last executing test programs: 2m52.465432705s ago: executing program 2 (id=129): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="882d96000400000000000000", 0xc}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r6, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@bh}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@data_journal}, {@commit}]}, 0x0, 0x5a3, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000008061121c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0xfc, 0x0, 0x0, 0x7, 0x14c5f0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x2}, 0x104e26, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0xfffffffe, 0x0, 0x20000008}, 0x0, 0xa, r3, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket(0x2a, 0x4, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) 2m51.289541643s ago: executing program 2 (id=138): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0xa, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 2m51.119886725s ago: executing program 2 (id=139): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00006b0000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x109, 0xc, 0x4) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2m51.059576472s ago: executing program 2 (id=140): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") timer_create(0x0, 0x0, &(0x7f0000bbdffc)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xc3) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x3, 0xffffffff, 0x0, "d9b06974b5ebe6e7562985b06100", 0x0, 0x3}) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) pselect6(0x40, &(0x7f0000000100)={0xffffffffffffffff, 0x200, 0x3, 0xfffffffffffffffd, 0x0, 0x5, 0xfdfffffffffffffc, 0x4}, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000100)={0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000500)=0xf) r4 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000680)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe4IH\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\x96\x9ch\xbc\xedi\x99\xf8\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200009078000003039600"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01cfb98940000000002513000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 2m30.383603916s ago: executing program 1 (id=356): perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1ff, 0x2}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8000000000000001) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x1048a, 0x4000, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x400000, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) 2m30.383315516s ago: executing program 33 (id=356): perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1ff, 0x2}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8000000000000001) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x1048a, 0x4000, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x400000, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) 4.876555996s ago: executing program 5 (id=1885): syz_open_dev$tty1(0xc, 0x4, 0x2) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0xd8}, 0x0, 0x0, 0x0, 0x0) 4.661520148s ago: executing program 4 (id=1890): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xf5af}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 4.451442371s ago: executing program 3 (id=1896): mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) 4.44341201s ago: executing program 3 (id=1897): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x21010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9}, 0x110c22, 0x2004d, 0x800020, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0xa1, 0xdd, 0x6, 0x0, 0x0, 0x40902, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x20, 0x2, 0x9, 0x3, 0xffff, 0x10, 0x9, 0x0, 0x7, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 3.880113554s ago: executing program 5 (id=1898): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e99", 0x28}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247", 0xad}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x161}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede912815299a3313b02b4af73d57a5d0a7c01e400c4782c9", 0xb2}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f", 0xc8}, {&(0x7f0000000900)="8aa5f18a9e39a6b83142d616b442ebe74739f0c388058ddd3b1bcc32f762f6cf494878cb1052a22cf9", 0x29}, {&(0x7f0000000500)="e13427da285b20399111b0413703b3f1f8fe", 0x12}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.671148547s ago: executing program 4 (id=1899): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000080)=0x10) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="de06000000000000000000000000000000000000fa1ca111d9c9f6a07b9c52cd29afc9be0c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=0x0], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000003c0), 0x0, 0x2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x2b, &(0x7f00000005c0)="dc4ce88479f3d56080d6ce3c270b1714df085394bea5f4462add3c0c9f235ec19c71cde4ac159287db6e66f3a2336536ecd52f5b911b881ff6c92c19b119e7759e25a00df16b0b08e35b3cf8e6d4ac49530a3d1c2eb1b1ca1297ee3168a166e4249e16d460aa32bc6169bf9d59f385fb5bcebde78f5c199f10038a5554e542a05ce13bb96d1f666a0e7ed3f7de335b32db62cd1825813ae69710db373b4326ff651e66205e7be9cdcf565a48b64c8295d81e6da4abf6a91cb14cdabb38b0182392a00b4ceb3df0aea524c0d89645caa29513279e9d014dc2e0f6e1f2daee654d", 0xe0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf2509000000050008001a00feff0800010001000000050007"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x64000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') 3.543726159s ago: executing program 6 (id=1901): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @tid=r1}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r4) inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r4, 0x8, r5) inotify_add_watch(r4, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x4403, &(0x7f0000000280)={[{@nolazytime}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@sb={'sb', 0x3d, 0x2}}, {@resgid}, {@debug}, {@norecovery}], [{@smackfsroot={'smackfsroot', 0x3d, 'V+@:'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+*\'/'}}, {@context={'context', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x28}}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r2}}, {@context={'context', 0x3d, 'sysadm_u'}}]}, 0x2, 0x484, &(0x7f0000001500)="$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") 3.436914815s ago: executing program 6 (id=1902): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @random="a6e286036e89", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) 3.436470955s ago: executing program 3 (id=1903): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x2000006, 0x2, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r2 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfcf2, 0x40c0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) 3.352003357s ago: executing program 0 (id=1905): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x0, 0xfffffffffffff801}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000280}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffc, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x8000) 3.131782657s ago: executing program 6 (id=1906): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x0, 0xfffffffffffff801}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000280}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffc, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x8000) 3.027605324s ago: executing program 5 (id=1907): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f0000000280)='./control/file0\x00', 0x80040, 0x1ea) rmdir(&(0x7f00000003c0)='./control\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x8, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r6, 0x4000}, {r6, 0x9100}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000000008000900d07f80d2"], 0x184}}, 0x4000034) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000010c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) 2.806188715s ago: executing program 0 (id=1908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.801399243s ago: executing program 4 (id=1909): madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@data_ordered}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {@init_itable}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) 2.384758311s ago: executing program 4 (id=1910): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @random="a6e286036e89", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) 2.384052031s ago: executing program 3 (id=1911): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x15, 0x0, 0x2, 0x5}, {0x6, 0x73, 0xa, 0xfffffff6}, {0x34, 0x7, 0x8, 0x372}, {0x6, 0x2, 0x4, 0xd3a8}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2000000000000014}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) 2.230745407s ago: executing program 0 (id=1913): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYRESDEC=r4], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = memfd_secret(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000140)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="64030000fd9be738cb06b34acb6a6c6cff874a53ddb9db4b0c71ecf012da38f96e5af30ec5e30bbedd1c3e695a9d40d3ef1fea5176620d682ee6918c25d79e9a51bff068e7d1fbf19ada658b6b66e45b595f8f9104611ff61de870da6151a17ee9c842280b4370c8c959960b0f69268c10da329c761ce55afe42646080d2428c839a", @ANYRES16=r9, @ANYBLOB="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"], 0x364}, 0x1, 0x0, 0x0, 0x40}, 0x4) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r6) socket$nl_route(0x10, 0x3, 0x0) r11 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20002, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r11, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f00000001c0)={0x0, 0x6, 0x8, 0xfffffffd, 0x0, "8100"}) r13 = syz_open_pts(r12, 0x40601) ioctl$TIOCCONS(r13, 0x541d) 2.229253326s ago: executing program 6 (id=1914): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @random="a6e286036e89", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) 2.213229573s ago: executing program 6 (id=1915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd70800180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004001be1bfdce8ef907f77b9580610bda36af562e802a2d44ea7aaba62c4a6d66676ae5e4d38fa41b000000004e5e7468c60df4bf84265b28f28519f18f5abf3dd3276a38fbb3c128edf9840d23796f1f73b0c3844ee1eafa5eef0c222df2dcc19657830df3c2535fbd27a747c6c3c2546d7a9a2fd069fabeb3449acd14ba61784256b422aa5461c613f7b8ad2b72748d6c9e0302a1b04e02e76a66ae52c5e0dc7aaf464df6a5009916d52b69c9c391514413777e09aca951667127c9079e0d83d606edae70d3582c109cd0c7904284387b2f98eca100f129ab5353be5b79766effff0265386b5fdd4b4c35bbd08df99b8f5e2066ad4fb24e76bc9c32204f3e5f0a8fb009256c9f8002f70bd3063087b770b38ec5f24627f3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200009078000003039600"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01cfb98940000000002513000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) 2.100884948s ago: executing program 5 (id=1916): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x400, 0xffdffff8, 0xf46, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000740)=0x1004af) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6, 0xfffffffe, 0x5, 0x60, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x5}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0800883e401700c800660000401190780a010102ac141412862f0000000301065153883d000c32012d50b00800000000000000a95d8faeb05d2496db00010aab3ef35cf4797c8f86000000020706af38c6c00604fdff050a8b8290ce051b1b24050e8e0d1c47a6076a830943d6c244010000e000000100000fffffffffff000000000000000900000008e00000010000000994040000891b517f000001ac141442ac1414aaac14143b7f000001e000000100004e264e200008907851288dddf09ada82a7d6b8123efc0d66ac0d006728718ee3d7"], 0xcc) unshare(0x24040400) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0x6}, 0x3140, 0x8000000000000a88, 0x3, 0x5, 0x0, 0x3c, 0xfbff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') setresuid(0x0, 0xee01, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000140)=0x9, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) 1.338500788s ago: executing program 3 (id=1917): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="3f0729bd7009000000250100a1ff"], 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e99", 0x28}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247", 0xad}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30cb1", 0x161}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede912815299a3313b02b4af73d57a5d0a7c01e400c4782c9", 0xb2}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f", 0xc8}, {&(0x7f0000000900)="8aa5f18a9e39a6b83142d616b442ebe74739f0c388058ddd3b1bcc32f762f6cf494878cb1052a22cf9", 0x29}, {&(0x7f0000000500)="e13427da285b20399111b0413703b3f1f8fe", 0x12}], 0x3}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.266997092s ago: executing program 4 (id=1918): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000018c0)='./file0/file0\x00', 0x18000, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYBLOB, @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB='mpol=bi', @ANYRESOCT=r0]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b80000001900010000000000000001000a010102000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffff000000000000000300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4044084}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r4, 0x0, 0x0, 0x8800000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x40010) set_mempolicy_home_node(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x81, @empty, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x1, 0x4}}}, 0x118) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300c046, &(0x7f0000001c00), 0x11, 0x567, &(0x7f0000000180)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r9, 0x0, r9, &(0x7f00000000c0)=0xaec, 0xd, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4010, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x225}, 0x0, 0x7fffffffffffffff, 0xb, 0x7, 0x2, 0x20005, 0xb, 0x0, 0x8, 0x0, 0x2680}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.21527753s ago: executing program 5 (id=1919): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x0, 0xfffffffffffff801}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000280}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffc, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x8000) 677.43783ms ago: executing program 5 (id=1920): perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1ff, 0x2}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000000000000001) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x1048a, 0x4000, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x400000, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xa4000061) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r4, 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000894) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 451.697ms ago: executing program 0 (id=1921): mount$9p_unix(&(0x7f0000003600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x301200a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0xa00a, 0x0) 451.19236ms ago: executing program 3 (id=1922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000500)="3b7e00d091e0760962bd8a6810bb97d46c7444c6b2768f966a604b1d5ab443e8305cc7063e18c53e9024b2e004648facaa6b2f505bc421f29d73e60ecd53e32c4f25a6775d14401f21bc5612893935befde31bae9cf06ff97b00095de1e512114b231bf943411d378c4e6a697720fc3faaf8a3a6b3fe3a1ea95d74e158aa5d6a1a0d18ab329c1d38ab70f00ef976f1dbff86f5e83fbd7d35ea860c15865b41d59c6a65868179bfa3efa6fe2dd9efacdcbf0f1b162dda1bf27b6f3501f40dc9993c2e2d9f", 