0x182) listen(0xffffffffffffffff, 0x2000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 1m36.442625829s ago: executing program 8 (id=6700): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x2, 0x80800) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x300, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r1}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8=r2, @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast1, 0x0, 0x2, [@empty, @multicast1]}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 1m36.099751879s ago: executing program 8 (id=6707): r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") mkdir(&(0x7f00000004c0)='./file1\x00', 0x1) r1 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1a0) r2 = socket(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x6, 0x83f}}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x50f, &(0x7f0000000140)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x23155778fd062d83, 0x3, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000004c0)='./bus\x00', 0x14c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) preadv2(r5, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) setresuid(0x0, r4, r4) write$P9_RGETATTR(r1, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x820, {0x9, 0x0, 0x7}, 0x85, r4, 0x0, 0x4, 0xe, 0x60fc, 0x5, 0x7fffffff, 0x0, 0xffff, 0x7, 0xfffffffffffffe01, 0xf, 0x6, 0x4, 0x7, 0xe, 0x1ff}}, 0xa0) r6 = getgid() fchownat(r0, &(0x7f0000000000)='./file1\x00', r4, r6, 0x400) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000007c0)={0x7, 0x2, 0x0, 'queue1\x00', 0x400000}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 1m35.961095328s ago: executing program 8 (id=6710): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r0, 0x5608, 0x3f) io_setup(0xb, &(0x7f00000003c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r3, &(0x7f0000001900)=[{&(0x7f0000000400)=""/152, 0x1b}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBLED(r4, 0x4b65, 0x7fffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000a80)='./file0/file0\x00') r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) r9 = syz_io_uring_setup(0x2e43, &(0x7f0000000f80)={0x0, 0x3164, 0x40, 0x1, 0x108}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000100), 0x100000000000001a) io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xb, r8, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x9, r5, &(0x7f0000000e40)="ba419f8dfa8b5fda55", 0x9, 0x2000000000008, 0x0, 0x0, r8}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000"], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x6, 0x1000, 0x7, 0x204, 0xffffffffffffffff, 0x7, '\x00', 0x0, r7, 0x1, 0x4, 0x3, 0x9}, 0x50) 1m35.048950132s ago: executing program 8 (id=6720): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x100, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = fsopen(&(0x7f0000000580)='debugfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f00000003c0), 0x1) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) 1m33.72970936s ago: executing program 8 (id=6748): fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000240)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0xffff, 0x7fffffff, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10000, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m33.72850844s ago: executing program 38 (id=6748): fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000240)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0xffff, 0x7fffffff, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10000, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m19.712603913s ago: executing program 0 (id=6979): syz_io_uring_setup(0x45b8, &(0x7f0000000300)={0x0, 0xfffffffc, 0x10100}, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n', @ANYRES16], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.657958466s ago: executing program 0 (id=6981): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x15, 0x3, 0x7fa7) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001600156f00000000ffdb5deb16f547a424189662252150a9cadf250a000000", @ANYRES32=0x0, @ANYBLOB="14000100ff0200000000000200fc0100000000000000000000000000011400060007000000020000001000000009000000000400000000bc3700e71a"], 0x54}, 0x1, 0x0, 0x0, 0x60000001}, 0x24080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0xc000) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x3}) 1m19.556479962s ago: executing program 0 (id=6983): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x488, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1m19.556002832s ago: executing program 0 (id=6984): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = socket(0x1, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x2, 0xffffff65) listen(r3, 0x0) accept$inet6(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) close_range(r2, 0xffffffffffffffff, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x40001}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="155a2cbd7000fddbdf250300000014000100fc0200"/34], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 1m18.672457154s ago: executing program 0 (id=6996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_getoverrun(r2) r3 = socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0xb}, {0xc, 0xffe0}, {0xf, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xffe0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4044) gettid() 1m18.356095094s ago: executing program 0 (id=6997): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x40004580, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000000) 1m18.258263629s ago: executing program 39 (id=6997): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x40004580, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000000) 48.504872167s ago: executing program 1 (id=7468): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a000000370085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 48.45380107s ago: executing program 1 (id=7469): r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0xa509, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000000), &(0x7f00000001c0)) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x3]}, 0x8) close(r1) syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x300, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, 0x0) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 48.453512521s ago: executing program 1 (id=7470): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d61"], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 48.371625565s ago: executing program 1 (id=7473): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x7218, 0x5, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x40000000010, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0x9, 0x6, 0x8d, 0x0, 0xcc, 0xa1082, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x2, @perf_config_ext={0x200, 0x4a}, 0x10, 0x800, 0x5, 0x2, 0x2, 0x200, 0x101, 0x0, 0x6, 0x0, 0x1}, r6, 0xe, 0xffffffffffffffff, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x3, 0x4100, 0x8000c62) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) 48.171756747s ago: executing program 1 (id=7477): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) readv(r1, &(0x7f0000000b00)=[{&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000080)=""/56, 0x38}], 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x4881b39f, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0), 0x4) r3 = socket$kcm(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000"], 0x50) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8919, 0x0) fchdir(r0) rmdir(&(0x7f0000000000)='./file0\x00') 47.938753911s ago: executing program 1 (id=7484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x200000, 0x0, 0xff, 0x0, 0x3ff, 0x72}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000acf4b06226e862904824de2f7eb3dd2d0ba5a4bc6cdda3671fb6e828883065888bb82f97383b9e18c3b96781762aa24c300e9982965dab2b4629ee8fa30da541181663bd2c542f743ac5ee9ab746e3697fbea0ce25cfd4f2469fca5f601dbbdea1978e0f3f2d0aeb9bd194369a1e98ad53e8d1b2fc04ee7d0fda91d34472"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = memfd_secret(0x0) write$snapshot(r3, &(0x7f0000000540)="b84aa0b7ec5e1dcae8be7910ecc2998b817f4124580ae653a4e38ea176cca264779b92ce79982541dbc3cb5fd69f16d56f496289d3cf000fe4c6eae8bf3dc82e565415b597d18717fac07e7cc61159ba3cc5fa31014b42ec1c2e7e390b6711a101eeee3703141b2beeae2ff82540836a30a3bd54f759ecdfe91bc749926b7282c7d6348530f72d2bb8f4dfeae41b6b0d72e4c5ae95e5489768a8e39830ff1e2a87745db68cf0f449ec6f4049176529cc2ffbf4c77613d1fd5c263d2414554cf7b8a7ac0fee7c52015d5731bd", 0xcc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x8000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96a, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t~0&&\t') 47.887702344s ago: executing program 40 (id=7484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x200000, 0x0, 0xff, 0x0, 0x3ff, 0x72}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000acf4b06226e862904824de2f7eb3dd2d0ba5a4bc6cdda3671fb6e828883065888bb82f97383b9e18c3b96781762aa24c300e9982965dab2b4629ee8fa30da541181663bd2c542f743ac5ee9ab746e3697fbea0ce25cfd4f2469fca5f601dbbdea1978e0f3f2d0aeb9bd194369a1e98ad53e8d1b2fc04ee7d0fda91d34472"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = memfd_secret(0x0) write$snapshot(r3, &(0x7f0000000540)="b84aa0b7ec5e1dcae8be7910ecc2998b817f4124580ae653a4e38ea176cca264779b92ce79982541dbc3cb5fd69f16d56f496289d3cf000fe4c6eae8bf3dc82e565415b597d18717fac07e7cc61159ba3cc5fa31014b42ec1c2e7e390b6711a101eeee3703141b2beeae2ff82540836a30a3bd54f759ecdfe91bc749926b7282c7d6348530f72d2bb8f4dfeae41b6b0d72e4c5ae95e5489768a8e39830ff1e2a87745db68cf0f449ec6f4049176529cc2ffbf4c77613d1fd5c263d2414554cf7b8a7ac0fee7c52015d5731bd", 0xcc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x8000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96a, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t~0&&\t') 38.723634608s ago: executing program 2 (id=7624): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 38.670910051s ago: executing program 2 (id=7626): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x1a}, 0x40b7}], 0x1, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x2) write$binfmt_script(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendto(r1, &(0x7f0000000ec0)="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", 0x1000, 0x20040001, &(0x7f00000001c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0xf7, 0x3, "0021d52ae9c250ae8c9951f17c90a5653e751e37d956adafcc73c272a3fbc6550a606756aeb264bd5e1ac8286ee1210ac0540e13294a417134f80fefc4331c", 0x2}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x7) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000280)=ANY=[], 0x118) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x4020013, r4, 0x506fc000) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000100)={0x10}) sendto$inet(r6, 0x0, 0x0, 0x20000090, 0x0, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e24, @remote}, 0x10) getresuid(&(0x7f0000000140), 0x0, 0x0) setrlimit(0xc, &(0x7f0000000000)={0x4, 0x7f}) socket$inet_sctp(0x2, 0x1, 0x84) 38.508215372s ago: executing program 2 (id=7630): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e234e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 38.461785584s ago: executing program 2 (id=7631): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x1, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xa4, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9002d9bcf06d0fc75e0d81a2b73f9387"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d5f57cc30973855d"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5528911d9fd1b17bbe91ac9cab386fd88b1be0a1bc9971cc77f6d392701910ea"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1939e615c3835bc6f2bc1cbce61955e15af0e086a62b5028"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1f289a6c9d4ccbd0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1ae5439bb052e9e91a6b1634a76310d5"}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044044}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x1, 0x1, 0x9, {{0x3f, 0x4, 0x1, 0x8, 0xfc, 0x67, 0x0, 0x2, 0x2f, 0x0, @loopback, @local, {[@noop, @ssrr={0x89, 0x1f, 0xe9, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x7, @dev={0xac, 0x14, 0x14, 0x22}, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}]}, @ssrr={0x89, 0x2b, 0xa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @private=0xa010102, @multicast1, @private=0xa010101, @multicast2]}, @ssrr={0x89, 0x7, 0x19, [@loopback]}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0xc, "fd837a2b4879a7e2e189"}, {0x1, 0x6, "fb44a593"}, {0x1, 0x3, '~'}]}, @lsrr={0x83, 0xf, 0xf1, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @generic={0x86, 0x6, "0258d939"}, @timestamp_prespec={0x44, 0xc, 0x9a, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd28}]}, @cipso={0x86, 0x59, 0x1, [{0x1, 0x4, "dc92"}, {0x7, 0xf, "5de3858f259bac074488960fba"}, {0x5, 0x6, "5f188ae1"}, {0x5, 0x4, "133a"}, {0x0, 0x9, "62335c34bde949"}, {0x7, 0x4, "6e15"}, {0x2, 0x8, "85ee10a5c421"}, {0x1, 0xa, "0e8b9346037ddca1"}, {0x5, 0x10, "e2c612dcf2a71d82881ce8c24b10"}, {0x6, 0x7, "44b995108b"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'macvlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x1) 38.068702037s ago: executing program 2 (id=7633): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000001010000000000000000000000000000000000000000000000fbc27cfaaa719816e83b35095bf9bb2aa095461e5a01680cd75ae71e5575434c543d91b2026dee39032a3f2a3638eb5a7fbd46f8ba11e836e7697ccb23e5dd350d8b7d2dc9e86a0f5ccf244f957d0ba883773056ec96d399bb8027acf4fb3ddbbe0c87749435288373b1479b557e1374c47583baeec7850fa83a73"], 0xe) socket(0x40000000015, 0x805, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500"], 0x0}, 0x94) unshare(0x26020480) socket(0x400000000010, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000002, 0xd, 0xb, 0x9, 0x1}) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f00000001c0)=r1}, 0x20) perf_event_open(&(0x7f00000005c0)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYBLOB="5bea4481"], 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}]}, 0x4c}}, 0x20004815) creat(&(0x7f0000000000)='./file0\x00', 0x8) r5 = socket$kcm(0x1e, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) 37.52231889s ago: executing program 2 (id=7640): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8015, &(0x7f0000000000), 0x64, 0x51d, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0x10fff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xe}, {0x4, 0xfff1}, {0x9, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000001400078008001740fffff8010800084000000030050001000600000005000500070000000d0003006c6973743a736574000000000900020073797a31000000000500"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x15c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x7b, 0x6, "201de87f8f160b708194d005317d16860bd31665487bcacc7581178f690003459cf1beccdedd2e949cbf4fc9c3738c1e8fa8ba77fbc7c9550fced04be52c5568c1ed6c711994c52da48cc4eb2cbb9332f401cb58c1a07436034ccbc2f0a94b6dd3dad566865a9a874db4f13f156f1d49a0dbcd3bd309b3"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "6655c700d5d7601c42a7c696bc8718badd9ece98d160909d792031f603e77a9b07c9751a6e7386f01bdb012545a63c2f2cbf584fa23efa44b40b5eff02ac0f79d2ff5a745105eb4e05b6839fa6c806fc8861c2d4a111376656bf5f199217ace688fc7bd23e32fef6f92f172f9d01b6d91e7404582e8ed03b4206061c3199733fc946ce53210579e4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x184}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0xe2c, 0x1) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 22.336242022s ago: executing program 41 (id=7640): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8015, &(0x7f0000000000), 0x64, 0x51d, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0x10fff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xe}, {0x4, 0xfff1}, {0x9, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000001400078008001740fffff8010800084000000030050001000600000005000500070000000d0003006c6973743a736574000000000900020073797a31000000000500"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x15c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x7b, 0x6, "201de87f8f160b708194d005317d16860bd31665487bcacc7581178f690003459cf1beccdedd2e949cbf4fc9c3738c1e8fa8ba77fbc7c9550fced04be52c5568c1ed6c711994c52da48cc4eb2cbb9332f401cb58c1a07436034ccbc2f0a94b6dd3dad566865a9a874db4f13f156f1d49a0dbcd3bd309b3"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "6655c700d5d7601c42a7c696bc8718badd9ece98d160909d792031f603e77a9b07c9751a6e7386f01bdb012545a63c2f2cbf584fa23efa44b40b5eff02ac0f79d2ff5a745105eb4e05b6839fa6c806fc8861c2d4a111376656bf5f199217ace688fc7bd23e32fef6f92f172f9d01b6d91e7404582e8ed03b4206061c3199733fc946ce53210579e4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x184}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0xe2c, 0x1) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 2.607006825s ago: executing program 5 (id=8122): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '\t\t'}, {0x20, '\t\t'}]}, 0xa) close(r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x1d8, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa1a9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa03f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x977, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffeb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x460fe1b3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x91}, 