last executing test programs: 2m6.312835031s ago: executing program 2 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) umount2(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0xba01}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x41, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x401}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xb52e}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010) ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r11, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000011000000000000000000"], 0x50) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) 2m5.840114084s ago: executing program 2 (id=102): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@quota}, {@data_ordered}, {@jqfmt_vfsold}, {@nombcache}]}, 0x8, 0x622, &(0x7f0000000840)="$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") r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m2.752164091s ago: executing program 2 (id=110): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x10b8}, 0xf19c55c20bdfbdca) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'wg2\x00', {0x2}, 0x5}) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB='+io +pids \x00io +cpuacct -net -\tpu +cpuset +blkio -blkio -net '], 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000a3c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000c00)=0xfffffffffffffff8, 0xfffffffffffffffe, 0x2) mmap(&(0x7f0000bbe000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0xffffc000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040161bac", 0xf5) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/41, 0x4a, 0x29, 0x0, 0x1}, 0x28) 2m0.735270763s ago: executing program 2 (id=118): unshare(0x6a040000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") sendmsg$sock(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000001c0)="579902df9b75fb36ef04e924b83f541edc38318418e7ca9950111e2056b454357c46261d4d4e34286ca0e5f3d2a21e4103b22db0ae81de38d6c3afc8f919a81322", 0x41}], 0x1}, 0x20008810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x400c110) unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0x768f059e}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088"], 0x7a) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000100)='B', 0x1}], 0x100000000000004b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) 1m59.752522744s ago: executing program 2 (id=126): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x0, 0x0) 1m59.276509807s ago: executing program 2 (id=129): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x6, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x80, 0x10000, 0x0, 0x1, 0xc, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1, 0xb3}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000005, 0x4}) fcntl$lock(r1, 0x6, &(0x7f0000000540)={0x1, 0x0, 0x80000000}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000040)={0x3, {{0xa, 0x0, 0x9589, @mcast1}}, {{0xa, 0x4, 0x0, @empty}}}, 0x108) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f0000000180)=[{0xd, 0x10, 0x6, 0x9}, {0x7ff, 0xc, 0x9, 0x5}, {0x7fff, 0xb8, 0x2, 0x5}, {0xa085, 0xf3, 0x1, 0x10000}, {0x14, 0x2, 0x3, 0x2}]}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x1}, {0x2}, 0x100, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="c46b3d39c35a8a49fe27eb5c6ea94a36b3cba2d8675b742c1a557400c90a0a5c6c59f834f5e2a901f7dfb6a691fd6959beed838f231aa0d8b2708f24fd9c565a4ef04a55fc97e870a8ca260d10d49cafcab11caadfbdcc0fc602e02666e6026e0e3b423002bf04f1568366ed6092bd577675a7c2ec12ae1e75ed5e14c0addfdd6e100ae71ac9b7031ac4df7c3f29e5d0eca6e48cd3fb5de8979b9d36bb129cc68338bd2ac335b23f123a64259d711dd0122601421fa26fdc950b187897c204bed34341748bd805f4a7e110734a3baafd8df49c727a274c01ae3fca93890da80da8b2115d5dbe06d9d9f77644f290b4d3", 0xf0, 0x0, &(0x7f0000000480)={0x2, 0x18d, {0x1, 0xc, 0x85, "db7e7ec925125d9b8116d4cd8e905b4612d78ec53b8d6c7b265179e487da03b8481c05d7600ea5b39a7df7e9b89b1d8ff574cfe7333f5133c9058a775b1a7e6063c7761686022b5de14dea2d5f72f15d10d570a35835e8fb7fb54818d9928ca9f4cc94d4c163195ed18e0e8eb5b548f2e92098608d342ac7145f7a927be4033ac3d52b8ddb", 0xfb, "cfbeca818ada695edaf8170236f2967d7db65e39191184d1e3dc6c2ab55b99be08f19099d3549349ea97fffd9290acdcbebf243862bff4a04280f1ed09373ff0a14c1392a9c9fa4342b3834ddbc04ef9664656880834fb6a75a933d7f3f4f020a62af38b7bd4e7b5cb72d9b8afaa835e7dc25d91d60e93bd0188986813a33b142e6c9c7488d24ad63011d697009778dcf1570d797a08b5a3a25bcb224e1f1da4f1bf8e193ff6539b72d29638d09981a8e836a0b08367bad8e67d4e46beddc76231a550085b771b6e21cca1757f37626869823c9482bcbaf57f8a3c030e0c9c6476bfeaf281dc341dd5a81bb7f0426bae50129d30e6f51129750d3f"}, 0x98, "2a973f86346e58ae875d8e0431a28cd21fd915548dac4d10adf40a378d69a627348eedd7cca6a98e16a86c418ba69338c62f366ed3a2ac44b2125f59b099e024f976af4bcdfb6669647ef891980358da6ac9fc4817c1bb5595dca962b8a1e1629c6d2dd7d557616f22feb26d906e1353321ed5f193d0d7174ed0459d630e76ee6abc202500fb1abc994446fd14c3fd8eb11558e441939db7"}, 0x231}) write$cgroup_int(r2, &(0x7f0000000300)=0x1, 0x12) 1m59.208101795s ago: executing program 32 (id=129): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x6, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x80, 0x10000, 0x0, 0x1, 0xc, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1, 0xb3}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000005, 0x4}) fcntl$lock(r1, 0x6, &(0x7f0000000540)={0x1, 0x0, 0x80000000}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000040)={0x3, {{0xa, 0x0, 0x9589, @mcast1}}, {{0xa, 0x4, 0x0, @empty}}}, 0x108) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f0000000180)=[{0xd, 0x10, 0x6, 0x9}, {0x7ff, 0xc, 0x9, 0x5}, {0x7fff, 0xb8, 0x2, 0x5}, {0xa085, 0xf3, 0x1, 0x10000}, {0x14, 0x2, 0x3, 0x2}]}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x1}, {0x2}, 0x100, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="c46b3d39c35a8a49fe27eb5c6ea94a36b3cba2d8675b742c1a557400c90a0a5c6c59f834f5e2a901f7dfb6a691fd6959beed838f231aa0d8b2708f24fd9c565a4ef04a55fc97e870a8ca260d10d49cafcab11caadfbdcc0fc602e02666e6026e0e3b423002bf04f1568366ed6092bd577675a7c2ec12ae1e75ed5e14c0addfdd6e100ae71ac9b7031ac4df7c3f29e5d0eca6e48cd3fb5de8979b9d36bb129cc68338bd2ac335b23f123a64259d711dd0122601421fa26fdc950b187897c204bed34341748bd805f4a7e110734a3baafd8df49c727a274c01ae3fca93890da80da8b2115d5dbe06d9d9f77644f290b4d3", 0xf0, 0x0, &(0x7f0000000480)={0x2, 0x18d, {0x1, 0xc, 0x85, "db7e7ec925125d9b8116d4cd8e905b4612d78ec53b8d6c7b265179e487da03b8481c05d7600ea5b39a7df7e9b89b1d8ff574cfe7333f5133c9058a775b1a7e6063c7761686022b5de14dea2d5f72f15d10d570a35835e8fb7fb54818d9928ca9f4cc94d4c163195ed18e0e8eb5b548f2e92098608d342ac7145f7a927be4033ac3d52b8ddb", 0xfb, "cfbeca818ada695edaf8170236f2967d7db65e39191184d1e3dc6c2ab55b99be08f19099d3549349ea97fffd9290acdcbebf243862bff4a04280f1ed09373ff0a14c1392a9c9fa4342b3834ddbc04ef9664656880834fb6a75a933d7f3f4f020a62af38b7bd4e7b5cb72d9b8afaa835e7dc25d91d60e93bd0188986813a33b142e6c9c7488d24ad63011d697009778dcf1570d797a08b5a3a25bcb224e1f1da4f1bf8e193ff6539b72d29638d09981a8e836a0b08367bad8e67d4e46beddc76231a550085b771b6e21cca1757f37626869823c9482bcbaf57f8a3c030e0c9c6476bfeaf281dc341dd5a81bb7f0426bae50129d30e6f51129750d3f"}, 0x98, "2a973f86346e58ae875d8e0431a28cd21fd915548dac4d10adf40a378d69a627348eedd7cca6a98e16a86c418ba69338c62f366ed3a2ac44b2125f59b099e024f976af4bcdfb6669647ef891980358da6ac9fc4817c1bb5595dca962b8a1e1629c6d2dd7d557616f22feb26d906e1353321ed5f193d0d7174ed0459d630e76ee6abc202500fb1abc994446fd14c3fd8eb11558e441939db7"}, 0x231}) write$cgroup_int(r2, &(0x7f0000000300)=0x1, 0x12) 1m25.256332952s ago: executing program 5 (id=333): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c080)=@newtfilter={0x5c0, 0x2c, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0x7, 0x3}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xa3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4a5}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x578, 0x2, [@TCA_ROUTE4_ACT={0x574, 0x6, [@m_mpls={0x13c, 0x10, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffdffffff8, 0x8, 0x1}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x549a3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc2690}]}, {0xd9, 0x6, "dc662e546786c45d64ebcab40ac2383538ef652f92fcb62d9cda258a3b822c67d65da800dd3aac3dd53b91e0fd1bc5c795084ed563a32f7c7a5c4ed7b3e62b1c110efa1a48eef4dfd812e3483e43fe9c12ba2570e23d09706094ccfad02533df157945432bccc16c3a9b4b059324b0b4d7c3fab016dc97f3a0b328b5f8a5011a59551c58d3c55b596e8da0c2a5af193174ca0a59c061a69b33699375053aca4411a6e2ca6cb9a07588944cc2b5064103f1d51c20c4fd7e7260bd8936431b7feefd976c90a6cf20c32ebdf1297605effaae4ed0859d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x13c, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ea, 0x7, 0x1, 0x1, 0x9}, 0x56}}]}, {0xf2, 0x6, "7ef9745625268817a6b953b1d19de46caa3553481bd5f789f44e60604af6215b1b4b6b7ab520ac1ab28a0d87d85f508d67975ce2ffdb49fb60fcec285c4b6d40d6b3d428b8388ebdd5fb6e06822d6f97a9bac551c3f5d6fe3d46b78d8b52a942a483b71a90a23e916ff01baeadd81e5a5390c0e8b86497c857b22e4e31509a66a671d720f3580c1c1c074593ae5e189f56f08655c6b68c8f8c7441286627a2c335b0f326a05ac84e3a08d1673c5b90d6f07e49be81be7dfa1dbb6fba48688d2096797b934ed854c1e6d84404aa95053d045dd80dae6210a642e0b648e16ae4a6ff61ddc4b051cf93c99d430b5b41"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x34, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x17c, 0x20, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x71e, 0x3, 0x3, {0xf9, 0x2, 0x200, 0x2, 0xff, 0x7}, {0xd, 0x1, 0xff07, 0x81, 0xc93, 0xb}, 0x2c, 0x0, 0x3504}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x2, 0xfffffffe, 0x8, {0x7, 0x2, 0x2, 0x1ff, 0x9, 0x2}, {0xe6, 0x0, 0x7f, 0x1, 0x4, 0x6f}, 0xffff0001, 0x832c, 0x9176}}]]}, {0xd6, 0x6, "a77381df58617bb3317beb0940322cb16fbbdcdf01c175630e39fb1b66e438967ecdabe0c998810f0109feac1b23f08efc140354064f944291162e5be8f651f61f506e4b80642c03aa13916410f88606011587b07d0f33e6fffc5885e94b8284ed3c23eeb167f1eb672dc1dc0fdf57c93a7c2bbddb56715e018985b01dbaae4785006d97604cbfc800878e32571147eaf01618a3872262e80989850d28f8f4ee0430901120b632a1dbfdbd594c894521809ad1de9a6b48f86ea25d9261bd5636089b01daf1cd24552ddc62df15ce6092ca81"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x58, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x16, 0x6, "a595ec032043d32306f1bea157592c8e65c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x50, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x6, 0x80000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xa0, 0x3, 0x0, 0x0, {{0xd}, {0x4}, {0x6d, 0x6, "a67f1819952008b42af7101a5b13483c4bf75b9140b62879f3eb236e496cd743441e0b700f808d68b661200cb396a6b16b5137ea5cd02816f035bb4262a7bfe63fc606cbf13ac6b8388cff55c35391aa48f818907502bed1fb86dffac1d0e15d91795ea70f6e1f0b4f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x5c0}}, 0xc840) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000514ac7f52f79f7836ba63affc44e098e9438cd5beee7156f44e1bb0e8cfb22bbeb97df8dec9b7a58b03de35d1129bee810d407ef1a39317fab295e0ef2444622a14273d31505df58c9b6583abbbbe98d2bb122ef97320237c52d232634f2b6dfc09c8bd92a958e63856dea89198cc09dae089493f83419936ee8e61a912c4acb9b00101e0d6321716d88903a648918a46b87d41ee324ab9b114d56b47cfefeedcff61e7e6f9dd682bbaadce6b3c71a81de61ddaf3263ce6dc63cf957b8ca80"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={r4, 0x5, 0x20, 0xffffffffffffffff, 0x26}, &(0x7f0000000440)=0x18) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r6, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) socket$kcm(0x10, 0x2, 0x10) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r7, 0x40046f01, &(0x7f0000000000)=0xa2) write$UHID_CREATE(r7, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r7, &(0x7f0000000200), 0x4) 1m24.64740314s ago: executing program 5 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f00000000c0)=""/91, &(0x7f0000000080)=0x5b) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x18000, 0x108, 0xb}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="d740f2e4eee12a17"}}) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20000400) socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x24000, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x6b, 0x78, 0x0, 0xfffffffffffffdac) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000400)='./file1\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f0000000440)='./file0\x00', 0x40e01, 0x0) 1m24.524366518s ago: executing program 5 (id=342): unshare(0x6a040000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") sendmsg$sock(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000001c0)="579902df9b75fb36ef04e924b83f541edc38318418e7ca9950111e2056b454357c46261d4d4e34286ca0e5f3d2a21e4103b22db0ae81de38d6c3afc8f919a81322", 0x41}], 0x1}, 0x20008810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x400c110) unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0x768f059e}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088"], 0x7a) 1m24.064179074s ago: executing program 5 (id=350): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x25, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000040)={0x5, 0x6}, 0x1) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m23.825182361s ago: executing program 5 (id=352): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c080)=@newtfilter={0x5c0, 0x2c, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0x7, 0x3}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xa3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4a5}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x578, 0x2, [@TCA_ROUTE4_ACT={0x574, 0x6, [@m_mpls={0x13c, 0x10, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffdffffff8, 0x8, 0x1}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x549a3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc2690}]}, {0xd9, 0x6, "dc662e546786c45d64ebcab40ac2383538ef652f92fcb62d9cda258a3b822c67d65da800dd3aac3dd53b91e0fd1bc5c795084ed563a32f7c7a5c4ed7b3e62b1c110efa1a48eef4dfd812e3483e43fe9c12ba2570e23d09706094ccfad02533df157945432bccc16c3a9b4b059324b0b4d7c3fab016dc97f3a0b328b5f8a5011a59551c58d3c55b596e8da0c2a5af193174ca0a59c061a69b33699375053aca4411a6e2ca6cb9a07588944cc2b5064103f1d51c20c4fd7e7260bd8936431b7feefd976c90a6cf20c32ebdf1297605effaae4ed0859d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x13c, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ea, 0x7, 0x1, 0x1, 0x9}, 0x56}}]}, {0xf2, 0x6, "7ef9745625268817a6b953b1d19de46caa3553481bd5f789f44e60604af6215b1b4b6b7ab520ac1ab28a0d87d85f508d67975ce2ffdb49fb60fcec285c4b6d40d6b3d428b8388ebdd5fb6e06822d6f97a9bac551c3f5d6fe3d46b78d8b52a942a483b71a90a23e916ff01baeadd81e5a5390c0e8b86497c857b22e4e31509a66a671d720f3580c1c1c074593ae5e189f56f08655c6b68c8f8c7441286627a2c335b0f326a05ac84e3a08d1673c5b90d6f07e49be81be7dfa1dbb6fba48688d2096797b934ed854c1e6d84404aa95053d045dd80dae6210a642e0b648e16ae4a6ff61ddc4b051cf93c99d430b5b41"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x34, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x17c, 0x20, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x71e, 0x3, 0x3, {0xf9, 0x2, 0x200, 0x2, 0xff, 0x7}, {0xd, 0x1, 0xff07, 0x81, 0xc93, 0xb}, 0x2c, 0x0, 0x3504}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x2, 0xfffffffe, 0x8, {0x7, 0x2, 0x2, 0x1ff, 0x9, 0x2}, {0xe6, 0x0, 0x7f, 0x1, 0x4, 0x6f}, 0xffff0001, 0x832c, 0x9176}}]]}, {0xd6, 0x6, "a77381df58617bb3317beb0940322cb16fbbdcdf01c175630e39fb1b66e438967ecdabe0c998810f0109feac1b23f08efc140354064f944291162e5be8f651f61f506e4b80642c03aa13916410f88606011587b07d0f33e6fffc5885e94b8284ed3c23eeb167f1eb672dc1dc0fdf57c93a7c2bbddb56715e018985b01dbaae4785006d97604cbfc800878e32571147eaf01618a3872262e80989850d28f8f4ee0430901120b632a1dbfdbd594c894521809ad1de9a6b48f86ea25d9261bd5636089b01daf1cd24552ddc62df15ce6092ca81"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x58, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x16, 0x6, "a595ec032043d32306f1bea157592c8e65c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x50, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x6, 0x80000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xa0, 0x3, 0x0, 0x0, {{0xd}, {0x4}, {0x6d, 0x6, "a67f1819952008b42af7101a5b13483c4bf75b9140b62879f3eb236e496cd743441e0b700f808d68b661200cb396a6b16b5137ea5cd02816f035bb4262a7bfe63fc606cbf13ac6b8388cff55c35391aa48f818907502bed1fb86dffac1d0e15d91795ea70f6e1f0b4f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x5c0}}, 0xc840) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000514ac7f52f79f7836ba63affc44e098e9438cd5beee7156f44e1bb0e8cfb22bbeb97df8dec9b7a58b03de35d1129bee810d407ef1a39317fab295e0ef2444622a14273d31505df58c9b6583abbbbe98d2bb122ef97320237c52d232634f2b6dfc09c8bd92a958e63856dea89198cc09dae089493f83419936ee8e61a912c4acb9b00101e0d6321716d88903a648918a46b87d41ee324ab9b114d56b47cfefeedcff61e7e6f9dd682bbaadce6b3c71a81de61ddaf3263ce6dc63cf957b8ca80"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r6, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r4], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) socket$kcm(0x10, 0x2, 0x10) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r7, 0x40046f01, &(0x7f0000000000)=0xa2) write$UHID_CREATE(r7, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r7, &(0x7f0000000200), 0x4) 1m23.140610776s ago: executing program 5 (id=358): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) recvmsg(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="02", 0x1}, {&(0x7f0000000680)="60a948a7056249", 0x7}], 0x2}, 0x400c010) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 1m23.139676636s