0xc4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x1, {0x2, 0x0, 0x1}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28080008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x275ceceeffca88f7}, 0x881) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_DATA={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 443.027378ms ago: executing program 0 (id=1923): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0xfc4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001980)=@nat={'nat\x00', 0x1b, 0x5, 0x1460, 0x0, 0x0, 0xffffffff, 0xf8, 0xf8, 0x13c8, 0x13c8, 0xffffffff, 0x13c8, 0x13c8, 0x5, &(0x7f0000000400), {[{{@ip={@broadcast, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'veth0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x20}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x0, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @multicast1, @icmp_id=0x64, @port=0x4e22}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "bf92"}}, @common=@inet=@l2tp={{0x30}, {0x1, 0x3, 0x2, 0x1, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @private=0xa010102, @multicast2, @gre_key=0x8, @port=0x4e20}}}}, {{@uncond, 0x0, 0x10a0, 0x10d8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0xff, {0x5feee7c4}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @remote, @private=0xa010100, @gre_key=0xa564, @port=0x4e23}}}}, {{@ip={@private=0xe, @remote, 0x0, 0xff0000ff, 'gretap0\x00', 'sit0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @multicast2, @rand_addr=0x64010100, @icmp_id=0x68, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x14c0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 0s ago: executing program 0 (id=1924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100fcffffff06000000ffffffff00000000000000000000e9234d00000000000000000000000000000000000005f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000009000000000000000800000000000000000000000000000000000000000000000000000000002000010000000000000009000000000000008000000000000000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x4080) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x6, 0x800, 0x8d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', r2, 0x4000, r0}, 0x18) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) epoll_create1(0x80000) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) getitimer(0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='map=off,session=0x0000000000000017\x00sbsector=0x0000000100000001,sbsector=0x0000000000000005,session=0x0000000000000062,nojolietAiocharset=cp865,iocharset=cp737,session=0x0000000000000058,showassoc,mode=0xffffffaffffffffe,norock,\x00'], 0xfa, 0x69f, &(0x7f0000000840)="$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") kernel console output (not intermixed with test programs): ): avc: denied { setopt } for pid=6229 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.511766][ T28] audit: type=1400 audit(1772032601.766:552): avc: denied { mount } for pid=6225 comm="syz.5.792" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 106.987148][ T6259] loop3: detected capacity change from 0 to 512 [ 107.404184][ T6266] xt_hashlimit: size too large, truncated to 1048576 [ 108.313586][ T6307] siw: device registration error -23 [ 109.825299][ T6347] loop3: detected capacity change from 0 to 512 [ 110.234183][ T6348] siw: device registration error -23 [ 110.246205][ T6348] loop4: detected capacity change from 0 to 512 [ 110.716545][ T6362] loop4: detected capacity change from 0 to 512 [ 110.842925][ T6362] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.897369][ T6362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.911340][ T6367] loop5: detected capacity change from 0 to 128 [ 110.918014][ T6367] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.932724][ T6367] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.954874][ T6362] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.003456][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 111.003470][ T28] audit: type=1400 audit(1772032606.586:555): avc: denied { remove_name } for pid=6361 comm="syz.4.843" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.046625][ T28] audit: type=1400 audit(1772032606.586:556): avc: denied { rename } for pid=6361 comm="syz.4.843" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.068772][ T28] audit: type=1400 audit(1772032606.586:557): avc: denied { reparent } for pid=6361 comm="syz.4.843" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.070105][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.589457][ T28] audit: type=1400 audit(1772032607.146:558): avc: denied { getopt } for pid=6377 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.624549][ T6380] loop4: detected capacity change from 0 to 512 [ 111.646818][ T6380] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 111.760038][ T6380] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.849: bg 0: block 255: padding at end of block bitmap is not set [ 111.800662][ T6380] loop4: lost filesystem error report for type 5 error -117 [ 111.800948][ T6380] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 111.817141][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 111.817158][ C0] EXT4-fs (loop4): initial error at time 1772032607: ext4_validate_block_bitmap:441 [ 111.817180][ C0] EXT4-fs (loop4): last error at time 1772032607: ext4_validate_block_bitmap:441 [ 111.928923][ T6380] loop4: lost filesystem error report for type 5 error -117 [ 111.929655][ T6380] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.849: invalid indirect mapped block 1 (level 1) [ 111.950567][ T6380] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.951325][ T6380] EXT4-fs (loop4): 1 truncate cleaned up [ 111.996136][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.852'. [ 112.015670][ T6380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.029922][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.277213][ T6399] netlink: 220 bytes leftover after parsing attributes in process `syz.4.857'. [ 112.572639][ T6406] Invalid logical block size (3840) [ 112.789505][ T6417] netlink: 220 bytes leftover after parsing attributes in process `syz.5.861'. [ 113.284229][ T6423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.389113][ T6422] lo speed is unknown, defaulting to 1000 [ 113.395591][ T6433] FAULT_INJECTION: forcing a failure. [ 113.395591][ T6433] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 113.413025][ T6422] lo speed is unknown, defaulting to 1000 [ 113.441489][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.0.868 Tainted: G W syzkaller #0 PREEMPT(full) [ 113.441524][ T6433] Tainted: [W]=WARN [ 113.441531][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.441595][ T6433] Call Trace: [ 113.441600][ T6433] [ 113.441607][ T6433] __dump_stack+0x1d/0x30 [ 113.441634][ T6433] dump_stack_lvl+0x95/0xd0 [ 113.441700][ T6433] dump_stack+0x15/0x1b [ 113.441722][ T6433] should_fail_ex+0x263/0x280 [ 113.441758][ T6433] should_fail_alloc_page+0xf2/0x100 [ 113.441783][ T6433] __alloc_frozen_pages_noprof+0x108/0x360 [ 113.441810][ T6433] alloc_pages_mpol+0xb3/0x260 [ 113.441845][ T6433] alloc_pages_noprof+0x8f/0x130 [ 113.441868][ T6433] pte_alloc_one+0x1e/0xd0 [ 113.441923][ T6433] __pte_alloc+0x32/0x2c0 [ 113.441948][ T6433] handle_mm_fault+0x204e/0x3020 [ 113.442045][ T6433] ? mt_find+0x291/0x3d0 [ 113.442069][ T6433] ? lock_mm_and_find_vma+0x8b/0x440 [ 113.442102][ T6433] do_user_addr_fault+0x3fd/0x1050 [ 113.442131][ T6433] exc_page_fault+0x62/0xa0 [ 113.442176][ T6433] asm_exc_page_fault+0x26/0x30 [ 113.442199][ T6433] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 113.442250][ T6433] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 113.442269][ T6433] RSP: 0018:ffffc9000a4afdf0 EFLAGS: 00050206 [ 113.442288][ T6433] RAX: ffff888103891af8 RBX: 0000000000000068 RCX: 0000000000000068 [ 113.442303][ T6433] RDX: 0000000000000000 RSI: ffffc9000a4afe28 RDI: 0000200000000000 [ 113.442318][ T6433] RBP: 0000000000000000 R08: 00000000000009c7 R09: 0000000000000000 [ 113.442411][ T6433] R10: 0001c9000a4afe28 R11: 0001c9000a4afe8f R12: 0000200000000068 [ 113.442427][ T6433] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffffc9000a4afe28 [ 113.442449][ T6433] _copy_to_user+0x7c/0xa0 [ 113.442499][ T6433] __se_sys_semctl+0x1c0/0x2d0 [ 113.442524][ T6433] __x64_sys_semctl+0x55/0x70 [ 113.442548][ T6433] x64_sys_call+0x1f85/0x3020 [ 113.442634][ T6433] do_syscall_64+0x12c/0x370 [ 113.442716][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.442739][ T6433] RIP: 0033:0x7f2932dac629 [ 113.442753][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.442768][ T6433] RSP: 002b:00007f29317ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 113.442784][ T6433] RAX: ffffffffffffffda RBX: 00007f2933025fa0 RCX: 00007f2932dac629 [ 113.442870][ T6433] RDX: 0000000000000012 RSI: 0000000000000003 RDI: 0000000000000000 [ 113.442884][ T6433] RBP: 00007f29317ff090 R08: 0000000000000000 R09: 0000000000000000 [ 113.442897][ T6433] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.442909][ T6433] R13: 00007f2933026038 R14: 00007f2933025fa0 R15: 00007ffd72b9c938 [ 113.443006][ T6433] [ 113.749271][ T6438] SET target dimension over the limit! [ 113.918924][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.872'. [ 114.470528][ T28] audit: type=1400 audit(1772032610.046:559): avc: denied { ioctl } for pid=6463 comm="syz.5.879" path="socket:[15270]" dev="sockfs" ino=15270 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.566582][ T6469] SET target dimension over the limit! [ 115.174594][ T28] audit: type=1400 audit(1772032610.746:560): avc: denied { read } for pid=6495 comm="syz.5.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.219739][ T6499] SET target dimension over the limit! [ 115.219852][ T6501] loop5: detected capacity change from 0 to 1024 [ 115.261469][ T6501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.265258][ T6500] loop3: detected capacity change from 0 to 1024 [ 115.304116][ T6500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 115.350796][ T6500] System zones: 0-1, 3-36 [ 115.383006][ T6500] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.895: bad orphan inode 134217728 [ 115.418369][ T6500] loop3: lost filesystem error report for type 5 error -117 [ 115.418990][ T6500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.951454][ T6515] siw: device registration error -23 [ 116.350981][ T3999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.359111][ T6524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6524 comm=syz.6.902 [ 116.373050][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.399895][ T6530] futex_wake_op: syz.5.899 tries to shift op by -1; fix this program [ 116.535740][ T6537] SET target dimension over the limit! [ 116.891682][ T6549] netlink: 220 bytes leftover after parsing attributes in process `syz.5.909'. [ 116.911292][ T6551] netlink: 220 bytes leftover after parsing attributes in process `syz.6.910'. [ 116.961378][ T6552] netlink: 220 bytes leftover after parsing attributes in process `syz.3.911'. [ 117.288308][ T6561] loop5: detected capacity change from 0 to 164 [ 117.319955][ T6561] Unsupported NM flag settings (240) [ 117.325755][ T6561] Unsupported NM flag settings (240) [ 117.332478][ T6561] Unsupported NM flag settings (240) [ 117.528810][ T6572] siw: device registration error -23 [ 117.974114][ T6577] xt_hashlimit: size too large, truncated to 1048576 [ 118.343239][ T6582] SET target dimension over the limit! [ 118.655626][ T6591] siw: device registration error -23 [ 118.859868][ T6593] xt_hashlimit: size too large, truncated to 1048576 [ 119.535082][ T6605] netlink: 220 bytes leftover after parsing attributes in process `syz.6.927'. [ 119.559853][ T6604] loop3: detected capacity change from 0 to 164 [ 119.580661][ T6602] loop5: detected capacity change from 0 to 1024 [ 119.589181][ T6604] Unsupported NM flag settings (240) [ 119.597387][ T6604] Unsupported NM flag settings (240) [ 119.606991][ T6602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 119.615675][ T6604] Unsupported NM flag settings (240) [ 119.646853][ T6602] System zones: 0-1, 3-36 [ 119.671249][ T6602] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.928: bad orphan inode 134217728 [ 119.682040][ T6602] loop5: lost filesystem error report for type 5 error -117 [ 119.690568][ T6602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.735077][ T6612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.931'. [ 119.769891][ T3999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.886225][ T28] audit: type=1400 audit(1772032615.466:561): avc: denied { ioctl } for pid=6618 comm="syz.6.934" path="socket:[15817]" dev="sockfs" ino=15817 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.911287][ T28] audit: type=1400 audit(1772032615.466:562): avc: denied { create } for pid=6618 comm="syz.6.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 120.038771][ T6628] siw: device registration error -23 [ 120.053565][ T6628] loop5: detected capacity change from 0 to 512 [ 120.577531][ T6638] loop3: detected capacity change from 0 to 8192 [ 120.633830][ T6638] loop3: p1 < > p2 p4 < p5 > [ 120.660392][ T6638] loop3: partition table partially beyond EOD, truncated [ 120.669364][ T6638] loop3: p1 start 134217728 is beyond EOD, truncated [ 120.689592][ T6638] loop3: p2 size 591360 extends beyond EOD, truncated [ 120.698376][ T6638] loop3: p5 size 591360 extends beyond EOD, truncated [ 120.799711][ T6644] SET target dimension over the limit! [ 121.299774][ T6654] netlink: 220 bytes leftover after parsing attributes in process `syz.5.944'. [ 121.633068][ T6662] netlink: 168 bytes leftover after parsing attributes in process `syz.6.948'. [ 121.756336][ T28] audit: type=1400 audit(1772032617.336:563): avc: denied { create } for pid=6670 comm="syz.6.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 121.784606][ T28] audit: type=1400 audit(1772032617.366:564): avc: denied { remount } for pid=6670 comm="syz.6.949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.063884][ T6674] FAULT_INJECTION: forcing a failure. [ 122.063884][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 122.080125][ T6674] CPU: 1 UID: 0 PID: 6674 Comm: syz.6.950 Tainted: G W syzkaller #0 PREEMPT(full) [ 122.080160][ T6674] Tainted: [W]=WARN [ 122.080198][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.080237][ T6674] Call Trace: [ 122.080243][ T6674] [ 122.080250][ T6674] __dump_stack+0x1d/0x30 [ 122.080277][ T6674] dump_stack_lvl+0x95/0xd0 [ 122.080302][ T6674] dump_stack+0x15/0x1b [ 122.080366][ T6674] should_fail_ex+0x263/0x280 [ 122.080386][ T6674] should_failslab+0x8c/0xb0 [ 122.080406][ T6674] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 122.080502][ T6674] ? __alloc_skb+0x2d6/0x690 [ 122.080527][ T6674] __alloc_skb+0x2d6/0x690 [ 122.080544][ T6674] ? __alloc_skb+0x200/0x690 [ 122.080589][ T6674] netlink_alloc_large_skb+0xbf/0xf0 [ 122.080615][ T6674] netlink_sendmsg+0x40c/0x6f0 [ 122.080722][ T6674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.080750][ T6674] ____sys_sendmsg+0x5af/0x600 [ 122.080846][ T6674] ___sys_sendmsg+0x195/0x1e0 [ 122.080892][ T6674] __x64_sys_sendmsg+0xd4/0x160 [ 122.080933][ T6674] x64_sys_call+0x194c/0x3020 [ 122.080954][ T6674] do_syscall_64+0x12c/0x370 [ 122.081032][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.081227][ T6674] RIP: 0033:0x7ff486bdc629 [ 122.081247][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.081263][ T6674] RSP: 002b:00007ff485637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.081285][ T6674] RAX: ffffffffffffffda RBX: 00007ff486e55fa0 RCX: 00007ff486bdc629 [ 122.081306][ T6674] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 122.081386][ T6674] RBP: 00007ff485637090 R08: 0000000000000000 R09: 0000000000000000 [ 122.081397][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.081409][ T6674] R13: 00007ff486e56038 R14: 00007ff486e55fa0 R15: 00007fff25b1bf78 [ 122.081480][ T6674] [ 122.152237][ T28] audit: type=1400 audit(1772032617.686:565): avc: denied { ioctl } for pid=6673 comm="syz.6.950" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 122.167163][ T6681] SET target dimension over the limit! [ 122.181899][ T28] audit: type=1400 audit(1772032617.766:566): avc: denied { read } for pid=6673 comm="syz.6.