0x840) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000006324e184928854965dfd983d5831969f93103beda59300006c659d4135aa04b4ba03fd74e972999fdf030ecdee8eedf182278d9aff73d2030800000000000000d71cea04400a6e554e05040d537f0f3959304e20ae0102d612e327c14bb7fa222823deb85b9b0ce42cb34b24e046be10f27258fed099954cb99a5c35c56a7a65f18ed6fb6c3a89f7f0e71634ad10cd1de57449acc26ae3b2cdfb8152aa58c5dc7483484f2195a4883ce364457def9ddcf2aa3ef6378fac143c171a6be00b30c2cf9013e005707081905bb5c2a8f2cf48a0ccc990b5cb1571ec0831d7d9e9d9856468", @ANYRES16=r2, @ANYBLOB="318300000000000000001900000018000180140002006e657464657673696d300000"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) times(&(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffff0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffffffffd7e, 0x0}, 0x10) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x228e, 0x1650a61a}, 0x10a20, 0x10000, 0x0, 0x6, 0x2, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.202062189s ago: executing program 5 (id=8132): timer_create(0x2, 0x0, &(0x7f0000000540)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000040)='\f\x00', 0x2, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000300)={@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x3, 0x4, 0x4, {0xa, 0x4e23, 0x7ff, @remote, 0x7}}}, {&(0x7f0000000100)=""/238, 0xee}, &(0x7f0000000000), 0x2}, 0xa0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="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"], 0x70}}, 0x24008800) 1.999484501s ago: executing program 3 (id=8138): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$x25(0x9, 0x5, 0x0) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.431745755s ago: executing program 9 (id=8143): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x4049880) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x48443, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x200, 0x4, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) msgget(0x0, 0x710) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x13}}, r3, 0x3}}, 0x48) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.417732325s ago: executing program 6 (id=8144): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000f4ff00"/28], 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="bc", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) recvfrom$inet(r0, 0x0, 0x17, 0x10042, 0x0, 0xfffffffffffffcdf) socket(0x40000000015, 0x805, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x8) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 1.300929912s ago: executing program 9 (id=8145): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="02090602050000000bd42400ffdbdf25030007002b20000002004e24ac1414bb0000d91100000000"], 0x28}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r2}) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.279579483s ago: executing program 5 (id=8146): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc1) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 1.214974237s ago: executing program 5 (id=8147): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc1) r0 = eventfd2(0xce77, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 1.17316796s ago: executing program 6 (id=8148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1c4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x188, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x170, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xfc, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0xb5, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x40, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x11, 0x6, "df76640d30b6ba21699aad3d08"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1c4}}, 0x20004880) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.17238817s ago: executing program 4 (id=8149): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r2, 0x1) sendto$inet6(r2, 0x0, 0x0, 0x20000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 868.236487ms ago: executing program 5 (id=8150): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r3, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x500, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 867.764528ms ago: executing program 9 (id=8151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="05804ab38284c7d5a5b66406d704", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) 856.004459ms ago: executing program 6 (id=8152): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x500, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xfee, &(0x7f0000002500)=""/4078, 0x41100, 0x64}, 0x94) 779.653293ms ago: executing program 9 (id=8153): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) (async) r1 = syz_io_uring_setup(0x88c, &(0x7f0000000800)={0x0, 0xdee6, 0x400, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000880)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000680)=0xfffffffc, 0x0, 0x4) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') exit(0x4) (async) pread64(r4, 0x0, 0x0, 0x3) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='\x00', &(0x7f00000004c0), 0x6000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@deltfilter={0x34, 0x2d, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x4, 0x9}, {0xffe0, 0xfff3}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0x11}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x59, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) (async) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) (async) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x200000000000000, 0x0) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000006c0)={0x0, 0xba, "a3a343515c9f1911a3daab0a6246bb2c11848ca31846a2b16a5ee87be790c9b55d635f7fe7a0890c79a05efcd0330ddefc38198a99e58b45e7628aab57db4c74e910bab52dff9ad0254cc3e1bf89e3b3507fa6f5a58afa5d72a7b837a2895f49fe6d4ee0ae84c9e46a543b7514bc99c081cd75e5b1a1d8ebc17bc046a59dc6d27cadc365e4368baa5102bca86e6b922a339ad0afbda3ce4dedd0a6c120f4cc7130d631f0e25723f7044190e10eae8eb1d221e1f1ef070c8e1ea1"}, &(0x7f0000000240)=0xc2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000003c0)={0xe, 0x2, 0x800f, 0xba, 0x9, 0x81, 0x3, 0x7, r11}, &(0x7f0000000400)=0x20) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000540)=r4, 0x1) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) r12 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r12, 0x0, 0x48a, &(0x7f00000000c0)={0xb, 0x459, 0x11e}, 0xc) 720.431237ms ago: executing program 5 (id=8154): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a54539", 0xbc}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 717.233417ms ago: executing program 6 (id=8155): syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x8202, 0x1, 0x43, r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240040005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb01c052f436dd2a", 0x2a}], 0x1) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r8 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x14, 0x0, 0xffffffffffffffff, 0x0, r8, 0x1, 0x0, 0x1}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f0000000040)='./file0\x00', 0x8000020c) inotify_add_watch(r11, &(0x7f00000000c0)='./file0\x00', 0x20000510) socket$inet_tcp(0x2, 0x1, 0x0) 697.674928ms ago: executing program 9 (id=8156): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0x91ff}, 0x3000c085) 654.739101ms ago: executing program 9 (id=8157): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@dax}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000001140)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.stat\x00', 0x275a, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f00000001c0)="f1", 0x1) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0xfffffffffffffe93, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x60e, 0x59}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x30}, {0xb, 0x1}, {0x1b}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) 540.291127ms ago: executing program 4 (id=8158): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x80010, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x7ff, 0x0, 0x8, 0x400000000000, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000540)={0x23, 0x0, 0x0, 0x1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x20800, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000003c0)) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f00000004c0)={0x2b, 0x3}) socket$packet(0x11, 0x3, 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r7, r5}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8002, 0x51) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) pread64(r8, &(0x7f0000001440)=""/114, 0x72, 0x101) symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)='./file1\x00') r9 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3ff, 0x450000) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000040)=0x2, 0x4) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) 514.731629ms ago: executing program 3 (id=8159): setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0), 0x0, 0xfffffd94, 0x1) 459.125512ms ago: executing program 3 (id=8160): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f3f000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 404.173216ms ago: executing program 6 (id=8161): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x100) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="be2100000000", 0x0, 0x6, 0x20030, 0x1, 0x0}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}, 0x10040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRESDEC, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRESHEX=r3], 0x50}, 0x1, 0x0, 0x0, 0x8c094}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r5, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000b80)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x24, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xf3, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) r9 = fcntl$getown(r0, 0x9) setpgid(r9, 0x0) r10 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") fsetxattr$security_selinux(r10, &(0x7f0000000980), &(0x7f00000009c0)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c, 0x3) 403.434115ms ago: executing program 4 (id=8162): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x100800) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x10, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'veth0_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="226f09000100870000001400000046008029000000000284c432a96f370b5f46ac90f2807840000031ac1414aa00648b788de914b45cd604955f40d64215b8ee6bd07436107787ab80f59264c2e12c2ceb469c12f5007862a7180034ec349dd6c8794c7963339f23a155094d4ece4a082a20f9f02a810923820169f7bad0bd7c2cd2734227d6358ac8aba921748cba5f3a91506c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078002809c400050200000000000007000002d58838000391000000"], 0xfd6c) 342.918589ms ago: executing program 3 (id=8163): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000300000000", @ANYRES32], 0x3c}}, 0x0) 234.042976ms ago: executing program 3 (id=8164): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x24}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a32000000001400078008"], 0x5c}}, 0x0) (async, rerun: 64) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0xafeb90d9e152e9ee, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000180), &(0x7f00000002c0)=r3}, 0x20) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x700, 0x700, 0x2, 0x9, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x67, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0xd8, 0x3, 0xc, [{@loopback, 0x9}, {@multicast1, 0xae8}, {@remote, 0x1}, {@broadcast, 0x5}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0x9e, 0x3, 0xe, [{@remote, 0x180}]}, @timestamp_addr={0x44, 0x2c, 0x99, 0x1, 0x8, [{@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x7}, {@empty, 0x4}]}]}}}}}) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/26, 0x1a, 0x0, &(0x7f0000000580)=""/158, 0x9e}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xd8, &(0x7f0000000300)=""/216, 0x40f00, 0x10, '\x00', r5, @fallback=0x5, r2, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x10, 0xa, 0xffff}, 0x10, r6, r1, 0x5, 0x0, &(0x7f00000006c0)=[{0x3, 0x3, 0x1, 0x1}, {0x2, 0x2, 0x9, 0x7}, {0x4, 0x1, 0x7, 0x8}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x5, 0xe, 0x7}]}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0x20808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 160.22577ms ago: executing program 4 (id=8165): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) socket(0x40000000015, 0x805, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x8) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000100000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 95.298194ms ago: executing program 4 (id=8166): llistxattr(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)=""/37, 0x25) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x41, 0x1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x19, 0x0, 0x0) fstatfs(r1, &(0x7f0000000380)=""/92) timer_getoverrun(r0) timer_gettime(r0, &(0x7f0000000000)) getresuid(&(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000280)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@resuid={'resuid', 0x3d, r3}}, {@mblk_io_submit}], [{@fowner_lt}, {@dont_appraise}, {@uid_gt={'uid>', r2}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f00000000c0)) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') 58.476746ms ago: executing program 6 (id=8167): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000210425bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="00100000000001002800128008002186671dcf077265001c0002800600c8864e200e0006000f00ff030000060011004e"], 0x48}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfa, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x20110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x90, 0x7, 0x0, 0x1, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$eJzs3c9vI1cdAPDveGPHyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPSFx5ILgxqUckPgRgRokDkYzHqdO1t5NyQ+n8ecjzc5787z+vrfZeS/+JvYLYGzdioj9iChFxNsRMZtfT/Ij3uge6eM+Oni4cnjwcCWJTuetfyRZe3ot+v5O6mb+nOWI+N63In6YPBq3tbu3sVyv17bz+ny7sTXf2t27u95YXqut1Tar1aXFpYXX7r1aPbexvtAo5aUvfvj7/a/9OO3WTH6lfxznqTv04lGc1EREfOcigo3AjXw8pVF3hP9LISKejYgXs/t/Nm5kX00A4DrrdGajM9tfP5IcrwIA10Uhy4ElhUqeC5iJQqFS6ebwnovpQr3Zat950NzZXO3myuaiWHiwXq8t5LnCuSgmaX0xK39cr56o34uIZyLiZ5NTWb2y0qyvjvIbHwAYYzdPrP//nuyu/wDANVcedQcAgEtn/QeA8WP9B4DxY/0HgPHTXf+nRt0NAOASef0PAOPH+g8AY+W7b76ZHp3D/POvV9/Z3dlovnN3tdbaqDR2Viorze2tylqzuZZ9Zk/jSc9Xbza3Fl+JnXfnvr7Vas+3dvfuN5o7m+372ed6368Vs0ftX8LIAIBhnnnhgz8l6Yr8+lR2RN9eDsWR9gy4aIVRdwAYmRuj7gAwMnb7gvF1htf4xYifShHAp9rvsj8HbNF7THnQG4Q6nU7noroFXLjbn5P/h3HVl//3W8AwZuT/YXzJ/8P46nSS027yH6d9IABwtcnxA0N+/v9sfv51/sOBH6yefMT7F9krAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNp6+/9W8r3AZ6JQqFQinoqIuSgmD9brtYWIeDoi/jhZnEzriyPuMwBwVoW/Jvn+X7dnX5451vT8zaNiKSJ+9Iu3fv7ucru9/YeIUvLPyd719vv59eonClw6rxEAAI/XW6ezc98L+Y8OHq70jsvsz9++GRHlbvzDg1IcHsWfiInsXI5iREz/K8nrXUlf7uIs9t+LiM8OGn8SM1kOpLvz6cn4aeynLjV+4Vj8QtbWPaf/Fp85h77AuPkgnX/eGHT/FeJWdh58/5ezGers8vkvfaqVw2wO/Dh+b/67MWT+u3XaGK/89tvd0tSjbe9FfH4iohf7sG/+6cVPhsR/+ZTx//yF518c1tb5ZcTtGBy/P9Z8u7E139rdu7veWF6rrdU2q9WlxaWF1+69Wp3PctTzw1eDv79+5+lhben4p4fELz9h/F8+5fh/9d+3v/+lx8T/6kuD4hfiucfET9fEr5wy/vL0b8rD2tL4q0PG/6Sv/51Txv/wL3uPbBsOAIxOa3dvY7ler20rKFz9Qvpf9gp0Y2DhG5cVqxSDm37yUveePtHU+97/E8YaNmOcR9YNuAqObvqI+M+oOwMAAAAAAAAAAAAAAAx0Ge9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL7+FwAA//87osfs") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 443.869µs ago: executing program 4 (id=8168): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB='nodots,nodots,dots,allow_utime=00000000000000000003777,tz=UTC,dohs,nfs=nostale_ro,debug,dots,nodots,check=relaxed,check=relaxed,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',quiet,gid=', @ANYRESHEX, @ANYBLOB=',nodots,nodots,dots,dots,nfs,nodots,nfs=stale_rw,nodots,check=relaxed,nodots,dots,check=relaxed,quiet,check=relaxed,\x00'], 0x1, 0x1fc, &(0x7f0000000200)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100fff50000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a300000f7ff0800054000000023200011800e000100636f6e6e6c696d697400"], 0xa4}}, 0x4) 0s ago: executing program 3 (id=8169): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r1, &(0x7f0000000000)=0x7, r1, 0x0, 0x2, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknodat(r2, &(0x7f0000000400)='./file7\x00', 0x4, 0xffff) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 473.272332][T27059] ? __pfx_default_wake_function+0x10/0x10 [ 473.272374][T27059] handle_mm_fault+0xb40/0x3030 [ 473.272420][T27059] ? vma_start_read+0x1c7/0x2c0 [ 473.272461][T27059] do_user_addr_fault+0x62f/0x1050 [ 473.272572][T27059] exc_page_fault+0x62/0xa0 [ 473.272679][T27059] asm_exc_page_fault+0x26/0x30 [ 473.272706][T27059] RIP: 0033:0x7fdb8e7d60d7 [ 473.272727][T27059] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 473.272752][T27059] RSP: 002b:00007fff09ecd930 EFLAGS: 00010202 [ 473.272775][T27059] RAX: 0000000000000000 RBX: 0000555578626500 RCX: 00007fdb8e7d60d7 [ 473.272798][T27059] RDX: 00007fff09ecd970 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.272816][T27059] RBP: 00007fff09ecd9dc R08: 0000000000000000 R09: 0000000000000000 [ 473.272833][T27059] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 473.272850][T27059] R13: 00000000000927c0 R14: 000000000007374e R15: 00007fff09ecda30 [ 473.272878][T27059] [ 473.272917][T27059] memory: usage 307200kB, limit 307200kB, failcnt 2319 [ 473.288785][T28715] loop5: detected capacity change from 0 to 1024 [ 473.298553][T27059] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 473.306151][T28715] EXT4-fs: Ignoring removed bh option [ 473.309175][T27059] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 473.309195][T27059] Memory cgroup stats for /syz2: [ 473.537648][T27059] cache 0 [ 473.545674][T27059] rss 0 [ 473.548491][T27059] shmem 0 [ 473.551439][T27059] mapped_file 0 [ 473.554923][T27059] dirty 0 [ 473.557902][T27059] writeback 0 [ 473.561275][T27059] workingset_refault_anon 953 [ 473.565997][T27059] workingset_refault_file 0 [ 473.570628][T27059] swap 184320 [ 473.573977][T27059] swapcached 