ago: executing program 33 (id=358): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) recvmsg(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="02", 0x1}, {&(0x7f0000000680)="60a948a7056249", 0x7}], 0x2}, 0x400c010) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 58.172212401s ago: executing program 0 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48ffc30010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 58.083907455s ago: executing program 0 (id=559): r0 = socket$inet(0x2, 0x2, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) 57.227220099s ago: executing program 0 (id=569): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 56.988658185s ago: executing program 0 (id=571): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x0) 56.986555865s ago: executing program 0 (id=573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x48, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x72}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = gettid() rt_sigqueueinfo(r6, 0x800021, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x2, 0x2, 0x3, 0x0, 0x0, {0xb, 0x0, 0x8}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffff5486}, @CTA_EXPECT_MASTER={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0xb8}}, 0x40000) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x3a84821, 0x0) 56.983808005s ago: executing program 0 (id=577): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r3}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 41.766236359s ago: executing program 34 (id=577): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r3}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 4.579213026s ago: executing program 6 (id=1005): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x2, 0x0, 0xffffffffffffff44, 0x9}) (fail_nth: 1) 4.497746091s ago: executing program 1 (id=1008): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000180)=0x4) r1 = dup(0xffffffffffffffff) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @empty, 0x1}}, 0x400, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x5, 0x6012, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000780)={r0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2c}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x13d, 0x8}}, 0x20) r5 = msgget$private(0x0, 0x7fc) msgrcv(r5, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x8, 0x200000000000000) msgctl$IPC_STAT(r5, 0x2, 0x0) msgsnd(r5, &(0x7f0000000580)={0x1, "b160afc62b830476f94ea3d3cdccb59bcf7e9d8e5feca4a4810e1e35e379cb3a6ac15cecbde5c45eca83371d3fcbea324f96b4dcfb855f96ae5fc0d19e3d5ca9f49b04072a7cedc7ce7fe904960bafa2e97f447a506aff9a6f8eb0565648a13179b3e09dceb5097a60bf6f019c6394e18a37cd5b7f04ffd72898ec0cb3ccaf562e54ad14cd8ba544554baafa9f5752705cf8f2a049e3c2cddacad24f8e79939104d588cbe08c655f6c21bfecb0fd3d61b2cfae3610ce2ba51118cec15983fcb7320f1907e21dfb822798c36126366196c1af9babce3447dc9bccf55bbd2c940b2b96af859e8bf5e00e294761126efc5c89d1d0"}, 0xfb, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x621, @private1, 0x3}, {0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, r4, 0x101}}, 0x48) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0xfffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) 4.240192744s ago: executing program 6 (id=1009): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x8, 0xffff, 0x400e0a, 0x7f, ' <\x00', 0x8, 0x5}) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40800000000000061107f00000000000600000000000000950000000000000071c710fcb1718cec3b1802deee6320aff2b0b4586d00fc7ba7daf818628640db42f91b1f37ed39e15714eed81abfaaa78985ca26924e3f989d24d1281527c4000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1011, &(0x7f0000001b40)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0x120, 0x120, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11, 0x0, 0x8}, 0x0, 0xf0, 0x120, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x7, [0x4e22, 0x4e22, 0x4e20, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e20, 0x4e22, 0x4e23, 0x4e20], [0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfe, 0x1, 0x0, 0x0, 0x1], 0x1}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x5, 0x5, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010101, 0x0, 0x0, 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000280)={0x90000000}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.969852815s ago: executing program 6 (id=1012): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x10b8}, 0xf19c55c20bdfbdca) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'wg2\x00', {0x2}, 0x5}) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000a3c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000c00)=0xfffffffffffffff8, 0xfffffffffffffffe, 0x2) mmap(&(0x7f0000bbe000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0xffffc000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040161bac", 0xf5) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/41, 0x4a, 0x29, 0x0, 0x1}, 0x28) 3.545139608s ago: executing program 1 (id=1015): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pidfd_send_signal(0xffffffffffffffff, 0x14, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) r1 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) socket$netlink(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x66ab, 0x4, 0x2, 0x0, 0x0) 2.540172344s ago: executing program 1 (id=1018): r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f0000000040)=""/16, 0x10}], 0x4, &(0x7f0000000500)=""/86, 0x56}, 0x82d}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000840)=""/236, 0xec}], 0x2, &(0x7f0000000940)=""/222, 0xde}, 0x9}, {{&(0x7f00000005c0)=@nl=@proc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a40)=""/125, 0x7d}], 0x1}, 0x4}, {{&(0x7f0000000b00)=@un=@abs, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b80)=""/79, 0x4f}], 0x1, &(0x7f0000000dc0)=""/53, 0x35}, 0x90}], 0x4, 0x20, &(0x7f0000000d80)={0x0, 0x3938700}) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}], 0x1, 0x2090) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r3 = eventfd2(0x0, 0x0) r4 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000faa6dd5758b4b96c95f91acd0000000000000000001c36bab7cb75a5582fe8206444a21ad50a853625743cb24cfff6ff9ce64492657ed23021e064aa0816cf2fcf34562779dfbd0e00e163b3c30be6ecdfeac156d45dc581e54a7e8e4c5a9c1d7ad408f6dc7fa2874ee97468cef5cf0f7a5ed0263b982d8c96005ac1dec46138e42d610217511c06f53cba68ab525246e94d87c90d2ce9a414cca804b06edd32cd4f7524ad6bbf82704801d5a9dfedaee50e796cf4f7185960a20ceddffeb6e472df11fffae6cc7f7cf7f67ba11f9143cbe0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r4, 0x4503, 0x20, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x1, 0x0, 0x1, r3}]) syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') 2.41239897s ago: executing program 1 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x40000010}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000380)=[0x0]) 1.986472903s ago: executing program 6 (id=1025): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x3, 0x40}]}, 0xc, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x3c, r2, 0xd55319eec59dfa33, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x82010) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000fc0)=""/140, 0x5a, 0x8c, 0x1}, 0x28) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0xfc095000) 1.934746513s ago: executing program 7 (id=1026): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.777742085s ago: executing program 7 (id=1029): r0 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) statx(r4, &(0x7f0000000140)='./file0\x00', 0x400, 0x100, &(0x7f0000000240)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fchdir(r0) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITHAW(r2, 0xc0045878) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 623.436084ms ago: executing program 7 (id=1038): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000001080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x301091, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x1800000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00', 0x89901) syz_emit_ethernet(0x5a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa7208004500004c046400000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec04000090780000131293b23a5cac449272ed185626c6f4ee6f1312df1e004b045d462be919c2cac6ae50a7"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 565.096974ms ago: executing program 4 (id=1039): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 563.787633ms ago: executing program 1 (id=1040): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/187, 0xbb}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4e}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a0300000000000000000005000003090001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r3, 0x4bfa, 0x10000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x89) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x7f) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 562.945163ms ago: executing program 4 (id=1041): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c080)=@newtfilter={0x5f4, 0x2c, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0x7, 0x3}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xa3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4a5}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x5ac, 0x2, [@TCA_ROUTE4_ACT={0x5a8, 0x6, [@m_mpls={0x13c, 0x10, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffdffffff8, 0x8, 0x1}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x549a3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc2690}]}, {0xd9, 0x6, "dc662e546786c45d64ebcab40ac2383538ef652f92fcb62d9cda258a3b822c67d65da800dd3aac3dd53b91e0fd1bc5c795084ed563a32f7c7a5c4ed7b3e62b1c110efa1a48eef4dfd812e3483e43fe9c12ba2570e23d09706094ccfad02533df157945432bccc16c3a9b4b059324b0b4d7c3fab016dc97f3a0b328b5f8a5011a59551c58d3c55b596e8da0c2a5af193174ca0a59c061a69b33699375053aca4411a6e2ca6cb9a07588944cc2b5064103f1d51c20c4fd7e7260bd8936431b7feefd976c90a6cf20c32ebdf1297605effaae4ed0859d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x138, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ea, 0x7, 0x1, 0x1, 0x9}, 0x56}}]}, {0xef, 0x6, "7ef9745625268817a6b953b1d19de46caa3553481bd5f789f44e60604af6215b1b4b6b7ab520ac1ab28a0d87d85f508d67975ce2ffdb49fb60fcec285c4b6d40d6b3d428b8388ebdd5fb6e06822d6f97a9bac551c3f5d6fe3d46b78d8b52a942a483b71a90a23e916ff01baeadd81e5a5390c0e8b86497c857b22e4e31509a66a671d720f3580c1c1c074593ae5e189f56f08655c6b68c8f8c7441286627a2c335b0f326a05ac84e3a08d1673c5b90d6f07e49be81be7dfa1dbb6fba48688d2096797b934ed854c1e6d84404aa95053d045dd80dae6210a642e0b648e16ae4a6ff61ddc4b051cf93c99d43"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x38, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2b447}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x34, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x17c, 0x20, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x71e, 0x3, 0x3, {0xf9, 0x2, 0x200, 0x2, 0xff, 0x7}, {0xd, 0x1, 0xff07, 0x81, 0xc93, 0xb}, 0x2c, 0x0, 0x3504}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x2, 0xfffffffe, 0x8, {0x7, 0x2, 0x2, 0x1ff, 0x9, 0x2}, {0xe6, 0x0, 0x7f, 0x1, 0x4, 0x6f}, 0xffff0001, 0x832c, 0x9176}}]]}, {0xd6, 0x6, "a77381df58617bb3317beb0940322cb16fbbdcdf01c175630e39fb1b66e438967ecdabe0c998810f0109feac1b23f08efc140354064f944291162e5be8f651f61f506e4b80642c03aa13916410f88606011587b07d0f33e6fffc5885e94b8284ed3c23eeb167f1eb672dc1dc0fdf57c93a7c2bbddb56715e018985b01dbaae4785006d97604cbfc800878e32571147eaf01618a3872262e80989850d28f8f4ee0430901120b632a1dbfdbd594c894521809ad1de9a6b48f86ea25d9261bd5636089b01daf1cd24552ddc62df15ce6092ca81"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x58, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x16, 0x6, "a595ec032043d32306f1bea157592c8e65c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x50, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x6, 0x80000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xa0, 0x3, 0x0, 0x0, {{0xd}, {0x4}, {0x6d, 0x6, "a67f1819952008b42af7101a5b13483c4bf75b9140b62879f3eb236e496cd743441e0b700f808d68b661200cb396a6b16b5137ea5cd02816f035bb4262a7bfe63fc606cbf13ac6b8388cff55c35391aa48f818907502bed1fb86dffac1d0e15d91795ea70f6e1f0b4f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x5f4}}, 0xc840) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000514ac7f52f79f7836ba63affc44e098e9438cd5beee7156f44e1bb0e8cfb22bbeb97df8dec9b7a58b03de35d1129bee810d407ef1a39317fab295e0ef2444622a14273d31505df58c9b6583abbbbe98d2bb122ef97320237c52d232634f2b6dfc09c8bd92a958e63856dea89198cc09dae089493f83419936ee8e61a912c4acb9b00101e0d6321716d88903a648918a46b87d41ee324ab9b114d56b47cfefeedcff61e7e6f9dd682bbaadce6b3c71a81de61ddaf3263ce6dc63cf957b8ca80"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={r4, 0x5, 0x20, 0xffffffffffffffff, 0x26}, &(0x7f0000000440)=0x18) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r7, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) socket$kcm(0x10, 0x2, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000000000)=0xa2) write$UHID_CREATE(r8, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) 504.619283ms ago: executing program 7 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 492.24972ms ago: executing program 3 (id=1043): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffe43}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 465.687156ms ago: executing program 7 (id=1044): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@nolazytime}, {@barrier_val={'barrier', 0x3d, 0x7ff}}]}, 0x1, 0xbcf, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0102010000de7f00400000dcc8"], 0xd) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010000000000040004800800020001000000100008"], 0x38}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) socket$key(0xf, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) memfd_create(0x0, 0xb) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000005c0)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x9, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x2001) pselect6(0x40, &(0x7f0000000180)={0x4, 0x7fffffffffffffff, 0xb1, 0x10000, 0x8, 0x4, 0x6, 0xffffffffffffffff}, &(0x7f00000001c0)={0x9, 0xc60, 0xa4a0, 0x8, 0x2, 0x9, 0xefd, 0xffffffffffffffff}, &(0x7f0000000200)={0x80, 0x7, 0x7, 0x2, 0x9, 0x1ff, 0x1, 0x100000000}, &(0x7f0000000280)={r4, r5+60000000}, &(0x7f0000000340)={&(0x7f00000002c0)={[0x100]}, 0x8}) 388.254231ms ago: executing program 1 (id=1045): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) open(&(0x7f0000000440)='./file0\x00', 0x40e01, 0x0) 318.222158ms ago: executing program 3 (id=1046): r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f0000000040)=""/16, 0x10}], 0x4, &(0x7f0000000500)=""/86, 0x56}, 0x82d}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000840)=""/236, 0xec}], 0x2, &(0x7f0000000940)=""/222, 0xde}, 0x9}, {{&(0x7f00000005c0)=@nl=@proc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a40)=""/125, 0x7d}], 0x1}, 0x4}, {{&(0x7f0000000b00)=@un=@abs, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b80)=""/79, 0x4f}], 0x1, &(0x7f0000000dc0)=""/53, 0x35}, 0x90}], 0x4, 0x20, &(0x7f0000000d80)={0x0, 0x3938700}) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}], 0x1, 0x2090) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r3 = eventfd2(0x0, 0x0) r4 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000faa6dd5758b4b96c95f91acd0000000000000000001c36bab7cb75a5582fe8206444a21ad50a853625743cb24cfff6ff9ce64492657ed23021e064aa0816cf2fcf34562779dfbd0e00e163b3c30be6ecdfeac156d45dc581e54a7e8e4c5a9c1d7ad408f6dc7fa2874ee97468cef5cf0f7a5ed0263b982d8c96005ac1dec46138e42d610217511c06f53cba68ab525246e94d87c90d2ce9a414cca804b06edd32cd4f7524ad6bbf82704801d5a9dfedaee50e796cf4f7185960a20ceddffeb6e472df11fffae6cc7f7cf7f67ba11f9143cbe0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r4, 0x4503, 0x20, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x1, 0x0, 0x1, r3}]) syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') 258.897078ms ago: executing program 7 (id=1047): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) open(&(0x7f0000000440)='./file0\x00', 0x40e01, 0x0) 249.974236ms ago: executing program 4 (id=1048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="e6e2bf8e5d4a59c39aa1cdb3d2653619ba3bcbb3b4d494627975897c9d0a17fc73fcea8c91103b55219d6a5bdf5622d06d8e86974fb13c667f932488ed12f2d8ca2929263a750d94fc33b84fd521ea2f58b39303ef0d63571344da34fc2060b8292730ca15bede64c7ca45d38a8466aee344badf1adcd329f38f804043659c1981e7690930b6244e3c742910a553c245941fb9870e0872f08538d0fba07e8b07711fe94d8090b93ee1d45a20177e8a39a77766ec28aad1b1c54a782bf5995730257dcf1689892956846e1412e6841fa0856f5810a4afdc99e53d0c9676d49c8985beb0cfd226bffe9a27fc115061c91e0d949cbfbd", @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r5) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x3f, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x4044001) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) 168.299941ms ago: executing program 6 (id=1049): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0xfffffff7, 0x10100, 0x1}, &(0x7f0000000840)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) preadv(r4, &(0x7f0000003700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x50, 0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000154bd00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000100)="0101000071b08326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000000000000811177000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x4, &(0x7f0000000000), 