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 122.461033][ T6678] xt_hashlimit: size too large, truncated to 1048576 [ 124.052175][ T6750] loop5: detected capacity change from 0 to 512 [ 124.113363][ T6756] loop3: detected capacity change from 0 to 1024 [ 124.136486][ T6750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.159353][ T6750] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.173623][ T6756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 124.210423][ T6756] System zones: 0-1, 3-36 [ 124.223232][ T6750] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.975: corrupted xattr block 33: invalid ea_ino [ 124.225081][ T6756] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.977: bad orphan inode 134217728 [ 124.250397][ T6750] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 124.259474][ T6750] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.975: corrupted xattr block 33: invalid ea_ino [ 124.304295][ T6724] loop4: detected capacity change from 0 to 1024 [ 124.337137][ T6756] loop3: lost filesystem error report for type 5 error -117 [ 124.337718][ T6756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.364428][ T6750] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 124.397304][ T6750] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.975: corrupted xattr block 33: invalid ea_ino [ 124.415005][ T28] audit: type=1400 audit(1772032619.976:567): avc: denied { link } for pid=6749 comm="syz.5.975" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.533115][ T6750] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 124.585421][ T6756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.977'. [ 124.618459][ T6724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.683841][ T3999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.870180][ T28] audit: type=1400 audit(1772032620.386:568): avc: denied { open } for pid=6723 comm="syz.4.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 124.889343][ T28] audit: type=1400 audit(1772032620.386:569): avc: denied { kernel } for pid=6723 comm="syz.4.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 124.909012][ T28] audit: type=1400 audit(1772032620.386:570): avc: denied { tracepoint } for pid=6723 comm="syz.4.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 124.954573][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.015755][ T28] audit: type=1400 audit(1772032620.596:571): avc: denied { write } for pid=6776 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 125.238383][ T6798] SET target dimension over the limit! [ 125.245042][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.313856][ T6800] loop4: detected capacity change from 0 to 1024 [ 125.336798][ T6800] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 125.363605][ T6800] System zones: 0-1, 3-36 [ 125.379585][ T6800] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.992: bad orphan inode 134217728 [ 125.395487][ T6800] loop4: lost filesystem error report for type 5 error -117 [ 125.397041][ T6800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.418536][ T6800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.992'. [ 125.601231][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.733170][ T6823] loop3: detected capacity change from 0 to 512 [ 126.604332][ T6834] loop4: detected capacity change from 0 to 164 [ 126.654758][ T6834] Unsupported NM flag settings (240) [ 126.757602][ T6843] siw: device registration error -23 [ 127.293496][ T28] audit: type=1400 audit(1772032622.336:572): avc: denied { ioctl } for pid=6838 comm="syz.5.1006" path="socket:[17062]" dev="sockfs" ino=17062 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.690960][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1013'. [ 127.812804][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.861138][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.900542][ T6872] siw: device registration error -23 [ 127.915960][ T6872] loop4: detected capacity change from 0 to 512 [ 128.714330][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.722063][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.782687][ T6868] veth1_vlan: left allmulticast mode [ 128.822221][ T5332] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.868895][ T5332] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.888627][ T6888] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 128.897269][ T5332] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.908835][ T5332] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.237550][ T28] audit: type=1400 audit(1772032624.816:573): avc: denied { read } for pid=6909 comm="syz.3.1031" path="socket:[17489]" dev="sockfs" ino=17489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.237686][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 129.308795][ T6911] GUP no longer grows the stack in syz.3.1031 (6911): 200000004000-20000000a000 (200000002000) [ 129.319242][ T6911] CPU: 1 UID: 0 PID: 6911 Comm: syz.3.1031 Tainted: G W syzkaller #0 PREEMPT(full) [ 129.319285][ T6911] Tainted: [W]=WARN [ 129.319292][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.319401][ T6911] Call Trace: [ 129.319408][ T6911] [ 129.319416][ T6911] __dump_stack+0x1d/0x30 [ 129.319460][ T6911] dump_stack_lvl+0x95/0xd0 [ 129.319489][ T6911] dump_stack+0x15/0x1b [ 129.319515][ T6911] __get_user_pages+0x195b/0x1ea0 [ 129.319619][ T6911] ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0 [ 129.319669][ T6911] ? __rcu_read_unlock+0x4e/0x70 [ 129.319702][ T6911] get_user_pages_remote+0x1d5/0x6b0 [ 129.319750][ T6911] __access_remote_vm+0x15c/0x580 [ 129.319788][ T6911] access_remote_vm+0x32/0x40 [ 129.319894][ T6911] proc_pid_cmdline_read+0x32b/0x6b0 [ 129.319922][ T6911] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 129.319985][ T6911] vfs_readv+0x432/0x6e0 [ 129.320014][ T6911] __x64_sys_preadv+0xfd/0x1c0 [ 129.320037][ T6911] x64_sys_call+0x2915/0x3020 [ 129.320069][ T6911] do_syscall_64+0x12c/0x370 [ 129.320138][ T6911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.320163][ T6911] RIP: 0033:0x7ff6dcf9c629 [ 129.320249][ T6911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.320321][ T6911] RSP: 002b:00007ff6db9ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 129.320341][ T6911] RAX: ffffffffffffffda RBX: 00007ff6dd215fa0 RCX: 00007ff6dcf9c629 [ 129.320354][ T6911] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000008 [ 129.320413][ T6911] RBP: 00007ff6dd032b39 R08: 00000000fffffff9 R09: 0000000000000000 [ 129.320465][ T6911] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 129.320478][ T6911] R13: 00007ff6dd216038 R14: 00007ff6dd215fa0 R15: 00007ffd2b48c038 [ 129.320555][ T6911] [ 129.508824][ T6912] siw: device registration error -23 [ 129.521936][ T6912] loop4: detected capacity change from 0 to 512 [ 129.913934][ T6921] syz.0.1035 (6921): /proc/6920/oom_adj is deprecated, please use /proc/6920/oom_score_adj instead. [ 130.038493][ T6929] siw: device registration error -23 [ 130.167768][ T6932] loop5: detected capacity change from 0 to 128 [ 130.254066][ T6932] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.307740][ T6932] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.534981][ T6942] lo speed is unknown, defaulting to 1000 [ 130.541235][ T6942] lo speed is unknown, defaulting to 1000 [ 131.154865][ T6951] SET target dimension over the limit! [ 132.845299][ T28] audit: type=1400 audit(1772032628.426:574): avc: denied { setopt } for pid=6982 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.946043][ T6988] SET target dimension over the limit! [ 133.766118][ T7014] xt_hashlimit: size too large, truncated to 1048576 [ 134.282462][ T7025] SET target dimension over the limit! [ 134.511013][ T7036] siw: device registration error -23 [ 134.523827][ T7036] loop4: detected capacity change from 0 to 512 [ 135.121836][ T7044] loop5: detected capacity change from 0 to 164 [ 135.134626][ T7044] Unsupported NM flag settings (240) [ 135.200427][ T7044] Unsupported NM flag settings (240) [ 135.439488][ T7054] xt_hashlimit: size too large, truncated to 1048576 [ 136.426011][ T7083] xt_hashlimit: size too large, truncated to 1048576 [ 137.066272][ T28] audit: type=1400 audit(1772032632.576:575): avc: denied { setcurrent } for pid=7086 comm="syz.0.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 137.140093][ T7096] loop4: detected capacity change from 0 to 512 [ 137.191495][ T7096] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 137.232681][ T28] audit: type=1326 audit(1772032632.796:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.6.1092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff486bdc629 code=0x0 [ 137.313196][ T7096] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1091: bg 0: block 255: padding at end of block bitmap is not set [ 137.406329][ T7096] loop4: lost filesystem error report for type 5 error -117 [ 137.410342][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 137.424181][ C0] EXT4-fs (loop4): initial error at time 1772032632: ext4_validate_block_bitmap:441 [ 137.433604][ C0] EXT4-fs (loop4): last error at time 1772032632: ext4_validate_block_bitmap:441 [ 137.443989][ T7096] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 137.600851][ T7096] loop4: lost filesystem error report for type 5 error -117 [ 137.647660][ T7096] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1091: invalid indirect mapped block 1 (level 1) [ 137.712677][ T7096] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 137.712938][ T7096] EXT4-fs (loop4): 1 truncate cleaned up [ 137.738575][ T7096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.771953][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.002942][ T7124] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.012549][ T7124] block device autoloading is deprecated and will be removed. [ 138.060669][ T7130] lo speed is unknown, defaulting to 1000 [ 138.073270][ T7130] lo speed is unknown, defaulting to 1000 [ 138.305454][ T7141] loop4: detected capacity change from 0 to 1024 [ 138.571428][ T7141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.583671][ T7141] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.896742][ T28] audit: type=1400 audit(1772032634.476:577): avc: denied { map } for pid=7155 comm="syz.6.1113" path="socket:[17879]" dev="sockfs" ino=17879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.108599][ T28] audit: type=1400 audit(1772032634.506:578): avc: denied { read accept } for pid=7155 comm="syz.6.1113" path="socket:[17879]" dev="sockfs" ino=17879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.168779][ T7176] loop5: detected capacity change from 0 to 512 [ 139.187171][ T7176] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.197184][ T28] audit: type=1400 audit(1772032634.526:579): avc: denied { compute_member } for pid=7155 comm="syz.6.1113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.262872][ T7178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1117'. [ 139.278661][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.288741][ T7176] EXT4-fs (loop5): 1 truncate cleaned up [ 139.300143][ T7176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.335050][ T7174] lo speed is unknown, defaulting to 1000 [ 139.354020][ T7174] lo speed is unknown, defaulting to 1000 [ 139.803480][ T7202] xt_hashlimit: size too large, truncated to 1048576 [ 140.304718][ T7209] loop4: detected capacity change from 0 to 128 [ 140.339539][ T7209] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.370176][ T7209] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.614067][ T7218] loop3: detected capacity change from 0 to 512 [ 140.749968][ T7218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.764884][ T7218] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.835417][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.941484][ T7238] SET target dimension over the limit! [ 141.003743][ T7246] loop3: detected capacity change from 0 to 4096 [ 141.013723][ T28] audit: type=1400 audit(1772032636.596:580): avc: denied { append } for pid=7171 comm="syz.5.1116" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.138614][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.155570][ T28] audit: type=1400 audit(1772032636.616:581): avc: denied { append } for pid=7243 comm="syz.6.1139" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 141.293171][ T28] audit: type=1400 audit(1772032636.756:582): avc: denied { shutdown } for pid=7245 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.458063][ T3999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.845110][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.198618][ T28] audit: type=1400 audit(1772032637.776:583): avc: denied { getopt } for pid=7281 comm="syz.5.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.368353][ T7284] xt_hashlimit: size too large, truncated to 1048576 [ 142.903422][ T28] audit: type=1326 audit(1772032638.486:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.5.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc415dc629 code=0x7ffc0000 [ 142.929313][ T7291] SET target dimension over the limit! [ 143.033130][ T28] audit: type=1326 audit(1772032638.506:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.5.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc415dc629 code=0x7ffc0000 [ 143.064506][ T28] audit: type=1326 audit(1772032638.506:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.5.