0 [ 473.577487][T27059] pgpgin 201457 [ 473.580962][T27059] pgpgout 201451 [ 473.584515][T27059] pgfault 172464 [ 473.588113][T27059] pgmajfault 138 [ 473.591675][T27059] inactive_anon 0 [ 473.595365][T27059] active_anon 0 [ 473.598931][T27059] inactive_file 24576 [ 473.602929][T27059] active_file 0 [ 473.606484][T27059] unevictable 0 [ 473.609991][T27059] hierarchical_memory_limit 314572800 [ 473.615458][T27059] hierarchical_memsw_limit 9223372036854771712 [ 473.621669][T27059] total_cache 0 [ 473.625178][T27059] total_rss 0 [ 473.628573][T27059] total_shmem 0 [ 473.632143][T27059] total_mapped_file 0 [ 473.636189][T27059] total_dirty 0 [ 473.639780][T27059] total_writeback 0 [ 473.643620][T27059] total_workingset_refault_anon 953 [ 473.648997][T27059] total_workingset_refault_file 0 [ 473.654035][T27059] total_swap 184320 [ 473.657948][T27059] total_swapcached 0 [ 473.661852][T27059] total_pgpgin 201457 [ 473.665848][T27059] total_pgpgout 201451 [ 473.669950][T27059] total_pgfault 172467 [ 473.674065][T27059] total_pgmajfault 138 [ 473.678227][T27059] total_inactive_anon 0 [ 473.682406][T27059] total_active_anon 0 [ 473.686427][T27059] total_inactive_file 24576 [ 473.690989][T27059] total_active_file 0 [ 473.695066][T27059] total_unevictable 0 [ 473.699239][T27059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7413,pid=28697,uid=0 [ 473.713977][T27059] Memory cgroup out of memory: Killed process 28697 (syz.2.7413) total-vm:94000kB, anon-rss:1204kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 473.733669][T28715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.882781][T28726] netlink: 'syz.2.7422': attribute type 10 has an invalid length. [ 474.213673][T28750] loop2: detected capacity change from 0 to 128 [ 474.228432][T28748] __nla_validate_parse: 16 callbacks suppressed [ 474.228452][T28748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7431'. [ 474.294799][T28750] bio_check_eod: 1809 callbacks suppressed [ 474.294820][T28750] syz.2.7432: attempt to access beyond end of device [ 474.294820][T28750] loop2: rw=8390659, sector=104, nr_sectors = 937 limit=128 [ 474.391976][T28758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 474.425543][T28758] vlan3: entered allmulticast mode [ 474.430789][T28758] bond2: entered allmulticast mode [ 474.479576][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.500623][T28765] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7435'. [ 474.509753][T28765] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7435'. [ 474.580133][T28772] SELinux: security_context_str_to_sid () failed with errno=-22 [ 474.829439][T28796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7446'. [ 474.895380][T28800] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 474.902063][T28800] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 474.909795][T28800] vhci_hcd vhci_hcd.0: Device attached [ 474.916213][T28803] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7447'. [ 474.925351][T28803] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7447'. [ 475.146799][ T6046] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 475.207946][T28819] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7450'. [ 475.284541][T28827] loop9: detected capacity change from 0 to 512 [ 475.294962][T28827] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.417207][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.459226][T28831] loop9: detected capacity change from 0 to 4096 [ 475.597611][T28801] vhci_hcd: connection reset by peer [ 475.607242][T19348] vhci_hcd vhci_hcd.2: stop threads [ 475.612484][T19348] vhci_hcd vhci_hcd.2: release socket [ 475.617926][T19348] vhci_hcd vhci_hcd.2: disconnect device [ 475.698206][T28836] netlink: 'syz.1.7456': attribute type 1 has an invalid length. [ 475.714859][T28836] erspan1: entered allmulticast mode [ 475.791969][T28838] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7457'. [ 475.801510][T28838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7457'. [ 475.826990][T28840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7458'. [ 476.100756][T28870] netlink: 'syz.1.7468': attribute type 5 has an invalid length. [ 476.158450][T28874] IPv6: addrconf: prefix option has invalid lifetime [ 476.165224][T28874] IPv6: addrconf: prefix option has invalid lifetime [ 476.241084][T28879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.257728][T28879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.299598][T28885] netlink: 'syz.3.7474': attribute type 10 has an invalid length. [ 476.327133][T28882] netlink: 'syz.1.7473': attribute type 83 has an invalid length. [ 476.495766][T28897] bridge3: entered promiscuous mode [ 476.501333][T28897] bridge3: entered allmulticast mode [ 476.677967][T28915] netlink: 'syz.5.7485': attribute type 10 has an invalid length. [ 476.797386][T28922] netlink: 'syz.3.7489': attribute type 1 has an invalid length. [ 476.997582][T28953] netlink: 'syz.2.7495': attribute type 2 has an invalid length. [ 477.112058][T28924] chnl_net:caif_netlink_parms(): no params data found [ 477.207955][T28974] loop5: detected capacity change from 0 to 764 [ 477.216313][T28974] rock: directory entry would overflow storage [ 477.222694][T28974] rock: sig=0x4f50, size=4, remaining=3 [ 477.228409][T28974] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 477.255639][T28924] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.262931][T28924] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.313427][T28979] loop5: detected capacity change from 0 to 512 [ 477.320909][T28979] EXT4-fs: Ignoring removed bh option [ 477.326378][T28979] EXT4-fs: Ignoring removed mblk_io_submit option [ 477.334984][T28979] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 477.346517][T28924] bridge_slave_0: entered allmulticast mode [ 477.354043][T28924] bridge_slave_0: entered promiscuous mode [ 477.360696][T28979] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 477.369030][T28979] EXT4-fs (loop5): orphan cleanup on readonly fs [ 477.386746][T28979] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7503: Failed to acquire dquot type 1 [ 477.392246][T28924] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.405332][T28924] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.412733][T28979] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7503: Invalid block bitmap block 0 in block_group 0 [ 477.428802][T28979] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7503: Invalid block bitmap block 0 in block_group 0 [ 477.444631][T28979] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7503: Invalid block bitmap block 0 in block_group 0 [ 477.462611][T28979] __quota_error: 107 callbacks suppressed [ 477.462625][T28979] Quota error (device loop5): write_blk: dquota write failed [ 477.467259][T28924] bridge_slave_1: entered allmulticast mode [ 477.468598][T28979] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 477.491778][T28979] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7503: Failed to acquire dquot type 1 [ 477.497574][T28924] bridge_slave_1: entered promiscuous mode [ 477.505408][T27636] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 477.521272][T28979] Quota error (device loop5): write_blk: dquota write failed [ 477.528825][T28979] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 477.538766][T28979] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7503: Failed to acquire dquot type 1 [ 477.552209][T28979] EXT4-fs (loop5): 1 orphan inode deleted [ 477.558604][T28979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 477.589742][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.633377][T28924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.689135][T28924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.749017][T28924] team0: Port device team_slave_0 added [ 477.777782][T28924] team0: Port device team_slave_1 added [ 477.825612][T28924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.832721][T28924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.858967][T28924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.874740][T29000] validate_nla: 1 callbacks suppressed [ 477.874845][T29000] netlink: 'syz.3.7510': attribute type 10 has an invalid length. [ 477.882873][T28924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.895672][T28924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.895704][T28924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.976659][T15058] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 478.008703][T28924] hsr_slave_0: entered promiscuous mode [ 478.014986][T28924] hsr_slave_1: entered promiscuous mode [ 478.021364][T28924] debugfs: 'hsr0' already exists in 'hsr' [ 478.027283][T28924] Cannot create hsr debugfs directory [ 478.182357][ T29] audit: type=1326 audit(2000000199.469:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29016 comm="syz.2.7516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb8e81aeb9 code=0x0 [ 478.245666][T29025] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 478.252239][T29025] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 478.259909][T29025] vhci_hcd vhci_hcd.0: Device attached [ 478.294114][ T29] audit: type=1326 audit(2000000199.579:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29016 comm="syz.2.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x7ffc0000 [ 478.317894][ T29] audit: type=1326 audit(2000000199.579:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29016 comm="syz.2.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb8e81aeb9 code=0x7ffc0000 [ 478.341645][ T29] audit: type=1326 audit(2000000199.579:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29016 comm="syz.2.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x7ffc0000 [ 478.365455][ T29] audit: type=1326 audit(2000000199.579:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29016 comm="syz.2.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb8e81aeb9 code=0x7ffc0000 [ 478.401758][T29025] netlink: 'syz.2.7516': attribute type 12 has an invalid length. [ 478.444371][ T29] audit: type=1326 audit(2000000199.679:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29016 comm="syz.2.7516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x7ffc0000 [ 478.591903][T29043] bridge4: entered promiscuous mode [ 478.597366][T29043] bridge4: entered allmulticast mode [ 478.683637][T28924] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 478.700815][T28924] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 478.719757][T28924] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 478.738844][T28924] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.896467][T28924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.937840][T29074] bridge_slave_1: left allmulticast mode [ 478.943608][T29074] bridge_slave_1: left promiscuous mode [ 478.949350][T29074] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.956774][T29026] vhci_hcd: connection closed [ 478.957407][T19356] vhci_hcd vhci_hcd.2: stop threads [ 478.967408][T19356] vhci_hcd vhci_hcd.2: release socket [ 478.972815][T19356] vhci_hcd vhci_hcd.2: disconnect device [ 479.019438][T29074] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 479.043170][T28924] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.090145][T19349] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.097266][T19349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.156128][T19346] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.163273][T19346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.266277][T28924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.442168][T28924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.615216][T29114] loop2: detected capacity change from 0 to 128 [ 479.623885][T29082] loop9: detected capacity change from 0 to 1024 [ 479.625722][T29111] __nla_validate_parse: 20 callbacks suppressed [ 479.625764][T29111] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7527'. [ 479.658892][T29082] EXT4-fs: Ignoring removed bh option [ 479.767100][T29082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 480.133204][T28924] veth0_vlan: entered promiscuous mode [ 480.170992][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 480.173046][T28924] veth1_vlan: entered promiscuous mode [ 480.277343][ T6046] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 480.327377][T28924] veth0_macvtap: entered promiscuous mode [ 480.374865][T28924] veth1_macvtap: entered promiscuous mode [ 480.399878][T29162] loop9: detected capacity change from 0 to 164 [ 480.420809][T28924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.458732][T28924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.486689][T29162] Unable to read rock-ridge attributes [ 480.537099][T19356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.554197][T29175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7537'. [ 480.577578][T19356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.612630][T19356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.647067][T19356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.664974][T29182] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7539'. [ 480.690952][T29182] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7539'. [ 480.700140][T29182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7539'. [ 480.745772][T29190] loop5: detected capacity change from 0 to 4096 [ 480.766289][T29199] netlink: 'syz.9.7539': attribute type 10 has an invalid length. [ 480.788602][T29190] EXT4-fs: Ignoring removed bh option [ 480.794152][T29190] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.867295][T29190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.906820][T29190] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 80: comm syz.5.7540: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 480.967638][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.978251][T29222] loop9: detected capacity change from 0 to 164 [ 481.009609][T29222] Unable to read rock-ridge attributes [ 481.051844][T29228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7550'. [ 481.110922][T29234] loop9: detected capacity change from 0 to 128 [ 481.133147][T29234] EXT4-fs: Ignoring removed nobh option [ 481.148886][T29234] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 481.187156][T29234] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 481.219684][T27407] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.248535][T29249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7554'. [ 481.274599][T29253] loop5: detected capacity change from 0 to 256 [ 481.298314][T29256] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7555'. [ 481.314331][T29257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7554'. [ 481.323391][T29257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7554'. [ 481.367488][T29260] FAULT_INJECTION: forcing a failure. [ 481.367488][T29260] name failslab, interval 1, probability 0, space 0, times 0 [ 481.368105][T29249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.380313][T29260] CPU: 0 UID: 0 PID: 29260 Comm: syz.2.7557 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 481.380422][T29260] Tainted: [W]=WARN [ 481.380450][T29260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.380491][T29260] Call Trace: [ 481.380512][T29260] [ 481.380552][T29260] __dump_stack+0x1d/0x30 [ 481.380635][T29260] dump_stack_lvl+0x95/0xd0 [ 481.380705][T29260] dump_stack+0x15/0x1b [ 481.380774][T29260] should_fail_ex+0x263/0x280 [ 481.380913][T29260] should_failslab+0x8c/0xb0 [ 481.380996][T29260] __kvmalloc_node_noprof+0x148/0x680 [ 481.381099][T29260] ? listxattr+0x4f/0x260 [ 481.381243][T29260] ? __fget_files+0x184/0x1c0 [ 481.381319][T29260] listxattr+0x4f/0x260 [ 481.381360][T29260] __x64_sys_flistxattr+0xc7/0x120 [ 481.381466][T29260] x64_sys_call+0x2a78/0x3000 [ 481.381558][T29260] do_syscall_64+0xc0/0x2a0 [ 481.381665][T29260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.381793][T29260] RIP: 0033:0x7fdb8e81aeb9 [ 481.381933][T29260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.381996][T29260] RSP: 002b:00007fdb8d277028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 481.382066][T29260] RAX: ffffffffffffffda RBX: 00007fdb8ea95fa0 RCX: 00007fdb8e81aeb9 [ 481.382146][T29260] RDX: 00000000000000d7 RSI: 0000200000000100 RDI: 0000000000000003 [ 481.382260][T29260] RBP: 00007fdb8d277090 R08: 0000000000000000 R09: 0000000000000000 [ 481.382309][T29260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.382351][T29260] R13: 00007fdb8ea96038 R14: 00007fdb8ea95fa0 R15: 00007fff09ecd638 [ 481.382423][T29260] [ 481.556732][T29261] netlink: 'syz.4.7554': attribute type 10 has an invalid length. [ 481.589856][T29261] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.597317][T29261] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.648583][T29261] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.655759][T29261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.663109][T29261] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.670274][T29261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.687403][T29261] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 481.717828][T29266] bridge1: entered promiscuous mode [ 481.723167][T29266] bridge1: entered allmulticast mode [ 481.751402][T29284] loop9: detected capacity change from 0 to 256 [ 481.828303][T29284] FAT-fs (loop9): Directory bread(block 64) failed [ 481.834856][T29284] FAT-fs (loop9): Directory bread(block 65) failed [ 481.888533][T29284] FAT-fs (loop9): Directory bread(block 66) failed [ 481.888564][T29284] FAT-fs (loop9): Directory bread(block 67) failed [ 481.888601][T29284] FAT-fs (loop9): Directory bread(block 68) failed [ 481.888620][T29284] FAT-fs (loop9): Directory bread(block 69) failed [ 481.888724][T29284] FAT-fs (loop9): Directory bread(block 70) failed [ 481.888742][T29284] FAT-fs (loop9): Directory bread(block 71) failed [ 481.888767][T29284] FAT-fs (loop9): Directory bread(block 72) failed [ 481.888791][T29284] FAT-fs (loop9): Directory bread(block 73) failed [ 482.071860][T29317] FAULT_INJECTION: forcing a failure. [ 482.071860][T29317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.085109][T29317] CPU: 0 UID: 0 PID: 29317 Comm: syz.9.7569 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 482.085153][T29317] Tainted: [W]=WARN [ 482.085163][T29317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.085226][T29317] Call Trace: [ 482.085233][T29317] [ 482.085241][T29317] __dump_stack+0x1d/0x30 [ 482.085469][T29317] dump_stack_lvl+0x95/0xd0 [ 482.085500][T29317] dump_stack+0x15/0x1b [ 482.085524][T29317] should_fail_ex+0x263/0x280 [ 482.085592][T29317] should_fail+0xb/0x20 [ 482.085629][T29317] should_fail_usercopy+0x1a/0x20 [ 482.085665][T29317] _copy_from_user+0x1c/0xb0 [ 482.085711][T29317] do_sock_getsockopt+0xf1/0x210 [ 482.085754][T29317] __x64_sys_getsockopt+0x11d/0x1a0 [ 482.085830][T29317] x64_sys_call+0x2dc7/0x3000 [ 482.085863][T29317] do_syscall_64+0xc0/0x2a0 [ 482.085963][T29317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.085990][T29317] RIP: 0033:0x7f52fb5baeb9 [ 482.086011][T29317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.086122][T29317] RSP: 002b:00007f52fa017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 482.086143][T29317] RAX: ffffffffffffffda RBX: 00007f52fb835fa0 RCX: 00007f52fb5baeb9 [ 482.086160][T29317] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000003 [ 482.086177][T29317] RBP: 00007f52fa017090 R08: 00002000000002c0 R09: 0000000000000000 [ 482.086241][T29317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.086254][T29317] R13: 00007f52fb836038 R14: 00007f52fb835fa0 R15: 00007ffc7d296048 [ 482.086355][T29317] [ 482.475839][ T29] kauditd_printk_skb: 2731 callbacks suppressed [ 482.475856][ T29] audit: type=1326 audit(2000000203.759:12829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.505822][ T29] audit: type=1326 audit(2000000203.759:12830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.529242][ T29] audit: type=1326 audit(2000000203.759:12831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.552641][ T29] audit: type=1326 audit(2000000203.759:12832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.576231][ T29] audit: type=1326 audit(2000000203.759:12833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.599612][ T29] audit: type=1326 audit(2000000203.759:12834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.623002][ T29] audit: type=1326 audit(2000000203.759:12835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.646583][ T29] audit: type=1326 audit(2000000203.759:12836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.670130][ T29] audit: type=1326 audit(2000000203.759:12837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.693526][ T29] audit: type=1326 audit(2000000203.759:12838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29294 comm="syz.2.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8e81aeb9 code=0x50000 [ 482.857821][T29354] bridge5: entered promiscuous mode [ 482.863202][T29354] bridge5: entered allmulticast mode [ 483.953972][T29434] FAULT_INJECTION: forcing a failure. [ 483.953972][T29434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.967457][T29434] CPU: 1 UID: 0 PID: 29434 Comm: syz.5.7592 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 483.967499][T29434] Tainted: [W]=WARN [ 483.967508][T29434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.967524][T29434] Call Trace: [ 483.967533][T29434] [ 483.967543][T29434] __dump_stack+0x1d/0x30 [ 483.967588][T29434] dump_stack_lvl+0x95/0xd0 [ 483.967610][T29434] dump_stack+0x15/0x1b [ 483.967632][T29434] should_fail_ex+0x263/0x280 [ 483.967694][T29434] should_fail+0xb/0x20 [ 483.967773][T29434] should_fail_usercopy+0x1a/0x20 [ 483.967810][T29434] _copy_from_iter+0xcf/0xea0 [ 483.967881][T29434] ? __alloc_skb+0x397/0x4b0 [ 483.967920][T29434] ? __alloc_skb+0x219/0x4b0 [ 483.967954][T29434] netlink_sendmsg+0x4ae/0x6f0 [ 483.967978][T29434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.968019][T29434] ____sys_sendmsg+0x5af/0x600 [ 483.968109][T29434] ___sys_sendmsg+0x195/0x1e0 [ 483.968201][T29434] __x64_sys_sendmsg+0xd4/0x160 [ 483.968225][T29434] x64_sys_call+0x17ba/0x3000 [ 483.968297][T29434] do_syscall_64+0xc0/0x2a0 [ 483.968333][T29434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.968414][T29434] RIP: 0033:0x7f04b5f2aeb9 [ 483.968430][T29434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.968449][T29434] RSP: 002b:00007f04b4987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.968469][T29434] RAX: ffffffffffffffda RBX: 00007f04b61a5fa0 RCX: 00007f04b5f2aeb9 [ 483.968492][T29434] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 483.968510][T29434] RBP: 00007f04b4987090 R08: 0000000000000000 R09: 0000000000000000 [ 483.968524][T29434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.968540][T29434] R13: 00007f04b61a6038 R14: 00007f04b61a5fa0 R15: 00007ffd32d7dbf8 [ 483.968576][T29434] [ 484.276275][T29444] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 485.128039][T29458] __nla_validate_parse: 5 callbacks suppressed [ 485.128061][T29458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7599'. [ 485.167676][T29492] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7607'. [ 485.615289][T29514] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 485.629512][T29514] smc: net device hsr0 applied user defined pnetid SYZ2 [ 485.639592][T29514] smc: net device hsr0 erased user defined pnetid SYZ2 [ 485.691523][T29519] netlink: 'syz.5.7616': attribute type 13 has an invalid length. [ 485.757104][T29521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7618'. [ 485.847150][T29528] netlink: 'syz.4.7620': attribute type 4 has an invalid length. [ 485.942657][T29546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7627'. [ 486.030047][T29550] loop5: detected capacity change from 0 to 256 [ 486.064284][T29550] FAT-fs (loop5): Directory bread(block 64) failed [ 486.084650][T29550] FAT-fs (loop5): Directory bread(block 65) failed [ 486.096167][T29550] FAT-fs (loop5): Directory bread(block 66) failed [ 486.116428][T29550] FAT-fs (loop5): Directory bread(block 67) failed [ 486.124279][T29550] FAT-fs (loop5): Directory bread(block 68) failed [ 486.137353][T29550] FAT-fs (loop5): Directory bread(block 69) failed [ 486.145825][T29550] FAT-fs (loop5): Directory bread(block 70) failed [ 486.152910][T29550] FAT-fs (loop5): Directory bread(block 71) failed [ 486.225100][T29550] FAT-fs (loop5): Directory bread(block 72) failed [ 486.241186][T29550] FAT-fs (loop5): Directory bread(block 73) failed [ 486.274860][T29548] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 486.283493][T29548] FAT-fs (loop5): Filesystem has been set read-only [ 486.290387][T29548] syz.5.7629: attempt to access beyond end of device [ 486.290387][T29548] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 486.304194][T29548] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 486.313436][T29548] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 486.322392][T29548] syz.5.7629: attempt to access beyond end of device [ 486.322392][T29548] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 486.336470][T29548] syz.5.7629: attempt to access beyond end of device [ 486.336470][T29548] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 486.350720][T29548] syz.5.7629: attempt to access beyond end of device [ 486.350720][T29548] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 486.365147][T29548] syz.5.7629: attempt to access beyond end of device [ 486.365147][T29548] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 486.379818][T29548] syz.5.7629: attempt to access beyond end of device [ 486.379818][T29548] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 486.393920][T29548] syz.5.7629: attempt to access beyond end of device [ 486.393920][T29548] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 486.424938][T29548] syz.5.7629: attempt to access beyond end of device [ 486.424938][T29548] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 486.446732][T29548] syz.5.7629: attempt to access beyond end of device [ 486.446732][T29548] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 486.475390][T29548] syz.5.7629: attempt to access beyond end of device [ 486.475390][T29548] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 486.556697][T29563] loop2: detected capacity change from 0 to 128 [ 486.604232][T29563] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 486.677562][T29563] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.980790][T29579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7639'. [ 487.005245][T29579] vlan2: entered allmulticast mode [ 487.010762][T29579] veth1_macvtap: entered allmulticast mode [ 487.149215][T29581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7642'. [ 487.237884][T29590] netlink: 144 bytes leftover after parsing attributes in process `syz.9.7645'. [ 487.267368][T29590] loop9: detected capacity change from 0 to 512 [ 487.288595][T29590] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 487.311268][T29590] EXT4-fs (loop9): orphan cleanup on readonly fs [ 487.328732][T29590] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 487.347237][T29590] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 487.354787][T29590] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.7645: corrupted inode contents [ 487.367126][T29590] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.7645: mark_inode_dirty error [ 487.379009][T29590] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.7645: corrupted inode contents [ 487.391691][T29590] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.7645: mark_inode_dirty error [ 487.403282][T29590] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.7645: corrupted inode contents [ 487.415960][T29590] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 487.427440][T29590] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.7645: corrupted inode contents [ 487.439610][T29590] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.7645: mark_inode_dirty error [ 487.451215][T29590] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 487.460975][T29590] EXT4-fs (loop9): 1 truncate cleaned up [ 487.469746][T29590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.488147][T29595] loop5: detected capacity change from 0 to 512 [ 487.498887][T29595] EXT4-fs (loop5): orphan cleanup on readonly fs [ 487.500118][T29595] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7646: bg 0: block 248: padding at end of block bitmap is not set [ 487.521485][T29590] netlink: 'syz.9.7645': attribute type 323 has an invalid length. [ 487.549607][T29595] __quota_error: 16926 callbacks suppressed [ 487.549627][T29595] Quota error (device loop5): write_blk: dquota write failed [ 487.563110][T29595] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 487.573261][T29595] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7646: Failed to acquire dquot type 1 [ 487.586071][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.595666][T29595] EXT4-fs (loop5): 1 truncate cleaned up [ 487.629316][T29595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.651617][T29595] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 487.667283][T29595] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 487.675821][T29595] ext4 filesystem being remounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.690591][T29595] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.7646: deleted inode referenced: 12 [ 487.753162][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.808252][T29610] netlink: 'syz.5.7650': attribute type 2 has an invalid length. [ 487.816158][T29610] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7650'. [ 487.838406][ T29] audit: type=1400 audit(2000000209.129:29764): avc: denied { getopt } for pid=29611 comm="syz.9.7651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 487.887797][T29610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7650'. [ 488.023174][T29629] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7655'. [ 488.067129][T29631] IPv6: Can't replace route, no match found [ 488.201820][ T29] audit: type=1400 audit(2000000209.489:29765): avc: denied { kexec_image_load } for pid=29647 comm="syz.4.7663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 488.259524][T29650] loop4: detected capacity change from 0 to 2048 [ 488.317698][T29650] loop4: p1 < > p4 [ 488.322575][T29650] loop4: p4 size 8388608 extends beyond EOD, truncated [ 488.434314][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 488.450744][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 488.728332][T29681] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=29681 comm=syz.3.7673 [ 488.754489][T29681] pim6reg: entered allmulticast mode [ 488.762078][T29681] pim6reg: left allmulticast mode [ 488.788661][ T29] audit: type=1326 audit(2000000210.079:29766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29679 comm="syz.5.7674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04b5f2aeb9 code=0x0 [ 488.829968][T29681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29681 comm=syz.3.7673 [ 488.854850][T29688] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 488.861639][T29688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 488.869266][T29688] vhci_hcd vhci_hcd.0: Device attached [ 488.887496][ T29] audit: type=1326 audit(2000000210.179:29767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29679 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5f2aeb9 code=0x7ffc0000 [ 488.943928][ T29] audit: type=1326 audit(2000000210.179:29768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29679 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5f2aeb9 code=0x7ffc0000 [ 488.967853][ T29] audit: type=1326 audit(2000000210.179:29769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29679 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04b5f2aeb9 code=0x7ffc0000 [ 488.991492][ T29] audit: type=1326 audit(2000000210.179:29770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29679 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5f2aeb9 code=0x7ffc0000 [ 489.015208][ T29] audit: type=1326 audit(2000000210.179:29771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29679 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5f2aeb9 code=0x7ffc0000 [ 489.176681][T15664] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 489.457727][T19356] tipc: Subscription rejected, illegal request [ 489.552523][T29689] vhci_hcd: connection reset by peer [ 489.567413][T19349] vhci_hcd vhci_hcd.5: stop threads [ 489.572732][T19349] vhci_hcd vhci_hcd.5: release socket [ 489.578197][T19349] vhci_hcd vhci_hcd.5: disconnect device [ 489.746158][T29725] can: request_module (can-proto-0) failed. [ 490.015887][T29734] loop9: detected capacity change from 0 to 1024 [ 490.039907][T29734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.110771][T29738] EXT4-fs (loop9): Online resizing not supported with bigalloc [ 490.147862][T29744] __nla_validate_parse: 2 callbacks suppressed [ 490.147884][T29744] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7692'. [ 490.327513][T29759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7696'. [ 490.438312][T29761] loop5: detected capacity change from 0 to 128 [ 490.746804][T29769] sctp: [Deprecated]: syz.5.7699 (pid 29769) Use of int in max_burst socket option deprecated. [ 490.746804][T29769] Use struct sctp_assoc_value instead [ 490.828710][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.046587][T29776] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 491.053155][T29776] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 491.060826][T29776] vhci_hcd vhci_hcd.0: Device attached [ 491.178442][T29784] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7703'. [ 491.306603][ T6046] usb 19-1: new high-speed USB device number 4 using vhci_hcd [ 491.500617][T29768] Process accounting paused [ 491.553660][T29804] loop4: detected capacity change from 0 to 2048 [ 491.662208][T29812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7713'. [ 491.689261][T29812] bridge1: entered promiscuous mode [ 491.694594][T29812] bridge1: entered allmulticast mode [ 491.713537][T29814] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7714'. [ 491.753199][T29777] vhci_hcd: connection reset by peer [ 491.766963][T19346] vhci_hcd vhci_hcd.9: stop threads [ 491.772372][T19346] vhci_hcd vhci_hcd.9: release socket [ 491.777900][T19346] vhci_hcd vhci_hcd.9: disconnect device [ 491.800098][T29818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7716'. [ 491.821779][T29818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7716'. [ 491.830840][T29818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7716'. [ 491.861760][T29818] netlink: 'syz.3.7716': attribute type 10 has an invalid length. [ 492.283247][T29853] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7726'. [ 492.386091][T29855] loop9: detected capacity change from 0 to 1024 [ 492.407129][T29855] EXT4-fs: Ignoring removed bh option [ 492.438684][T29855] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.469927][T29855] EXT4-fs (loop9): shut down requested (0) [ 492.512354][T29870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7732'. [ 492.597482][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.783554][T29878] loop9: detected capacity change from 0 to 512 [ 492.794607][T29878] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 492.929341][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 492.929358][ T29] audit: type=1326 audit(2000000214.219:29857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52fb5baeb9 code=0x0 [ 492.996708][T29893] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 493.003274][T29893] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 493.011062][T29893] vhci_hcd vhci_hcd.0: Device attached [ 493.038085][ T29] audit: type=1326 audit(2000000214.329:29858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7ffc0000 [ 493.061894][ T29] audit: type=1326 audit(2000000214.329:29859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7ffc0000 [ 493.126572][ T29] audit: type=1326 audit(2000000214.369:29860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52fb5baeb9 code=0x7ffc0000 [ 493.150465][ T29] audit: type=1326 audit(2000000214.369:29861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7ffc0000 [ 493.174097][ T29] audit: type=1326 audit(2000000214.369:29862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7ffc0000 [ 493.197706][ T29] audit: type=1326 audit(2000000214.389:29863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52fb5baeb9 code=0x7ffc0000 [ 493.221655][ T29] audit: type=1326 audit(2000000214.389:29864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7ffc0000 [ 493.245287][ T29] audit: type=1326 audit(2000000214.389:29865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7ffc0000 [ 493.269578][ T29] audit: type=1326 audit(2000000214.389:29866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.9.