0x0, 0x23d, &(0x7f0000000540)="$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") r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r14, 0x0, 0x4010) quotactl_fd$Q_GETQUOTA(r13, 0xffffffff80000700, r15, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x7], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 160.77627ms ago: executing program 3 (id=1050): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==") prctl$PR_SVE_SET_VL(0x32, 0x218a3) (async) prctl$PR_SVE_SET_VL(0x32, 0x218a3) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 146.253697ms ago: executing program 4 (id=1051): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000080)="01", 0x1, 0x4004800a, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/125, 0x7d}, 0x4ab4}], 0x1, 0x40012002, 0x0) 103.677469ms ago: executing program 3 (id=1052): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x3b, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 103.307489ms ago: executing program 4 (id=1053): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x8, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x0) 102.421969ms ago: executing program 3 (id=1054): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000140), 0x0, 0x10001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) (fail_nth: 1) 12.460193ms ago: executing program 4 (id=1055): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000140), 0x0, 0x10001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) 11.741613ms ago: executing program 3 (id=1056): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0xb, 0x800000, 0x8, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x80, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x5}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0x8, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) 0s ago: executing program 6 (id=1057): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x2007, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="9401000010000100e8a47000000000007f000001000000000000000000000000fc0100000000000000000000000000010000ecdf4e2400000200000000000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x44050) setresuid(0xee01, r0, r0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0xfc, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) shutdown(r4, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r6, 0xee00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000bf00000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x2007, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="9401000010000100e8a47000000000007f000001000000000000000000000000fc0100000000000000000000000000010000ecdf4e2400000200000000000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x44050) (async) setresuid(0xee01, r0, r0) (async) socket(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) fcntl$dupfd(r4, 0x406, r4) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0xfc, 0xe4}]}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x134}}, 0x40008) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) (async) shutdown(r4, 0x1) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setregid(r6, 0xee00) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000bf00000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94) (async) kernel console output (not intermixed with test programs): ] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 128.692785][ T5829] loop6: detected capacity change from 0 to 512 [ 128.702908][ T5829] ------------[ cut here ]------------ [ 128.708369][ T5829] EA inode 11 i_nlink=0 [ 128.708418][ T5829] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.6.544/5829 [ 128.723350][ T5829] Modules linked in: [ 128.727370][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz.6.544 Not tainted syzkaller #0 PREEMPT(full) [ 128.736603][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.746724][ T5829] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 128.749245][ T5808] Set syz1 is full, maxelem 65536 reached [ 128.753331][ T5829] Code: a4 47 99 ff 4c 8d 2d 5d c0 5d 05 49 8d 7e 40 e8 44 e1 b5 ff 49 8b 6e 40 4c 89 e7 e8 78 dc b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 59 dd 03 66 66 66 66 66 66 2e [ 128.778662][ T5829] RSP: 0018:ffffc90000f2f778 EFLAGS: 00010246 [ 128.784759][ T5829] RAX: ffff8881046ecdb8 RBX: ffff888107fc6908 RCX: ffffffff81c00598 [ 128.792752][ T5829] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871dc5e0 [ 128.800853][ T5829] RBP: 000000000000000b R08: 0001888107fc68bb R09: 0000000000000000 [ 128.809079][ T5829] R10: ffffc90000f2f6a8 R11: 0001c90000f2f6a8 R12: ffff888107fc68b8 [ 128.817078][ T5829] R13: ffffffff871dc5e0 R14: ffff888107fc6870 R15: 0000000000000001 [ 128.825067][ T5829] FS: 00007fdb673876c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 128.834022][ T5829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.840641][ T5829] CR2: 00007fdb68915900 CR3: 0000000120eac000 CR4: 00000000003506f0 [ 128.848679][ T5829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.856705][ T5829] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 128.860895][ T5834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'. [ 128.864696][ T5829] Call Trace: [ 128.876426][ T5834] sctp: [Deprecated]: syz.1.545 (pid 5834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.876426][ T5834] Use struct sctp_sack_info instead [ 128.876802][ T5829] [ 128.876813][ T5829] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 128.901855][ T5829] ? errseq_check+0x2c/0x50 [ 128.906385][ T5829] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 128.911934][ T5829] ext4_evict_inode+0xa1f/0xd60 [ 128.916870][ T5829] ? __pfx_ext4_evict_inode+0x10/0x10 [ 128.922320][ T5829] evict+0x2af/0x510 [ 128.926231][ T5829] ? __dquot_initialize+0x146/0x7c0 [ 128.931439][ T5829] iput+0x41a/0x580 [ 128.935252][ T5829] ext4_process_orphan+0x1a9/0x1c0 [ 128.940460][ T5829] ext4_orphan_cleanup+0x6a8/0xa00 [ 128.945570][ T5829] ext4_fill_super+0x3408/0x37c0 [ 128.950583][ T5829] ? set_blocksize+0x14c/0x270 [ 128.955341][ T5829] ? setup_bdev_super+0x30e/0x370 [ 128.960427][ T5829] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.965714][ T5829] get_tree_bdev_flags+0x291/0x300 [ 128.970846][ T5829] ? __pfx_ext4_fill_super+0x10/0x10 [ 128.976200][ T5829] get_tree_bdev+0x1f/0x30 [ 128.980661][ T5829] ext4_get_tree+0x1c/0x30 [ 128.985086][ T5829] vfs_get_tree+0x57/0x1d0 [ 128.989506][ T5829] do_new_mount+0x288/0x8d0 [ 128.994053][ T5829] path_mount+0x4d0/0xbc0 [ 128.998432][ T5829] __se_sys_mount+0x28c/0x2e0 [ 129.003135][ T5829] __x64_sys_mount+0x67/0x80 [ 129.007796][ T5829] x64_sys_call+0x2d61/0x3020 [ 129.012487][ T5829] do_syscall_64+0x12c/0x370 [ 129.017092][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.023003][ T5829] RIP: 0033:0x7fdb6892da0a [ 129.027446][ T5829] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.047093][ T5829] RSP: 002b:00007fdb67386e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.055518][ T5829] RAX: ffffffffffffffda RBX: 00007fdb67386ee0 RCX: 00007fdb6892da0a [ 129.063547][ T5829] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fdb67386ea0 [ 129.071526][ T5829] RBP: 0000200000000180 R08: 00007fdb67386ee0 R09: 0000000000800700 [ 129.079506][ T5829] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000000 [ 129.087476][ T5829] R13: 00007fdb67386ea0 R14: 000000000000047d R15: 00002000000007c0 [ 129.095526][ T5829] [ 129.098532][ T5829] ---[ end trace 0000000000000000 ]--- [ 129.104591][ T5829] EXT4-fs (loop6): 1 orphan inode deleted [ 129.110693][ T5829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.236817][ T5842] vlan1: entered promiscuous mode [ 129.257146][ T5842] bond0: entered promiscuous mode [ 129.269728][ T5842] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 129.344497][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.205652][ T5871] netlink: 80 bytes leftover after parsing attributes in process `syz.1.555'. [ 130.469048][ T23] hid-generic 0080:0005:FFFFFFFE.0016: unknown main item tag 0x0 [ 130.499132][ T5876] netlink: 'syz.0.556': attribute type 8 has an invalid length. [ 130.514057][ T23] hid-generic 0080:0005:FFFFFFFE.0016: unknown main item tag 0x0 [ 130.543168][ T23] hid-generic 0080:0005:FFFFFFFE.0016: hidraw0: HID v0.03 Device [syz0] on syz1 [ 130.657720][ T5879] loop6: detected capacity change from 0 to 1024 [ 130.691369][ T5879] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.739812][ T5879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.770837][ T5879] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.818361][ T5879] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.557: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 130.888338][ T5879] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.888510][ T5879] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.557: couldn't read orphan inode 11 (err -117) [ 130.897682][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 130.897703][ C1] EXT4-fs (loop6): initial error at time 1773187206: ext4_ext_check_inode:521: inode 11 [ 130.897737][ C1] EXT4-fs (loop6): last error at time 1773187206: ext4_ext_check_inode:521: inode 11 [ 131.037690][ T5879] loop6: lost filesystem error report for type 5 error -117 [ 131.038230][ T5879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.086731][ T5869] Set syz1 is full, maxelem 65536 reached [ 131.130186][ T5891] loop1: detected capacity change from 0 to 1024 [ 131.140165][ T5891] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 131.156051][ T5891] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.561: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.191469][ T5891] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 131.191705][ T5891] __quota_error: 188 callbacks suppressed [ 131.191715][ T5891] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 131.200871][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 131.200886][ C1] EXT4-fs (loop1): initial error at time 1773187206: ext4_map_blocks:776: inode 3: block 2 [ 131.200914][ C1] EXT4-fs (loop1): last error at time 1773187206: ext4_map_blocks:776: inode 3: block 2 [ 131.248488][ T5891] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.561: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.262877][ T5891] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 131.267035][ T5891] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 131.285795][ T5891] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.561: Failed to acquire dquot type 0 [ 131.305233][ T5891] loop1: lost filesystem error report for type 5 error -117 [ 131.305457][ T5891] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 131.322983][ T5891] loop1: lost filesystem error report for type 5 error -117 [ 131.325734][ T5891] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.561: mark_inode_dirty error [ 131.345091][ T5891] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 131.346271][ T5891] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 131.354530][ T28] audit: type=1326 audit(1773187206.723:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 131.356439][ T5891] EXT4-fs (loop1): 1 orphan inode deleted [ 131.371006][ T5904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5904 comm=syz.3.564 [ 131.390167][ T5891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.395078][ T28] audit: type=1326 audit(1773187206.743:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 131.442776][ T797] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.453682][ T28] audit: type=1326 audit(1773187206.743:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 131.482748][ T797] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 131.489393][ T28] audit: type=1326 audit(1773187206.743:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 131.494732][ T797] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0 [ 131.515130][ T28] audit: type=1326 audit(1773187206.743:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 131.550822][ T28] audit: type=1326 audit(1773187206.743:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 131.575747][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.594500][ T120] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm kworker/u8:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.608721][ T120] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 131.618688][ T120] EXT4-fs error (device loop1): ext4_write_dquot:6981: comm kworker/u8:5: Failed to commit dquot type 0 [ 131.631557][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.643768][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 131.656691][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 131.656830][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 131.673670][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 131.673754][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 131.692337][ T3311] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 131.706096][ T5917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.727958][ T5917] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.817317][ T5930] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.867357][ T5928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=5928 comm=syz.0.573 [ 131.882400][ T5938] __nla_validate_parse: 3 callbacks suppressed [ 131.882413][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 131.965155][ T5941] loop1: detected capacity change from 0 to 2048 [ 131.985535][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.052181][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.531356][ T5950] loop6: detected capacity change from 0 to 2048 [ 132.551325][ T5950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.565017][ T5950] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.628061][ T5954] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 16: comm syz.6.580: path /38/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 132.648641][ T5954] EXT4-fs (loop6): Remounting filesystem read-only [ 133.641477][ T50] batadv1: left promiscuous mode [ 134.269462][ T5895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.293628][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.419460][ T5979] 8021q: VLANs not supported on wg2 [ 134.427314][ T5979] loop6: detected capacity change from 0 to 512 [ 134.446882][ T5979] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 134.457527][ T5982] loop1: detected capacity change from 0 to 512 [ 134.469459][ T5979] EXT4-fs (loop6): 1 truncate cleaned up [ 134.475577][ T5979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.900381][ T5999] loop1: detected capacity change from 0 to 1024 [ 134.929806][ T5999] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 135.061826][ T5999] FAULT_INJECTION: forcing a failure. [ 135.061826][ T5999] name failslab, interval 1, probability 0, space 0, times 0 [ 135.078836][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.1.594 Tainted: G W syzkaller #0 PREEMPT(full) [ 135.078865][ T5999] Tainted: [W]=WARN [ 135.078871][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.078882][ T5999] Call Trace: [ 135.078887][ T5999] [ 135.078894][ T5999] __dump_stack+0x1d/0x30 [ 135.078934][ T5999] dump_stack_lvl+0x95/0xd0 [ 135.079105][ T5999] dump_stack+0x15/0x1b [ 135.079177][ T5999] should_fail_ex+0x263/0x280 [ 135.079198][ T5999] should_failslab+0x8c/0xb0 [ 135.079229][ T5999] kmem_cache_alloc_noprof+0x66/0x400 [ 135.079253][ T5999] ? do_getname+0x2e/0x1c0 [ 135.079289][ T5999] do_getname+0x2e/0x1c0 [ 135.079313][ T5999] __se_sys_renameat2+0x29/0x1c0 [ 135.079391][ T5999] __x64_sys_renameat2+0x67/0x80 [ 135.079413][ T5999] x64_sys_call+0x2a12/0x3020 [ 135.079438][ T5999] do_syscall_64+0x12c/0x370 [ 135.079458][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.079556][ T5999] RIP: 0033:0x7ff6acb1c799 [ 135.079573][ T5999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.079590][ T5999] RSP: 002b:00007ff6ab577028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 135.079610][ T5999] RAX: ffffffffffffffda RBX: 00007ff6acd95fa0 RCX: 00007ff6acb1c799 [ 135.079626][ T5999] RDX: ffffffffffffff9c RSI: 0000200000000080 RDI: ffffffffffffff9c [ 135.079639][ T5999] RBP: 00007ff6ab577090 R08: 0000000000000005 R09: 0000000000000000 [ 135.079694][ T5999] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 135.079708][ T5999] R13: 00007ff6acd96038 R14: 00007ff6acd95fa0 R15: 00007fff10259878 [ 135.079734][ T5999] [ 136.252853][ T6014] loop4: detected capacity change from 0 to 512 [ 136.300551][ T6014] EXT4-fs: test_dummy_encryption option not supported [ 136.409550][ T6017] loop1: detected capacity change from 0 to 1024 [ 136.457056][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.897462][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 136.993123][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 136.993137][ T28] audit: type=1400 audit(1773187212.363:1300): avc: denied { ioctl } for pid=6045 comm="syz.6.612" path="socket:[13747]" dev="sockfs" ino=13747 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.104428][ T6058] team0: entered allmulticast mode [ 137.183759][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 137.205127][ T6054] loop1: detected capacity change from 0 to 8192 [ 137.461707][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 137.516547][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.623'. [ 