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdc415dc629 code=0x7ffc0000 [ 143.106620][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 143.126639][ T7299] loop5: detected capacity change from 0 to 2048 [ 143.184565][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 143.195958][ T7307] loop4: detected capacity change from 0 to 512 [ 143.204605][ T7299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.217002][ T7312] loop3: detected capacity change from 0 to 512 [ 143.223774][ T7312] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 143.232012][ T7307] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 143.254028][ T7307] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 143.256600][ T7312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1161: bg 0: block 255: padding at end of block bitmap is not set [ 143.286209][ T7290] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1153: bg 0: block 234: padding at end of block bitmap is not set [ 143.300715][ T7312] loop3: lost filesystem error report for type 5 error -117 [ 143.300856][ T7307] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1159: Corrupt directory, running e2fsck is recommended [ 143.320998][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 143.321020][ C1] EXT4-fs (loop3): initial error at time 1772032638: ext4_validate_block_bitmap:441 [ 143.321059][ C1] EXT4-fs (loop3): last error at time 1772032638: ext4_validate_block_bitmap:441 [ 143.352895][ T7312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 143.361815][ T7290] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 143.374149][ T7312] loop3: lost filesystem error report for type 5 error -117 [ 143.374477][ T7312] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1161: invalid indirect mapped block 1 (level 1) [ 143.397170][ T7307] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 143.405927][ T7290] EXT4-fs (loop5): This should not happen!! Data will be lost [ 143.405927][ T7290] [ 143.410599][ T7312] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 143.415824][ T7290] EXT4-fs (loop5): Total free blocks count 0 [ 143.420522][ T7307] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1159: corrupted in-inode xattr: e_name out of bounds [ 143.439452][ T7290] EXT4-fs (loop5): Free/Dirty block details [ 143.451003][ T7290] EXT4-fs (loop5): free_blocks=0 [ 143.452176][ T7312] EXT4-fs (loop3): 1 truncate cleaned up [ 143.455950][ T7290] EXT4-fs (loop5): dirty_blocks=16 [ 143.455967][ T7290] EXT4-fs (loop5): Block reservation details [ 143.474822][ T7312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.483724][ T7290] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 143.496685][ T7307] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.498550][ T7307] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1159: couldn't read orphan inode 15 (err -117) [ 143.507740][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 143.507762][ C0] EXT4-fs (loop4): initial error at time 1772032639: ext4_iget_extra_inode:5025: inode 15 [ 143.507797][ C0] EXT4-fs (loop4): last error at time 1772032639: ext4_iget_extra_inode:5025: inode 15 [ 143.548163][ T7307] loop4: lost filesystem error report for type 5 error -117 [ 143.550932][ T7307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.581107][ T3999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.600427][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.610038][ T7307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1159'. [ 143.671075][ T7327] netlink: 182 bytes leftover after parsing attributes in process `syz.5.1165'. [ 143.745564][ T7334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1169'. [ 144.042860][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.154312][ T7356] loop4: detected capacity change from 0 to 512 [ 144.161440][ T7356] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 144.201345][ T7356] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1177: bg 0: block 255: padding at end of block bitmap is not set [ 144.227689][ T7356] loop4: lost filesystem error report for type 5 error -117 [ 144.227909][ T7356] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 144.235267][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 144.235289][ C0] EXT4-fs (loop4): initial error at time 1772032639: ext4_validate_block_bitmap:441 [ 144.235312][ C0] EXT4-fs (loop4): last error at time 1772032639: ext4_validate_block_bitmap:441 [ 144.269398][ T7356] loop4: lost filesystem error report for type 5 error -117 [ 144.269590][ T7356] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1177: invalid indirect mapped block 1 (level 1) [ 144.290397][ T7356] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 144.290725][ T7356] EXT4-fs (loop4): 1 truncate cleaned up [ 144.306295][ T7356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.345137][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.845277][ T7369] xt_hashlimit: size too large, truncated to 1048576 [ 144.926250][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 144.926264][ T28] audit: type=1326 audit(1772032640.506:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc415dc629 code=0x0 [ 145.003936][ T28] audit: type=1400 audit(1772032640.506:627): avc: denied { read write } for pid=7375 comm="syz.6.1185" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 145.058716][ T7387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7387 comm=syz.0.1187 [ 145.082099][ T7380] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1185'. [ 145.109683][ T28] audit: type=1400 audit(1772032640.506:628): avc: denied { open } for pid=7375 comm="syz.6.1185" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 145.578113][ T7401] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 145.585644][ T7401] macvtap1: entered allmulticast mode [ 145.591155][ T7401] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 145.613622][ T7404] SET target dimension over the limit! [ 145.640213][ T7406] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 146.228135][ T7429] loop4: detected capacity change from 0 to 512 [ 146.265504][ T7429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.303156][ T7429] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.382641][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.404858][ T28] audit: type=1400 audit(1772032641.986:629): avc: denied { ioctl } for pid=7428 comm="syz.4.1203" path="/211/bus/file1" dev="loop4" ino=15 ioctlcmd=0x6610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.436091][ T7433] SET target dimension over the limit! [ 146.455113][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.468977][ T7436] xt_TCPMSS: Only works on TCP SYN packets [ 146.669129][ T7459] netlink: 'syz.0.1209': attribute type 39 has an invalid length. [ 146.734945][ T28] audit: type=1400 audit(1772032642.316:630): avc: denied { create } for pid=7465 comm="syz.5.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 146.744167][ T7467] loop5: detected capacity change from 0 to 128 [ 146.838491][ T7467] lo speed is unknown, defaulting to 1000 [ 146.858047][ T7467] lo speed is unknown, defaulting to 1000 [ 146.880775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.888932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.900432][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.106622][ T7502] loop4: detected capacity change from 0 to 1024 [ 147.140492][ T7502] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 147.151055][ T7502] System zones: 0-1, 3-36 [ 147.170361][ T7502] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1216: bad orphan inode 134217728 [ 147.213912][ T7502] loop4: lost filesystem error report for type 5 error -117 [ 147.220384][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 147.234154][ C1] EXT4-fs (loop4): initial error at time 1772032642: ext4_orphan_get:1417 [ 147.242695][ C1] EXT4-fs (loop4): last error at time 1772032642: ext4_orphan_get:1417 [ 147.245318][ T7502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.350666][ T7467] netlink: 'syz.5.1211': attribute type 1 has an invalid length. [ 147.450498][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.498423][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.629161][ T7576] can0: slcan on ttyS3. [ 147.654319][ T28] audit: type=1400 audit(1772032643.236:631): avc: denied { cpu } for pid=7580 comm="syz.6.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.674197][ T7581] program syz.6.1222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.701235][ T28] audit: type=1326 audit(1772032643.276:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.6.1222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff486bdc629 code=0x0 [ 147.742706][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 147.780369][ T7576] can0 (unregistered): slcan off ttyS3. [ 147.799163][ T7597] geneve1: entered promiscuous mode [ 148.090059][ T28] audit: type=1400 audit(1772032643.666:633): avc: denied { connect } for pid=7617 comm="syz.4.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.112937][ T28] audit: type=1400 audit(1772032643.666:634): avc: denied { write } for pid=7617 comm="syz.4.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.480609][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.747761][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 148.913857][ T5339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.930013][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.942643][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.061283][ T7646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.097174][ T7654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1238'. [ 149.149726][ T7646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.182551][ T28] audit: type=1400 audit(1772032644.756:635): avc: denied { mount } for pid=7660 comm="syz.4.1241" name="/" dev="configfs" ino=2103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 149.288382][ T7646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.354699][ T7666] siw: device registration error -23 [ 149.367510][ T7666] loop5: detected capacity change from 0 to 512 [ 149.509883][ T7646] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 149.560965][ T7646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.717119][ T5309] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.757213][ T5309] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.847358][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.888179][ T5307] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.940457][ T7672] loop4: detected capacity change from 0 to 1024 [ 150.047805][ T7672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 150.092933][ T7672] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.133939][ T7672] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.1245: lblock 3 mapped to illegal pblock 3 (length 3) [ 150.255849][ T7672] EXT4-fs (loop4): Remounting filesystem read-only [ 150.268113][ T7684] EXT4-fs (loop4): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -30 [ 150.360762][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.616600][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 150.616658][ T28] audit: type=1400 audit(1772032646.196:638): avc: denied { execute } for pid=7698 comm="syz.6.1255" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 150.721439][ T5307] net_ratelimit: 2 callbacks suppressed [ 150.721474][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.736347][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.745461][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.880542][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.036156][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'. [ 153.276704][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.284924][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.356941][ T7733] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 153.414097][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.424954][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.456812][ T7745] loop4: detected capacity change from 0 to 1024 [ 153.472530][ T7747] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 153.472530][ T7747] The task syz.5.1268 (7747) triggered the difference, watch for misbehavior. [ 153.566876][ T7753] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1271'. [ 153.688757][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 153.721555][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 153.761804][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.806232][ T7753] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 153.835670][ T7753] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1271'. [ 154.475945][ T28] audit: type=1400 audit(1772032650.026:639): avc: denied { read } for pid=7766 comm="syz.5.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.570973][ T5339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.727354][ T7782] siw: device registration error -23 [ 154.736168][ T7782] loop4: detected capacity change from 0 to 512 [ 155.396538][ T7795] loop3: detected capacity change from 0 to 4096 [ 155.413056][ T7795] EXT4-fs: Ignoring removed bh option [ 155.444498][ T7795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.038171][ T7807] siw: device registration error -23 [ 156.052021][ T7807] loop4: detected capacity change from 0 to 512 [ 156.204098][ T28] audit: type=1400 audit(1772032651.786:640): avc: denied { ioctl } for pid=7805 comm="syz.5.1288" path="socket:[20733]" dev="sockfs" ino=20733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.463984][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.482206][ T5339] net_ratelimit: 4 callbacks suppressed [ 156.482221][ T5339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.497216][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.506067][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.741558][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.574212][ T7850] siw: device registration error -23 [ 158.005812][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.377380][ T7853] xt_hashlimit: size too large, truncated to 1048576 [ 158.522752][ T28] audit: type=1400 audit(1772032654.086:641): avc: denied { append } for pid=7869 comm="syz.3.1305" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 158.661849][ T7878] siw: device registration error -23 [ 158.671103][ T7878] loop4: detected capacity change from 0 to 512 [ 159.040555][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.211176][ T7887] loop5: detected capacity change from 0 to 2048 [ 159.251783][ T7887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.282154][ T7887] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.429916][ T28] audit: type=1400 audit(1772032655.006:642): avc: denied { rename } for pid=7885 comm="syz.5.1308" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.518906][ T28] audit: type=1400 audit(1772032655.006:643): avc: denied { unlink } for pid=7885 comm="syz.5.1308" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.521445][ T7900] tipc: Started in network mode [ 159.547397][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.589155][ T7900] tipc: Node identity e2728a649c5c, cluster identity 4711 [ 159.620470][ T7900] tipc: Enabled bearer , priority 0 [ 159.687803][ T7900] syzkaller0: MTU too low for tipc bearer [ 159.706340][ T7900] tipc: Disabling bearer [ 159.806567][ T28] audit: type=1400 audit(1772032655.386:644): avc: denied { write } for pid=7899 comm="syz.6.1311" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 159.831806][ T7900] 9p: Bad value for 'rfdno' [ 159.870376][ T28] audit: type=1400 audit(1772032655.386:645): avc: denied { read write } for pid=7899 comm="syz.6.1311" dev="sockfs" ino=20893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.926857][ T7891] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1308: bg 0: block 345: padding at end of block bitmap is not set [ 159.941642][ T7891] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 159.954745][ T7891] EXT4-fs (loop5): This should not happen!! Data will be lost [ 159.954745][ T7891] [ 160.005486][ T5307] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 160.045079][ T5307] EXT4-fs (loop5): This should not happen!! Data will be lost [ 160.045079][ T5307] [ 160.055984][ T5307] EXT4-fs (loop5): Total free blocks count 0 [ 160.063184][ T5307] EXT4-fs (loop5): Free/Dirty block details [ 160.069441][ T5307] EXT4-fs (loop5): free_blocks=0 [ 160.074825][ T5307] EXT4-fs (loop5): dirty_blocks=2048 [ 160.080764][ T5307] EXT4-fs (loop5): Block reservation details [ 160.182415][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.415911][ T5307] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.234918][ T7947] loop3: detected capacity change from 0 to 512 [ 161.657932][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.726678][ T7956] xt_hashlimit: size too large, truncated to 1048576 [ 162.255161][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.264243][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.273038][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.370837][ T7966] loop3: detected capacity change from 0 to 512 [ 162.430410][ T5691] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.826162][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.664251][ T7981] loop5: detected capacity change from 0 to 128 [ 163.714623][ T7981] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.740750][ T7981] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.850562][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.934410][ T28] audit: type=1400 audit(1772032659.516:646): avc: denied { shutdown } for pid=7997 comm="syz.3.