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52fb5baeb9 code=0x7ffc0000 [ 493.323165][T29892] loop4: detected capacity change from 0 to 1024 [ 493.333319][T29892] EXT4-fs: Ignoring removed bh option [ 493.368630][T29892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 493.688662][T29894] vhci_hcd: connection closed [ 493.688937][T19356] vhci_hcd vhci_hcd.9: stop threads [ 493.698933][T19356] vhci_hcd vhci_hcd.9: release socket [ 493.704346][T19356] vhci_hcd vhci_hcd.9: disconnect device [ 493.831407][T28924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 493.931845][T29926] bond2: option tlb_dynamic_lb: invalid value (2) [ 493.949292][T29926] bond2 (unregistering): Released all slaves [ 493.981008][T29932] tipc: Enabling of bearer rejected, failed to enable media [ 494.080292][T29930] 0{X: renamed from gretap0 (while UP) [ 494.102784][T29930] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 494.183262][T29953] bridge2: entered promiscuous mode [ 494.188640][T29953] bridge2: entered allmulticast mode [ 494.216081][T29953] team0: Port device bridge2 added [ 494.228010][T29953] bridge0: port 3(team0) entered blocking state [ 494.234391][T29953] bridge0: port 3(team0) entered disabled state [ 494.276805][T29953] team0: entered allmulticast mode [ 494.281999][T29953] team_slave_0: entered allmulticast mode [ 494.287916][T29953] team_slave_1: entered allmulticast mode [ 494.296667][T15664] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 494.316674][T29953] team0: entered promiscuous mode [ 494.321899][T29953] team_slave_0: entered promiscuous mode [ 494.327760][T29953] team_slave_1: entered promiscuous mode [ 494.359539][T29953] bridge0: port 3(team0) entered blocking state [ 494.365896][T29953] bridge0: port 3(team0) entered forwarding state [ 494.524537][T29977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29977 comm=syz.3.7758 [ 494.554559][T29959] syzkaller0: entered promiscuous mode [ 494.560319][T29959] syzkaller0: entered allmulticast mode [ 494.720469][ T3401] IPVS: starting estimator thread 0... [ 494.784660][T29995] 9p: Bad value for 'rfdno' [ 494.826638][T29994] IPVS: using max 2256 ests per chain, 112800 per kthread [ 495.066961][T30023] netlink: 'syz.4.7766': attribute type 10 has an invalid length. [ 495.085335][T30023] bridge0: port 3(team0) entered disabled state [ 495.091774][T30023] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.099074][T30023] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.189746][T30033] bridge6: entered promiscuous mode [ 495.203328][T30034] loop5: detected capacity change from 0 to 512 [ 495.227748][T30034] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.7768: corrupted xattr block 95: invalid header [ 495.304870][T30044] 9pnet_fd: Insufficient options for proto=fd [ 495.311825][T30034] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7768: bg 0: block 7: invalid block bitmap [ 495.351468][T30034] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 495.390419][T30034] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.7768: corrupted xattr block 95: invalid header [ 495.437451][T30034] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 495.452294][T30050] loop9: detected capacity change from 0 to 8192 [ 495.458856][T30034] EXT4-fs (loop5): 1 orphan inode deleted [ 495.465122][T30034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.526935][ T3304] loop9: p1 p2 p3 p4 [ 495.531305][ T3304] loop9: p1 start 16777216 is beyond EOD, truncated [ 495.546219][ T3304] loop9: p4 start 16777223 is beyond EOD, truncated [ 495.562020][T30050] loop9: p1 p2 p3 p4 [ 495.569496][T30050] loop9: p1 start 16777216 is beyond EOD, truncated [ 495.586335][T30050] loop9: p4 start 16777223 is beyond EOD, truncated [ 495.670193][T19346] tipc: Subscription rejected, illegal request [ 495.771676][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 495.780108][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 495.833750][T30087] loop9: detected capacity change from 0 to 512 [ 495.841874][T30087] EXT4-fs: Ignoring removed oldalloc option [ 495.848049][T30087] EXT4-fs: inline encryption not supported [ 495.855063][T30087] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.895975][T30087] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7777: bg 0: block 64: padding at end of block bitmap is not set [ 495.917004][T30087] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.7777: Failed to acquire dquot type 0 [ 495.929435][T30087] EXT4-fs (loop9): 1 truncate cleaned up [ 495.935819][T30087] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.963714][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.992477][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.227538][T30105] __nla_validate_parse: 9 callbacks suppressed [ 496.227558][T30105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7783'. [ 496.277122][T30105] bridge7: entered promiscuous mode [ 496.282391][T30105] bridge7: entered allmulticast mode [ 496.436644][ T6046] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 496.854778][T30127] loop4: detected capacity change from 0 to 256 [ 496.878144][T30127] /dev/loop4: Can't open blockdev [ 496.899027][T30126] netlink: 'syz.4.7792': attribute type 32 has an invalid length. [ 497.322199][T30142] loop5: detected capacity change from 0 to 512 [ 497.445306][T30142] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 497.469247][T30144] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.7795'. [ 497.510396][T30144] netlink: zone id is out of range [ 497.516060][T30144] netlink: zone id is out of range [ 497.538659][T30163] loop9: detected capacity change from 0 to 512 [ 497.549802][T30144] netlink: zone id is out of range [ 497.564246][T30142] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.7794: Allocating blocks 41-42 which overlap fs metadata [ 497.579343][T30144] netlink: zone id is out of range [ 497.580104][T30163] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 497.584844][T30144] netlink: zone id is out of range [ 497.600580][T30144] netlink: zone id is out of range [ 497.606185][T30144] netlink: zone id is out of range [ 497.612828][T30144] netlink: zone id is out of range [ 497.618788][T30144] netlink: zone id is out of range [ 497.667433][T30142] EXT4-fs (loop5): Remounting filesystem read-only [ 497.678113][T30142] EXT4-fs (loop5): 1 truncate cleaned up [ 497.702256][T30142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.729459][T30163] EXT4-fs (loop9): 1 truncate cleaned up [ 497.735837][T30163] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.849366][T30176] loop4: detected capacity change from 0 to 128 [ 497.892046][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.937897][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.486136][T30217] netlink: 192 bytes leftover after parsing attributes in process `syz.9.7810'. [ 498.504447][T30217] xt_hashlimit: size too large, truncated to 1048576 [ 498.511296][T30217] xt_hashlimit: overflow, try lower: 18446744073709551610/3 [ 498.599601][T30219] loop9: detected capacity change from 0 to 512 [ 498.623080][T30219] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 498.643114][T30219] EXT4-fs (loop9): orphan cleanup on readonly fs [ 498.659484][T30219] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.7811: Allocating blocks 41-42 which overlap fs metadata [ 498.677852][T30219] __quota_error: 142 callbacks suppressed [ 498.677870][T30219] Quota error (device loop9): write_blk: dquota write failed [ 498.691161][T30219] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 498.725407][T30219] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 498.745993][T30219] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.7811: Failed to acquire dquot type 1 [ 498.772992][T30219] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 498.803228][T30219] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.7811: corrupted inode contents [ 498.853115][T30219] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.7811: mark_inode_dirty error [ 498.881452][T30219] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.7811: corrupted inode contents [ 498.908328][T30219] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.7811: mark_inode_dirty error [ 498.948088][T30219] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.7811: corrupted inode contents [ 498.994536][T30219] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 499.011680][T30219] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.7811: corrupted inode contents [ 499.056931][T30219] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.7811: mark_inode_dirty error [ 499.103160][T30219] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 499.120522][T30219] EXT4-fs (loop9): 1 truncate cleaned up [ 499.137010][T30219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.167333][T30219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.321694][T30246] loop5: detected capacity change from 0 to 512 [ 499.325300][T30244] loop9: detected capacity change from 0 to 512 [ 499.350200][T30246] EXT4-fs (loop5): orphan cleanup on readonly fs [ 499.361745][T30244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.392823][T30244] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.7819: iget: bogus i_mode (3355) [ 499.398594][T30246] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7820: bg 0: block 248: padding at end of block bitmap is not set [ 499.420061][T30244] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.7819: couldn't read orphan inode 15 (err -117) [ 499.466997][T30246] Quota error (device loop5): write_blk: dquota write failed [ 499.474490][T30246] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 499.484475][T30246] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7820: Failed to acquire dquot type 1 [ 499.496470][T30244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.517136][T30246] EXT4-fs (loop5): 1 truncate cleaned up [ 499.527240][T30246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.568441][T30246] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7820'. [ 499.588823][T30246] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 499.626069][T30246] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 499.652160][T30246] ext4 filesystem being remounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.664686][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.740443][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.001010][T30280] netlink: 'syz.5.7828': attribute type 1 has an invalid length. [ 500.052209][T30280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 500.087158][T30284] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 500.100267][T30286] loop9: detected capacity change from 0 to 512 [ 500.179903][T30286] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #3: comm syz.9.7829: corrupted inode contents [ 500.237198][T30286] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #3: comm syz.9.7829: mark_inode_dirty error [ 500.297131][T30286] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #3: comm syz.9.7829: corrupted inode contents [ 500.347792][T30286] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.7829: mark_inode_dirty error [ 500.394965][T30286] Quota error (device loop9): write_blk: dquota write failed [ 500.427833][T30286] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 500.458755][T30286] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.7829: Failed to acquire dquot type 0 [ 500.497198][T30286] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.7829: corrupted inode contents [ 500.518329][T30286] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.7829: mark_inode_dirty error [ 500.527127][T30269] loop4: detected capacity change from 0 to 1024 [ 500.537285][T30269] EXT4-fs: Ignoring removed bh option [ 500.554613][T30286] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.7829: corrupted inode contents [ 500.578473][T30269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 500.596726][T30286] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.7829: mark_inode_dirty error [ 500.621106][T30286] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.7829: corrupted inode contents [ 500.647315][T30286] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 500.656583][T30286] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.7829: corrupted inode contents [ 500.677125][T30286] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.7829: mark_inode_dirty error [ 500.688642][T30286] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 500.698361][T30286] EXT4-fs (loop9): 1 truncate cleaned up [ 500.704613][T30286] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.736641][T30286] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.843370][T28924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 501.068579][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.403151][T30338] netlink: 'syz.3.7844': attribute type 4 has an invalid length. [ 501.447646][T30340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7845'. [ 501.468124][T30340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7845'. [ 502.335380][T29021] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 502.384100][ T29] audit: type=1326 audit(2000000223.669:30003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30372 comm="syz.9.7856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 502.422010][T30380] netlink: 'syz.9.7856': attribute type 5 has an invalid length. [ 502.512427][T19353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.550667][ T29] audit: type=1400 audit(2000000223.839:30004): avc: denied { ioctl } for pid=30390 comm="syz.4.7859" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 502.578257][ T29] audit: type=1326 audit(2000000223.839:30005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.4.7859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fc0daeb9 code=0x7ffc0000 [ 502.610268][T19353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.703445][T19353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.754269][T30374] chnl_net:caif_netlink_parms(): no params data found [ 502.770220][T30397] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.7861'. [ 502.788131][T30397] net_ratelimit: 12 callbacks suppressed [ 502.788146][T30397] netlink: zone id is out of range [ 502.800711][T30397] netlink: zone id is out of range [ 502.809655][T30397] netlink: zone id is out of range [ 502.815903][T30397] netlink: zone id is out of range [ 502.822858][T30397] netlink: zone id is out of range [ 502.828790][T30397] netlink: zone id is out of range [ 502.834493][T30397] netlink: zone id is out of range [ 502.836244][T19353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.840324][T30397] netlink: zone id is out of range [ 502.858235][T30397] netlink: zone id is out of range [ 502.864065][T30397] netlink: zone id is out of range [ 502.891599][T30374] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.898767][T30374] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.906188][T30374] bridge_slave_0: entered allmulticast mode [ 502.914331][T30374] bridge_slave_0: entered promiscuous mode [ 502.946779][T30412] loop4: detected capacity change from 0 to 1024 [ 502.993674][T30374] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.000909][T30374] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.016097][T30412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.040921][T30374] bridge_slave_1: entered allmulticast mode [ 503.057514][T30374] bridge_slave_1: entered promiscuous mode [ 503.067032][T19353] bridge_slave_1: left allmulticast mode [ 503.072705][T19353] bridge_slave_1: left promiscuous mode [ 503.078479][T19353] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.092441][T19353] bridge_slave_0: left allmulticast mode [ 503.098461][T19353] bridge_slave_0: left promiscuous mode [ 503.104230][T19353] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.173606][T30423] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7867'. [ 503.255805][T19353] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 503.339069][T19353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.349539][T19353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.360449][T19353] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 503.368976][T19353] batadv0: left promiscuous mode [ 503.374833][T19353] bond0 (unregistering): Released all slaves [ 503.383468][T19353] bond1 (unregistering): Released