137.605627][ T6080] loop1: detected capacity change from 0 to 512 [ 137.653932][ T6080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.861325][ T6081] netlink: 72 bytes leftover after parsing attributes in process `syz.6.621'. [ 137.936945][ T6080] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 137.959495][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 137.965932][ C1] EXT4-fs (loop1): initial error at time 1773187213: ext4_mb_generate_buddy:1315 [ 137.975118][ C1] EXT4-fs (loop1): last error at time 1773187213: ext4_mb_generate_buddy:1315 [ 137.991544][ T6080] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 138.025243][ T6080] EXT4-fs (loop1): 1 truncate cleaned up [ 138.051416][ T6080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.066119][ T6087] netlink: 'syz.3.627': attribute type 21 has an invalid length. [ 138.089694][ T6087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.627'. [ 138.129104][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 138.221839][ T6101] loop6: detected capacity change from 0 to 128 [ 138.262901][ T6101] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.279765][ T6101] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.322298][ T5016] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.382872][ T6112] FAULT_INJECTION: forcing a failure. [ 138.382872][ T6112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.397959][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.6.634 Tainted: G W syzkaller #0 PREEMPT(full) [ 138.398011][ T6112] Tainted: [W]=WARN [ 138.398018][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.398076][ T6112] Call Trace: [ 138.398083][ T6112] [ 138.398092][ T6112] __dump_stack+0x1d/0x30 [ 138.398120][ T6112] dump_stack_lvl+0x95/0xd0 [ 138.398142][ T6112] dump_stack+0x15/0x1b [ 138.398163][ T6112] should_fail_ex+0x263/0x280 [ 138.398259][ T6112] should_fail+0xb/0x20 [ 138.398362][ T6112] should_fail_usercopy+0x1a/0x20 [ 138.398383][ T6112] strncpy_from_user+0x27/0x250 [ 138.398475][ T6112] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 138.398498][ T6112] do_getname+0x59/0x1c0 [ 138.398521][ T6112] getname_flags+0x1d/0x30 [ 138.398545][ T6112] do_sys_openat2+0x60/0x130 [ 138.398644][ T6112] __se_sys_openat2+0x193/0x1f0 [ 138.398702][ T6112] __x64_sys_openat2+0x55/0x70 [ 138.398724][ T6112] x64_sys_call+0x2170/0x3020 [ 138.398798][ T6112] do_syscall_64+0x12c/0x370 [ 138.398874][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.398895][ T6112] RIP: 0033:0x7fdb6892c799 [ 138.398910][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.398930][ T6112] RSP: 002b:00007fdb67387028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 138.398964][ T6112] RAX: ffffffffffffffda RBX: 00007fdb68ba5fa0 RCX: 00007fdb6892c799 [ 138.399014][ T6112] RDX: 0000200000000080 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 138.399029][ T6112] RBP: 00007fdb67387090 R08: 0000000000000000 R09: 0000000000000000 [ 138.399043][ T6112] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 138.399057][ T6112] R13: 00007fdb68ba6038 R14: 00007fdb68ba5fa0 R15: 00007ffeea3d0b88 [ 138.399074][ T6112] [ 138.671793][ T28] audit: type=1326 audit(1773187214.043:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 138.730180][ T28] audit: type=1326 audit(1773187214.043:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 138.775526][ T28] audit: type=1326 audit(1773187214.133:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 138.806383][ T28] audit: type=1326 audit(1773187214.133:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 138.846203][ T28] audit: type=1326 audit(1773187214.133:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 138.874631][ T6131] loop6: detected capacity change from 0 to 256 [ 138.912255][ T6131] FAT-fs (loop6): Directory bread(block 64) failed [ 138.918996][ T6131] FAT-fs (loop6): Directory bread(block 65) failed [ 138.925882][ T6131] FAT-fs (loop6): Directory bread(block 66) failed [ 138.932475][ T6131] FAT-fs (loop6): Directory bread(block 67) failed [ 138.939161][ T6131] FAT-fs (loop6): Directory bread(block 68) failed [ 138.945674][ T6131] FAT-fs (loop6): Directory bread(block 69) failed [ 138.952289][ T6131] FAT-fs (loop6): Directory bread(block 70) failed [ 138.958974][ T6131] FAT-fs (loop6): Directory bread(block 71) failed [ 138.965545][ T6131] FAT-fs (loop6): Directory bread(block 72) failed [ 138.972205][ T6131] FAT-fs (loop6): Directory bread(block 73) failed [ 139.058930][ T6131] bridge_slave_0: left allmulticast mode [ 139.064684][ T6131] bridge_slave_0: left promiscuous mode [ 139.070492][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.113198][ T28] audit: type=1326 audit(1773187214.133:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 139.193816][ T28] audit: type=1326 audit(1773187214.133:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 139.279988][ T28] audit: type=1326 audit(1773187214.133:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 139.363467][ T28] audit: type=1326 audit(1773187214.133:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 139.440208][ T6131] bridge_slave_1: left allmulticast mode [ 139.446049][ T6131] bridge_slave_1: left promiscuous mode [ 139.451863][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.467977][ T6131] bond0: (slave bond_slave_0): Releasing backup interface [ 139.481571][ T6131] bond0: (slave bond_slave_1): Releasing backup interface [ 139.497055][ T6131] team0: Port device team_slave_0 removed [ 139.508652][ T6131] team0: Port device team_slave_1 removed [ 139.516869][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.524369][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.535265][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.542822][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.554103][ T6131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.586200][ T6134] lo: Caught tx_queue_len zero misconfig [ 139.606026][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.642'. [ 140.229635][ T3484] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.277217][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.480873][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 140.494791][ T6154] veth1_macvtap: left promiscuous mode [ 140.597783][ T6157] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 140.614381][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 140.859923][ T6171] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.888990][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 141.766080][ T6219] 8021q: VLANs not supported on wg2 [ 141.786330][ T6219] loop1: detected capacity change from 0 to 512 [ 141.801734][ T6219] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.858339][ T6219] EXT4-fs (loop1): 1 truncate cleaned up [ 141.884767][ T6219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.021854][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 142.021869][ T28] audit: type=1400 audit(1773187217.393:1440): avc: denied { checkpoint_restore } for pid=6243 comm="syz.6.680" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.210740][ T28] audit: type=1326 audit(1773187217.583:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.6.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6892c799 code=0x7ffc0000 [ 142.291096][ T28] audit: type=1326 audit(1773187217.603:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.6.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6892c799 code=0x7ffc0000 [ 142.431125][ T28] audit: type=1326 audit(1773187217.603:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.6.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6892c799 code=0x7ffc0000 [ 142.487933][ T28] audit: type=1326 audit(1773187217.603:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.6.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdb6892c799 code=0x7ffc0000 [ 142.529910][ T6258] loop6: detected capacity change from 0 to 256 [ 142.667029][ T6258] FAT-fs (loop6): Directory bread(block 64) failed [ 142.673656][ T6258] FAT-fs (loop6): Directory bread(block 65) failed [ 142.680278][ T6258] FAT-fs (loop6): Directory bread(block 66) failed [ 142.686894][ T6258] FAT-fs (loop6): Directory bread(block 67) failed [ 142.693639][ T6258] FAT-fs (loop6): Directory bread(block 68) failed [ 142.700187][ T6258] FAT-fs (loop6): Directory bread(block 69) failed [ 142.706801][ T6258] FAT-fs (loop6): Directory bread(block 70) failed [ 142.713406][ T6258] FAT-fs (loop6): Directory bread(block 71) failed [ 142.720187][ T6258] FAT-fs (loop6): Directory bread(block 72) failed [ 142.726745][ T6258] FAT-fs (loop6): Directory bread(block 73) failed [ 142.840480][ T6258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.942578][ T28] audit: type=1326 audit(1773187217.603:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.6.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6892c799 code=0x7ffc0000 [ 143.192446][ T28] audit: type=1326 audit(1773187217.603:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.6.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6892c799 code=0x7ffc0000 [ 143.441014][ T28] audit: type=1326 audit(1773187217.603:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.6.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6892c799 code=0x7ffc0000 [ 143.741293][ T28] audit: type=1326 audit(1773187217.603:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.6.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6892c799 code=0x7ffc0000 [ 143.854002][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.020227][ T28] audit: type=1326 audit(1773187217.603:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.6.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6892c799 code=0x7ffc0000 [ 144.830623][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 144.904100][ T6279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.210894][ T6279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.221503][ T6297] loop4: detected capacity change from 0 to 256 [ 145.221901][ T6297] vfat: Bad value for 'tz' [ 145.360755][ T6297] bridge_slave_0: left allmulticast mode [ 145.366490][ T6297] bridge_slave_0: left promiscuous mode [ 145.372820][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.383120][ T6297] bridge_slave_1: left allmulticast mode [ 145.388788][ T6297] bridge_slave_1: left promiscuous mode [ 145.395179][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.406694][ T6297] bond0: (slave bond_slave_0): Releasing backup interface [ 145.418083][ T6297] bond_slave_0: left promiscuous mode [ 145.423568][ T6297] bond_slave_0: left allmulticast mode [ 145.435394][ T6297] bond0: (slave bond_slave_1): Releasing backup interface [ 145.444207][ T6297] bond_slave_1: left promiscuous mode [ 145.450488][ T6297] bond_slave_1: left allmulticast mode [ 145.464555][ T6297] team0: Port device team_slave_0 removed [ 145.477592][ T6297] team0: Port device team_slave_1 removed [ 145.484486][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.492542][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.503055][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.511154][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.568903][ T6297] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.622668][ T6279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.735032][ T6279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.986127][ T4133] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.006063][ T4133] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.044547][ T4133] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.065972][ T6320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.142441][ T4133] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.092940][ T6337] 8021q: VLANs not supported on wg2 [ 149.303879][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 149.303892][ T28] audit: type=1326 audit(1773187224.673:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6acb1c799 code=0x7ffc0000 [ 149.355252][ T6329] chnl_net:caif_netlink_parms(): no params data found [ 149.434594][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.441725][ T28] audit: type=1326 audit(1773187224.673:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6acb1c799 code=0x7ffc0000 [ 149.465527][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.472993][ T6329] bridge_slave_0: entered allmulticast mode [ 149.478945][ T28] audit: type=1326 audit(1773187224.673:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6acb1c799 code=0x7ffc0000 [ 149.502839][ T6329] bridge_slave_0: entered promiscuous mode [ 149.509548][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.516620][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.524276][ T6329] bridge_slave_1: entered allmulticast mode [ 149.537514][ T6329] bridge_slave_1: entered promiscuous mode [ 149.550448][ T28] audit: type=1326 audit(1773187224.673:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff6acb1c799 code=0x7ffc0000 [ 149.573887][ T28] audit: type=1326 audit(1773187224.673:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6acb1c799 code=0x7ffc0000 [ 149.597192][ T28] audit: type=1326 audit(1773187224.743:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6acb1c799 code=0x7ffc0000 [ 149.620624][ T28] audit: type=1326 audit(1773187224.743:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6acb1c502 code=0x7ffc0000 [ 149.649444][ T28] audit: type=1326 audit(1773187224.743:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff6acb1c597 code=0x7ffc0000 [ 149.682728][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.682810][ T28] audit: type=1326 audit(1773187224.743:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff6acad9491 code=0x7ffc0000 [ 149.728951][ T6329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.751793][ T6329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.769485][ T28] audit: type=1326 audit(1773187224.743:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff6acb1d589 code=0x7ffc0000 [ 149.795287][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.860759][ T6371] loop6: detected capacity change from 0 to 1024 [ 149.868185][ T6329] team0: Port device team_slave_0 added [ 149.894307][ T6371] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.894757][ T6329] team0: Port device team_slave_1 added [ 149.911437][ T6371] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 149.929551][ T6371] EXT4-fs (loop6): orphan cleanup on readonly fs [ 149.939819][ T6371] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.715: Invalid inode table block 0 in block_group 0 [ 149.970147][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.988909][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 149.989158][ T6371] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 149.996505][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 149.996521][ C0] EXT4-fs (loop6): initial error at time 1773187225: __ext4_get_inode_loc:4782 [ 149.996551][ C0] EXT4-fs (loop6): last error at time 1773187225: __ext4_get_inode_loc:4782 [ 150.043073][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.052967][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 150.067912][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.110055][ T6329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.121042][ T6371] EXT4-fs error (device loop6): ext4_quota_write:7390: inode #3: comm syz.6.715: mark_inode_dirty error [ 150.150147][ T6371] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 150.150306][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.166438][ T6371] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.715: Failed to acquire dquot type 0 [ 150.177667][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 150.177704][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.211139][ T6371] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.715: Invalid inode table block 0 in block_group 0 [ 150.223687][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 150.223776][ T6329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.241629][ T6371] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 150.319577][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 150.319681][ T6371] EXT4-fs error (device loop6): ext4_ext_truncate:4528: inode #15: comm syz.6.715: mark_inode_dirty error [ 150.355614][ T6371] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.360996][ T6371] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.715: Invalid inode table block 0 in block_group 0 [ 150.394844][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 150.394973][ T6371] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 150.411742][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 150.482241][ T6371] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 150.499483][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.535904][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 150.536067][ T6371] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.715: Invalid inode table block 0 in block_group 0 [ 150.606834][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 150.607374][ T6371] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 150.662049][ T6371] loop6: lost filesystem error report for type 5 error -117 [ 150.662346][ T6371] EXT4-fs error (device loop6): ext4_truncate:4587: inode #15: comm syz.6.715: mark_inode_dirty error [ 150.727921][ T6371] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.728297][ T6371] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 150.788653][ T6371] EXT4-fs (loop6): 1 truncate cleaned up [ 150.810122][ T6371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.292698][ T6398] netlink: 'syz.4.722': attribute type 8 has an invalid length. [ 151.306188][ T6396] Set syz1 is full, maxelem 65536 reached [ 151.313442][ T3545] hid-generic 0080:0005:FFFFFFFE.0017: unknown main item tag 0x0 [ 151.321999][ T3545] hid-generic 0080:0005:FFFFFFFE.0017: unknown main item tag 0x0 [ 151.359551][ T3545] hid-generic 0080:0005:FFFFFFFE.0017: hidraw0: HID v0.03 Device [syz0] on syz1 [ 151.404648][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.426073][ T6329] hsr_slave_0: entered promiscuous mode [ 151.442500][ T6329] hsr_slave_1: entered promiscuous mode [ 151.471588][ T6329] debugfs: 'hsr0' already exists in 'hsr' [ 151.489551][ T6329] Cannot create hsr debugfs directory [ 151.494997][ T6397] netlink: 80 bytes leftover after parsing attributes in process `syz.4.722'. [ 151.644460][ T41] vlan2: left allmulticast mode [ 151.662100][ T41] bond0: left allmulticast mode [ 151.683312][ T41] macvlan2: left allmulticast mode [ 151.712384][ T41] team0: left allmulticast mode [ 151.739013][ T41] vlan2: left promiscuous mode [ 151.744834][ T41] bond0: left promiscuous mode [ 151.759547][ T41] macvlan2: left promiscuous mode [ 151.770974][ T6431] loop4: detected capacity change from 0 to 256 [ 151.780520][ T41] bridge0: port 3(vlan2) entered disabled state [ 151.796498][ T6431] FAT-fs (loop4): Directory bread(block 64) failed [ 151.816268][ T6431] FAT-fs (loop4): Directory bread(block 65) failed [ 151.840942][ T6431] FAT-fs (loop4): Directory bread(block 66) failed [ 151.861413][ T6431] FAT-fs (loop4): Directory bread(block 67) failed [ 151.877184][ T6431] FAT-fs (loop4): Directory bread(block 68) failed [ 151.884711][ T6431] FAT-fs (loop4): Directory bread(block 69) failed [ 151.905858][ T6431] FAT-fs (loop4): Directory bread(block 70) failed [ 151.914998][ T6431] FAT-fs (loop4): Directory bread(block 71) failed [ 151.921600][ T6431] FAT-fs (loop4): Directory bread(block 72) failed [ 151.928133][ T6431] FAT-fs (loop4): Directory bread(block 73) failed [ 151.973853][ T6438] loop1: detected capacity change from 0 to 1024 [ 151.986122][ T6438] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.994140][ T6438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.002879][ T6438] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.003053][ T41] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 152.019224][ T6438] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.731: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 152.040546][ T6438] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.040964][ T6438] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.731: couldn't read orphan inode 11 (err -117) [ 152.044387][ T41] team0: left promiscuous mode [ 152.050168][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 152.050183][ C1] EXT4-fs (loop1): initial error at time 1773187227: ext4_ext_check_inode:521: inode 11 [ 152.050210][ C1] EXT4-fs (loop1): last error at time 1773187227: ext4_ext_check_inode:521: inode 11 [ 152.094098][ T6438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.095029][ T41] bond0 (unregistering): Released all slaves [ 152.120182][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.731'. [ 152.183362][ T41] hsr_slave_0: left promiscuous mode [ 152.189026][ T41] hsr_slave_1: left promiscuous mode [ 152.198871][ T41] veth1_macvtap: left promiscuous mode [ 152.204914][ T41] veth0_macvtap: left promiscuous mode [ 152.211322][ T41] veth1_vlan: left promiscuous mode [ 152.216708][ T41] veth0_vlan: left promiscuous mode [ 152.288678][ T6460] netlink: 'syz.3.733': attribute type 21 has an invalid length. [ 152.412553][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 152.447024][ T6462] loop6: detected capacity change from 0 to 256 [ 152.453590][ T6462] vfat: Bad value for 'tz' [ 152.524272][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.561614][ T6462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.615746][ T6329] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.655352][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.662420][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.725407][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.732528][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.832099][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.860851][ T6329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.189900][ T6329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.975314][ T41] IPVS: stop unused estimator thread 0... [ 154.078993][ T6519] netlink: 36 bytes leftover after parsing attributes in process `syz.6.743'. [ 154.130676][ T6523] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 154.276097][ T6523] bond6 (unregistering): Released all slaves [ 154.595773][ T6329] veth0_vlan: entered promiscuous mode [ 154.604398][ T6558] loop6: detected capacity change from 0 to 512 [ 154.657476][ T6558] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 154.680240][ T6329] veth1_vlan: entered promiscuous mode [ 154.687149][ T6563] loop1: detected capacity change from 0 to 256 [ 154.710856][ T6558] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.743960][ T6329] veth0_macvtap: entered promiscuous mode [ 154.754868][ T6558] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 154.766271][ T6563] FAT-fs (loop1): Directory bread(block 64) failed [ 154.796215][ T6329] veth1_macvtap: entered promiscuous mode [ 154.802736][ T6563] FAT-fs (loop1): Directory bread(block 65) failed [ 154.831134][ T6563] FAT-fs (loop1): Directory bread(block 66) failed [ 154.837671][ T6563] FAT-fs (loop1): Directory bread(block 67) failed [ 154.852913][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.891312][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.898651][ T6563] FAT-fs (loop1): Directory bread(block 68) failed [ 154.912469][ T6563] FAT-fs (loop1): Directory bread(block 69) failed [ 154.939157][ T6563] FAT-fs (loop1): Directory bread(block 70) failed [ 154.971622][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 154.971637][ T28] audit: type=1400 audit(1773187230.333:1610): avc: denied { mount } for pid=6329 comm="syz-executor" name="/" dev="gadgetfs" ino=4659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 154.986248][ T6563] FAT-fs (loop1): Directory bread(block 71) failed [ 155.007288][ T6563] FAT-fs (loop1): Directory bread(block 72) failed [ 155.013871][ T6563] FAT-fs (loop1): Directory bread(block 73) failed [ 155.150252][ T6584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6584 comm=syz.4.756 [ 155.173299][ T28] audit: type=1400 audit(1773187230.533:1611): avc: denied { name_bind } for pid=6583 comm="syz.4.756" src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 155.291020][ T6591] loop4: detected capacity change from 0 to 128 [ 155.363373][ T6597] 8021q: VLANs not supported on wg2 [ 155.384345][ T6597] loop7: detected capacity change from 0 to 512 [ 155.399319][ T6602] loop1: detected capacity change from 0 to 1024 [ 155.407145][ T6597] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 155.434060][ T6597] EXT4-fs (loop7): 1 truncate cleaned up [ 155.439843][ T6602] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 155.451014][ T6597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.465184][ T6602] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.761: lblock 2 mapped to illegal pblock 2 (length 1) [ 155.480125][ T6602] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.484608][ T6602] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 155.493762][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 155.493779][ C0] EXT4-fs (loop1): initial error at time 1773187230: ext4_map_blocks:776: inode 3: block 2 [ 155.493808][ C0] EXT4-fs (loop1): last error at time 1773187230: ext4_map_blocks:776: inode 3: block 2 [ 155.528090][ T6602] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.761: lblock 0 mapped to illegal pblock 48 (length 1) [ 155.542389][ T6602] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.542609][ T6602] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 155.563332][ T6602] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.761: Failed to acquire dquot type 0 [ 155.574921][ T6602] fserror_report: 2 callbacks suppressed [ 155.574933][ T6602] loop1: lost filesystem error report for type 5 error -117 [ 155.581192][ T6602] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 155.599332][ T6602] loop1: lost filesystem error report for type 5 error -117 [ 155.601563][ T6602] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.761: mark_inode_dirty error [ 155.620406][ T6602] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 155.620560][ T6602] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 155.640208][ T6602] EXT4-fs (loop1): 1 orphan inode deleted [ 155.643219][ T6608] netlink: 80 bytes leftover after parsing attributes in process `syz.3.762'. [ 155.646423][ T6602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.668413][ T50] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.672334][ T6608] netlink: 'syz.3.762': attribute type 8 has an invalid length. [ 155.682759][ T50] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.682918][ T50] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 155.682936][ T50] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 155.682996][ T50] loop1: lost filesystem error report for type 5 error -117 [ 155.865171][ T6607] Set syz1 is full, maxelem 65536 reached [ 155.938750][ T6629] loop6: detected capacity change from 0 to 512 [ 155.979403][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.992098][ T6629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.009345][ T50] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.029620][ T50] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.029730][ T50] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 156.070691][ T6629] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.763: iget: bad i_size value: 38620345925642 [ 156.083429][ T50] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 156.095121][ T6629] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.095258][ T6629] EXT4-fs (loop6): Remounting filesystem read-only [ 156.104404][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 156.104432][ C0] EXT4-fs (loop6): initial error at time 1773187231: ext4_orphan_get:1391: inode 15 [ 156.104463][ C0] EXT4-fs (loop6): last error at time 1773187231: ext4_orphan_get:1391: inode 15 [ 156.117791][ T50] loop1: lost filesystem error report for type 5 error -117 [ 156.127686][ T6629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.164509][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 156.177660][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 156.177807][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 156.194731][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 156.194793][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 156.217420][ T3311] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.273129][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.346094][ T6660] FAULT_INJECTION: forcing a failure. [ 156.346094][ T6660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.359391][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz.4.766 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.359423][ T6660] Tainted: [W]=WARN [ 156.359472][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.359518][ T6660] Call Trace: [ 156.359526][ T6660] [ 156.359534][ T6660] __dump_stack+0x1d/0x30 [ 156.359562][ T6660] dump_stack_lvl+0x95/0xd0 [ 156.359586][ T6660] dump_stack+0x15/0x1b [ 156.359661][ T6660] should_fail_ex+0x263/0x280 [ 156.359683][ T6660] should_fail+0xb/0x20 [ 156.359704][ T6660] should_fail_usercopy+0x1a/0x20 [ 156.359774][ T6660] _copy_from_user+0x1c/0xb0 [ 156.359803][ T6660] __sys_bpf+0x183/0x7e0 [ 156.359881][ T6660] __x64_sys_bpf+0x41/0x50 [ 156.359913][ T6660] x64_sys_call+0x10cb/0x3020 [ 156.359938][ T6660] do_syscall_64+0x12c/0x370 [ 156.359956][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.359998][ T6660] RIP: 0033:0x7fd76a64c799 [ 156.360013][ T6660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.360033][ T6660] RSP: 002b:00007fd769065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.360055][ T6660] RAX: ffffffffffffffda RBX: 00007fd76a8c6180 RCX: 00007fd76a64c799 [ 156.360070][ T6660] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 156.360127][ T6660] RBP: 00007fd769065090 R08: 0000000000000000 R09: 0000000000000000 [ 156.360141][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.360154][ T6660] R13: 00007fd76a8c6218 R14: 00007fd76a8c6180 R15: 00007ffd16c69878 [ 156.360175][ T6660] [ 156.608364][ T6664] loop1: detected capacity change from 0 to 128 [ 156.641945][ T6664] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.675933][ T6664] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.844467][ T6329] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.880291][ T28] audit: type=1326 audit(1773187233.253:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 157.959571][ T6685] FAULT_INJECTION: forcing a failure. [ 157.959571][ T6685] name failslab, interval 1, probability 0, space 0, times 0 [ 157.980164][ T28] audit: type=1326 audit(1773187233.253:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 158.003691][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.4.774 Tainted: G W syzkaller #0 PREEMPT(full) [ 158.003775][ T6685] Tainted: [W]=WARN [ 158.003781][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.003859][ T6685] Call Trace: [ 158.003866][ T6685] [ 158.003872][ T6685] __dump_stack+0x1d/0x30 [ 158.003895][ T6685] dump_stack_lvl+0x95/0xd0 [ 158.003919][ T6685] dump_stack+0x15/0x1b [ 158.003942][ T6685] should_fail_ex+0x263/0x280 [ 158.004048][ T6685] should_failslab+0x8c/0xb0 [ 158.004125][ T6685] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 158.004146][ T6685] ? __alloc_skb+0x2d6/0x690 [ 158.004167][ T6685] __alloc_skb+0x2d6/0x690 [ 158.004197][ T6685] tcp_stream_alloc_skb+0x30/0x320 [ 158.004217][ T6685] tcp_sendmsg_locked+0xd21/0x2de0 [ 158.004237][ T6685] ? terminate_walk+0x1e6/0x210 [ 158.004259][ T6685] ? path_openat+0x1ab2/0x2050 [ 158.004316][ T6685] ? __rcu_read_unlock+0x4e/0x70 [ 158.004339][ T6685] ? avc_has_perm_noaudit+0xab/0x130 [ 158.004366][ T6685] ? __pfx_tcp_sendmsg+0x10/0x10 [ 158.004443][ T6685] ? __pfx_inet_sendmsg+0x10/0x10 [ 158.004473][ T6685] tcp_sendmsg+0x2f/0x50 [ 158.004493][ T6685] inet_sendmsg+0x76/0xd0 [ 158.004518][ T6685] __sys_sendto+0x3db/0x490 [ 158.004594][ T6685] __x64_sys_sendto+0x76/0x90 [ 158.004649][ T6685] x64_sys_call+0x2d35/0x3020 [ 158.004676][ T6685] do_syscall_64+0x12c/0x370 [ 158.004694][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.004776][ T6685] RIP: 0033:0x7fd76a64c799 [ 158.004789][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.004881][ T6685] RSP: 002b:00007fd7690a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 158.004899][ T6685] RAX: ffffffffffffffda RBX: 00007fd76a8c5fa0 RCX: 00007fd76a64c799 [ 158.004911][ T6685] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 158.004950][ T6685] RBP: 00007fd7690a7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.004964][ T6685] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 158.004976][ T6685] R13: 00007fd76a8c6038 R14: 00007fd76a8c5fa0 R15: 00007ffd16c69878 [ 158.004992][ T6685] [ 158.007235][ T28] audit: type=1326 audit(1773187233.273:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 158.277785][ T28] audit: type=1326 audit(1773187233.273:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76a64c799 code=0x7ffc0000 [ 158.313875][ T6692] loop7: detected capacity change from 0 to 1024 [ 158.323332][ T6692] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 158.420036][ T6692] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.775: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.471140][ T6692] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.471263][ T6692] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.775: lblock 0 mapped to illegal pblock 48 (length 1) [ 158.480399][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 158.480433][ C0] EXT4-fs (loop7): initial error at time 1773187233: ext4_map_blocks:776: inode 3: block 2 [ 158.480461][ C0] EXT4-fs (loop7): last error at time 1773187233: ext4_map_blocks:776: inode 3: block 2 [ 158.527311][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.6.779'. [ 158.560877][ T6706] 8021q: VLANs not supported on wg2 [ 158.568751][ T6706] loop6: detected capacity change from 0 to 512 [ 158.616521][ T6706] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 158.630111][ T6692] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.630187][ T6692] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.775: Failed to acquire dquot type 0 [ 158.662023][ T6706] EXT4-fs (loop6): 1 truncate cleaned up [ 158.668432][ T6706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.689489][ T6692] loop7: lost filesystem error report for type 5 error -117 [ 158.689579][ T6692] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 158.709106][ T6712] netlink: 80 bytes leftover after parsing attributes in process `syz.3.781'. [ 158.741575][ T6692] loop7: lost filesystem error report for type 5 error -117 [ 158.741762][ T6692] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.775: mark_inode_dirty error [ 158.764855][ T6713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'. [ 158.829449][ T6692] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.829565][ T6692] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 158.880280][ T6692] EXT4-fs (loop7): 1 orphan inode deleted [ 158.886541][ T6692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.888295][ T41] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.914557][ T41] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 158.931132][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.078863][ T6709] Set syz1 is full, maxelem 65536 reached [ 159.090414][ T6726] loop4: detected capacity change from 0 to 256 [ 159.124698][ T6726] FAT-fs (loop4): Directory bread(block 64) failed [ 159.142689][ T6329] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.154884][ T4133] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.169734][ T4133] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 159.181247][ T6726] FAT-fs (loop4): Directory bread(block 65) failed [ 159.188989][ T6726] FAT-fs (loop4): Directory bread(block 66) failed [ 159.196359][ T6726] FAT-fs (loop4): Directory bread(block 67) failed [ 159.203381][ T4133] loop7: lost filesystem error report for type 5 error -117 [ 159.203767][ T6329] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 159.224660][ T6726] FAT-fs (loop4): Directory bread(block 68) failed [ 159.231381][ T6726] FAT-fs (loop4): Directory bread(block 69) failed [ 159.238098][ T6329] loop7: lost filesystem error report for type 5 error -117 [ 159.238177][ T6329] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 159.256350][ T6726] FAT-fs (loop4): Directory bread(block 70) failed [ 159.262982][ T6726] FAT-fs (loop4): Directory bread(block 71) failed [ 159.270992][ T6329] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 159.289621][ T6726] FAT-fs (loop4): Directory bread(block 72) failed [ 159.296141][ T6726] FAT-fs (loop4): Directory bread(block 73) failed [ 159.364981][ T6757] netlink: 80 bytes leftover after parsing attributes in process `syz.3.787'. [ 159.388938][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.787'. [ 159.605032][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.639347][ T6740] Set syz1 is full, maxelem 65536 reached [ 159.687376][ T6776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'. [ 159.747483][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.793'. [ 159.758957][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.793'. [ 159.850761][ T6789] loop1: detected capacity change from 0 to 1024 [ 159.877344][ T6791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.799'. [ 159.889206][ T6789] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 159.903785][ T6791] skbuff: bad partial csum: csum=65535/127 headroom=146 headlen=65664 [ 159.913299][ T6789] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.797: lblock 2 mapped to illegal pblock 2 (length 1) [ 159.913468][ T6789] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.797: lblock 0 mapped to illegal pblock 48 (length 1) [ 159.913570][ T6789] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.797: Failed to acquire dquot type 0 [ 159.913772][ T6789] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 159.927549][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 159.927567][ C0] EXT4-fs (loop1): initial error at time 1773187235: ext4_map_blocks:776: inode 3: block 2 [ 159.927602][ C0] EXT4-fs (loop1): last error at time 1773187235: ext4_acquire_dquot:7001 [ 159.962383][ T6794] loop6: detected capacity change from 0 to 256 [ 159.969387][ T6789] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.797: mark_inode_dirty error [ 160.059113][ T6796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.091503][ T6789] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 160.102077][ T6789] EXT4-fs (loop1): 1 orphan inode deleted [ 160.109325][ T6789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.160904][ T50] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 160.176329][ T6794] FAT-fs (loop6): Directory bread(block 64) failed [ 160.317419][ T6794] FAT-fs (loop6): Directory bread(block 65) failed [ 160.974847][ T6794] FAT-fs (loop6): Directory bread(block 66) failed [ 161.194015][ T6794] FAT-fs (loop6): Directory bread(block 67) failed [ 161.300695][ T6794] FAT-fs (loop6): Directory bread(block 68) failed [ 161.307411][ T6794] FAT-fs (loop6): Directory bread(block 69) failed [ 161.316304][ T6794] FAT-fs (loop6): Directory bread(block 70) failed [ 161.323933][ T6794] FAT-fs (loop6): Directory bread(block 71) failed [ 161.330604][ T6794] FAT-fs (loop6): Directory bread(block 72) failed [ 161.337209][ T6794] FAT-fs (loop6): Directory bread(block 73) failed [ 161.341481][ T50] __quota_error: 21 callbacks suppressed [ 161.341499][ T50] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 161.892924][ T6809] loop7: detected capacity change from 0 to 256 [ 162.189844][ T50] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 163.013225][ T6809] FAT-fs (loop7): Directory bread(block 64) failed [ 163.019880][ T6809] FAT-fs (loop7): Directory bread(block 65) failed [ 163.026520][ T6809] FAT-fs (loop7): Directory bread(block 66) failed [ 163.033130][ T6809] FAT-fs (loop7): Directory bread(block 67) failed [ 163.039677][ T6809] FAT-fs (loop7): Directory bread(block 68) failed [ 163.046226][ T6809] FAT-fs (loop7): Directory bread(block 69) failed [ 163.052965][ T6809] FAT-fs (loop7): Directory bread(block 70) failed [ 163.059544][ T6809] FAT-fs (loop7): Directory bread(block 71) failed [ 163.066123][ T6809] FAT-fs (loop7): Directory bread(block 72) failed [ 163.072710][ T6809] FAT-fs (loop7): Directory bread(block 73) failed [ 163.392180][ T6809] bridge_slave_0: left allmulticast mode [ 163.397875][ T6809] bridge_slave_0: left promiscuous mode [ 163.403874][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.418465][ T6809] bridge_slave_1: left allmulticast mode [ 163.424272][ T6809] bridge_slave_1: left promiscuous mode [ 163.430360][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.444634][ T6809] bond0: (slave bond_slave_0): Releasing backup interface [ 163.459494][ T6809] bond0: (slave bond_slave_1): Releasing backup interface [ 163.475208][ T6809] team0: Port device team_slave_0 removed [ 163.486242][ T6809] team0: Port device team_slave_1 removed [ 163.493552][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.501048][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.510883][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.518388][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.528806][ T6809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.936444][ T28] audit: type=1400 audit(1773187239.303:1631): avc: denied { read } for pid=6816 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 163.965867][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.987296][ T28] audit: type=1400 audit(1773187239.343:1632): avc: denied { read append } for pid=6818 comm="syz.6.805" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 163.989587][ T4133] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.012272][ T28] audit: type=1400 audit(1773187239.343:1633): avc: denied { open } for pid=6818 comm="syz.6.805" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.050027][ T28] audit: type=1400 audit(1773187239.353:1634): avc: denied { map } for pid=6818 comm="syz.6.805" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.080932][ T28] audit: type=1400 audit(1773187239.353:1635): avc: denied { execute } for pid=6818 comm="syz.6.805" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.106728][ T6822] loop6: detected capacity change from 0 to 512 [ 164.115193][ T4133] fserror_report: 5 callbacks suppressed [ 164.115208][ T4133] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 164.123611][ T4133] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 164.141577][ T4133] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 164.142827][ T6822] EXT4-fs error (device loop6): __ext4_fill_super:5563: inode #2: comm syz.6.805: iget: checksum invalid [ 164.153297][ T4133] fserror_report: 3 callbacks suppressed [ 164.153308][ T4133] loop1: lost filesystem error report for type 5 error -117 [ 164.165151][ T6822] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 164.172083][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 164.178454][ T6822] EXT4-fs (loop6): get root inode failed [ 164.186202][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 164.186223][ C1] EXT4-fs (loop6): initial error at time 1773187239: __ext4_fill_super:5563: inode 2 [ 164.186265][ C1] EXT4-fs (loop6): last error at time 1773187239: __ext4_fill_super:5563: inode 2 [ 164.186829][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 164.186932][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 164.200371][ T6822] EXT4-fs (loop6): mount failed [ 164.207976][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 164.252379][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 164.281590][ T3311] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 164.315297][ T6837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.810'. [ 164.371604][ T6840] loop1: detected capacity change from 0 to 1024 [ 164.378268][ T6840] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.392610][ T6840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.407673][ T6840] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.418942][ T6840] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.811: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 164.439133][ T6840] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 164.439237][ T6840] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.811: couldn't read orphan inode 11 (err -117) [ 164.448436][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 164.448474][ C0] EXT4-fs (loop1): initial error at time 1773187239: ext4_ext_check_inode:521: inode 11 [ 164.448512][ C0] EXT4-fs (loop1): last error at time 1773187239: ext4_ext_check_inode:521: inode 11 [ 164.486480][ T6840] loop1: lost filesystem error report for type 5 error -117 [ 164.487008][ T6840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.508704][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.811'. [ 165.492579][ T6857] 9p: Bad value for 'rfdno' [ 165.502231][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.815'. [ 165.524704][ T28] audit: type=1400 audit(1773187240.893:1636): avc: denied { read } for pid=6856 comm="syz.4.815" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.570611][ T28] audit: type=1400 audit(1773187240.893:1637): avc: denied { open } for pid=6856 comm="syz.4.815" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.602026][ T28] audit: type=1400 audit(1773187240.923:1638): avc: denied { ioctl } for pid=6856 comm="syz.4.815" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.649206][ T6861] batadv1: entered promiscuous mode [ 165.743476][ T6871] team0: entered promiscuous mode [ 165.743554][ T6873] loop6: detected capacity change from 0 to 256 [ 165.762607][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.775590][ T6873] netlink: 220 bytes leftover after parsing attributes in process `syz.6.822'. [ 165.776707][ T6876] loop7: detected capacity change from 0 to 128 [ 165.789793][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.6.822'. [ 165.834661][ T6876] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.862882][ T6876] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.865618][ T6885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6885 comm=syz.1.828 [ 166.099596][ T6889] loop6: detected capacity change from 0 to 1024 [ 166.236561][ T6329] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.574864][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 166.575086][ T28] audit: type=1400 audit(1773187241.943:1665): avc: denied { setopt } for pid=6888 comm="syz.6.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.759223][ T6889] loop6: detected capacity change from 0 to 128 [ 167.131434][ T6911] loop7: detected capacity change from 0 to 1024 [ 167.143594][ T6911] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 167.190026][ T6911] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.834: lblock 2 mapped to illegal pblock 2 (length 1) [ 167.205870][ T6911] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.219426][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 167.234866][ C0] EXT4-fs (loop7): initial error at time 1773187242: ext4_map_blocks:776: inode 3: block 2 [ 167.244888][ C0] EXT4-fs (loop7): last error at time 1773187242: ext4_map_blocks:776: inode 3: block 2 [ 167.254720][ T6911] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 167.274901][ T6911] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.834: lblock 0 mapped to illegal pblock 48 (length 1) [ 167.285658][ T28] audit: type=1400 audit(1773187242.643:1666): avc: denied { bind } for pid=6921 comm="syz.3.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.293127][ T6911] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.309299][ T6911] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 167.338421][ T6911] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.834: Failed to acquire dquot type 0 [ 167.362628][ T6889] syz.6.826 (6889) used greatest stack depth: 9352 bytes left [ 167.379046][ T6911] loop7: lost filesystem error report for type 5 error -117 [ 167.379184][ T6911] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 167.396250][ T6911] loop7: lost filesystem error report for type 5 error -117 [ 167.396343][ T6911] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.834: mark_inode_dirty error [ 167.397752][ T6935] netlink: 'syz.1.837': attribute type 29 has an invalid length. [ 167.414916][ T6911] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.430307][ T6911] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 167.483432][ T6911] EXT4-fs (loop7): 1 orphan inode deleted [ 167.496076][ T6911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.511595][ T4133] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 167.555566][ T6939] netlink: 'syz.1.837': attribute type 29 has an invalid length. [ 167.562249][ T4133] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.565542][ T4133] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 167.586310][ T6935] netlink: 500 bytes leftover after parsing attributes in process `syz.1.837'. [ 167.598627][ T4133] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 167.646947][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 167.761590][ T28] audit: type=1400 audit(1773187243.123:1667): avc: denied { bind } for pid=6972 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.805340][ T6981] loop6: detected capacity change from 0 to 128 [ 167.857818][ T28] audit: type=1400 audit(1773187243.223:1668): avc: denied { write } for pid=6980 comm="syz.6.