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.935121][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1338'. [ 163.963666][ T7996] loop4: detected capacity change from 0 to 1024 [ 163.983958][ T7996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 164.010405][ T7996] System zones: 0-1, 3-36 [ 164.031353][ T7996] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1337: bad orphan inode 134217728 [ 164.064951][ T7996] loop4: lost filesystem error report for type 5 error -117 [ 164.065548][ T7996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.141037][ T28] audit: type=1400 audit(1772032659.716:647): avc: denied { write } for pid=8003 comm="syz.5.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.164647][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.166611][ T8004] netlink: 'syz.5.1340': attribute type 1 has an invalid length. [ 164.174296][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 164.213507][ T28] audit: type=1400 audit(1772032659.786:648): avc: denied { getopt } for pid=8003 comm="syz.5.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.491546][ T8010] xt_hashlimit: size too large, truncated to 1048576 [ 164.886372][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.909447][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.950381][ T8016] siw: device registration error -23 [ 164.962668][ T8016] loop5: detected capacity change from 0 to 512 [ 165.218006][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1345'. [ 165.412286][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.536371][ T8036] loop3: detected capacity change from 0 to 4096 [ 165.549632][ T8036] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 165.614377][ T8036] loop3: detected capacity change from 0 to 512 [ 165.628152][ T8036] EXT4-fs: Ignoring removed bh option [ 165.636597][ T8036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e118, mo2=0002] [ 165.650575][ T8036] System zones: 1-12 [ 165.670436][ T8036] EXT4-fs (loop3): orphan cleanup on readonly fs [ 165.696602][ T8040] siw: device registration error -23 [ 165.710886][ T8040] loop5: detected capacity change from 0 to 512 [ 165.787676][ T8036] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1351: invalid indirect mapped block 1819239214 (level 1) [ 165.921395][ T8036] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 165.923125][ T8036] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1351: bg 0: block 361: padding at end of block bitmap is not set [ 165.932522][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 165.932544][ C1] EXT4-fs (loop3): initial error at time 1772032661: ext4_free_branches:1023: inode 13 [ 165.932578][ C1] EXT4-fs (loop3): last error at time 1772032661: ext4_free_branches:1023: inode 13 [ 166.064909][ T8036] loop3: lost filesystem error report for type 5 error -117 [ 166.096728][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.114518][ T8036] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 166.131406][ T8036] loop3: lost filesystem error report for type 5 error -117 [ 166.131600][ T8036] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1351: attempt to clear invalid blocks 33619980 len 1 [ 166.160204][ T8036] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 166.193529][ T8036] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1351: invalid indirect mapped block 1819239214 (level 0) [ 166.217342][ T8036] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 166.217850][ T8036] EXT4-fs (loop3): 1 truncate cleaned up [ 166.233722][ T8036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 166.253349][ T28] audit: type=1400 audit(1772032661.836:649): avc: denied { remount } for pid=8035 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 166.320942][ T8036] EXT4-fs: Ignoring removed orlov option [ 166.335510][ T8036] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 166.349972][ T8036] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 166.359935][ T8036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842e11c, mo2=0002] [ 166.367809][ T8036] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 166.422368][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.660286][ T8058] loop5: detected capacity change from 0 to 512 [ 167.120521][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.396290][ T8069] loop3: detected capacity change from 0 to 512 [ 167.814980][ T8078] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 167.878355][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.886970][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.282343][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.434551][ T8094] xt_hashlimit: size too large, truncated to 1048576 [ 168.840841][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.961240][ T8112] loop4: detected capacity change from 0 to 1024 [ 168.978928][ T8112] EXT4-fs: inline encryption not supported [ 169.082536][ T8112] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.106210][ T8112] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 169.209468][ T8125] loop5: detected capacity change from 0 to 512 [ 169.806368][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.002011][ T8142] lo speed is unknown, defaulting to 1000 [ 170.352441][ T8154] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 170.748573][ T8161] wireguard1: entered promiscuous mode [ 170.754345][ T8161] wireguard1: entered allmulticast mode [ 170.898210][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.035687][ T8169] loop4: detected capacity change from 0 to 512 [ 171.186877][ T28] audit: type=1326 audit(1772032666.766:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8170 comm="syz.6.1398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff486bdc629 code=0x0 [ 171.279133][ T28] audit: type=1400 audit(1772032666.856:651): avc: denied { ioctl } for pid=8170 comm="syz.6.1398" path="socket:[21465]" dev="sockfs" ino=21465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.353336][ T8161] loop3: detected capacity change from 0 to 512 [ 171.415937][ T8161] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 171.492217][ T8161] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1395: bg 0: block 104: invalid block bitmap [ 171.517335][ T8161] loop3: lost filesystem error report for type 5 error -117 [ 171.520396][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 171.534908][ C0] EXT4-fs (loop3): initial error at time 1772032667: ext4_validate_block_bitmap:432 [ 171.544466][ C0] EXT4-fs (loop3): last error at time 1772032667: ext4_validate_block_bitmap:432 [ 171.560358][ T8161] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 171.569151][ T8161] loop3: lost filesystem error report for type 5 error -117 [ 171.569345][ T8161] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1395: invalid indirect mapped block 1 (level 1) [ 171.592236][ T8161] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 171.600116][ T8161] EXT4-fs (loop3): 1 truncate cleaned up [ 171.618946][ T8161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.768090][ T8188] macsec1: entered promiscuous mode [ 171.783947][ T8188] erspan0: entered promiscuous mode [ 171.807818][ T28] audit: type=1400 audit(1772032667.386:652): avc: denied { checkpoint_restore } for pid=8183 comm="syz.0.1401" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.920787][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.929081][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.959402][ T8204] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1409'. [ 172.189722][ T8213] ------------[ cut here ]------------ [ 172.195227][ T8213] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 172.215046][ T8213] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.4.1410/8213 [ 172.225979][ T8213] Modules linked in: [ 172.229920][ T8213] CPU: 1 UID: 0 PID: 8213 Comm: syz.4.1410 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.240855][ T8213] Tainted: [W]=WARN [ 172.244654][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.254726][ T8213] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 172.261074][ T8213] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 172.280711][ T8213] RSP: 0018:ffffc900017d7368 EFLAGS: 00010246 [ 172.286777][ T8213] RAX: ffff8881051f6d78 RBX: 00000000ffffffff RCX: 0000000000000000 [ 172.294844][ T8213] RDX: ffffffff86817254 RSI: ffffffff8682b7c6 RDI: ffffffff871d3f90 [ 172.302837][ T8213] RBP: ffff888104aae840 R08: 0000007800000000 R09: 0000000000000000 [ 172.310837][ T8213] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888104aae800 [ 172.318807][ T8213] R13: 0000000000000000 R14: ffff888104aae84c R15: ffff888104aae838 [ 172.326900][ T8213] FS: 00007fa3bc2256c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 172.335914][ T8213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.342531][ T8213] CR2: 00007fa3bc224ff8 CR3: 000000011bf16000 CR4: 00000000003506f0 [ 172.350601][ T8213] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.358607][ T8213] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 172.366591][ T8213] Call Trace: [ 172.369858][ T8213] [ 172.372810][ T8213] reg_set_min_max+0x1f2/0x260 [ 172.377613][ T8213] check_cond_jmp_op+0x13b0/0x1ab0 [ 172.382779][ T8213] do_check+0x4a9b/0x9860 [ 172.387176][ T8213] do_check_common+0xd0b/0x1630 [ 172.392044][ T8213] bpf_check+0x2f78/0xcc30 [ 172.396548][ T8213] ? __perf_event_task_sched_in+0xa65/0xad0 [ 172.402472][ T8213] ? css_rstat_updated+0xbb/0x280 [ 172.407519][ T8213] ? __rcu_read_unlock+0x4e/0x70 [ 172.412480][ T8213] ? __rcu_read_unlock+0x4e/0x70 [ 172.417489][ T8213] ? __perf_event_task_sched_in+0xa65/0xad0 [ 172.423596][ T8213] ? css_rstat_updated+0xbb/0x280 [ 172.428635][ T8213] ? __perf_event_task_sched_out+0x192/0x710 [ 172.434648][ T8213] ? _raw_spin_unlock+0x9/0x30 [ 172.439418][ T8213] ? finish_task_switch+0x7d/0x280 [ 172.444584][ T8213] ? __schedule+0x85a/0xd40 [ 172.449093][ T8213] ? __rcu_read_unlock+0x4e/0x70 [ 172.454051][ T8213] ? avc_has_perm_noaudit+0xab/0x130 [ 172.459422][ T8213] ? avc_has_perm+0x101/0x190 [ 172.464139][ T8213] ? selinux_bpf_prog_load+0x197/0x1c0 [ 172.469615][ T8213] ? security_bpf_prog_load+0x9e/0x140 [ 172.475207][ T8213] bpf_prog_load+0xf76/0x1140 [ 172.479976][ T8213] ? security_bpf+0x2b/0x90 [ 172.484911][ T8213] __sys_bpf+0x505/0x7e0 [ 172.489181][ T8213] __x64_sys_bpf+0x41/0x50 [ 172.493843][ T8213] x64_sys_call+0x10cb/0x3020 [ 172.498572][ T8213] do_syscall_64+0x12c/0x370 [ 172.503200][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.509154][ T8213] RIP: 0033:0x7fa3bd80c629 [ 172.513765][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.533496][ T8213] RSP: 002b:00007fa3bc225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.541972][ T8213] RAX: ffffffffffffffda RBX: 00007fa3bda86180 RCX: 00007fa3bd80c629 [ 172.542396][ T8215] loop5: detected capacity change from 0 to 128 [ 172.549941][ T8213] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 172.549962][ T8213] RBP: 00007fa3bd8a2b39 R08: 0000000000000000 R09: 0000000000000000 [ 172.549977][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.580252][ T8213] R13: 00007fa3bda86218 R14: 00007fa3bda86180 R15: 00007ffd0156d0a8 [ 172.588273][ T8213] [ 172.591334][ T8213] ---[ end trace 0000000000000000 ]--- [ 172.655360][ T28] audit: type=1400 audit(1772032668.236:653): avc: denied { read } for pid=8205 comm="syz.4.1410" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.704184][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.716266][ T28] audit: type=1400 audit(1772032668.236:654): avc: denied { open } for pid=8205 comm="syz.4.1410" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.960856][ T5334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.085190][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.099521][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.155895][ T8225] netlink: 'syz.3.1416': attribute type 10 has an invalid length. [ 173.174442][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1416'. [ 173.221812][ T8225] batman_adv: batadv0: Adding interface: veth1_vlan [ 173.228774][ T8225] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.261977][ T8225] batman_adv: batadv0: Interface activated: veth1_vlan [ 173.277147][ T8225] batadv0: mtu less than device minimum [ 173.293550][ T8225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.308460][ T8225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.324340][ T8225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.339661][ T8225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.354980][ T8225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.369822][ T8225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.721649][ T8236] IPv6: sit1: Disabled Multicast RS [ 174.904165][ T28] audit: type=1400 audit(1772032670.486:655): avc: denied { listen } for pid=8277 comm="syz.6.