all slaves [ 503.393061][T19353] bond2 (unregistering): Released all slaves [ 503.402463][T19353] bond3 (unregistering): Released all slaves [ 503.425242][T30374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.439527][T30374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.520718][T30374] team0: Port device team_slave_0 added [ 503.529464][T28924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.566340][T30374] team0: Port device team_slave_1 added [ 503.602554][T19353] hsr_slave_0: left promiscuous mode [ 503.614184][T19353] hsr_slave_1: left promiscuous mode [ 503.632563][T19353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.640418][T19353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.678872][T19353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.686378][T19353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.745283][T19353] veth1_macvtap: left promiscuous mode [ 503.758512][T19353] veth0_macvtap: left promiscuous mode [ 503.766711][T19353] veth1_vlan: left promiscuous mode [ 503.771995][T19353] veth0_vlan: left promiscuous mode [ 503.906441][T19353] team0 (unregistering): Port device team_slave_1 removed [ 503.919575][T19353] team0 (unregistering): Port device team_slave_0 removed [ 503.972380][T30374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.979538][T30374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.005608][T30374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.023320][T30374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.030348][T30374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.056288][T30374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.115939][T30374] hsr_slave_0: entered promiscuous mode [ 504.122274][T30374] hsr_slave_1: entered promiscuous mode [ 504.128693][T30374] debugfs: 'hsr0' already exists in 'hsr' [ 504.134441][T30374] Cannot create hsr debugfs directory [ 504.318332][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 504.318350][ T29] audit: type=1326 audit(2000000225.599:30014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.348111][ T29] audit: type=1326 audit(2000000225.599:30015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.371778][ T29] audit: type=1326 audit(2000000225.599:30016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.395475][ T29] audit: type=1326 audit(2000000225.599:30017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.419129][ T29] audit: type=1326 audit(2000000225.599:30018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.433501][T30490] loop9: detected capacity change from 0 to 1024 [ 504.442853][ T29] audit: type=1326 audit(2000000225.599:30019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.472902][ T29] audit: type=1326 audit(2000000225.599:30020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.478622][T30495] batadv_slave_1: entered promiscuous mode [ 504.496518][ T29] audit: type=1326 audit(2000000225.599:30021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.526024][ T29] audit: type=1326 audit(2000000225.599:30022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.549723][ T29] audit: type=1326 audit(2000000225.599:30023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1c6eb2aeb9 code=0x7ffc0000 [ 504.575051][T30490] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 504.620241][T30496] batadv_slave_1: left promiscuous mode [ 504.627117][T30490] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.7881: lblock 2 mapped to illegal pblock 2 (length 1) [ 504.658989][T30490] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.7881: lblock 0 mapped to illegal pblock 48 (length 1) [ 504.691899][T30490] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.7881: Failed to acquire dquot type 0 [ 504.707853][T30490] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 504.723141][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7885'. [ 504.732623][T30490] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.7881: mark_inode_dirty error [ 504.754702][T30506] bridge6: entered promiscuous mode [ 504.760043][T30506] bridge6: entered allmulticast mode [ 504.772077][T30490] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 504.785918][T30490] EXT4-fs (loop9): 1 orphan inode deleted [ 504.807364][T19349] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 504.827364][T30490] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.850458][T30374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 504.861099][T30523] FAULT_INJECTION: forcing a failure. [ 504.861099][T30523] name failslab, interval 1, probability 0, space 0, times 0 [ 504.863597][T19349] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:59: Failed to release dquot type 0 [ 504.873873][T30523] CPU: 1 UID: 0 PID: 30523 Comm: syz.5.7888 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 504.874047][T30523] Tainted: [W]=WARN [ 504.874122][T30523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.874164][T30523] Call Trace: [ 504.874186][T30523] [ 504.874215][T30523] __dump_stack+0x1d/0x30 [ 504.874299][T30523] dump_stack_lvl+0x95/0xd0 [ 504.874388][T30523] dump_stack+0x15/0x1b [ 504.874526][T30523] should_fail_ex+0x263/0x280 [ 504.874648][T30523] should_failslab+0x8c/0xb0 [ 504.874784][T30523] kmem_cache_alloc_noprof+0x68/0x490 [ 504.874898][T30523] ? security_file_alloc+0x32/0xf0 [ 504.874983][T30523] security_file_alloc+0x32/0xf0 [ 504.875058][T30523] init_file+0x5c/0x1c0 [ 504.875151][T30523] alloc_empty_file+0x8b/0x200 [ 504.875253][T30523] path_openat+0x62/0x23c0 [ 504.875432][T30523] ? _parse_integer_limit+0x170/0x190 [ 504.875462][T30523] ? _parse_integer+0x27/0x40 [ 504.875636][T30523] ? kstrtoull+0x111/0x140 [ 504.875777][T30523] ? kstrtouint+0x76/0xc0 [ 504.875923][T30523] do_filp_open+0x15d/0x280 [ 504.876061][T30523] do_sys_openat2+0xa6/0x150 [ 504.876166][T30523] __x64_sys_openat+0xf2/0x120 [ 504.876308][T30523] x64_sys_call+0x2b07/0x3000 [ 504.876459][T30523] do_syscall_64+0xc0/0x2a0 [ 504.876558][T30523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.876651][T30523] RIP: 0033:0x7f04b5f2aeb9 [ 504.876692][T30523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.876775][T30523] RSP: 002b:00007f04b4987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.876927][T30523] RAX: ffffffffffffffda RBX: 00007f04b61a5fa0 RCX: 00007f04b5f2aeb9 [ 504.876976][T30523] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 504.877018][T30523] RBP: 00007f04b4987090 R08: 0000000000000000 R09: 0000000000000000 [ 504.877077][T30523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.877124][T30523] R13: 00007f04b61a6038 R14: 00007f04b61a5fa0 R15: 00007ffd32d7dbf8 [ 504.877228][T30523] [ 505.095071][T30374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 505.105752][T30374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 505.146230][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.156009][T19353] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1) [ 505.165026][T30374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 505.178206][T19353] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:62: Failed to release dquot type 0 [ 505.180245][T30526] ref_ctr increment failed for inode: 0x1c9 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005ca40 [ 505.202139][T27407] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 505.215455][T30525] uprobe: syz.4.7889:30525 failed to unregister, leaking uprobe [ 505.218952][T27407] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 505.235159][T27407] EXT4-fs error (device loop9): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 505.270201][T30536] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7890'. [ 505.299855][T30536] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7890'. [ 505.303943][T30374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.309110][T30536] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7890'. [ 505.326769][T30374] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.359260][T19356] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.366396][T19356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.397715][T30544] netlink: 'syz.9.7890': attribute type 10 has an invalid length. [ 505.420881][T19356] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.428032][T19356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.453760][T30546] 9p: Bad value for 'wfdno' [ 505.621993][T30571] ALSA: seq fatal error: cannot create timer (-22) [ 505.659567][T30374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.830817][T30602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7900'. [ 505.970344][T30606] loop5: detected capacity change from 0 to 8192 [ 505.985800][T30606] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 506.031559][T30374] veth0_vlan: entered promiscuous mode [ 506.046195][T30374] veth1_vlan: entered promiscuous mode [ 506.064850][T30374] veth0_macvtap: entered promiscuous mode [ 506.074052][T30374] veth1_macvtap: entered promiscuous mode [ 506.087528][T30374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.117749][T30374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.149016][T19349] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.179086][T19349] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.200903][T19349] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.223834][T30634] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7902'. [ 506.235560][T19349] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.273501][T30626] netlink: 'syz.5.7902': attribute type 10 has an invalid length. [ 506.462916][T30654] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 506.469804][T30654] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 506.477501][T30654] vhci_hcd vhci_hcd.0: Device attached [ 506.496119][T30661] __nla_validate_parse: 2 callbacks suppressed [ 506.496140][T30661] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7908'. [ 506.503366][T30658] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7907'. [ 506.529060][T30654] netlink: 'syz.5.7903': attribute type 12 has an invalid length. [ 506.550004][T30661] bridge8: entered promiscuous mode [ 506.555306][T30661] bridge8: entered allmulticast mode [ 506.716651][T15664] usb 11-1: new high-speed USB device number 4 using vhci_hcd [ 506.827119][T30695] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7911'. [ 506.849840][T30695] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7911'. [ 506.898483][T30701] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7913'. [ 506.921422][T30701] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7913'. [ 506.930574][T30701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7913'. [ 506.972406][T30707] netlink: 'syz.9.7913': attribute type 10 has an invalid length. [ 507.055865][T30714] loop9: detected capacity change from 0 to 256 [ 507.083501][T30714] FAT-fs (loop9): Directory bread(block 64) failed [ 507.100925][T30714] FAT-fs (loop9): Directory bread(block 65) failed [ 507.115396][T30714] FAT-fs (loop9): Directory bread(block 66) failed [ 507.128995][T30714] FAT-fs (loop9): Directory bread(block 67) failed [ 507.150099][T30714] FAT-fs (loop9): Directory bread(block 68) failed [ 507.157559][T30657] vhci_hcd: connection reset by peer [ 507.163013][T19356] vhci_hcd vhci_hcd.5: stop threads [ 507.168396][T19356] vhci_hcd vhci_hcd.5: release socket [ 507.173809][T19356] vhci_hcd vhci_hcd.5: disconnect device [ 507.186649][T30714] FAT-fs (loop9): Directory bread(block 69) failed [ 507.201670][T30714] FAT-fs (loop9): Directory bread(block 70) failed [ 507.227745][T30714] FAT-fs (loop9): Directory bread(block 71) failed [ 507.246011][T30714] FAT-fs (loop9): Directory bread(block 72) failed [ 507.285186][T30714] FAT-fs (loop9): Directory bread(block 73) failed [ 507.316108][T30735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7917'. [ 507.374934][T30712] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 507.383688][T30712] FAT-fs (loop9): Filesystem has been set read-only [ 507.414490][T30712] bio_check_eod: 3493 callbacks suppressed [ 507.414557][T30712] syz.9.7915: attempt to access beyond end of device [ 507.414557][T30712] loop9: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 507.446014][T30712] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 507.454748][T30712] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 507.473794][T30712] syz.9.7915: attempt to access beyond end of device [ 507.473794][T30712] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 507.490006][T30712] syz.9.7915: attempt to access beyond end of device [ 507.490006][T30712] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 507.505011][T30712] syz.9.7915: attempt to access beyond end of device [ 507.505011][T30712] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 507.526400][T30712] syz.9.7915: attempt to access beyond end of device [ 507.526400][T30712] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 507.553324][T30712] syz.9.7915: attempt to access beyond end of device [ 507.553324][T30712] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 507.574495][T30712] syz.9.7915: attempt to access beyond end of device [ 507.574495][T30712] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 507.588913][T30712] syz.9.7915: attempt to access beyond end of device [ 507.588913][T30712] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 507.603370][T30712] syz.9.7915: attempt to access beyond end of device [ 507.603370][T30712] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 507.658661][T30712] syz.9.7915: attempt to access beyond end of device [ 507.658661][T30712] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 507.907721][T30790] random: crng reseeded on system resumption [ 507.928615][T30784] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7925'. [ 507.974410][T30784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7925'. [ 508.026256][T30791] netlink: 'syz.5.7925': attribute type 10 has an invalid length. [ 508.270030][T30829] loop6: detected capacity change from 0 to 512 [ 508.287267][T30780] loop4: detected capacity change from 0 to 1024 [ 508.299955][T30780] EXT4-fs: Ignoring removed bh option [ 508.310758][T30829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 508.340146][T30829] System zones: 1-12 [ 508.345237][T30829] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.7935: Directory hole found for htree index block 0 [ 508.371056][T30780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 508.384116][T30829] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 508.394451][T30839] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 508.401014][T30839] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 508.402790][T30829] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.7935: Directory hole found for htree index block 0 [ 508.408859][T30839] vhci_hcd vhci_hcd.0: Device attached [ 508.440069][T30829] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 508.458379][T30826] netlink: 'syz.3.7934': attribute type 13 has an invalid length. [ 508.476955][T30829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.551804][T30374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.640017][T28924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 508.792294][T30866] loop4: detected capacity change from 0 to 512 [ 508.827920][T30866] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 508.855623][T30871] bridge4: entered promiscuous mode [ 508.861038][T30871] bridge4: entered allmulticast mode [ 508.876646][T30866] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.7939: invalid indirect mapped block 2683928664 (level 1) [ 508.915243][T30866] EXT4-fs (loop4): Remounting filesystem read-only [ 508.922933][T30866] EXT4-fs (loop4): 1 truncate cleaned up [ 508.931124][T30866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.027259][T30866] EXT4-fs warning (device loop4): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 509.042564][T30876] netlink: 'syz.3.7941': attribute type 10 has an invalid length. [ 509.051478][T30842] vhci_hcd: connection closed [ 509.051732][T19346] vhci_hcd vhci_hcd.5: stop threads [ 509.061729][T19346] vhci_hcd vhci_hcd.5: release socket [ 509.067327][T19346] vhci_hcd vhci_hcd.5: disconnect device [ 509.104270][T28924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.239381][T30913] loop4: detected capacity change from 0 to 512 [ 509.255870][T30913] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 509.270301][T30913] EXT4-fs (loop4): 1 truncate cleaned up [ 509.276510][T30913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.303771][T28924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.517148][T30946] netlink: 'syz.9.7955': attribute type 10 has an invalid length. [ 509.648206][T30967] netlink: 'syz.4.7959': attribute type 8 has an invalid length. [ 509.656009][T30967] netem: change failed [ 509.686617][T30963] loop5: detected capacity change from 0 to 128 [ 509.918453][T30984] 9pnet_fd: Insufficient options for proto=fd [ 510.420414][T31042] gre1: entered promiscuous mode [ 510.425433][T31042] gre1: entered allmulticast mode [ 510.578650][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 510.578669][ T29] audit: type=1326 audit(2000000231.868:30144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31044 comm="syz.6.7968" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f190198aeb9 code=0x0 [ 510.644841][T31051] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 510.651417][T31051] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 510.659370][T31051] vhci_hcd vhci_hcd.0: Device attached [ 510.692535][ T29] audit: type=1326 audit(2000000231.978:30145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31044 comm="syz.6.