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 167.977546][ T6977] lo speed is unknown, defaulting to 1000 [ 168.015122][ T6977] lo speed is unknown, defaulting to 1000 [ 168.031465][ T6992] netlink: 40 bytes leftover after parsing attributes in process `syz.6.848'. [ 168.084734][ T6977] lo speed is unknown, defaulting to 1000 [ 168.091927][ T6329] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.129122][ T6977] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 168.140528][ T6329] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 168.160560][ T6992] netlink: 'syz.6.848': attribute type 3 has an invalid length. [ 168.168492][ T6977] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 168.198711][ T6329] loop7: lost filesystem error report for type 5 error -117 [ 168.199488][ T6329] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 168.319146][ T6329] loop7: lost filesystem error report for type 5 error -117 [ 168.339513][ T6329] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 168.339886][ T6977] lo speed is unknown, defaulting to 1000 [ 168.346999][ T6329] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.388323][ T6977] lo speed is unknown, defaulting to 1000 [ 168.486779][ T6977] lo speed is unknown, defaulting to 1000 [ 168.548136][ T6977] lo speed is unknown, defaulting to 1000 [ 168.597622][ T28] audit: type=1400 audit(1773187243.883:1669): avc: denied { open } for pid=7005 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.663469][ T6992] syz.6.848 (6992) used greatest stack depth: 8904 bytes left [ 168.813395][ T28] audit: type=1400 audit(1773187243.883:1670): avc: denied { kernel } for pid=7005 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.832733][ T28] audit: type=1400 audit(1773187243.883:1671): avc: denied { write } for pid=7005 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.865510][ T6977] lo speed is unknown, defaulting to 1000 [ 168.876518][ T6977] lo speed is unknown, defaulting to 1000 [ 168.883415][ T7035] Illegal XDP return value 4294967274 on prog (id 205) dev N/A, expect packet loss! [ 168.885941][ T6977] lo speed is unknown, defaulting to 1000 [ 168.900261][ T7019] lo speed is unknown, defaulting to 1000 [ 168.906227][ T7020] lo speed is unknown, defaulting to 1000 [ 168.932756][ T7019] lo speed is unknown, defaulting to 1000 [ 168.947350][ T7019] lo speed is unknown, defaulting to 1000 [ 168.954155][ T7019] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 168.964157][ T7019] lo speed is unknown, defaulting to 1000 [ 168.973015][ T7025] loop4: detected capacity change from 0 to 128 [ 168.973286][ T7019] lo speed is unknown, defaulting to 1000 [ 168.985431][ T7019] lo speed is unknown, defaulting to 1000 [ 168.992162][ T7019] lo speed is unknown, defaulting to 1000 [ 168.998114][ T7019] lo speed is unknown, defaulting to 1000 [ 168.999909][ T7044] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 169.023768][ T7019] lo speed is unknown, defaulting to 1000 [ 169.030659][ T7019] lo speed is unknown, defaulting to 1000 [ 169.036853][ T7019] lo speed is unknown, defaulting to 1000 [ 169.052490][ T3314] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 169.084486][ T3314] FAT-fs (loop4): Filesystem has been set read-only [ 169.105248][ T7050] lo speed is unknown, defaulting to 1000 [ 169.114825][ T7050] lo speed is unknown, defaulting to 1000 [ 169.184337][ T7060] loop1: detected capacity change from 0 to 1024 [ 169.191246][ T7058] loop7: detected capacity change from 0 to 256 [ 169.198820][ T7060] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 169.212019][ T7060] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.861: lblock 2 mapped to illegal pblock 2 (length 1) [ 169.227840][ T7060] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.227932][ T7060] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.861: lblock 0 mapped to illegal pblock 48 (length 1) [ 169.237086][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 169.237108][ C0] EXT4-fs (loop1): initial error at time 1773187244: ext4_map_blocks:776: inode 3: block 2 [ 169.237154][ C0] EXT4-fs (loop1): last error at time 1773187244: ext4_map_blocks:776: inode 3: block 2 [ 169.277883][ T7060] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.312409][ T7060] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.861: Failed to acquire dquot type 0 [ 169.319574][ T7058] FAT-fs (loop7): Directory bread(block 64) failed [ 169.321586][ T7060] loop1: lost filesystem error report for type 5 error -117 [ 169.339380][ T7058] FAT-fs (loop7): Directory bread(block 65) failed [ 169.339578][ T7060] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 169.366336][ T7060] loop1: lost filesystem error report for type 5 error -117 [ 169.367470][ T7058] FAT-fs (loop7): Directory bread(block 66) failed [ 169.367486][ T7060] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.861: mark_inode_dirty error [ 169.375425][ T7072] loop4: detected capacity change from 0 to 128 [ 169.375675][ T7072] vfat: Unknown parameter 'ÿÿ' [ 169.393151][ T7060] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 169.406559][ T7058] FAT-fs (loop7): Directory bread(block 67) failed [ 169.422372][ T7058] FAT-fs (loop7): Directory bread(block 68) failed [ 169.428894][ T7058] FAT-fs (loop7): Directory bread(block 69) failed [ 169.438769][ T7060] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 169.440015][ T7058] FAT-fs (loop7): Directory bread(block 70) failed [ 169.449320][ T7060] EXT4-fs (loop1): 1 orphan inode deleted [ 169.462110][ T4133] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 169.462811][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.499258][ T4133] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.499364][ T4133] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 169.528830][ T7058] FAT-fs (loop7): Directory bread(block 71) failed [ 169.535677][ T7058] FAT-fs (loop7): Directory bread(block 72) failed [ 169.542334][ T7058] FAT-fs (loop7): Directory bread(block 73) failed [ 169.641410][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.654522][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 169.669080][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 169.669293][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 169.696903][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 169.697162][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 169.716354][ T3311] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.780928][ T7091] netlink: 68 bytes leftover after parsing attributes in process `syz.6.872'. [ 169.867306][ T7091] loop6: detected capacity change from 0 to 128 [ 169.887993][ T7091] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.890780][ T7087] ipip0: entered promiscuous mode [ 169.905514][ T7091] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.000307][ T5016] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.032510][ T7111] lo speed is unknown, defaulting to 1000 [ 170.048215][ T7113] netlink: 80 bytes leftover after parsing attributes in process `syz.6.879'. [ 170.057595][ T7111] lo speed is unknown, defaulting to 1000 [ 170.067810][ T7113] netlink: 'syz.6.879': attribute type 8 has an invalid length. [ 170.093665][ T7116] loop1: detected capacity change from 0 to 1024 [ 170.104351][ T23] hid-generic 0080:0005:FFFFFFFE.0018: unknown main item tag 0x0 [ 170.112426][ T23] hid-generic 0080:0005:FFFFFFFE.0018: unknown main item tag 0x0 [ 170.131064][ T7116] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 170.149652][ T23] hid-generic 0080:0005:FFFFFFFE.0018: hidraw0: HID v0.03 Device [syz0] on syz1 [ 170.172147][ T7116] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.880: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.188546][ T7118] fido_id[7118]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.201247][ T7116] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.206093][ T7116] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.880: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.215220][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 170.215251][ C1] EXT4-fs (loop1): initial error at time 1773187245: ext4_map_blocks:776: inode 3: block 2 [ 170.215280][ C1] EXT4-fs (loop1): last error at time 1773187245: ext4_map_blocks:776: inode 3: block 2 [ 170.263723][ T7121] loop7: detected capacity change from 0 to 256 [ 170.276371][ T7120] lo speed is unknown, defaulting to 1000 [ 170.282335][ T7123] 8021q: VLANs not supported on wg2 [ 170.287565][ T7116] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.287701][ T7116] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.880: Failed to acquire dquot type 0 [ 170.319375][ T7123] loop6: detected capacity change from 0 to 512 [ 170.326103][ T7120] lo speed is unknown, defaulting to 1000 [ 170.333273][ T7123] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 170.350906][ T7116] loop1: lost filesystem error report for type 5 error -117 [ 170.351067][ T7116] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 170.358249][ T7121] FAT-fs (loop7): Directory bread(block 64) failed [ 170.358706][ T7116] loop1: lost filesystem error report for type 5 error -117 [ 170.387950][ T7121] FAT-fs (loop7): Directory bread(block 65) failed [ 170.389106][ T7123] EXT4-fs (loop6): 1 truncate cleaned up [ 170.409491][ T7116] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.880: mark_inode_dirty error [ 170.411895][ T7123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.429506][ T7121] FAT-fs (loop7): Directory bread(block 66) failed [ 170.457207][ T7116] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.457296][ T7116] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 170.476092][ T7121] FAT-fs (loop7): Directory bread(block 67) failed [ 170.486956][ T7121] FAT-fs (loop7): Directory bread(block 68) failed [ 170.495432][ T7121] FAT-fs (loop7): Directory bread(block 69) failed [ 170.502044][ T7121] FAT-fs (loop7): Directory bread(block 70) failed [ 170.503700][ T7116] EXT4-fs (loop1): 1 orphan inode deleted [ 170.508566][ T7121] FAT-fs (loop7): Directory bread(block 71) failed [ 170.521657][ T7121] FAT-fs (loop7): Directory bread(block 72) failed [ 170.524646][ T7127] loop4: detected capacity change from 0 to 512 [ 170.528159][ T7121] FAT-fs (loop7): Directory bread(block 73) failed [ 170.536790][ T4133] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.575403][ T7116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.595445][ T4133] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 170.608819][ T7127] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.635220][ T7127] EXT4-fs (loop4): mount failed [ 170.700784][ T7136] FAULT_INJECTION: forcing a failure. [ 170.700784][ T7136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.759541][ T7136] CPU: 0 UID: 0 PID: 7136 Comm: syz.4.885 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.759602][ T7136] Tainted: [W]=WARN [ 170.759609][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.759622][ T7136] Call Trace: [ 170.759628][ T7136] [ 170.759636][ T7136] __dump_stack+0x1d/0x30 [ 170.759732][ T7136] dump_stack_lvl+0x95/0xd0 [ 170.759754][ T7136] dump_stack+0x15/0x1b [ 170.759774][ T7136] should_fail_ex+0x263/0x280 [ 170.759798][ T7136] should_fail+0xb/0x20 [ 170.759824][ T7136] should_fail_usercopy+0x1a/0x20 [ 170.759847][ T7136] _copy_from_user+0x1c/0xb0 [ 170.759876][ T7136] ___sys_sendmsg+0xc1/0x1e0 [ 170.759981][ T7136] __x64_sys_sendmsg+0xd4/0x160 [ 170.760013][ T7136] x64_sys_call+0x194c/0x3020 [ 170.760040][ T7136] do_syscall_64+0x12c/0x370 [ 170.760062][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.760086][ T7136] RIP: 0033:0x7fd76a64c799 [ 170.760102][ T7136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.760118][ T7136] RSP: 002b:00007fd7690a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.760136][ T7136] RAX: ffffffffffffffda RBX: 00007fd76a8c5fa0 RCX: 00007fd76a64c799 [ 170.760150][ T7136] RDX: 0000000020040040 RSI: 0000200000000200 RDI: 0000000000000003 [ 170.760212][ T7136] RBP: 00007fd7690a7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.760225][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.760237][ T7136] R13: 00007fd76a8c6038 R14: 00007fd76a8c5fa0 R15: 00007ffd16c69878 [ 170.760301][ T7136] [ 170.995234][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.004695][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 171.023784][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 171.023935][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 171.051179][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 171.051258][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 171.054503][ T7164] lo speed is unknown, defaulting to 1000 [ 171.058596][ T3311] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 171.100134][ T7164] lo speed is unknown, defaulting to 1000 [ 171.198957][ T7187] netlink: 144 bytes leftover after parsing attributes in process `syz.3.889'. [ 171.307868][ T7208] netlink: 'syz.4.901': attribute type 21 has an invalid length. [ 171.315696][ T7208] netlink: 120 bytes leftover after parsing attributes in process `syz.4.901'. [ 171.338317][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.517124][ T7224] netlink: 80 bytes leftover after parsing attributes in process `syz.4.904'. [ 171.526475][ T7224] netlink: 'syz.4.904': attribute type 8 has an invalid length. [ 171.535625][ T3400] hid-generic 0080:0005:FFFFFFFE.0019: unknown main item tag 0x0 [ 171.543494][ T3400] hid-generic 0080:0005:FFFFFFFE.0019: unknown main item tag 0x0 [ 171.551669][ T3400] hid-generic 0080:0005:FFFFFFFE.0019: hidraw0: HID v0.03 Device [syz0] on syz1 [ 171.599115][ T7215] Set syz1 is full, maxelem 65536 reached [ 171.652646][ T7228] siw: device registration error -23 [ 171.682890][ T7228] lo speed is unknown, defaulting to 1000 [ 171.690314][ T7228] lo speed is unknown, defaulting to 1000 [ 172.230358][ T28] kauditd_printk_skb: 266 callbacks suppressed [ 172.230373][ T28] audit: type=1400 audit(1773187247.359:1931): avc: denied { getopt } for pid=7220 comm="syz.7.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.350194][ T28] audit: type=1400 audit(1773187247.359:1932): avc: denied { write } for pid=7220 comm="syz.7.907" path="/32/file0" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 172.357848][ T7227] fido_id[7227]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 172.502842][ T28] audit: type=1400 audit(1773187247.869:1933): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file0" dev="tmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.543140][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.910'. [ 172.554058][ T7232] loop4: detected capacity change from 0 to 256 [ 172.576459][ T7232] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 172.577954][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.910'. [ 172.621951][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 172.640202][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.910'. [ 172.653209][ T50] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 172.657117][ T28] audit: type=1326 audit(1773187248.029:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 172.685928][ T28] audit: type=1326 audit(1773187248.029:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 172.709513][ T28] audit: type=1326 audit(1773187248.029:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 172.771846][ T7244] loop4: detected capacity change from 0 to 1024 [ 172.804895][ T28] audit: type=1326 audit(1773187248.049:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 172.878632][ T7244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.890900][ T28] audit: type=1326 audit(1773187248.049:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 172.896372][ T7246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.914388][ T28] audit: type=1326 audit(1773187248.049:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 172.914415][ T28] audit: type=1326 audit(1773187248.059:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 173.087941][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.119215][ T7256] 9p: Bad value for 'rfdno' [ 173.144651][ T7246] FAULT_INJECTION: forcing a failure. [ 173.144651][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.161238][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.7.918'. [ 173.179565][ T7246] CPU: 0 UID: 0 PID: 7246 Comm: syz.6.915 Tainted: G W syzkaller #0 PREEMPT(full) [ 173.179649][ T7246] Tainted: [W]=WARN [ 173.179657][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.179680][ T7246] Call Trace: [ 173.179685][ T7246] [ 173.179691][ T7246] __dump_stack+0x1d/0x30 [ 173.179733][ T7246] dump_stack_lvl+0x95/0xd0 [ 173.179758][ T7246] dump_stack+0x15/0x1b [ 173.179836][ T7246] should_fail_ex+0x263/0x280 [ 173.179938][ T7246] should_fail+0xb/0x20 [ 173.179958][ T7246] should_fail_usercopy+0x1a/0x20 [ 173.180000][ T7246] _copy_from_user+0x1c/0xb0 [ 173.180028][ T7246] evdev_ioctl_handler+0x3a1/0x16d0 [ 173.180069][ T7246] ? __pfx_evdev_ioctl+0x10/0x10 [ 173.180122][ T7246] evdev_ioctl+0x24/0x30 [ 173.180162][ T7246] __se_sys_ioctl+0xce/0x140 [ 173.180216][ T7246] __x64_sys_ioctl+0x43/0x50 [ 173.180243][ T7246] x64_sys_call+0x1563/0x3020 [ 173.180325][ T7246] do_syscall_64+0x12c/0x370 [ 173.180343][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.180370][ T7246] RIP: 0033:0x7fdb6892c799 [ 173.180384][ T7246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.180473][ T7246] RSP: 002b:00007fdb67387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.180515][ T7246] RAX: ffffffffffffffda RBX: 00007fdb68ba5fa0 RCX: 00007fdb6892c799 [ 173.180607][ T7246] RDX: 0000200000000100 RSI: 0000000080284504 RDI: 0000000000000004 [ 173.180622][ T7246] RBP: 00007fdb67387090 R08: 0000000000000000 R09: 0000000000000000 [ 173.180636][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.180649][ T7246] R13: 00007fdb68ba6038 R14: 00007fdb68ba5fa0 R15: 00007ffeea3d0b88 [ 173.180669][ T7246] [ 173.416311][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.442528][ T7265] ext4: Unknown parameter 'posixacl' [ 173.577931][ T7275] netlink: 'syz.6.922': attribute type 8 has an invalid length. [ 173.739851][ T7277] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.759678][ T7277] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.916161][ T7283] SELinux: failed to load policy [ 173.988882][ T7270] Set syz1 is full, maxelem 65536 reached [ 173.995460][ T7289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 174.005320][ T7289] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 174.017027][ T7289] EXT4-fs (loop1): group descriptors corrupted! [ 174.048061][ T6329] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.650862][ T7305] set_capacity_and_notify: 4 callbacks suppressed [ 174.650876][ T7305] loop4: detected capacity change from 0 to 256 [ 175.086742][ T7306] __nla_validate_parse: 2 callbacks suppressed [ 175.086847][ T7306] netlink: 48 bytes leftover after parsing attributes in process `syz.7.931'. [ 176.057147][ T7305] FAT-fs (loop4): Directory bread(block 64) failed [ 176.063790][ T7305] FAT-fs (loop4): Directory bread(block 65) failed [ 176.070329][ T7305] FAT-fs (loop4): Directory bread(block 66) failed [ 176.076817][ T7305] FAT-fs (loop4): Directory bread(block 67) failed [ 176.083384][ T7305] FAT-fs (loop4): Directory bread(block 68) failed [ 176.089910][ T7305] FAT-fs (loop4): Directory bread(block 69) failed [ 176.096447][ T7305] FAT-fs (loop4): Directory bread(block 70) failed [ 176.102965][ T7305] FAT-fs (loop4): Directory bread(block 71) failed [ 176.109535][ T7305] FAT-fs (loop4): Directory bread(block 72) failed [ 176.116029][ T7305] FAT-fs (loop4): Directory bread(block 73) failed [ 176.186774][ T7304] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.547524][ T7315] netlink: 80 bytes leftover after parsing attributes in process `syz.7.936'. [ 176.565836][ T7319] lo speed is unknown, defaulting to 1000 [ 