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.950359][ T8278] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1435'. [ 175.960870][ T8310] siw: device registration error -23 [ 175.970109][ T8310] loop5: detected capacity change from 0 to 512 [ 176.628979][ T8322] loop3: detected capacity change from 0 to 128 [ 176.655710][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.655710][ T8322] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 176.670232][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.670232][ T8322] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 176.684289][ T8322] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 176.699237][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.699237][ T8322] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 176.714094][ T8322] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 176.723072][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.723072][ T8322] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 176.737278][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.737278][ T8322] loop3: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 176.751046][ T8322] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 176.759491][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.759491][ T8322] loop3: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 176.773496][ T8322] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 176.782930][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.782930][ T8322] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 176.796943][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.796943][ T8322] loop3: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 176.813905][ T8322] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 176.824312][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.824312][ T8322] loop3: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 176.838272][ T8322] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 176.847405][ T8322] syz.3.1454: attempt to access beyond end of device [ 176.847405][ T8322] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 176.861978][ T8322] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 176.870704][ T8322] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 176.879994][ T8322] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 176.888787][ T8322] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 177.370277][ T8338] loop3: detected capacity change from 0 to 512 [ 178.061410][ T8344] loop5: detected capacity change from 0 to 512 [ 178.265524][ T3405] net_ratelimit: 23 callbacks suppressed [ 178.265541][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.574031][ T28] audit: type=1326 audit(1772032674.136:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.6.1458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff486bdc629 code=0x0 [ 178.613003][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.728398][ T8360] siw: device registration error -23 [ 178.741449][ T8360] loop4: detected capacity change from 0 to 512 [ 178.947690][ T28] audit: type=1400 audit(1772032674.526:657): avc: denied { read } for pid=8361 comm="syz.0.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.200514][ T28] audit: type=1400 audit(1772032674.776:658): avc: denied { sys_module } for pid=8370 comm="syz.6.1468" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 179.838749][ T8397] FAULT_INJECTION: forcing a failure. [ 179.838749][ T8397] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.901082][ T8397] CPU: 1 UID: 0 PID: 8397 Comm: syz.5.1474 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.901117][ T8397] Tainted: [W]=WARN [ 179.901125][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.901143][ T8397] Call Trace: [ 179.901150][ T8397] [ 179.901157][ T8397] __dump_stack+0x1d/0x30 [ 179.901186][ T8397] dump_stack_lvl+0x95/0xd0 [ 179.901269][ T8397] dump_stack+0x15/0x1b [ 179.901287][ T8397] should_fail_ex+0x263/0x280 [ 179.901307][ T8397] should_fail_alloc_page+0xf2/0x100 [ 179.901327][ T8397] __alloc_frozen_pages_noprof+0x108/0x360 [ 179.901390][ T8397] alloc_pages_mpol+0xb3/0x260 [ 179.901428][ T8397] ? anon_pipe_write+0xd1/0xb30 [ 179.901449][ T8397] alloc_pages_noprof+0x8f/0x130 [ 179.901518][ T8397] anon_pipe_write+0x69f/0xb30 [ 179.901539][ T8397] ? anon_pipe_write+0xd1/0xb30 [ 179.901643][ T8397] ? vfs_write+0x49c/0x9f0 [ 179.901674][ T8397] ? __pfx_anon_pipe_write+0x10/0x10 [ 179.901712][ T8397] vfs_write+0x5a6/0x9f0 [ 179.901741][ T8397] ksys_write+0xdc/0x1a0 [ 179.901821][ T8397] __x64_sys_write+0x40/0x50 [ 179.901869][ T8397] x64_sys_call+0x27e1/0x3020 [ 179.901891][ T8397] do_syscall_64+0x12c/0x370 [ 179.901995][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.902058][ T8397] RIP: 0033:0x7fdc4159cece [ 179.902075][ T8397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.902094][ T8397] RSP: 002b:00007fdc4000dce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.902117][ T8397] RAX: ffffffffffffffda RBX: 00007fdc4000e6c0 RCX: 00007fdc4159cece [ 179.902132][ T8397] RDX: 0000000000000029 RSI: 00007fdc4000de90 RDI: 0000000000000002 [ 179.902144][ T8397] RBP: 00007fdc4000de90 R08: 0000000000000000 R09: 0000000000000000 [ 179.902230][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 179.902245][ T8397] R13: 00007fdc4182b7a0 R14: 00007fdc418224a0 R15: 0000000000000001 [ 179.902304][ T8397] [ 180.107295][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.323721][ T28] audit: type=1400 audit(1772032675.796:659): avc: denied { create } for pid=8399 comm="syz.5.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.364894][ T28] audit: type=1400 audit(1772032675.796:660): avc: denied { ioctl } for pid=8399 comm="syz.5.1475" path="socket:[22013]" dev="sockfs" ino=22013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.374181][ T8404] bridge0: port 3(gretap0) entered blocking state [ 180.390415][ T28] audit: type=1400 audit(1772032675.796:661): avc: denied { bind } for pid=8399 comm="syz.5.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.440280][ T8404] bridge0: port 3(gretap0) entered disabled state [ 180.457263][ T8404] gretap0: entered allmulticast mode [ 180.463640][ T8404] gretap0: entered promiscuous mode [ 180.562739][ T8413] loop4: detected capacity change from 0 to 512 [ 180.594015][ T8413] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #12: comm syz.4.1480: corrupted in-inode xattr: bad e_name length [ 180.633611][ T8413] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 180.640333][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 180.656054][ C0] EXT4-fs (loop4): initial error at time 1772032676: ext4_iget_extra_inode:5025: inode 12 [ 180.666023][ C0] EXT4-fs (loop4): last error at time 1772032676: ext4_iget_extra_inode:5025: inode 12 [ 180.686615][ T8413] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1480: couldn't read orphan inode 12 (err -117) [ 180.708668][ T8413] loop4: lost filesystem error report for type 5 error -117 [ 180.709278][ T8413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.911079][ T8431] loop3: detected capacity change from 0 to 512 [ 181.110128][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.120473][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.194328][ T8449] FAULT_INJECTION: forcing a failure. [ 181.194328][ T8449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.207624][ T8449] CPU: 1 UID: 0 PID: 8449 Comm: syz.6.1492 Tainted: G W syzkaller #0 PREEMPT(full) [ 181.207658][ T8449] Tainted: [W]=WARN [ 181.207664][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.207700][ T8449] Call Trace: [ 181.207708][ T8449] [ 181.207716][ T8449] __dump_stack+0x1d/0x30 [ 181.207744][ T8449] dump_stack_lvl+0x95/0xd0 [ 181.207765][ T8449] dump_stack+0x15/0x1b [ 181.207786][ T8449] should_fail_ex+0x263/0x280 [ 181.207809][ T8449] should_fail+0xb/0x20 [ 181.207892][ T8449] should_fail_usercopy+0x1a/0x20 [ 181.207917][ T8449] _copy_from_user+0x1c/0xb0 [ 181.207977][ T8449] ucma_write+0xd8/0x260 [ 181.208006][ T8449] vfs_writev+0x42b/0x900 [ 181.208030][ T8449] ? __pfx_ucma_write+0x10/0x10 [ 181.208078][ T8449] do_writev+0xe9/0x210 [ 181.208102][ T8449] __x64_sys_writev+0x45/0x50 [ 181.208141][ T8449] x64_sys_call+0x1c0c/0x3020 [ 181.208167][ T8449] do_syscall_64+0x12c/0x370 [ 181.208207][ T8449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.208228][ T8449] RIP: 0033:0x7ff486bdc629 [ 181.208291][ T8449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.208308][ T8449] RSP: 002b:00007ff485637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 181.208331][ T8449] RAX: ffffffffffffffda RBX: 00007ff486e55fa0 RCX: 00007ff486bdc629 [ 181.208343][ T8449] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000015 [ 181.208382][ T8449] RBP: 00007ff485637090 R08: 0000000000000000 R09: 0000000000000000 [ 181.208396][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.208407][ T8449] R13: 00007ff486e56038 R14: 00007ff486e55fa0 R15: 00007fff25b1bf78 [ 181.208506][ T8449] [ 181.385298][ T8383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.080669][ T8466] siw: device registration error -23 [ 182.089172][ T8466] loop5: detected capacity change from 0 to 512 [ 182.736422][ T8468] loop4: detected capacity change from 0 to 512 [ 182.746543][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.811368][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1501'. [ 182.844166][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1501'. [ 183.236018][ T8493] xt_hashlimit: size too large, truncated to 1048576 [ 183.658209][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.771178][ T28] audit: type=1400 audit(1772032679.346:662): avc: denied { read } for pid=8497 comm="syz.4.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.772863][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.967710][ T8516] x_tables: duplicate underflow at hook 2 [ 184.028239][ T8517] loop3: detected capacity change from 0 to 512 [ 184.225376][ T8530] FAULT_INJECTION: forcing a failure. [ 184.225376][ T8530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.303342][ T28] audit: type=1400 audit(1772032679.546:663): avc: denied { getopt } for pid=8515 comm="syz.6.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.347578][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1521'. [ 184.369619][ T28] audit: type=1400 audit(1772032679.546:664): avc: denied { read } for pid=8515 comm="syz.6.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.400733][ T8382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.401804][ T8536] loop3: detected capacity change from 0 to 512 [ 184.417555][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.6.1521 Tainted: G W syzkaller #0 PREEMPT(full) [ 184.417649][ T8530] Tainted: [W]=WARN [ 184.417657][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.417727][ T8530] Call Trace: [ 184.417733][ T8530] [ 184.417740][ T8530] __dump_stack+0x1d/0x30 [ 184.417765][ T8530] dump_stack_lvl+0x95/0xd0 [ 184.417862][ T8530] dump_stack+0x15/0x1b [ 184.417884][ T8530] should_fail_ex+0x263/0x280 [ 184.417947][ T8530] should_fail+0xb/0x20 [ 184.418002][ T8530] should_fail_usercopy+0x1a/0x20 [ 184.418027][ T8530] _copy_from_user+0x1c/0xb0 [ 184.418053][ T8530] ___sys_sendmsg+0xc1/0x1e0 [ 184.418127][ T8530] __x64_sys_sendmsg+0xd4/0x160 [ 184.418158][ T8530] x64_sys_call+0x194c/0x3020 [ 184.418185][ T8530] do_syscall_64+0x12c/0x370 [ 184.418249][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.418286][ T8530] RIP: 0033:0x7ff486bdc629 [ 184.418364][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.418381][ T8530] RSP: 002b:00007ff485616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.418403][ T8530] RAX: ffffffffffffffda RBX: 00007ff486e56090 RCX: 00007ff486bdc629 [ 184.418416][ T8530] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 184.418430][ T8530] RBP: 00007ff485616090 R08: 0000000000000000 R09: 0000000000000000 [ 184.418486][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.418508][ T8530] R13: 00007ff486e56128 R14: 00007ff486e56090 R15: 00007fff25b1bf78 [ 184.418528][ T8530] [ 184.691304][ T8536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.719279][ T8536] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 184.741209][ T8536] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 184.752852][ T8382] lo speed is unknown, defaulting to 1000 [ 184.758631][ T8382] syz0: Port: 1 Link DOWN [ 184.783448][ T8381] lo speed is unknown, defaulting to 1000 [ 184.805143][ T28] audit: type=1400 audit(1772032680.376:665): avc: denied { connect } for pid=8524 comm="syz.4.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 184.883410][ T28] audit: type=1400 audit(1772032680.406:666): avc: denied { write } for pid=8524 comm="syz.4.1520" lport=48308 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 184.989281][ T28] audit: type=1400 audit(1772032680.406:667): avc: denied { getopt } for pid=8524 comm="syz.4.1520" lport=48308 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 184.994400][ T8536] batman_adv: batadv0: Interface deactivated: dummy0 [ 185.026922][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.114619][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.135221][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.198041][ T8536] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 185.375907][ T28] audit: type=1326 audit(1772032680.956:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.0.1529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2932dac629 code=0x0 [ 185.469657][ T8383] lo speed is unknown, defaulting to 1000 [ 185.479040][ T8566] tipc: Enabling of bearer rejected, failed to enable media [ 185.503447][ T5307] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.537451][ T5307] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.568696][ T5307] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.605814][ T5307] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.621390][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.982453][ T28] audit: type=1400 audit(1772032681.556:669): avc: denied { setattr } for pid=8600 comm="syz.3.1539" name="RAW" dev="sockfs" ino=23044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.090595][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.152470][ T8605] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.258194][ T8614] loop4: detected capacity change from 0 to 512 [ 186.283361][ T8614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.491008][ T8614] netlink: 'syz.4.1543': attribute type 4 has an invalid length. [ 186.532473][ T8614] netlink: 'syz.4.1543': attribute type 4 has an invalid length. [ 186.647417][ T8614] batman_adv: batadv0: Interface deactivated: dummy0 [ 186.825877][ T8623] loop3: detected capacity change from 0 to 1024 [ 187.029362][ T8623] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 187.094981][ T8623] System zones: 0-1, 3-36 [ 187.148993][ T8623] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1544: bad orphan inode 134217728 [ 187.194388][ T6890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.224606][ T8623] loop3: lost filesystem error report for type 5 error -117 [ 187.226281][ T8623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.307397][ T5345] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.327170][ T8623] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1544'. [ 187.336604][ T5345] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.372370][ T5345] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.388560][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.398664][ T5345] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.461961][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.579127][ T8647] loop5: detected capacity change from 0 to 8192 [ 187.592219][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.603208][ T8647] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.897165][ T28] audit: type=1400 audit(1772032683.476:670): avc: denied { accept } for pid=8663 comm="syz.4.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 188.031155][ T8678] netlink: 642 bytes leftover after parsing attributes in process `syz.6.1564'. [ 188.220371][ T28] audit: type=1326 audit(1772032683.796:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8684 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff486bdc629 code=0x7ffc0000 [ 188.244061][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.304026][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1567'. [ 188.542404][ T8686] xt_hashlimit: size too large, truncated to 1048576 [ 188.991751][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 188.991764][ T28] audit: type=1400 audit(1772032684.576:745): avc: denied { create } for pid=8720 comm="syz.0.