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190198aeb9 code=0x7ffc0000 [ 510.701279][T31051] netlink: 'syz.6.7968': attribute type 12 has an invalid length. [ 510.716410][ T29] audit: type=1326 audit(2000000231.978:30146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31044 comm="syz.6.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190198aeb9 code=0x7ffc0000 [ 510.825607][T31056] loop9: detected capacity change from 0 to 512 [ 510.881243][T31056] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 510.893531][T31058] bond0: (slave macvlan0): Opening slave failed [ 510.916705][T15665] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 510.940712][T31056] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.7970: Allocating blocks 41-42 which overlap fs metadata [ 510.959936][T31056] EXT4-fs (loop9): Remounting filesystem read-only [ 510.968576][T31056] Quota error (device loop9): write_blk: dquota write failed [ 510.977066][T31056] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 510.989238][T31056] Quota error (device loop9): write_blk: dquota write failed [ 510.998465][T31056] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 511.010538][T31056] EXT4-fs (loop9): 1 truncate cleaned up [ 511.023634][T31056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.110633][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.140387][T31075] loop9: detected capacity change from 0 to 512 [ 511.169448][ T29] audit: type=1400 audit(2000000232.448:30147): avc: denied { remount } for pid=31074 comm="syz.9.7976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 511.218777][T31078] loop5: detected capacity change from 0 to 512 [ 511.250047][T31078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 511.361735][T31078] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.7979: iget: bogus i_mode (3355) [ 511.373622][T31052] vhci_hcd: connection reset by peer [ 511.393531][T19347] vhci_hcd vhci_hcd.6: stop threads [ 511.398866][T19347] vhci_hcd vhci_hcd.6: release socket [ 511.404279][T19347] vhci_hcd vhci_hcd.6: disconnect device [ 511.441436][T31078] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7979: couldn't read orphan inode 15 (err -117) [ 511.454073][T31078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.504250][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.548691][ T29] audit: type=1326 audit(2000000232.838:30148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31094 comm="syz.5.7982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5f2aeb9 code=0x7ffc0000 [ 511.574917][ T29] audit: type=1326 audit(2000000232.838:30149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31094 comm="syz.5.7982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5f2aeb9 code=0x7ffc0000 [ 511.640582][T31093] loop9: detected capacity change from 0 to 8192 [ 511.655911][T31095] loop5: detected capacity change from 0 to 8192 [ 511.697187][ T3305] loop5: p1 p3 p4 [ 511.701032][ T3305] loop5: p1 size 477167616 extends beyond EOD, truncated [ 511.708408][T31093] loop9: p1 p3 p4 [ 511.712967][T31093] loop9: p3 start 2147483648 is beyond EOD, truncated [ 511.719826][T31093] loop9: p4 size 33555456 extends beyond EOD, truncated [ 511.727394][ T3305] loop5: p3 start 4294901760 is beyond EOD, truncated [ 511.734222][ T3305] loop5: p4 size 32768 extends beyond EOD, truncated [ 511.752330][T31095] loop5: p1 p3 p4 [ 511.763838][T31095] loop5: p1 size 477167616 extends beyond EOD, truncated [ 511.772386][T31095] loop5: p3 start 4294901760 is beyond EOD, truncated [ 511.779314][T31095] loop5: p4 size 32768 extends beyond EOD, truncated [ 511.806328][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 511.813602][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 511.828071][T31095] tmpfs: Unknown parameter 'nr_inodes' [ 511.844030][T31095] 9p: Bad value for 'rfdno' [ 511.876673][T15664] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 511.947507][T31108] FAULT_INJECTION: forcing a failure. [ 511.947507][T31108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.959329][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 511.960962][T31108] CPU: 1 UID: 0 PID: 31108 Comm: syz.6.7988 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 511.961083][T31108] Tainted: [W]=WARN [ 511.961106][T31108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.961167][T31108] Call Trace: [ 511.961189][T31108] [ 511.961219][T31108] __dump_stack+0x1d/0x30 [ 511.961302][T31108] dump_stack_lvl+0x95/0xd0 [ 511.961375][T31108] dump_stack+0x15/0x1b [ 511.961447][T31108] should_fail_ex+0x263/0x280 [ 511.961612][T31108] should_fail+0xb/0x20 [ 511.961715][T31108] should_fail_usercopy+0x1a/0x20 [ 511.961868][T31108] _copy_to_user+0x20/0xa0 [ 511.962003][T31108] simple_read_from_buffer+0xb5/0x130 [ 511.962127][T31108] proc_fail_nth_read+0x10e/0x150 [ 511.962253][T31108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.962368][T31108] vfs_read+0x1ab/0x7f0 [ 511.962431][T31108] ? __rcu_read_unlock+0x4e/0x70 [ 511.962550][T31108] ? __fget_files+0x184/0x1c0 [ 511.962702][T31108] ? mutex_lock+0x57/0x90 [ 511.962785][T31108] ksys_read+0xdc/0x1a0 [ 511.962879][T31108] __x64_sys_read+0x40/0x50 [ 511.962937][T31108] x64_sys_call+0x2889/0x3000 [ 511.963015][T31108] do_syscall_64+0xc0/0x2a0 [ 511.963119][T31108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.963280][T31108] RIP: 0033:0x7f190194b78e [ 511.963332][T31108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 511.963394][T31108] RSP: 002b:00007f19003e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 511.963492][T31108] RAX: ffffffffffffffda RBX: 00007f19003e76c0 RCX: 00007f190194b78e [ 511.963537][T31108] RDX: 000000000000000f RSI: 00007f19003e70a0 RDI: 0000000000000004 [ 511.963580][T31108] RBP: 00007f19003e7090 R08: 0000000000000000 R09: 0000000000000000 [ 511.963714][T31108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.963758][T31108] R13: 00007f1901c06038 R14: 00007f1901c05fa0 R15: 00007ffe5e83c198 [ 511.963833][T31108] [ 512.028692][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 512.218612][T31111] __nla_validate_parse: 10 callbacks suppressed [ 512.218632][T31111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7990'. [ 512.235340][T31111] net_ratelimit: 4 callbacks suppressed [ 512.235352][T31111] netlink: zone id is out of range [ 512.289302][T31114] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 512.298489][T31114] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 512.323934][T31114] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 512.332434][T31114] System zones: 0-2, 18-18, 34-34 [ 512.338173][T31114] EXT4-fs error (device loop9): ext4_orphan_get:1391: comm syz.9.7989: inode #15: comm syz.9.7989: iget: illegal inode # [ 512.351177][T31114] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.7989: couldn't read orphan inode 15 (err -117) [ 512.365519][T31114] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.469878][T31130] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 0, id = 0 [ 512.529189][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7999'. [ 512.538131][T31137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7999'. [ 512.547365][T31138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7999'. [ 512.556338][T31138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7999'. [ 512.566233][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7999'. [ 512.575238][T31137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7999'. [ 512.584979][T31138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7999'. [ 512.593982][T31138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7999'. [ 512.607595][T31137] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 512.615497][T31138] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 512.624414][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7999'. [ 512.637135][T31137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.690320][T31137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.740047][T31137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.818783][T31137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.895187][T19356] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.909745][T19356] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.922359][T19356] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.935898][T19356] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.079167][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.270040][T31166] batadv_slave_0: entered promiscuous mode [ 513.279987][T31168] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.8011: inode has both inline data and extents flags [ 513.302501][T31168] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.8011: couldn't read orphan inode 15 (err -117) [ 513.316496][T31168] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.330477][T31165] batadv_slave_0: left promiscuous mode [ 513.350925][T31168] SELinux: security_context_str_to_sid (_:;Y-_ IQRVOѹoΞ>GL?./mnt) failed with errno=-22 [ 513.377966][T31173] set_capacity_and_notify: 2 callbacks suppressed [ 513.377987][T31173] loop5: detected capacity change from 0 to 512 [ 513.392642][T31173] EXT4-fs: Ignoring removed nobh option [ 513.414522][T31173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.436690][T31173] ext4 filesystem being mounted at /539/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 513.464346][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.474918][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.502619][T31182] loop6: detected capacity change from 0 to 512 [ 513.509905][T31182] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 513.527537][T31182] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.8018: iget: bogus i_mode (3355) [ 513.546427][T31184] loop9: detected capacity change from 0 to 1024 [ 513.573596][T31182] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8018: couldn't read orphan inode 15 (err -117) [ 513.588089][T31182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.608472][T31184] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.621882][T30374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.641595][T31193] SELinux: failed to load policy [ 513.806473][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.880639][T31198] loop6: detected capacity change from 0 to 2048 [ 513.960650][ T3304] Alternate GPT is invalid, using primary GPT. [ 513.967007][ T3304] loop6: p1 p2 p3 [ 513.970771][ T3304] loop6: partition table partially beyond EOD, truncated [ 513.978638][T31201] 9pnet: p9_errstr2errno: server reported unknown error [ 514.043031][T31198] Alternate GPT is invalid, using primary GPT. [ 514.049601][T31198] loop6: p1 p2 p3 [ 514.053402][T31198] loop6: partition table partially beyond EOD, truncated [ 514.184838][T31224] loop4: detected capacity change from 0 to 512 [ 514.200919][T31214] loop5: detected capacity change from 0 to 8192 [ 514.216312][T31224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 514.235719][T31224] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.8030: iget: bogus i_mode (3355) [ 514.249568][T31224] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8030: couldn't read orphan inode 15 (err -117) [ 514.264659][T31224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.278703][ T3306] loop5: p2 p3 p4[EZD] [ 514.294983][T28924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.312943][ T3306] loop5: p3 start 331781 is beyond EOD, truncated [ 514.319521][ T3306] loop5: p4 size 197376 extends beyond EOD, truncated [ 514.338575][T31214] loop5: p2 p3 p4[EZD] [ 514.359263][T31214] loop5: p3 start 331781 is beyond EOD, truncated [ 514.365748][T31214] loop5: p4 size 197376 extends beyond EOD, truncated [ 514.379731][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 514.395801][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 514.409978][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 514.486561][T31237] loop5: detected capacity change from 0 to 512 [ 514.803684][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 514.805135][T31237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.838509][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 514.890411][T31246] bridge5: entered promiscuous mode [ 514.895686][T31246] bridge5: entered allmulticast mode [ 514.901540][T31237] ext4 filesystem being mounted at /543/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.912428][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 514.976495][T31237] geneve2: entered promiscuous mode [ 515.026336][T19356] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 35157 - 0 [ 515.077095][T19353] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 35157 - 0 [ 515.115810][T19353] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 35157 - 0 [ 515.156238][T19353] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 35157 - 0 [ 515.211993][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.336004][T31248] loop6: detected capacity change from 0 to 512 [ 515.379736][T31264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.442321][T31248] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 515.462536][T31264] netlink: 'syz.3.8043': attribute type 10 has an invalid length. [ 515.531024][T31272] loop5: detected capacity change from 0 to 512 [ 515.576943][T31248] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.8039: Allocating blocks 41-42 which overlap fs metadata [ 515.593145][T31272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.677059][T31248] EXT4-fs (loop6): Remounting filesystem read-only [ 515.730959][T31248] __quota_error: 286 callbacks suppressed [ 515.731071][T31248] Quota error (device loop6): write_blk: dquota write failed [ 515.746101][T31248] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 515.758329][T31272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.824533][T31248] Quota error (device loop6): write_blk: dquota write failed [ 515.849687][T31272] ext4 filesystem being mounted at /547/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 515.870767][T31248] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 515.930441][T31248] EXT4-fs (loop6): 1 truncate cleaned up [ 515.953815][T31248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.978390][T19353] bond0 (unregistering): Released all slaves [ 515.986084][T19353] bond1 (unregistering): Released all slaves [ 516.115452][T15665] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 516.123048][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.205617][T31284] loop5: detected capacity change from 0 to 512 [ 516.216761][T19353] tipc: Disabling bearer [ 516.222141][T19353] tipc: Left network mode [ 516.258802][T31284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 516.307870][T31284] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.8049: iget: bogus i_mode (3355) [ 516.395268][T31284] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.8049: couldn't read orphan inode 15 (err -117) [ 516.407954][T31284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.451531][T30374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.471054][T19353] hsr_slave_0: left promiscuous mode [ 516.491496][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.614053][T31290] EXT4-fs: Ignoring removed oldalloc option [ 516.656599][T31290] ext4: Unknown parameter 'audit' [ 516.814706][T31288] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.957148][T31298] EXT4-fs: inline encryption not supported [ 517.043951][T31298] EXT4-fs (loop6): 1 orphan inode deleted [ 517.056101][T31288] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.8051: Allocating blocks 41-42 which overlap fs metadata [ 517.073468][T19356] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 517.083353][T19356] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:64: Failed to release dquot type 1 [ 517.115682][T31298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.203967][T31298] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.236904][T31288] EXT4-fs (loop5): Remounting filesystem read-only [ 517.266045][T31288] Quota error (device loop5): write_blk: dquota write failed [ 517.275575][T31288] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 517.330556][T31288] Quota error (device loop5): write_blk: dquota write failed [ 517.343457][T30374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.386601][T31288] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 517.417625][T31288] EXT4-fs (loop5): 1 truncate cleaned up [ 517.481400][T31288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.512793][ T29] audit: type=1326 audit(2000000238.798:30436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31319 comm="syz.6.8057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f190198aeb9 code=0x0 [ 517.597961][T31326] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 517.604524][T31326] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 517.612196][T31326] vhci_hcd vhci_hcd.0: Device attached [ 517.657663][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.809262][T31336] SELinux: failed to load policy [ 517.851517][T31343] __nla_validate_parse: 8 callbacks suppressed [ 517.851537][T31343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8058'. [ 517.876598][ T6046] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 517.926657][T31346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8058'. [ 517.947858][T19356] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 517.955438][T19356] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 517.977637][T15058] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 517.985835][T31347] EXT4-fs: inline encryption not supported [ 518.036666][T31347] EXT4-fs: Ignoring removed bh option [ 518.099580][T31347] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.121298][T31347] EXT4-fs (loop4): orphan cleanup on readonly fs [ 518.164226][T31347] EXT4-fs error (device loop4): ext4_quota_enable:7177: comm syz.4.8062: inode #2304: comm syz.4.8062: iget: illegal inode # [ 518.217217][T31347] EXT4-fs (loop4): Remounting filesystem read-only [ 518.223882][T31347] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 518.240210][T31347] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 518.246919][T31327] vhci_hcd: connection reset by peer [ 518.248334][T31347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.264722][T19346] vhci_hcd vhci_hcd.6: stop threads [ 518.270013][T19346] vhci_hcd vhci_hcd.6: release socket [ 518.275469][T19346] vhci_hcd vhci_hcd.6: disconnect device [ 518.283809][T31345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8062'. [ 518.299140][T31345] sctp: [Deprecated]: syz.4.8062 (pid 31345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.299140][T31345] Use struct sctp_sack_info instead [ 518.335932][T28924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.373160][T31355] netlink: 'syz.4.8064': attribute type 21 has an invalid length. [ 518.381241][T31355] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8064'. [ 518.417017][T15056] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.434739][T31358] set_capacity_and_notify: 4 callbacks suppressed [ 518.434758][T31358] loop4: detected capacity change from 0 to 512 [ 518.452854][T31358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.464937][T31358] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.8066: iget: bogus i_mode (3355) [ 518.476885][T31358] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8066: couldn't read orphan inode 15 (err -117) [ 518.489416][T31358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.513859][T28924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.566894][T15056] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.672501][T31372] netlink: 'syz.4.8069': attribute type 21 has an invalid length. [ 518.754728][T31381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8073'. [ 518.770023][T31379] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 518.782593][T31381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8073'. [ 518.791636][T31381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8073'. [ 518.800453][T31379] SELinux: failed to load policy [ 518.833571][T31387] netlink: 'syz.3.8073': attribute type 10 has an invalid length. [ 518.998084][T31412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8084'. [ 519.005670][T31405] mmap: syz.4.8082 (31405): VmData 29204480 exceed data ulimit 197. Update limits or use boot option ignore_rlimit_data. [ 519.049388][T31414] can: request_module (can-proto-3) failed. [ 519.175731][T31425] netlink: 'syz.3.8086': attribute type 11 has an invalid length. [ 519.228952][T31427] loop5: detected capacity change from 0 to 512 [ 519.254515][T31427] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 519.290934][T31427] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.8088: Allocating blocks 41-42 which overlap fs metadata [ 519.305947][T31427] EXT4-fs (loop5): Remounting filesystem read-only [ 519.316660][T31427] EXT4-fs (loop5): 1 truncate cleaned up [ 519.329260][T31427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.358413][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.443518][T31441] 9p: Bad value for 'wfdno' [ 519.468202][T31443] netlink: 'syz.5.8093': attribute type 1 has an invalid length. [ 519.562143][T31445] loop5: detected capacity change from 0 to 512 [ 519.579602][T31445] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 519.606122][T31445] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.8094: Allocating blocks 41-42 which overlap fs metadata [ 519.621483][T31445] EXT4-fs (loop5): Remounting filesystem read-only [ 519.630787][T31445] EXT4-fs (loop5): 1 truncate cleaned up [ 519.643892][T31445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.671154][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.704196][T31451] loop6: detected capacity change from 0 to 164 [ 519.713512][T31451] Unable to read rock-ridge attributes [ 519.783358][T31451] Unable to read rock-ridge attributes [ 519.790044][T31451] bio_check_eod: 3614 callbacks suppressed [ 519.790144][T31451] syz.6.8096: attempt to access beyond end of device [ 519.790144][T31451] loop6: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 519.810454][T31451] syz.6.8096: attempt to access beyond end of device [ 519.810454][T31451] loop6: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 519.845014][T31459] loop5: detected capacity change from 0 to 164 [ 519.853967][T31459] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 519.874217][T31461] netlink: 'syz.6.8098': attribute type 1 has an invalid length. [ 520.653484][T31493] loop5: detected capacity change from 0 to 1024 [ 520.661301][T31493] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.678945][T31493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 520.697803][T31493] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.725093][T31493] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.8104: lblock 3 mapped to illegal pblock 3 (length 3) [ 520.746366][T31493] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 520.758691][T31493] EXT4-fs (loop5): This should not happen!! Data will be lost [ 520.758691][T31493] [ 520.796816][T19356] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:64: lblock 8 mapped to illegal pblock 8 (length 5) [ 520.828665][T19356] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 520.841101][T19356] EXT4-fs (loop5): This should not happen!! Data will be lost [ 520.841101][T19356] [ 520.852273][T19347] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:57: bg 0: block 112: padding at end of block bitmap is not set [ 520.889258][T19347] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 520.901864][T19347] EXT4-fs (loop5): This should not happen!! Data will be lost [ 520.901864][T19347] [ 520.943798][T31513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8108'. [ 520.950240][T20320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 520.975752][T31513] loop6: detected capacity change from 0 to 128 [ 521.039271][T31522] loop4: detected capacity change from 0 to 512 [ 521.055902][T31522] EXT4-fs: dax option not supported [ 521.275121][T31538] tc_dump_action: action bad kind [ 521.316265][T31538] loop4: detected capacity change from 0 to 8192 [ 521.357529][ T3304] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 521.362869][ T3304] loop4: partition table partially beyond EOD, truncated [ 521.370459][ T3304] loop4: p1 start 30976 is beyond EOD, truncated [ 521.376937][ T3304] loop4: p2 size 16128 extends beyond EOD, truncated [ 521.385643][ T3304] loop4: p3 start 327168 is beyond EOD, truncated [ 521.393138][ T3304] loop4: p5 start 30976 is beyond EOD, truncated [ 521.399758][ T3304] loop4: p6 size 16128 extends beyond EOD, truncated [ 521.415261][T31538] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 521.420599][T31538] loop4: partition table partially beyond EOD, truncated [ 521.427830][T31538] loop4: p1 start 30976 is beyond EOD, truncated [ 521.434280][T31538] loop4: p2 size 16128 extends beyond EOD, truncated [ 521.441888][T31538] loop4: p3 start 327168 is beyond EOD, truncated [ 521.449057][T31538] loop4: p5 start 30976 is beyond EOD, truncated [ 521.455489][T31538] loop4: p6 size 16128 extends beyond EOD, truncated [ 521.525758][T31545] FAULT_INJECTION: forcing a failure. [ 521.525758][T31545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.539303][T31545] CPU: 0 UID: 0 PID: 31545 Comm: syz.9.8115 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 521.539417][T31545] Tainted: [W]=WARN [ 521.539427][T31545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.539444][T31545] Call Trace: [ 521.539454][T31545] [ 521.539516][T31545] __dump_stack+0x1d/0x30 [ 521.539551][T31545] dump_stack_lvl+0x95/0xd0 [ 521.539582][T31545] dump_stack+0x15/0x1b [ 521.539611][T31545] should_fail_ex+0x263/0x280 [ 521.539665][T31545] should_fail+0xb/0x20 [ 521.539751][T31545] should_fail_usercopy+0x1a/0x20 [ 521.539860][T31545] _copy_from_user+0x1c/0xb0 [ 521.539892][T31545] ___sys_sendmsg+0xc1/0x1e0 [ 521.539985][T31545] __sys_sendmmsg+0x185/0x320 [ 521.540026][T31545] __x64_sys_sendmmsg+0x57/0x70 [ 521.540082][T31545] x64_sys_call+0x1e28/0x3000 [ 521.540132][T31545] do_syscall_64+0xc0/0x2a0 [ 521.540239][T31545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.540376][T31545] RIP: 0033:0x7f52fb5baeb9 [ 521.540398][T31545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.540425][T31545] RSP: 002b:00007f52fa017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 521.540471][T31545] RAX: ffffffffffffffda RBX: 00007f52fb835fa0 RCX: 00007f52fb5baeb9 [ 521.540491][T31545] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 521.540511][T31545] RBP: 00007f52fa017090 R08: 0000000000000000 R09: 0000000000000000 [ 521.540527][T31545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.540545][T31545] R13: 00007f52fb836038 R14: 00007f52fb835fa0 R15: 00007ffc7d296048 [ 521.540607][T31545] [ 521.834704][T31557] loop9: detected capacity change from 0 to 512 [ 521.840016][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 521.852549][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 521.873914][T31562] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8120'. [ 521.884290][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 521.912813][T31562] netlink: 'syz.6.8120': attribute type 10 has an invalid length. [ 521.913174][T31557] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.921304][T31562] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.940460][T31562] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.950704][T31562] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.957799][T31562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.965126][T31562] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.966254][T31531] Process accounting resumed [ 521.972225][T31562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.003692][T31557] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.015536][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 522.026775][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 522.039927][T31562] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 522.047326][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.077984][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.089231][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 522.224691][T31591] ext2: Unknown parameter 'fsmagic' [ 522.414946][T31609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.452472][T31609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.858820][T31641] Symlink component flag not implemented [ 522.864512][T31641] Symlink component flag not implemented [ 522.887377][T31641] Symlink component flag not implemented (129) [ 522.893715][T31641] Symlink component flag not implemented (6) [ 522.996917][ T6046] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 523.029143][T31644] ip6t_rpfilter: unknown options [ 523.170407][T31649] netlink: 'syz.9.8143': attribute type 4 has an invalid length. [ 523.200895][T31649] netlink: 'syz.9.8143': attribute type 4 has an invalid length. [ 523.429926][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 523.429991][ T29] audit: type=1326 audit(2000000244.708:30553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.459898][ T29] audit: type=1326 audit(2000000244.708:30554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.483742][ T29] audit: type=1326 audit(2000000244.708:30555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.507721][ T29] audit: type=1326 audit(2000000244.708:30556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.531379][ T29] audit: type=1326 audit(2000000244.708:30557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.555084][ T29] audit: type=1326 audit(2000000244.708:30558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.578887][ T29] audit: type=1326 audit(2000000244.708:30559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.602493][ T29] audit: type=1326 audit(2000000244.708:30560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.626564][ T29] audit: type=1326 audit(2000000244.708:30561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.650281][ T29] audit: type=1326 audit(2000000244.708:30562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31655 comm="syz.9.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fb5baeb9 code=0x7fc00000 [ 523.702265][T31668] bridge_slave_1: left allmulticast mode [ 523.708032][T31668] bridge_slave_1: left promiscuous mode [ 523.713852][T31668] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.743930][T31668] bond0: (slave bridge_slave_1): making interface the new active one [ 523.768468][T31668] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 524.028325][T31688] set_capacity_and_notify: 2 callbacks suppressed [ 524.028343][T31688] loop9: detected capacity change from 0 to 4096 [ 524.066893][T31688] EXT4-fs: dax option not supported [ 524.239309][T31701] loop6: detected capacity change from 0 to 1024 [ 524.248506][T31703] veth0_macvtap: entered allmulticast mode [ 524.277840][T31701] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 524.288815][T31701] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 524.301993][T31706] __nla_validate_parse: 3 callbacks suppressed [ 524.302012][T31706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8163'. [ 524.346647][T31702] loop9: detected capacity change from 0 to 1024 [ 524.353382][T31701] JBD2: no valid journal superblock found [ 524.359324][T31701] EXT4-fs (loop6): Could not load journal inode [ 524.396903][T31702] EXT4-fs: Ignoring removed oldalloc option [ 524.403129][T31702] EXT4-fs: Ignoring removed bh option [ 524.438043][T31702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.469662][T31710] bond4 (unregistering): Released all slaves [ 524.551568][T31721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8167'. [ 524.570613][T31723] loop4: detected capacity change from 0 to 256 [ 524.594095][T31721] loop6: detected capacity change from 0 to 512 [ 524.600657][T31723] msdos: Unknown parameter 'dohs' [ 524.613514][T31702] ================================================================== [ 524.621668][T31702] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 524.628840][T31702] [ 524.631189][T31702] write to 0xffff888106136a34 of 4 bytes by task 31720 on cpu 0: [ 524.638927][T31702] xas_set_mark+0x12b/0x140 [ 524.643478][T31702] __folio_start_writeback+0x17b/0x370 [ 524.648976][T31702] ext4_bio_write_folio+0x5ad/0x9f0 [ 524.654212][T31702] mpage_process_page_bufs+0x4a1/0x620 [ 524.659719][T31702] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 524.665649][T31702] ext4_do_writepages+0x9f6/0x2800 [ 524.670819][T31702] ext4_writepages+0x18f/0x320 [ 524.675615][T31702] do_writepages+0x1c6/0x310 [ 524.680241][T31702] file_write_and_wait_range+0x178/0x2f0 [ 524.685899][T31702] generic_buffers_fsync_noflush+0x45/0x130 [ 524.691817][T31702] ext4_sync_file+0x1aa/0x680 [ 524.696535][T31702] vfs_fsync_range+0x10d/0x130 [ 524.701333][T31702] ext4_buffered_write_iter+0x34f/0x3c0 [ 524.706904][T31702] ext4_file_write_iter+0x380/0xf70 [ 524.712144][T31702] iter_file_splice_write+0x6bc/0xa80 [ 524.717546][T31702] direct_splice_actor+0x156/0x2a0 [ 524.722679][T31702] splice_direct_to_actor+0x311/0x670 [ 524.728076][T31702] do_splice_direct+0x119/0x1a0 [ 524.732945][T31702] do_sendfile+0x382/0x650 [ 524.737395][T31702] __x64_sys_sendfile64+0x105/0x150 [ 524.742615][T31702] x64_sys_call+0x2db1/0x3000 [ 524.747327][T31702] do_syscall_64+0xc0/0x2a0 [ 524.751860][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.757774][T31702] [ 524.760117][T31702] read to 0xffff888106136a34 of 4 bytes by task 31702 on cpu 1: [ 524.767763][T31702] xas_find_marked+0x5d7/0x620 [ 524.772554][T31702] filemap_get_folios_tag+0xfa/0x510 [ 524.777871][T31702] mpage_prepare_extent_to_map+0x328/0xc50 [ 524.783702][T31702] ext4_do_writepages+0x6fe/0x2800 [ 524.788854][T31702] ext4_writepages+0x18f/0x320 [ 524.793644][T31702] do_writepages+0x1c6/0x310 [ 524.798271][T31702] file_write_and_wait_range+0x178/0x2f0 [ 524.803931][T31702] generic_buffers_fsync_noflush+0x45/0x130 [ 524.809847][T31702] ext4_sync_file+0x1aa/0x680 [ 524.814559][T31702] vfs_fsync_range+0x10d/0x130 [ 524.819353][T31702] ext4_buffered_write_iter+0x34f/0x3c0 [ 524.824942][T31702] ext4_file_write_iter+0x380/0xf70 [ 524.830186][T31702] iter_file_splice_write+0x6bc/0xa80 [ 524.835575][T31702] direct_splice_actor+0x156/0x2a0 [ 524.840707][T31702] splice_direct_to_actor+0x311/0x670 [ 524.846099][T31702] do_splice_direct+0x119/0x1a0 [ 524.850975][T31702] do_sendfile+0x382/0x650 [ 524.855437][T31702] __x64_sys_sendfile64+0x105/0x150 [ 524.860667][T31702] x64_sys_call+0x2db1/0x3000 [ 524.865385][T31702] do_syscall_64+0xc0/0x2a0 [ 524.869917][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.875834][T31702] [ 524.878181][T31702] value changed: 0x0a000021 -> 0x04000021 [ 524.883924][T31702] [ 524.886267][T31702] Reported by Kernel Concurrency Sanitizer on: [ 524.892438][T31702] CPU: 1 UID: 0 PID: 31702 Comm: syz.9.8157 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 524.903833][T31702] Tainted: [W]=WARN [ 524.907655][T31702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 524.917727][T31702] ================================================================== [ 524.944552][T31723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8168'. [ 524.979701][T31721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.999053][T31721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.018690][T31721] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 525.123418][T27407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.137376][T30374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.007426][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!