176.572313][ T7319] lo speed is unknown, defaulting to 1000 [ 176.578273][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.7.936'. [ 176.598116][ T7320] loop6: detected capacity change from 0 to 256 [ 176.598544][ T3393] hid-generic 0080:0005:FFFFFFFE.001A: unknown main item tag 0x0 [ 176.619546][ T3393] hid-generic 0080:0005:FFFFFFFE.001A: unknown main item tag 0x0 [ 176.631781][ T3393] hid-generic 0080:0005:FFFFFFFE.001A: hidraw0: HID v0.03 Device [syz0] on syz1 [ 176.656587][ T7321] fido_id[7321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 176.682292][ T7320] FAT-fs (loop6): Directory bread(block 64) failed [ 176.688965][ T7320] FAT-fs (loop6): Directory bread(block 65) failed [ 176.696330][ T7320] FAT-fs (loop6): Directory bread(block 66) failed [ 176.703075][ T7320] FAT-fs (loop6): Directory bread(block 67) failed [ 176.709863][ T7320] FAT-fs (loop6): Directory bread(block 68) failed [ 176.716508][ T7320] FAT-fs (loop6): Directory bread(block 69) failed [ 176.737725][ T7320] FAT-fs (loop6): Directory bread(block 70) failed [ 176.745223][ T7325] loop7: detected capacity change from 0 to 128 [ 176.752374][ T7325] FAT-fs (loop7): invalid media value (0x00) [ 176.758378][ T7325] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 176.767797][ T7320] FAT-fs (loop6): Directory bread(block 71) failed [ 176.774709][ T7320] FAT-fs (loop6): Directory bread(block 72) failed [ 176.781615][ T7325] FAT-fs (loop7): Can't find a valid FAT filesystem [ 176.788396][ T7320] FAT-fs (loop6): Directory bread(block 73) failed [ 176.868790][ T7327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.940'. [ 176.930352][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.6.940'. [ 176.939302][ T7327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.940'. [ 177.391418][ T7352] netlink: 'syz.3.948': attribute type 1 has an invalid length. [ 177.401620][ T7352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.948'. [ 177.430149][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 177.430162][ T28] audit: type=1400 audit(1773187252.779:2117): avc: denied { getopt } for pid=7351 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.447110][ T7357] 8021q: VLANs not supported on wg2 [ 177.481540][ T7357] loop4: detected capacity change from 0 to 512 [ 177.497220][ T7357] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.510061][ T7357] EXT4-fs (loop4): 1 truncate cleaned up [ 177.518434][ T7357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.575823][ T7363] lo speed is unknown, defaulting to 1000 [ 177.589202][ T7363] lo speed is unknown, defaulting to 1000 [ 178.059274][ T7373] netlink: 20 bytes leftover after parsing attributes in process `syz.7.952'. [ 178.334615][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.7.952'. [ 178.380902][ T7379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7379 comm=syz.1.954 [ 178.394616][ T28] audit: type=1400 audit(1773187253.759:2118): avc: denied { watch_reads } for pid=7378 comm="syz.1.954" path="/184" dev="tmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.447591][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.7.952'. [ 178.472252][ T7379] openvswitch: netlink: Flow key attr not present in new flow. [ 178.506033][ T28] audit: type=1400 audit(1773187253.839:2119): avc: denied { create } for pid=7378 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 178.596141][ T28] audit: type=1326 audit(1773187253.859:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 178.711375][ T7396] lo speed is unknown, defaulting to 1000 [ 178.743571][ T28] audit: type=1326 audit(1773187253.859:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 178.773151][ T7396] lo speed is unknown, defaulting to 1000 [ 178.848568][ T28] audit: type=1326 audit(1773187253.859:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 178.903748][ T7403] lo speed is unknown, defaulting to 1000 [ 178.929972][ T7403] lo speed is unknown, defaulting to 1000 [ 178.954519][ T28] audit: type=1326 audit(1773187253.859:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 179.026419][ T28] audit: type=1326 audit(1773187253.859:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 179.051939][ T28] audit: type=1326 audit(1773187253.859:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 179.075948][ T28] audit: type=1326 audit(1773187253.859:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 179.192069][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.258373][ T7424] lo speed is unknown, defaulting to 1000 [ 179.269054][ T7424] lo speed is unknown, defaulting to 1000 [ 179.269339][ T7428] dummy0: entered promiscuous mode [ 179.281075][ T7428] dummy0: entered allmulticast mode [ 179.352119][ T7440] 9p: Bad value for 'rfdno' [ 179.519737][ T7452] netlink: 'syz.4.978': attribute type 13 has an invalid length. [ 179.577342][ T7454] loop6: detected capacity change from 0 to 1024 [ 179.611187][ T7451] netlink: 'syz.4.978': attribute type 13 has an invalid length. [ 179.621662][ T7454] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.904566][ T7454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.234878][ T7454] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.260152][ T7459] loop1: detected capacity change from 0 to 512 [ 181.325441][ T7462] loop1: detected capacity change from 0 to 128 [ 181.335461][ T7454] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.980: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 181.359027][ T7454] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 181.369413][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 181.380268][ T7454] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.980: couldn't read orphan inode 11 (err -117) [ 181.384939][ C0] EXT4-fs (loop6): initial error at time 1773187256: ext4_ext_check_inode:521: inode 11 [ 181.396734][ T7454] loop6: lost filesystem error report for type 5 error -117 [ 181.406385][ C0] EXT4-fs (loop6): last error at time 1773187256: ext4_ext_check_inode:521: inode 11 [ 181.425783][ T7462] FAT-fs (loop1): Directory bread(block 32) failed [ 181.432374][ T7462] FAT-fs (loop1): Directory bread(block 33) failed [ 181.438936][ T7462] FAT-fs (loop1): Directory bread(block 34) failed [ 181.496641][ T7462] FAT-fs (loop1): Directory bread(block 35) failed [ 181.510729][ T7454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.524051][ T7462] FAT-fs (loop1): Directory bread(block 36) failed [ 181.540147][ T7462] FAT-fs (loop1): Directory bread(block 37) failed [ 181.548515][ T7462] FAT-fs (loop1): Directory bread(block 38) failed [ 181.571173][ T7454] __nla_validate_parse: 3 callbacks suppressed [ 181.571259][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.6.980'. [ 181.588157][ T7462] FAT-fs (loop1): Directory bread(block 39) failed [ 181.602603][ T7462] FAT-fs (loop1): Directory bread(block 40) failed [ 181.609530][ T7462] FAT-fs (loop1): Directory bread(block 41) failed [ 181.806378][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.223158][ T7480] loop1: detected capacity change from 0 to 164 [ 182.276787][ T7480] ISOFS: unable to read i-node block [ 182.429167][ T7482] lo speed is unknown, defaulting to 1000 [ 182.440411][ T28] kauditd_printk_skb: 26456 callbacks suppressed [ 182.440423][ T28] audit: type=1326 audit(1773187257.809:28580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb0468dc799 code=0x7ffc0000 [ 182.469850][ T7482] lo speed is unknown, defaulting to 1000 [ 182.505119][ T28] audit: type=1326 audit(1773187257.809:28581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0468d6517 code=0x7ffc0000 [ 182.539282][ T28] audit: type=1326 audit(1773187257.809:28582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb04687db19 code=0x7ffc0000 [ 182.543220][ T7489] lo speed is unknown, defaulting to 1000 [ 182.565012][ T28] audit: type=1326 audit(1773187257.809:28583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0468d6517 code=0x7ffc0000 [ 182.568835][ T7489] lo speed is unknown, defaulting to 1000 [ 182.592324][ T28] audit: type=1326 audit(1773187257.809:28584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb04687db19 code=0x7ffc0000 [ 182.635964][ T28] audit: type=1326 audit(1773187257.809:28585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0468d6517 code=0x7ffc0000 [ 182.666559][ T28] audit: type=1326 audit(1773187257.809:28586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb04687db19 code=0x7ffc0000 [ 182.699566][ T28] audit: type=1326 audit(1773187257.809:28587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0468d6517 code=0x7ffc0000 [ 182.761470][ T3400] lo speed is unknown, defaulting to 1000 [ 182.774909][ T28] audit: type=1326 audit(1773187257.809:28588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb04687db19 code=0x7ffc0000 [ 182.801552][ T28] audit: type=1326 audit(1773187257.809:28589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0468d6517 code=0x7ffc0000 [ 182.804011][ T7500] macvtap1: entered promiscuous mode [ 182.844420][ T7500] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 182.890951][ T7500] team0: Device macvtap1 is already an upper device of the team interface [ 182.962436][ T7505] loop6: detected capacity change from 0 to 1024 [ 182.975096][ T7505] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.992518][ T7505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.009885][ T7505] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.132016][ T7505] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.996: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 183.169508][ T7505] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.169599][ T7505] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.996: couldn't read orphan inode 11 (err -117) [ 183.190473][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 183.190490][ C1] EXT4-fs (loop6): initial error at time 1773187258: ext4_ext_check_inode:521: inode 11 [ 183.190534][ C1] EXT4-fs (loop6): last error at time 1773187258: ext4_ext_check_inode:521: inode 11 [ 183.222355][ T7515] netlink: 80 bytes leftover after parsing attributes in process `syz.3.997'. [ 183.286109][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.997'. [ 183.757199][ T7505] loop6: lost filesystem error report for type 5 error -117 [ 183.761243][ T7505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.962655][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.6.996'. [ 184.248410][ T7532] 9p: Bad value for 'rfdno' [ 184.286174][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1002'. [ 184.325398][ T7507] Set syz1 is full, maxelem 65536 reached [ 184.364377][ T7537] lo speed is unknown, defaulting to 1000 [ 184.383840][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.475751][ T7545] FAULT_INJECTION: forcing a failure. [ 184.475751][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.493445][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.6.1005 Tainted: G W syzkaller #0 PREEMPT(full) [ 184.493475][ T7545] Tainted: [W]=WARN [ 184.493481][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.493494][ T7545] Call Trace: [ 184.493500][ T7545] [ 184.493508][ T7545] __dump_stack+0x1d/0x30 [ 184.493534][ T7545] dump_stack_lvl+0x95/0xd0 [ 184.493584][ T7545] dump_stack+0x15/0x1b [ 184.493603][ T7545] should_fail_ex+0x263/0x280 [ 184.493659][ T7545] should_fail+0xb/0x20 [ 184.493679][ T7545] should_fail_usercopy+0x1a/0x20 [ 184.493756][ T7545] _copy_from_user+0x1c/0xb0 [ 184.493783][ T7545] do_fcntl+0x667/0xf80 [ 184.493888][ T7545] __se_sys_fcntl+0xb1/0x120 [ 184.493919][ T7545] __x64_sys_fcntl+0x43/0x50 [ 184.493961][ T7545] x64_sys_call+0x2844/0x3020 [ 184.493983][ T7545] do_syscall_64+0x12c/0x370 [ 184.494077][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.494107][ T7545] RIP: 0033:0x7fdb6892c799 [ 184.494122][ T7545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.494167][ T7545] RSP: 002b:00007fdb67387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 184.494185][ T7545] RAX: ffffffffffffffda RBX: 00007fdb68ba5fa0 RCX: 00007fdb6892c799 [ 184.494197][ T7545] RDX: 00002000000001c0 RSI: 0000000000000026 RDI: 0000000000000003 [ 184.494210][ T7545] RBP: 00007fdb67387090 R08: 0000000000000000 R09: 0000000000000000 [ 184.494290][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.494360][ T7545] R13: 00007fdb68ba6038 R14: 00007fdb68ba5fa0 R15: 00007ffeea3d0b88 [ 184.494376][ T7545] [ 184.888893][ T7557] loop7: detected capacity change from 0 to 512 [ 184.897132][ T7557] EXT4-fs: Ignoring removed nobh option [ 184.910455][ T7557] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 184.951864][ T7557] EXT4-fs (loop7): 1 truncate cleaned up [ 184.967735][ T7557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.997972][ T7566] 8021q: VLANs not supported on wg2 [ 185.006781][ T7566] loop6: detected capacity change from 0 to 512 [ 185.094793][ T7566] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 185.152755][ T7566] EXT4-fs (loop6): 1 truncate cleaned up [ 185.158925][ T7566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.163458][ T6329] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.682174][ T7602] 9p: Bad value for 'rfdno' [ 186.697515][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1016'. [ 186.702888][ T7597] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1020'. [ 186.797233][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1020'. [ 186.982355][ T5016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.059975][ T7612] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1026'. [ 187.192636][ T7595] Set syz1 is full, maxelem 65536 reached [ 188.055821][ T7627] dvmrp6: entered allmulticast mode [ 188.176147][ T7637] lo speed is unknown, defaulting to 1000 [ 188.235108][ T7639] lo speed is unknown, defaulting to 1000 [ 188.341677][ T7645] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1038'. [ 188.364231][ T28] kauditd_printk_skb: 1173 callbacks suppressed [ 188.364245][ T28] audit: type=1400 audit(1773187263.719:29761): avc: denied { mount } for pid=7644 comm="syz.7.1038" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.402468][ T28] audit: type=1400 audit(1773187263.719:29762): avc: denied { search } for pid=7644 comm="syz.7.1038" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.424714][ T28] audit: type=1400 audit(1773187263.719:29763): avc: denied { search } for pid=7644 comm="syz.7.1038" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.472898][ T7651] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1040'. [ 188.476306][ T7657] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1043'. [ 188.523470][ T7659] loop7: detected capacity change from 0 to 4096 [ 188.542576][ T7653] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1041'. [ 188.552267][ T7659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.581364][ T7660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 188.603501][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1044'. [ 188.644696][ T7659] EXT4-fs (loop7): shut down requested (2) [ 188.651647][ T28] audit: type=1400 audit(1773187264.019:29764): avc: denied { ioctl } for pid=7658 comm="syz.7.1044" path="/62/file1/bus" dev="loop7" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 188.668639][ T7649] Set syz1 is full, maxelem 65536 reached [ 188.721314][ T7672] syzkaller0: entered promiscuous mode [ 188.726891][ T7672] syzkaller0: entered allmulticast mode [ 188.748121][ T6329] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.801224][ T7674] loop6: detected capacity change from 0 to 128 [ 188.822102][ T7674] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.859869][ T7674] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.958584][ T5016] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.981874][ T7698] ================================================================== [ 188.989957][ T7698] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 188.997530][ T7698] [ 188.999838][ T7698] write to 0xffff888119df4b10 of 8 bytes by task 7696 on cpu 0: [ 189.007453][ T7698] mas_wr_store_entry+0x14b0/0x2ed0 [ 189.012636][ T7698] mas_store_prealloc+0x72e/0xa70 [ 189.017660][ T7698] commit_merge+0x6a1/0x720 [ 189.022171][ T7698] vma_expand+0x315/0x510 [ 189.026483][ T7698] vma_merge_new_range+0x29c/0x320 [ 189.031573][ T7698] mmap_region+0x1176/0x2050 [ 189.036139][ T7698] do_mmap+0x9b2/0xbd0 [ 189.040198][ T7698] vm_mmap_pgoff+0x183/0x2d0 [ 189.044783][ T7698] ksys_mmap_pgoff+0xc1/0x310 [ 189.049444][ T7698] x64_sys_call+0x14df/0x3020 [ 189.054121][ T7698] do_syscall_64+0x12c/0x370 [ 189.058693][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.064569][ T7698] [ 189.066868][ T7698] read to 0xffff888119df4b10 of 8 bytes by task 7698 on cpu 1: [ 189.074384][ T7698] mas_state_walk+0x2f5/0x650 [ 189.079055][ T7698] mas_walk+0x60/0x150 [ 189.083106][ T7698] lock_vma_under_rcu+0xc9/0x210 [ 189.088020][ T7698] do_user_addr_fault+0x232/0x1050 [ 189.093116][ T7698] exc_page_fault+0x62/0xa0 [ 189.097603][ T7698] asm_exc_page_fault+0x26/0x30 [ 189.102430][ T7698] [ 189.104738][ T7698] value changed: 0x00007fdb67345fff -> 0x00007fdb67324fff [ 189.111822][ T7698] [ 189.114119][ T7698] Reported by Kernel Concurrency Sanitizer on: [ 189.120244][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.6.1057 Tainted: G W syzkaller #0 PREEMPT(full) [ 189.131077][ T7698] Tainted: [W]=WARN [ 189.134859][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.144888][ T7698] ==================================================================