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 189.051257][ T8719] loop5: detected capacity change from 0 to 1024 [ 189.062374][ T8719] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 189.070920][ T8719] System zones: 0-1, 3-36 [ 189.076873][ T8719] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1579: bad orphan inode 134217728 [ 189.087792][ T8719] loop5: lost filesystem error report for type 5 error -117 [ 189.088684][ T8719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.113990][ T5334] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.280449][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.817344][ T3999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.892642][ T8746] veth0_macvtap: left promiscuous mode [ 189.898247][ T8746] veth0_macvtap: entered promiscuous mode [ 189.931964][ T8746] veth0_macvtap: entered allmulticast mode [ 190.334652][ T8755] xt_hashlimit: size too large, truncated to 1048576 [ 190.530639][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.744672][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.965470][ T8769] netlink: 'syz.3.1598': attribute type 13 has an invalid length. [ 191.120543][ T3746] Bluetooth: hci0: command 0x1003 tx timeout [ 191.126573][ T5691] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.300093][ T8772] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.007103][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.146161][ T8811] xt_hashlimit: size too large, truncated to 1048576 [ 192.846162][ T8821] loop3: detected capacity change from 0 to 512 [ 192.961215][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.157579][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.440832][ T8834] loop4: detected capacity change from 0 to 8192 [ 194.033884][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.150364][ T8868] loop3: detected capacity change from 0 to 512 [ 194.464510][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.591905][ T8870] FAULT_INJECTION: forcing a failure. [ 194.591905][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.723400][ T8870] CPU: 0 UID: 0 PID: 8870 Comm: syz.0.1631 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.723472][ T8870] Tainted: [W]=WARN [ 194.723479][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.723490][ T8870] Call Trace: [ 194.723496][ T8870] [ 194.723502][ T8870] __dump_stack+0x1d/0x30 [ 194.723530][ T8870] dump_stack_lvl+0x95/0xd0 [ 194.723575][ T8870] dump_stack+0x15/0x1b [ 194.723597][ T8870] should_fail_ex+0x263/0x280 [ 194.723623][ T8870] should_fail+0xb/0x20 [ 194.723639][ T8870] should_fail_usercopy+0x1a/0x20 [ 194.723658][ T8870] _copy_to_iter+0x251/0xea0 [ 194.723696][ T8870] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 194.723720][ T8870] __skb_datagram_iter+0xc6/0x680 [ 194.723742][ T8870] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 194.723767][ T8870] skb_copy_datagram_iter+0x3f/0x120 [ 194.723842][ T8870] netlink_recvmsg+0x1a8/0x550 [ 194.723917][ T8870] ? __pfx_netlink_recvmsg+0x10/0x10 [ 194.724003][ T8870] sock_recvmsg+0x139/0x160 [ 194.724019][ T8870] ____sys_recvmsg+0xf5/0x280 [ 194.724047][ T8870] ___sys_recvmsg+0x11f/0x3b0 [ 194.724084][ T8870] do_recvmmsg+0x1ef/0x560 [ 194.724220][ T8870] ? get_timespec64+0xd2/0x100 [ 194.724242][ T8870] __x64_sys_recvmmsg+0xfb/0x170 [ 194.724266][ T8870] x64_sys_call+0x80f/0x3020 [ 194.724342][ T8870] do_syscall_64+0x12c/0x370 [ 194.724437][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.724458][ T8870] RIP: 0033:0x7f2932dac629 [ 194.724473][ T8870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.724488][ T8870] RSP: 002b:00007f29317ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 194.724584][ T8870] RAX: ffffffffffffffda RBX: 00007f2933025fa0 RCX: 00007f2932dac629 [ 194.724598][ T8870] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 194.724613][ T8870] RBP: 00007f29317ff090 R08: 0000200000003700 R09: 0000000000000000 [ 194.724628][ T8870] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 194.724641][ T8870] R13: 00007f2933026038 R14: 00007f2933025fa0 R15: 00007ffd72b9c938 [ 194.724661][ T8870] [ 195.525599][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.732996][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1654'. [ 196.022274][ T8918] siw: device registration error -23 [ 196.031174][ T8918] loop5: detected capacity change from 0 to 512 [ 196.050805][ T8945] loop3: detected capacity change from 0 to 4096 [ 196.106404][ T28] audit: type=1326 audit(1772032691.686:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 196.130940][ T28] audit: type=1326 audit(1772032691.686:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 196.154624][ T28] audit: type=1326 audit(1772032691.686:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 196.186174][ T8934] No such timeout policy "syz1" [ 196.195876][ T8945] loop3: detected capacity change from 0 to 128 [ 196.201904][ T28] audit: type=1326 audit(1772032691.686:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 196.240928][ T8945] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.256410][ T28] audit: type=1326 audit(1772032691.686:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 196.280711][ T8945] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.313264][ T28] audit: type=1326 audit(1772032691.686:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 196.336961][ T28] audit: type=1326 audit(1772032691.686:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 196.361698][ T8945] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.362167][ T28] audit: type=1326 audit(1772032691.686:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 196.394252][ T28] audit: type=1326 audit(1772032691.686:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 196.417666][ T28] audit: type=1326 audit(1772032691.686:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7ff6dcf9c629 code=0x7ffc0000 [ 197.004102][ T8556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.040479][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.184067][ T8980] FAULT_INJECTION: forcing a failure. [ 197.184067][ T8980] name failslab, interval 1, probability 0, space 0, times 0 [ 197.259436][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.3.1675 Tainted: G W syzkaller #0 PREEMPT(full) [ 197.259466][ T8980] Tainted: [W]=WARN [ 197.259472][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.259483][ T8980] Call Trace: [ 197.259489][ T8980] [ 197.259532][ T8980] __dump_stack+0x1d/0x30 [ 197.259559][ T8980] dump_stack_lvl+0x95/0xd0 [ 197.259659][ T8980] dump_stack+0x15/0x1b [ 197.259713][ T8980] should_fail_ex+0x263/0x280 [ 197.259735][ T8980] ? init_srcu_struct_fields+0x57/0x600 [ 197.259762][ T8980] should_failslab+0x8c/0xb0 [ 197.259860][ T8980] __kmalloc_cache_noprof+0x5f/0x410 [ 197.259886][ T8980] init_srcu_struct_fields+0x57/0x600 [ 197.259909][ T8980] ? __kmalloc_noprof+0x1e3/0x4e0 [ 197.259931][ T8980] init_srcu_struct+0x23/0x30 [ 197.259983][ T8980] hci_alloc_dev_priv+0x35/0xe70 [ 197.260007][ T8980] hci_uart_tty_ioctl+0x28b/0x5c0 [ 197.260100][ T8980] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 197.260123][ T8980] tty_ioctl+0x83e/0xb80 [ 197.260145][ T8980] ? __pfx_tty_ioctl+0x10/0x10 [ 197.260176][ T8980] __se_sys_ioctl+0xce/0x140 [ 197.260244][ T8980] __x64_sys_ioctl+0x43/0x50 [ 197.260273][ T8980] x64_sys_call+0x1563/0x3020 [ 197.260301][ T8980] do_syscall_64+0x12c/0x370 [ 197.260334][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.260390][ T8980] RIP: 0033:0x7ff6dcf9c629 [ 197.260408][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.260424][ T8980] RSP: 002b:00007ff6db9ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.260525][ T8980] RAX: ffffffffffffffda RBX: 00007ff6dd215fa0 RCX: 00007ff6dcf9c629 [ 197.260540][ T8980] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 197.260551][ T8980] RBP: 00007ff6db9ef090 R08: 0000000000000000 R09: 0000000000000000 [ 197.260565][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.260607][ T8980] R13: 00007ff6dd216038 R14: 00007ff6dd215fa0 R15: 00007ffd2b48c038 [ 197.260653][ T8980] [ 197.580562][ T8980] Bluetooth: Can't allocate HCI device [ 198.095083][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.697214][ T9026] syzkaller0: entered promiscuous mode [ 198.722728][ T9026] syzkaller0: entered allmulticast mode [ 198.974617][ T9033] loop3: detected capacity change from 0 to 128 [ 198.994416][ T9033] FAT-fs (loop3): Directory bread(block 162) failed [ 199.027808][ T9033] FAT-fs (loop3): Directory bread(block 163) failed [ 199.035352][ T9033] FAT-fs (loop3): Directory bread(block 164) failed [ 199.049519][ T9033] FAT-fs (loop3): Directory bread(block 165) failed [ 199.057014][ T9033] FAT-fs (loop3): Directory bread(block 166) failed [ 199.063936][ T9033] FAT-fs (loop3): Directory bread(block 167) failed [ 199.070881][ T9033] FAT-fs (loop3): Directory bread(block 168) failed [ 199.077567][ T9033] FAT-fs (loop3): Directory bread(block 169) failed [ 199.184740][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.193608][ T9033] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.205128][ T9033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1698'. [ 199.270808][ T9040] vhci_hcd vhci_hcd.3: invalid port number 9 [ 200.053719][ T9074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.063644][ T9074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.081122][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.243320][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.633097][ T9093] loop7: detected capacity change from 0 to 7 [ 200.639676][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.649315][ C0] buffer_io_error: 20 callbacks suppressed [ 200.649332][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.665456][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.675423][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.684162][ T9093] loop7: unable to read partition table [ 200.728265][ T9093] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 200.731488][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.751305][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.769488][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.779090][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.787352][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.797054][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.812602][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.822780][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.834894][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.845386][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.863466][ T9103] netlink: 'syz.6.1726': attribute type 2 has an invalid length. [ 200.903021][ T9103] lo speed is unknown, defaulting to 1000 [ 200.909218][ T9103] lo speed is unknown, defaulting to 1000 [ 200.932680][ T9109] batman_adv: batadv0: Removing interface: dummy0 [ 200.944558][ T9109] bridge_slave_0: left allmulticast mode [ 200.950219][ T9109] bridge_slave_0: left promiscuous mode [ 200.976323][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.986379][ T9109] bridge_slave_1: left allmulticast mode [ 200.992141][ T9109] bridge_slave_1: left promiscuous mode [ 200.997855][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.017191][ T9109] bond0: (slave bond_slave_0): Releasing backup interface [ 201.032924][ T9109] bond0: (slave bond_slave_1): Releasing backup interface [ 201.052276][ T9109] team0: Port device team_slave_0 removed [ 201.058900][ T9109] team0: Port device team_slave_1 removed [ 201.065098][ T9109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.075672][ T9109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.083395][ T9109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.121061][ T9114] team0: Mode changed to "loadbalance" [ 201.269780][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 201.269796][ T28] audit: type=1400 audit(1772032696.846:801): avc: denied { map } for pid=9130 comm="syz.0.1738" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.303124][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.567653][ T9150] xt_hashlimit: size too large, truncated to 1048576 [ 202.149090][ T9159] loop5: detected capacity change from 0 to 1024 [ 202.180428][ T9159] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 202.189208][ T9159] System zones: 0-1, 3-36 [ 202.196511][ T9159] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1746: bad orphan inode 134217728 [ 202.207503][ T9159] loop5: lost filesystem error report for type 5 error -117 [ 202.207987][ T9159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.248741][ T9166] loop3: detected capacity change from 0 to 1024 [ 202.256070][ T9166] EXT4-fs: inline encryption not supported [ 202.270988][ T9163] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1748'. [ 202.297060][ T9166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.325964][ T9168] loop4: detected capacity change from 0 to 8192 [ 202.346629][ T28] audit: type=1326 audit(1772032697.926:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd80c629 code=0x7ffc0000 [ 202.372753][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.387846][ T28] audit: type=1326 audit(1772032697.926:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd80c629 code=0x7ffc0000 [ 202.425055][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.426382][ T28] audit: type=1326 audit(1772032697.926:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd80c629 code=0x7ffc0000 [ 202.457598][ T28] audit: type=1326 audit(1772032697.926:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3bd80c629 code=0x7ffc0000 [ 202.480968][ T28] audit: type=1326 audit(1772032697.926:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd80c629 code=0x7ffc0000 [ 202.504425][ T28] audit: type=1326 audit(1772032697.926:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd80c629 code=0x7ffc0000 [ 202.528832][ T28] audit: type=1326 audit(1772032697.926:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd80c629 code=0x7ffc0000 [ 202.552303][ T28] audit: type=1326 audit(1772032697.966:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3bd80c629 code=0x7ffc0000 [ 202.575714][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.576022][ T28] audit: type=1326 audit(1772032697.966:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd80c629 code=0x7ffc0000 [ 202.624082][ T9181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.643340][ T9181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.710854][ T9168] bio_check_eod: 34 callbacks suppressed [ 202.710864][ T9168] syz.4.1750: attempt to access beyond end of device [ 202.710864][ T9168] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 202.731029][ T9168] Buffer I/O error on dev loop4, logical block 57847, async page read [ 202.739496][ T9168] syz.4.1750: attempt to access beyond end of device [ 202.739496][ T9168] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 202.753438][ T9168] Buffer I/O error on dev loop4, logical block 57847, async page read [ 202.770678][ T9168] syz.4.1750: attempt to access beyond end of device [ 202.770678][ T9168] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 202.785580][ T9168] Buffer I/O error on dev loop4, logical block 57847, async page read [ 202.801180][ T9168] syz.4.1750: attempt to access beyond end of device [ 202.801180][ T9168] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 202.829375][ T9168] syz.4.1750: attempt to access beyond end of device [ 202.829375][ T9168] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 202.851385][ T9168] syz.4.1750: attempt to access beyond end of device [ 202.851385][ T9168] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 202.931609][ T3999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.984418][ T9197] binfmt_misc: register: failed to install interpreter file ./file0 [ 203.057164][ T9198] tipc: Failed to remove unknown binding: 66,1,1/0:1002207310/1002207312 [ 203.066569][ T9198] tipc: Failed to remove unknown binding: 66,1,1/0:1002207310/1002207312 [ 203.120441][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.803119][ T9209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.823632][ T9209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.844634][ T9209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.981199][ T9206] loop3: detected capacity change from 0 to 512 [ 205.175952][ T9225] loop3: detected capacity change from 0 to 1024 [ 205.280748][ T8552] net_ratelimit: 4 callbacks suppressed [ 205.280762][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.318449][ T9225] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 205.333336][ T9225] System zones: 0-1, 3-36 [ 205.360702][ T9225] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1770: bad orphan inode 134217728 [ 205.408631][ T9225] loop3: lost filesystem error report for type 5 error -117 [ 205.409783][ T9225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.463572][ T9233] loop4: detected capacity change from 0 to 1024 [ 205.513384][ T9233] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 205.522580][ T9233] System zones: 0-1, 3-36 [ 205.537474][ T9233] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1773: bad orphan inode 134217728 [ 205.550540][ T9233] loop4: lost filesystem error report for type 5 error -117 [ 205.551491][ T9233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.583707][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.621936][ T9239] hub 9-0:1.0: USB hub found [ 205.635331][ T9239] hub 9-0:1.0: 8 ports detected [ 205.651575][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.881966][ T9246] binfmt_misc: register: failed to install interpreter file ./file0 [ 205.932452][ T9251] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 205.969901][ T9254] tipc: Failed to remove unknown binding: 66,1,1/0:2252323138/2252323140 [ 205.991553][ T9254] tipc: Failed to remove unknown binding: 66,1,1/0:2252323138/2252323140 [ 206.098402][ T9253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.118123][ T9253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.140824][ T9253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.151654][ T9253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.160457][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.179232][ T9253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.204338][ T9253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.228676][ T9253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.253232][ T9253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.956525][ T9270] loop3: detected capacity change from 0 to 1024 [ 207.008241][ T9270] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 207.017492][ T9270] System zones: 0-1, 3-36 [ 207.027457][ T9270] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1786: bad orphan inode 134217728 [ 207.039373][ T9270] loop3: lost filesystem error report for type 5 error -117 [ 207.040401][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 207.054452][ C0] EXT4-fs (loop3): initial error at time 1772032702: ext4_orphan_get:1417 [ 207.064072][ C0] EXT4-fs (loop3): last error at time 1772032702: ext4_orphan_get:1417 [ 207.071488][ T9270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.168674][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.177781][ T28] kauditd_printk_skb: 1179 callbacks suppressed [ 207.177795][ T28] audit: type=1400 audit(1772032702.746:1990): avc: denied { mounton } for pid=9273 comm="syz.6.1787" path="/file0" dev="ramfs" ino=25675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 207.265965][ T9279] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1787'. [ 207.350369][ T9279] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1787'. [ 207.418754][ T28] audit: type=1400 audit(1772032702.976:1991): avc: denied { mounton } for pid=9289 comm="syz.3.1793" path="/355/file0" dev="tmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 207.610523][ T9297] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1796'. [ 207.714734][ T9302] xt_hashlimit: size too large, truncated to 1048576 [ 207.932545][ T9297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12833 sclass=netlink_route_socket pid=9297 comm=syz.6.1796 [ 208.052299][ T9301] lo speed is unknown, defaulting to 1000 [ 208.055366][ T9301] lo speed is unknown, defaulting to 1000 [ 208.143009][ T9310] loop4: detected capacity change from 0 to 1024 [ 208.197135][ T9310] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 208.205504][ T9310] System zones: 0-1, 3-36 [ 208.210842][ T9310] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1799: bad orphan inode 134217728 [ 208.221715][ T9310] loop4: lost filesystem error report for type 5 error -117 [ 208.222382][ T9310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.258285][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 208.350253][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.388762][ T28] audit: type=1326 audit(1772032703.956:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2932dac629 code=0x7ffc0000 [ 208.436542][ T28] audit: type=1326 audit(1772032703.956:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2932dac629 code=0x7ffc0000 [ 208.473771][ T28] audit: type=1326 audit(1772032703.956:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2932dac629 code=0x7ffc0000 [ 208.497826][ T28] audit: type=1326 audit(1772032703.966:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2932dac629 code=0x7ffc0000 [ 208.528664][ T28] audit: type=1326 audit(1772032703.966:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2932dac629 code=0x7ffc0000 [ 208.537561][ T9325] lo speed is unknown, defaulting to 1000 [ 208.552682][ T28] audit: type=1326 audit(1772032703.966:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2932dac629 code=0x7ffc0000 [ 208.559887][ T9325] lo speed is unknown, defaulting to 1000 [ 208.581765][ T28] audit: type=1326 audit(1772032703.966:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2932dac629 code=0x7ffc0000 [ 208.611108][ T9342] netlink: 'syz.6.1811': attribute type 32 has an invalid length. [ 208.612579][ T28] audit: type=1326 audit(1772032703.966:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2932dac629 code=0x7ffc0000 [ 208.619077][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1811'. [ 208.674530][ T9342] bond1: Setting coupled_control to off (0) [ 209.431995][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 209.626582][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'. [ 209.833098][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.842044][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.856745][ T9411] loop3: detected capacity change from 0 to 1024 [ 209.863595][ T9411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.872171][ T9411] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 209.880385][ T9411] System zones: 0-1, 3-36 [ 209.885844][ T9411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.568035][ T8552] net_ratelimit: 38 callbacks suppressed [ 210.568049][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.771221][ T9456] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1855'. [ 210.883842][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.008202][ T9464] loop3: detected capacity change from 0 to 128 [ 211.601467][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.886722][ T9459] loop5: detected capacity change from 0 to 4096 [ 212.445916][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.455097][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.544655][ T9459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.650612][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.696837][ T9501] loop4: detected capacity change from 0 to 1024 [ 212.720108][ T9501] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 212.728621][ T9501] System zones: 0-1, 3-36 [ 212.734209][ T9501] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1872: bad orphan inode 134217728 [ 212.760407][ T9501] loop4: lost filesystem error report for type 5 error -117 [ 212.761029][ T9501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.796071][ T3999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.846343][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 212.861160][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 212.870465][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.230394][ T9528] loop5: detected capacity change from 0 to 128 [ 213.237378][ T9528] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.969726][ T9530] loop3: detected capacity change from 0 to 512 [ 213.978957][ T9528] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.043338][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.230198][ T9541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1887'. [ 214.435647][ T9555] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 214.462292][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1891'. [ 214.471758][ T9556] netlink: 'syz.6.1891': attribute type 1 has an invalid length. [ 214.479535][ T9556] netlink: 'syz.6.1891': attribute type 2 has an invalid length. [ 214.490605][ T9557] nfs: Unknown parameter '' [ 214.600646][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 214.600659][ T28] audit: type=1400 audit(1772032710.186:2071): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 215.125631][ T8556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.522041][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.642477][ T9591] syzkaller0: entered promiscuous mode [ 215.656902][ T9591] syzkaller0: entered allmulticast mode [ 216.101492][ T9598] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1907'. [ 216.120524][ T9598] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1907'. [ 216.173365][ T8556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.275568][ T9601] loop4: detected capacity change from 0 to 1024 [ 216.290890][ T9601] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.307451][ T9601] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.404333][ T9601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.605199][ T9601] EXT4-fs error (device loop4): __ext4_iget:5378: inode #12: block 13: comm syz.4.1909: invalid block [ 216.618519][ T9601] EXT4-fs (loop4): Remounting filesystem read-only [ 216.643608][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.759405][ T28] audit: type=1326 audit(1772032712.336:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.4.1912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd80c629 code=0x0 [ 217.751160][ T9630] loop4: detected capacity change from 0 to 128 [ 217.766855][ T9630] tmpfs: Bad value for 'mpol' [ 217.931960][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.993428][ T9628] loop3: detected capacity change from 0 to 2048 [ 218.001229][ T9636] siw: device registration error -23 [ 218.153045][ T9628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.192410][ T9642] loop4: detected capacity change from 0 to 1024 [ 218.324403][ T9642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.560767][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.622787][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.634639][ T9651] loop5: detected capacity change from 0 to 128 [ 218.641834][ T9651] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.654310][ T9651] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.763032][ T9653] x_tables: duplicate underflow at hook 1 [ 219.040960][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.062827][ T28] audit: type=1400 audit(1772032714.646:2073): avc: denied { create } for pid=9657 comm="syz.0.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.149103][ T9631] ================================================================== [ 219.157211][ T9631] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 219.164529][ T9631] [ 219.166850][ T9631] read-write to 0xffffc90000e3be28 of 8 bytes by task 9630 on cpu 0: [ 219.175080][ T9631] shmem_writeout+0x2f1/0x920 [ 219.179857][ T9631] shrink_folio_list+0x1f1f/0x2820 [ 219.184980][ T9631] evict_folios+0x2a60/0x35c0 [ 219.189661][ T9631] try_to_shrink_lruvec+0x81b/0xbf0 [ 219.195041][ T9631] shrink_lruvec+0x255/0x1c60 [ 219.199738][ T9631] shrink_node+0x67a/0x2130 [ 219.204237][ T9631] do_try_to_free_pages+0x408/0xc80 [ 219.209477][ T9631] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 219.215374][ T9631] try_charge_memcg+0x37e/0xa10 [ 219.220239][ T9631] obj_cgroup_charge_pages+0x23/0xc0 [ 219.225711][ T9631] __memcg_kmem_charge_page+0x9e/0x170 [ 219.231187][ T9631] __alloc_frozen_pages_noprof+0x18a/0x360 [ 219.236988][ T9631] alloc_pages_mpol+0xb3/0x260 [ 219.241762][ T9631] alloc_pages_noprof+0x8f/0x130 [ 219.246797][ T9631] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 219.252698][ T9631] __kvmalloc_node_noprof+0x3d4/0x650 [ 219.258166][ T9631] ip_set_alloc+0x24/0x30 [ 219.262505][ T9631] hash_netiface_create+0x282/0x740 [ 219.267878][ T9631] ip_set_create+0x3cf/0x970 [ 219.272567][ T9631] nfnetlink_rcv_msg+0x509/0x5d0 [ 219.277525][ T9631] netlink_rcv_skb+0x123/0x220 [ 219.282307][ T9631] nfnetlink_rcv+0x167/0x1720 [ 219.286991][ T9631] netlink_unicast+0x5c0/0x690 [ 219.291770][ T9631] netlink_sendmsg+0x5c8/0x6f0 [ 219.296545][ T9631] ____sys_sendmsg+0x5af/0x600 [ 219.301406][ T9631] ___sys_sendmsg+0x195/0x1e0 [ 219.306084][ T9631] __x64_sys_sendmsg+0xd4/0x160 [ 219.310935][ T9631] x64_sys_call+0x194c/0x3020 [ 219.315643][ T9631] do_syscall_64+0x12c/0x370 [ 219.320243][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.326132][ T9631] [ 219.328442][ T9631] read to 0xffffc90000e3be28 of 8 bytes by task 9631 on cpu 1: [ 219.335971][ T9631] shmem_fallocate+0x5c0/0x920 [ 219.340737][ T9631] vfs_fallocate+0x3b6/0x450 [ 219.345328][ T9631] __x64_sys_fallocate+0x7a/0xd0 [ 219.350261][ T9631] x64_sys_call+0x298e/0x3020 [ 219.354938][ T9631] do_syscall_64+0x12c/0x370 [ 219.359582][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.365478][ T9631] [ 219.367786][ T9631] value changed: 0x0000000000000ea8 -> 0x0000000000000ead [ 219.374879][ T9631] [ 219.377188][ T9631] Reported by Kernel Concurrency Sanitizer on: [ 219.383415][ T9631] CPU: 1 UID: 0 PID: 9631 Comm: syz.4.1918 Tainted: G W syzkaller #0 PREEMPT(full) [ 219.394262][ T9631] Tainted: [W]=WARN [ 219.398053][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.408100][ T9631] ================================================================== [ 219.972353][ T9642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.080399][ T8556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.278632][ T9630] syz.4.1918 (9630) used greatest stack depth: 7208 bytes left [ 221.120609][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.601030][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.760503][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.160537][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.210500][ T8556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.240714][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.641625][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.280512][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.320453][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.370458][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.680635][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.410955][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog