last executing test programs: 2m25.615844978s ago: executing program 1 (id=2): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x205, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000d00)='./file1\x00', 0x10010c6, &(0x7f0000000940)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@quota}, {@mblk_io_submit}, {@nombcache}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x20}, 0x41) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x15) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$inet6(0xa, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4f0000d144b3", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x14004000) r5 = socket(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000000006"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x4, 0x0, [0xc3cf, 0x10001, 0x480000000, 0xfffffffffffffffd, 0xffffffff00000001, 0x5], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) perf_event_open(&(0x7f0000000840)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc0f9d, 0x0, 0x11000, 0x2, 0x3, 0x80000001, 0x0, 0x0, 0x80000000, 0x0, 0xc0}, 0x0, 0xdffffffffffffffe, 0xffffffffffffffff, 0xb) 2m24.446087646s ago: executing program 1 (id=16): r0 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1a00805, &(0x7f0000000900)=ANY=[@ANYBLOB='iocharset=iso8859-5,check=strict,session=0x0000000000000033,overriderockperm,map=off,iocharset=cp850,nocompress,nojoliet,dmode=0x0000000000000008,norock,mode=0x0000000000000f10,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c626c6f636b3d3078303030303030303030303430302c000000008ad60ce8c41ca9f494b20105d3ae6466cc4101ddc2559fb0938c3a0dfbb6438e671e9a4cfe00a9ba486787f448f7303a1ddacecb68bcffea138db3704c5f2574848177675e440e7b3c3eec741f1ca7b78b79f2a38246fdda4cc5935630004caa753e60f9685e8d949c7402bb88f243f42bdf53fd8731913427c4f57af403a6"], 0x0, 0x417, &(0x7f0000000240)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40000, 0x0) getdents(r1, &(0x7f0000002080)=""/4096, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setregid(r2, r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") fchownat(r0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x1000) 2m24.291410463s ago: executing program 1 (id=17): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x21, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="850f93d2681ea35381e07cb2b94d21688eaf8160bd278231bb613ec83ea4daa76d", 0x0, 0x0, 0x30520cf7f25f0c64, 0x2, 0x0}) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2m19.132725479s ago: executing program 1 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000008000000000004800000180100002020641b9b43a805c98ac687399aa65899712500000000002020207b1af8ff00000000bfa808000000000047010000f6ffffffb702000000000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x1, 0x6, &(0x7f0000000000)=""/6, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c00000000100000020000003c0001802c000180140003002001000000000000000000000000000214000400ff0100000000000000000000000800010c0002800500010000000000080003400000100e13000480"], 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x9000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec8, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0xe1c, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec8}}, 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) 2m19.09855642s ago: executing program 32 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000008000000000004800000180100002020641b9b43a805c98ac687399aa65899712500000000002020207b1af8ff00000000bfa808000000000047010000f6ffffffb702000000000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x1, 0x6, &(0x7f0000000000)=""/6, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c00000000100000020000003c0001802c000180140003002001000000000000000000000000000214000400ff0100000000000000000000000800010c0002800500010000000000080003400000100e13000480"], 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x9000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec8, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0xe1c, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec8}}, 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) 29.595302984s ago: executing program 4 (id=1308): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000580)="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", 0x1000) 29.595056584s ago: executing program 4 (id=1309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18030000000000000000000000070000851000000600000018000000110000000000000000010000650000000000000018000000000000200000000000000000950000000000000054030000f996141cb6c0cf5938ffffffffffff9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) 29.48288247s ago: executing program 4 (id=1312): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)='k', 0x1}], 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000018003107feffffff000000000a0014000000d2c3c16832530bda1700ffffffff0800060004000000"], 0x2c}}, 0x40) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r5, &(0x7f00000002c0)="b4f455bf7c36134c4b8ffd0edf03904bbbcf1fb3471318cb424f99ed2eaaf801cb5bbd51f7eb80f0ec9dda65cab2edaa9101a10eabe79706", 0x38, 0x14008952, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f00000003c0)='R\x10ru\x10\x04\x00\x00\x00\x00\x00\x00Vdx:De&]\x14`\xa4\xebD\xe6\\\x02A\x80\x8d\xa07\xffK\xf5|\xf9\x99N\xf3\x13\x1b\xf5\xe8\xc1xt=Y@\x83\x0e\xa7MgVn\xca?\xae\xbe\xbax\x93\x83\xffG\xa6\x1e\xbe\xc2 \x183=\x98\x83\xb9\xf9\x83\xf8h\x90r(\x7f\a\xde\x98\xed:3\x1a\xce\xe2\xe6\xbb\xe1\xd7mk-rG\xdf\xa0\x98\x14;_\xff', 0x0) r6 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x3) fchdir(r7) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(0xffffffffffffffff, 0x8, 0x1) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d72646d612c70ca9e9ad6dc71d5d9a29e576a2b9c0e146f72743d3078303030303030303030303030346532bf2c00"]) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x8) connect$inet(r9, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) 28.166203425s ago: executing program 4 (id=1322): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000940)='./bus\x00', 0x21081e, &(0x7f0000000980), 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) fcntl$lock(r0, 0x25, 0x0) syz_clone(0x100, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) 27.86520535s ago: executing program 4 (id=1326): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000580)='\x00', 0x1) 26.879156729s ago: executing program 4 (id=1332): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a30000000001c000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 26.878752559s ago: executing program 33 (id=1332): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a30000000001c000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 17.108912693s ago: executing program 2 (id=1421): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210003000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xc7}], 0x1}, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 16.986880589s ago: executing program 2 (id=1423): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x518, 0x1, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_EXP={0xa4, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x46}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8}]}, @NFQA_EXP={0x338, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0xec, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, @CTA_EXPECT_NAT={0x180, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb2}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6be}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_PAYLOAD={0x95, 0xa, "8292ee0012bfed474fd436a938cc75a378f87143628039a3ec1528fcde125bad01f38bb54f11dcd3bece3af3ec68c0aa9c2f937199d5905cc23d478b426f66f428074afcea21373fa8ca9bb01dc108db04839e7996510e866206f1c4368a2ff8fa4cf38e39e8a3dc6b1d9597ccfd28cda66a6ddd9c32629c8915ac4993844e5594c24048b7b175ac8e1ac301501c9dbb52"}, @NFQA_EXP={0x6c, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x143b6548}}]}, 0x518}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c800) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) (async) writev(r1, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 16.318878002s ago: executing program 2 (id=1430): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f0000000640), 0x4800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0xfffffffd) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x168) listen(r4, 0x8) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x1) r10 = socket$netlink(0x10, 0x3, 0x4) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x88005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r13, 0x8983, &(0x7f0000000180)={0x3, 'ip6gre0\x00', {0x7}, 0x5}) 16.024241197s ago: executing program 2 (id=1434): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB='dots,nfs,dots,nodots,uid=', @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x17b, &(0x7f0000000880)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) exit(0x1ff) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0xffffffffffffffff, 0x800000, 0x0, 0x2, 0x2, 0x9, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x14241, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x400000000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r3, 0x29, 0x22, &(0x7f0000000100)=r4, 0x120) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x64, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040004}, 0x588c0) 15.162491159s ago: executing program 2 (id=1439): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5c8, 0x6d91fb6102d8914c, 0x0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4050, 0xfd2, 0x0, 0x0, 0x0) 14.575185738s ago: executing program 2 (id=1447): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x14760, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x400, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x42758, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000090000000400000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000780), 0x1, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.526976491s ago: executing program 34 (id=1447): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x14760, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x400, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x42758, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000090000000400000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000780), 0x1, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.666543978s ago: executing program 5 (id=1576): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) request_key(0x0, &(0x7f0000002840)={'syz', 0x1}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') sendmsg$nl_route_sched(r2, 0x0, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.666186668s ago: executing program 0 (id=1577): perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2a, 0x1, 0xa, 0x40, 0x0, 0x7, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1.551350203s ago: executing program 5 (id=1578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) write$binfmt_script(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 1.330998934s ago: executing program 7 (id=1580): prlimit64(0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x80000000, 0x2}) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = open(&(0x7f0000000280)='.\x00', 0xa0880, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') setrlimit(0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet(0x2, 0x80000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/1367], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r3, 0x0, 0x3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0) 1.322533614s ago: executing program 3 (id=1581): r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.260507428s ago: executing program 0 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x28, r4, 0x325, 0xffffffff, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x20000000, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x94) 1.167566982s ago: executing program 3 (id=1583): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x7, 0x1}) openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_type(r4, &(0x7f0000000240), 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x86, 0x4, 0x8, 0x44, r1, 0x9, '\x00', 0x0, r2, 0x2, 0x1, 0x1}, 0x50) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x7, 0x1}) (async) openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) write$cgroup_type(r4, &(0x7f0000000240), 0x9) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x86, 0x4, 0x8, 0x44, r1, 0x9, '\x00', 0x0, r2, 0x2, 0x1, 0x1}, 0x50) (async) 1.107982416s ago: executing program 0 (id=1584): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.107747196s ago: executing program 3 (id=1585): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r0], 0x50) tkill(r0, 0x7) wait4(r0, 0x0, 0x2, 0x0) syz_open_procfs(r0, &(0x7f00000002c0)='net/route\x00') 1.099138416s ago: executing program 3 (id=1586): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000580)='\x00', 0x1) socket(0x25, 0x4, 0x6) 1.072474937s ago: executing program 0 (id=1587): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x9b5, @rand_addr=' \x01\x00', 0x747b5461}]}, &(0x7f0000000240)=0x10) ppoll(&(0x7f0000000140)=[{r2, 0x12}], 0x1, 0x0, 0x0, 0x0) shutdown(r2, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000008b000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x10001}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x7}]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1f1a}]}}}]}, 0x50}}, 0x0) 1.031365499s ago: executing program 3 (id=1588): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400)=@int=0x8, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) set_mempolicy(0x3, &(0x7f0000000180)=0xfffffffffffffffc, 0x5) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x80000, 0x10, 0x41}, 0x18) bind$xdp(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="5b51711fa0da2d73a4b0e9c72c28379d30eb171da02c1d734fb3f20678b7fc1a94eb", 0x22}], 0x1) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x66, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0xfffd, 0x2f, 0x1, @loopback={0x4000000}, @empty}}}}}}}, 0x0) 924.852074ms ago: executing program 7 (id=1590): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001030000000000000000000002000000000000000000000000000100"/55, @ANYRES8=r0, @ANYRES32=0x0], 0x54}, 0x1, 0x0, 0x0, 0x21fe6bfb937da9e2}, 0x0) 924.327835ms ago: executing program 7 (id=1591): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000000001000000000000"], 0x40}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x1000800, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES64, @ANYRES8=r0, @ANYRES32=r2], 0x1, 0x374, &(0x7f0000000f80)="$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") r3 = open(&(0x7f00000004c0)='./file1\x00', 0x10507e, 0xa6) chown(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) 828.472039ms ago: executing program 7 (id=1593): unshare(0x20040600) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000002b00)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=""/165, 0xa5}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/5, 0x5}, 0x8}], 0x2, 0x45833af92e4b39ff, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x24000800) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x98}, 0x1, 0x7}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000a40)={{r4, &(0x7f0000000380)='[-@\x00', 0x48040, &(0x7f00000003c0)={@align=0xb, {0x7c9c, 0xe, 0x3, 0x7}}, 0x80000000, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xd}, 0x3, &(0x7f00000009c0)=[{0x3, 0x8, &(0x7f0000000480)='NLBL_CIPSOv4\x00', &(0x7f00000005c0)="d57d9ec1e0287bf3adf1381d93a6405330e8ef57a9db91c6f03400af566b31874adb446cb9482cd0f81d2a71d43729e28762acc1ef89f455d8debee81afd8c0cc3eefb986067320e858fd79b0af939342821d0a1933f05cc6a364a1f3b547abd3618a5023dd3f5805b97a8c19de69d2e89301feb3637741c94f6375a8025eeb3178b2c4c11a92f563d65d58a37593d628344b078c5dcd4ed9aab769febb28f0f6519532b90cabdfaf1cae03ef3425f0cc807", 0xb2, 0x10}, {0x0, 0x2, &(0x7f00000004c0)='\xff\xff', &(0x7f0000000700)="0065ebc194ee1e4fa184bacdc2ec08d0e513282ca2436fe7fc4a567191031832bd1cf3d5141894ba5ec1fe07b1408c54c3243472411bca77e082dea7d18acce0f47302ace08f3958fc72a2741a26a6101b88168e732fb5c45fb11b127907fd715a194f2e38baff62b4f857d89e5da009b2c4f71ce72eb5e535083c00304c67e35e1519f5c56be6e9", 0x88, 0x2}, {0x1, 0x8, &(0x7f00000007c0)='-!!\x00', &(0x7f00000008c0)="09a55a93914b3e152799ddaf62bcc46d4b9dda428aeeefb3627e56a0aed5066543b0de7eed0010fbb4ad2aad99c3a6e308ee086462206ef94f615d70af8743dd66836c69d7a92504ae3bc32d4549fe37bf3af41a40038a980ef48fced3cf328621444eacecb275308ed07668d7a6e41e87001b8699518e0fcee8d918b9372a56b221a62c243d1fcf4bdc5a3cffb1819410e09d1c54740e6f50d856c907dc8e88e95f88e2c01b908549503721a584b90794be5a53384a1fd91eeae9e743dba2b9d6c9482bd370afab2c13a8ae46e4ba98d146e2a0d69c86f01d71f7619aa640c03f91769a79", 0xe5, 0x12}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4081) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038014000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800010062"], 0xfc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 763.065983ms ago: executing program 6 (id=1594): socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 688.393926ms ago: executing program 6 (id=1595): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x11}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000580)="0053bfb8fd343cfd637d9746c42749459d70f780d881a6e6028c712060ffd1fb", 0x20) 679.337757ms ago: executing program 5 (id=1596): syz_io_uring_setup(0x14f, &(0x7f0000000580)={0x0, 0xd736, 0x10, 0x0, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x108, &(0x7f00000002c0)=0x9, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x107) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x1, r4, 0x0, r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x2, 0x2) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x8c}}, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r5, 0x29, 0x8, 0xb, 0xffffffff, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, 0x1, 0x80, 0x10000, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000001740)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xd, 0x8, {{0x2b, 0x4, 0x1, 0x24, 0xac, 0x65, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0x1b, 0x33, [@private=0xa010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local]}, @timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@private=0xa010102}, {@local, 0x29ebf2ca}]}, @ssrr={0x89, 0x7, 0x82, [@rand_addr=0x64010102]}, @rr={0x7, 0x2b, 0x3d, [@local, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010100, @private=0xa010100, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010100]}, @cipso={0x86, 0x28, 0x0, [{0x2, 0x7, "df6ffbf8f4"}, {0x5, 0xc, "677ac6088627c535b218"}, {0x7, 0xf, "6965b8cae3cdfd6bbf64c5fa08"}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'pim6reg\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="c6a003880000000000000000cbb6ff"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3b00000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYRES64=r9], 0xb8}, 0x1, 0x0, 0x0, 0x44821}, 0x8015) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0xf3, 0x0, 0xffffffffffffffff, &(0x7f0000000540)={0x604084, 0x4}, &(0x7f0000001840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345}) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x3, 0xffff0001}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x88}, 0x0) 625.193209ms ago: executing program 6 (id=1597): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r0], 0x50) tkill(r0, 0x7) syz_open_procfs(r0, &(0x7f00000002c0)='net/route\x00') 600.68527ms ago: executing program 6 (id=1598): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 535.416794ms ago: executing program 6 (id=1599): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000700)=0x14) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xc0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x108, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@private1, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@proto={0x5, 0x19, 0x33}, @tfcpad={0x8, 0x22, 0x80000000}]}, 0x108}}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000002c0)=""/99) r4 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_flags_allowed={0x2, 0xa}, @ioring_restriction_sqe_flags_required={0x3, 0x14}, @ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xb}, @ioring_restriction_register_op], 0x6) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000580)='\x00', 0x1) 495.996266ms ago: executing program 7 (id=1600): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910"], 0x0) (async, rerun: 32) poll(0x0, 0x0, 0x9) (rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b) (async) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(0x0, r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48) 300.497105ms ago: executing program 5 (id=1601): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x7ffffffe}, 0x0) 295.481026ms ago: executing program 6 (id=1602): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x4, 0x4, 0x7ff}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) syz_open_dev$evdev(0x0, 0x2, 0x860b01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001030000000000000000000002000000000000000000000000000100"/55, @ANYRES32=0x0, @ANYBLOB="0000000006000000ffffffb2d17c6b7af000000000080003"], 0x54}}, 0x0) 243.030878ms ago: executing program 5 (id=1603): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x3aab, 0x0, &(0x7f00000004c0), 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0xe, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, 0x0, 0x0, 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0x40485404, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) flistxattr(r9, &(0x7f0000000280)=""/117, 0x75) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="00a8d801", @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa99fc29d112c83fb}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e4010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x1100}, 0x24000000) write$P9_RSYMLINK(r10, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x1, 0x0, 0x7}}, 0x14) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 148.886993ms ago: executing program 3 (id=1604): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r10, 0x11e, 0x0, 0x0, 0x0) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = gettid() fstat(r9, 0x0) fstat(r8, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$unix(r6, &(0x7f0000000880)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000bc0)=[@rights={{0x18, 0x1, 0x1, [r11, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r8, r6, r10, r0, r7, r5, r9, r11, r1]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x20, 0x1, 0x1, [r0, r15, 0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x10}}], 0x120, 0x20000000}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000314010029bd7000fddbdf250900020073797ace78f1e0de22f4f1f267887df38155ad890008004100736977001400330017fa0050ea051a04330f776c616e3100000000000000000000000900020073797a310000002008004100736977001400330064756d"], 0x60}, 0x1, 0x0, 0x0, 0x6004895}, 0x4000) unshare(0x6a040000) inotify_init1(0x80000) 146.775343ms ago: executing program 0 (id=1605): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x5, 0x2002a}, 0x2c) 59.290538ms ago: executing program 5 (id=1606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 18.33771ms ago: executing program 0 (id=1607): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, 0xffffffffffffffff, 0x769d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7ffff000) 0s ago: executing program 7 (id=1608): r0 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x9, 0x5}) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): tr returned 117 for dev=loop5 ino=15 [ 108.143297][ T7777] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.899: corrupted xattr block 33: e_value size too large [ 108.157435][ T7777] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 108.166862][ T7777] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.899: corrupted xattr block 33: e_value size too large [ 108.180896][ T7777] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 108.190487][ T7777] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.899: bg 0: block 418: padding at end of block bitmap is not set [ 108.223247][ T7777] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.899: Failed to acquire dquot type 1 [ 108.241410][ T7777] syz.5.899 (7777) used greatest stack depth: 8936 bytes left [ 108.260957][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.306107][ T7793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7793 comm=syz.2.904 [ 108.363424][ T7797] netlink: 40 bytes leftover after parsing attributes in process `syz.5.906'. [ 108.374982][ T7797] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 108.389164][ T7797] bridge1: entered promiscuous mode [ 108.530834][ T7809] loop5: detected capacity change from 0 to 512 [ 108.711127][ T7809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.730147][ T7809] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.794601][ T7830] rtc_cmos 00:00: Alarms can be up to one day in the future [ 108.833275][ T7827] netlink: 44 bytes leftover after parsing attributes in process `syz.4.914'. [ 108.843589][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'. [ 108.926482][ T7852] loop3: detected capacity change from 0 to 512 [ 108.934662][ T7852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.969262][ T7857] tipc: Started in network mode [ 108.974751][ T7852] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.921: iget: bad i_size value: 38620345925642 [ 108.987612][ T7852] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.987769][ T7852] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.921: couldn't read orphan inode 15 (err -117) [ 108.989390][ T7857] tipc: Node identity ac14140f, cluster identity 4711 [ 108.996923][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 108.996941][ C0] EXT4-fs (loop3): initial error at time 1774387628: ext4_orphan_get:1391: inode 15 [ 108.996987][ C0] EXT4-fs (loop3): last error at time 1774387628: ext4_orphan_get:1391: inode 15 [ 109.021245][ T7857] tipc: Enabled bearer , priority 10 [ 109.022008][ C0] [ 109.049654][ T7852] loop3: lost filesystem error report for type 5 error -117 [ 109.050562][ T7852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.078436][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.098169][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.237767][ T7866] validate_nla: 3 callbacks suppressed [ 109.237784][ T7866] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 109.255389][ T7858] loop2: detected capacity change from 0 to 32768 [ 109.262933][ T7866] netlink: 'syz.3.923': attribute type 19 has an invalid length. [ 109.273507][ T7866] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.923'. [ 109.310785][ T4322] loop2: p1 p3 < > [ 109.320091][ T7858] loop2: p1 p3 < > [ 109.362638][ T7873] loop3: detected capacity change from 0 to 512 [ 109.389932][ T7873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.408239][ T7873] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.452708][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 109.464025][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 109.475110][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.493608][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 109.506318][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 109.538613][ T7895] loop3: detected capacity change from 0 to 128 [ 109.550938][ T7895] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.563468][ T7895] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.611141][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.713675][ T7905] loop3: detected capacity change from 0 to 2048 [ 109.713792][ T6436] rtc_cmos 00:00: Alarms can be up to one day in the future [ 109.731848][ T6436] rtc_cmos 00:00: Alarms can be up to one day in the future [ 109.740748][ T6436] rtc_cmos 00:00: Alarms can be up to one day in the future [ 109.748389][ T6436] rtc_cmos 00:00: Alarms can be up to one day in the future [ 109.755807][ T6436] rtc rtc0: __rtc_set_alarm: err=-22 [ 109.764309][ T4322] Alternate GPT is invalid, using primary GPT. [ 109.770794][ T4322] loop3: p2 p3 p7 [ 109.781054][ T7905] Alternate GPT is invalid, using primary GPT. [ 109.787447][ T7905] loop3: p2 p3 p7 [ 109.853813][ T7911] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 110.140465][ T35] tipc: Node number set to 2886997007 [ 110.276663][ T7920] loop5: detected capacity change from 0 to 512 [ 110.320951][ T7920] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.938: corrupted in-inode xattr: e_value out of bounds [ 110.363339][ T7920] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.363672][ T7920] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.938: couldn't read orphan inode 15 (err -117) [ 110.372892][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 110.372933][ C0] EXT4-fs (loop5): initial error at time 1774387629: ext4_iget_extra_inode:5025: inode 15 [ 110.372956][ C0] EXT4-fs (loop5): last error at time 1774387629: ext4_iget_extra_inode:5025: inode 15 [ 110.410803][ T7920] loop5: lost filesystem error report for type 5 error -117 [ 110.411423][ T7920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.433741][ T7920] netlink: 'syz.5.938': attribute type 4 has an invalid length. [ 110.449619][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.612338][ T7925] loop3: p1 < > p2 p4 < p5 > [ 110.617035][ T7925] loop3: partition table partially beyond EOD, truncated [ 110.624302][ T7925] loop3: p1 start 134217728 is beyond EOD, truncated [ 110.631087][ T7925] loop3: p2 size 591360 extends beyond EOD, truncated [ 110.671580][ T7925] loop3: p5 size 591360 extends beyond EOD, truncated [ 110.754852][ T7938] netlink: 100 bytes leftover after parsing attributes in process `syz.5.945'. [ 110.790682][ T7937] netlink: 100 bytes leftover after parsing attributes in process `syz.5.945'. [ 110.904700][ T7948] bridge0: port 3(ipvlan2) entered blocking state [ 110.933653][ T7948] bridge0: port 3(ipvlan2) entered disabled state [ 110.959741][ T7948] ipvlan2: entered allmulticast mode [ 110.989351][ T7948] bridge0: entered allmulticast mode [ 111.015429][ T7948] ipvlan2: left allmulticast mode [ 111.043902][ T7954] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7954 comm=syz.0.950 [ 111.057866][ T7948] bridge0: left allmulticast mode [ 111.154996][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 111.165399][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 111.175401][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 111.190169][ T7956] lo speed is unknown, defaulting to 1000 [ 111.278120][ T7972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.314963][ T7972] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.954: inode #3237228: comm syz.2.954: iget: illegal inode # [ 111.336739][ T7972] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.954: error while reading EA inode 3237228 err=-117 [ 111.374931][ T7980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.389009][ T7980] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.403002][ T7988] ext4: Unknown parameter 'nouser_xattr' [ 111.436144][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.517745][ T7997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.960'. [ 111.526913][ T8000] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.574536][ T8000] EXT4-fs (loop5): 1 orphan inode deleted [ 111.583321][ T8000] EXT4-fs (loop5): 1 truncate cleaned up [ 111.594674][ T8000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.620574][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.621818][ T7997] macsec1: left promiscuous mode [ 111.634887][ T7997] syzkaller0: left promiscuous mode [ 111.636069][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.640214][ T7997] vti0: left promiscuous mode [ 111.680885][ T8013] SET target dimension over the limit! [ 111.744409][ T8013] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.773951][ T8013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.876043][ T8027] netlink: 40 bytes leftover after parsing attributes in process `syz.5.965'. [ 111.913818][ T8027] netlink: 260 bytes leftover after parsing attributes in process `syz.5.965'. [ 111.972918][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.086752][ T8035] netlink: 'syz.5.971': attribute type 27 has an invalid length. [ 112.221590][ T8035] syzkaller0: left promiscuous mode [ 112.234459][ T8035] syzkaller0: left allmulticast mode [ 112.252319][ T8035] bridge1: left promiscuous mode [ 112.344195][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 112.344209][ T28] audit: type=1326 audit(1774387631.573:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.454033][ T28] audit: type=1326 audit(1774387631.613:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.488319][ T28] audit: type=1326 audit(1774387631.613:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.512122][ T28] audit: type=1326 audit(1774387631.613:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.544520][ T28] audit: type=1326 audit(1774387631.613:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.576937][ T28] audit: type=1326 audit(1774387631.613:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.656817][ T28] audit: type=1326 audit(1774387631.613:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.811016][ T28] audit: type=1326 audit(1774387631.613:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.867694][ T28] audit: type=1326 audit(1774387631.613:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.891319][ T28] audit: type=1326 audit(1774387631.613:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 112.930844][ T8046] set_capacity_and_notify: 6 callbacks suppressed [ 112.930859][ T8046] loop5: detected capacity change from 0 to 512 [ 112.987555][ T8046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.019862][ T8046] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.046278][ T8070] loop2: detected capacity change from 0 to 512 [ 113.084743][ T8070] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.152979][ T8070] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 113.172801][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.662278][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 113.681315][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.985'. [ 113.868685][ T8092] loop5: detected capacity change from 0 to 164 [ 113.881316][ T8092] ISOFS: Bad logical zone size 2816 [ 113.894924][ T8094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.920436][ T8090] __nla_validate_parse: 2 callbacks suppressed [ 113.920449][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 113.999822][ T8098] loop4: detected capacity change from 0 to 1024 [ 114.008125][ T8098] EXT4-fs: Ignoring removed orlov option [ 114.032224][ T8098] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 114.045195][ T8094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.096753][ T8098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.124186][ T8094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.138610][ T8098] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 114.175708][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.208606][ T8094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.296240][ T4767] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.309790][ T4767] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.327393][ T4767] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.342990][ T8123] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 114.350306][ T4767] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.440813][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.997'. [ 114.450318][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 114.460018][ T8127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.304888][ T8144] loop5: detected capacity change from 0 to 256 [ 116.262095][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.269215][ T8184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.276596][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.283642][ T8184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.293195][ T8184] bridge1: port 1(vlan2) entered blocking state [ 116.299546][ T8184] bridge1: port 1(vlan2) entered forwarding state [ 116.351155][ T8184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.723227][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1018'. [ 116.792397][ T8197] wireguard0: entered promiscuous mode [ 116.797980][ T8197] wireguard0: entered allmulticast mode [ 116.871928][ T8204] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1020'. [ 116.890113][ T8210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1022'. [ 116.930777][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 116.953872][ T8210] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1022'. [ 117.065686][ T8236] netlink: 'syz.5.1032': attribute type 4 has an invalid length. [ 117.114259][ T8243] loop5: detected capacity change from 0 to 512 [ 117.120902][ T8243] EXT4-fs: Ignoring removed bh option [ 117.127778][ T8243] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.137586][ T8243] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (fffc1829) [ 117.147960][ T8243] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 117.281924][ T8255] loop5: detected capacity change from 0 to 4096 [ 117.288684][ T8255] ext4: Unknown parameter 'fowner' [ 117.313653][ T8257] netlink: 'syz.5.1039': attribute type 1 has an invalid length. [ 117.799366][ T8273] loop5: detected capacity change from 0 to 8192 [ 117.841343][ T8273] loop5: p1 p2 [ 117.845078][ T8273] loop5: p1 start 51314688 is beyond EOD, truncated [ 117.884354][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 117.935676][ T8281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1046'. [ 117.945120][ T28] kauditd_printk_skb: 217 callbacks suppressed [ 117.945136][ T28] audit: type=1400 audit(1774387637.173:1716): avc: denied { getopt } for pid=8280 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.971690][ T8284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1046'. [ 117.974674][ T8286] loop2: detected capacity change from 0 to 512 [ 118.007771][ T8286] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1049: Parent and EA inode have the same ino 15 [ 118.023748][ T8286] loop2: lost filesystem error report for type 5 error -117 [ 118.023898][ T8286] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1049: Parent and EA inode have the same ino 15 [ 118.031258][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 118.031278][ C0] EXT4-fs (loop2): initial error at time 1774387637: ext4_xattr_inode_iget:437 [ 118.031310][ C0] EXT4-fs (loop2): last error at time 1774387637: ext4_xattr_inode_iget:437 [ 118.068210][ T8286] loop2: lost filesystem error report for type 5 error -117 [ 118.068594][ T8286] EXT4-fs (loop2): 1 orphan inode deleted [ 118.082150][ T8286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.111263][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.137719][ T8304] loop5: detected capacity change from 0 to 1024 [ 118.158679][ T8304] EXT4-fs: Ignoring removed bh option [ 118.164408][ T8304] EXT4-fs: inline encryption not supported [ 118.175024][ T8304] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.178777][ T8307] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 118.186091][ T28] audit: type=1400 audit(1774387637.413:1717): avc: denied { load_policy } for pid=8306 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 118.213450][ T8307] SELinux: failed to load policy [ 118.229509][ T8304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 118.251070][ T8304] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.1053: lblock 2 mapped to illegal pblock 2 (length 1) [ 118.266120][ T8304] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 118.266322][ T8304] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 118.275420][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 118.275441][ C1] EXT4-fs (loop5): initial error at time 1774387637: ext4_map_blocks:776: inode 3: block 2 [ 118.275474][ C1] EXT4-fs (loop5): last error at time 1774387637: ext4_map_blocks:776: inode 3: block 2 [ 118.320467][ T8304] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.1053: lblock 0 mapped to illegal pblock 48 (length 1) [ 118.337747][ T8304] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 118.337863][ T8304] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 118.356322][ T8304] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1053: Failed to acquire dquot type 0 [ 118.367977][ T8304] loop5: lost filesystem error report for type 5 error -117 [ 118.375778][ T8304] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 118.395161][ T8304] loop5: lost filesystem error report for type 5 error -117 [ 118.395404][ T8304] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.1053: mark_inode_dirty error [ 118.428293][ T8324] lo speed is unknown, defaulting to 1000 [ 118.446620][ T8304] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.446747][ T8304] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 118.478341][ T8304] EXT4-fs (loop5): 1 orphan inode deleted [ 118.503897][ T1886] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.518432][ T8304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.531569][ T1886] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 118.533034][ T1886] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 118.551663][ T1886] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 118.611344][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.623863][ T3687] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 118.636897][ T3687] loop5: lost filesystem error report for type 5 error -117 [ 118.637067][ T3687] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 118.654109][ T3687] loop5: lost filesystem error report for type 5 error -117 [ 118.654313][ T3687] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 118.673925][ T3687] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 118.719727][ T28] audit: type=1400 audit(1774387637.953:1718): avc: denied { read } for pid=8333 comm="syz.5.1059" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.785722][ T28] audit: type=1400 audit(1774387637.953:1719): avc: denied { open } for pid=8333 comm="syz.5.1059" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.953933][ T28] audit: type=1400 audit(1774387638.193:1720): avc: denied { getopt } for pid=8346 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.974229][ T28] audit: type=1400 audit(1774387638.203:1721): avc: denied { getattr } for pid=8346 comm="syz.3.1064" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.017384][ T8351] netlink: 'syz.3.1065': attribute type 29 has an invalid length. [ 119.025972][ T8351] netlink: 'syz.3.1065': attribute type 29 has an invalid length. [ 119.673911][ T8411] loop5: detected capacity change from 0 to 2048 [ 119.691008][ T8415] sch_fq: defrate 7 ignored. [ 119.708641][ T8411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.744823][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.807838][ T8427] loop5: detected capacity change from 0 to 128 [ 120.046837][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.055629][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.121819][ T8438] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1082'. [ 120.147412][ T8437] loop2: detected capacity change from 0 to 2048 [ 120.193498][ T8437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.250048][ T8437] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz.2.1083: path /180/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 120.287574][ T8443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.351506][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.361779][ T8445] lo speed is unknown, defaulting to 1000 [ 120.435624][ T28] audit: type=1326 audit(1774387639.673:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c573c799 code=0x7ffc0000 [ 120.462903][ T8450] loop3: detected capacity change from 0 to 128 [ 120.497137][ T8450] vfat: Unknown parameter '.' [ 121.382331][ T8473] loop3: detected capacity change from 0 to 256 [ 121.640925][ T8481] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 121.743898][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8481 comm=syz.0.1094 [ 121.815982][ T8483] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.844784][ T8486] loop2: detected capacity change from 0 to 2048 [ 121.871921][ T8483] bond4: (slave bond5): making interface the new active one [ 121.884704][ T8483] bond4: (slave bond5): Enslaving as an active interface with an up link [ 121.894161][ T8486] loop2: p1 p3 [ 121.898394][ T8486] loop2: p3 start 3036741376 is beyond EOD, truncated [ 121.909869][ T3004] loop2: p1 p3 [ 121.914582][ T3004] loop2: p3 start 3036741376 is beyond EOD, truncated [ 121.939269][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1094'. [ 122.024327][ T8481] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 122.114738][ T8487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.200398][ T8483] vlan2: entered promiscuous mode [ 122.213802][ T8483] bond4: entered promiscuous mode [ 122.227234][ T8483] bond5: entered promiscuous mode [ 122.342371][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1100'. [ 122.920073][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 122.941425][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 122.954563][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 122.971995][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 122.987462][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 122.994271][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 123.008529][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 123.033530][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 123.050649][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 123.058194][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 123.082164][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 123.111196][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 123.118662][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 123.151888][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.159146][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.181270][ T8521] xt_TCPMSS: Only works on TCP SYN packets [ 123.193799][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 123.213983][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 123.231649][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 123.242295][ T8513] batman_adv: batadv0: Interface deactivated: dummy0 [ 123.260421][ T7525] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 123.275471][ T7525] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 123.339845][ T8515] loop5: detected capacity change from 0 to 1024 [ 123.365275][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.384413][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.460211][ T8515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.541055][ T1886] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.560072][ T1886] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.590554][ T1886] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.637649][ T1886] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.691818][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 123.691832][ T28] audit: type=1400 audit(1774387642.933:1725): avc: denied { ioctl } for pid=8460 comm="syz.4.1091" path="socket:[19944]" dev="sockfs" ino=19944 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.760175][ T8524] SELinux: Context system_u:object is not valid (left unmapped). [ 123.782984][ T28] audit: type=1400 audit(1774387643.013:1726): avc: denied { relabelto } for pid=8523 comm="syz.2.1110" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 123.834761][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.849268][ T28] audit: type=1400 audit(1774387643.013:1727): avc: denied { associate } for pid=8523 comm="syz.2.1110" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 123.876053][ T28] audit: type=1400 audit(1774387643.053:1728): avc: denied { remount } for pid=8531 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.896153][ T28] audit: type=1400 audit(1774387643.093:1729): avc: denied { unmount } for pid=3687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.994877][ T8547] loop4: detected capacity change from 0 to 256 [ 124.163483][ T8557] loop4: detected capacity change from 0 to 256 [ 124.169943][ T8558] loop5: detected capacity change from 0 to 128 [ 124.178670][ T8558] vfat: Unknown parameter '0x0000000000000000' [ 124.204137][ T8558] loop5: detected capacity change from 0 to 512 [ 124.225605][ T28] audit: type=1326 audit(1774387643.453:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 124.308579][ T28] audit: type=1326 audit(1774387643.463:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 124.400183][ T28] audit: type=1326 audit(1774387643.463:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 124.461962][ T8581] netlink: 'syz.4.1127': attribute type 58 has an invalid length. [ 124.470489][ T28] audit: type=1326 audit(1774387643.463:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 124.508005][ T8577] loop5: detected capacity change from 0 to 512 [ 124.541197][ T28] audit: type=1326 audit(1774387643.463:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b93dc799 code=0x7ffc0000 [ 124.734896][ T8577] ------------[ cut here ]------------ [ 124.742909][ T8577] EA inode 11 i_nlink=2 [ 124.746046][ T8577] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.5.1126/8577 [ 124.762206][ T8577] Modules linked in: [ 124.766870][ T8577] CPU: 0 UID: 0 PID: 8577 Comm: syz.5.1126 Not tainted syzkaller #0 PREEMPT(full) [ 124.776839][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.787539][ T8577] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 124.794779][ T8577] Code: 54 4b 99 ff 4c 8d 2d 2d b4 5d 05 49 8d 7e 40 e8 a4 df b5 ff 49 8b 6e 40 4c 89 e7 e8 d8 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 9b dd 03 66 66 66 66 66 66 2e [ 124.815026][ T8577] RSP: 0018:ffffc900051b7778 EFLAGS: 00010246 [ 124.821409][ T8577] RAX: ffff88810193bd08 RBX: ffff888100685788 RCX: ffffffff81c013e8 [ 124.829540][ T8577] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc800 [ 124.838230][ T8577] RBP: 000000000000000b R08: 000188810068573b R09: 0000000000000000 [ 124.846629][ T8577] R10: ffffc900051b76a8 R11: 0001c900051b76a8 R12: ffff888100685738 [ 124.855567][ T8577] R13: ffffffff871dc800 R14: ffff8881006856f0 R15: 0000000000000001 [ 124.864400][ T8577] FS: 00007f63b7e2f6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 124.874328][ T8577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.881300][ T8577] CR2: 0000000034747865 CR3: 0000000105a62000 CR4: 00000000003506f0 [ 124.889779][ T8577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.898499][ T8577] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 124.906978][ T8577] Call Trace: [ 124.911649][ T8577] [ 124.915820][ T8577] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 124.922679][ T8577] ? errseq_check+0x2c/0x50 [ 124.928568][ T8577] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 124.934969][ T8577] ? ext4_truncate+0x92b/0xb00 [ 124.940180][ T8577] ext4_evict_inode+0xa1f/0xd60 [ 124.945879][ T8577] ? __pfx_ext4_evict_inode+0x10/0x10 [ 124.951730][ T8577] evict+0x2af/0x510 [ 124.956177][ T8577] ? __pfx_ext4_drop_inode+0x10/0x10 [ 124.962618][ T8577] iput+0x41a/0x580 [ 124.966690][ T8577] ext4_process_orphan+0x1a9/0x1c0 [ 124.972639][ T8577] ext4_orphan_cleanup+0x6a8/0xa00 [ 124.978539][ T8577] ext4_fill_super+0x3408/0x37c0 [ 124.984328][ T8577] ? set_blocksize+0x14c/0x270 [ 124.990190][ T8577] ? setup_bdev_super+0x30e/0x370 [ 124.996510][ T8577] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.002978][ T8577] get_tree_bdev_flags+0x291/0x300 [ 125.009282][ T8577] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.015399][ T8577] get_tree_bdev+0x1f/0x30 [ 125.020269][ T8577] ext4_get_tree+0x1c/0x30 [ 125.025998][ T8577] vfs_get_tree+0x57/0x1d0 [ 125.031602][ T8577] do_new_mount+0x288/0x8d0 [ 125.036767][ T8577] path_mount+0x4d0/0xbc0 [ 125.041680][ T8577] __se_sys_mount+0x28c/0x2e0 [ 125.047279][ T8577] __x64_sys_mount+0x67/0x80 [ 125.052630][ T8577] x64_sys_call+0x2d61/0x3020 [ 125.057650][ T8577] do_syscall_64+0x12c/0x370 [ 125.063419][ T8577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.069587][ T8577] RIP: 0033:0x7f63b93dda0a [ 125.074649][ T8577] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.095547][ T8577] RSP: 002b:00007f63b7e2ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.106098][ T8577] RAX: ffffffffffffffda RBX: 00007f63b7e2eee0 RCX: 00007f63b93dda0a [ 125.115346][ T8577] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f63b7e2eea0 [ 125.123599][ T8577] RBP: 00002000000009c0 R08: 00007f63b7e2eee0 R09: 0000000000800718 [ 125.132398][ T8577] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 125.141136][ T8577] R13: 00007f63b7e2eea0 R14: 000000000000048d R15: 0000200000000200 [ 125.149859][ T8577] [ 125.153940][ T8577] ---[ end trace 0000000000000000 ]--- [ 125.161172][ T8577] EXT4-fs (loop5): 1 orphan inode deleted [ 125.168695][ T8577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.211084][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.243766][ T8619] syzkaller0: entered promiscuous mode [ 125.258782][ T8619] syzkaller0: entered allmulticast mode [ 125.271687][ T8622] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.289010][ T8622] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.315758][ T8622] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.335010][ T8622] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.358590][ T8632] bond6: (slave bond_slave_1): Device is not our slave [ 125.365544][ T8632] bond6: option active_slave: invalid value (bond_slave_1) [ 125.376159][ T8632] bond6 (unregistering): Released all slaves [ 125.402660][ T8612] 9p: Could not find request transport: æd [ 125.617622][ T8653] loop4: detected capacity change from 0 to 512 [ 125.662031][ T8653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.682733][ T8653] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.709879][ T8653] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz.4.1144: invalid size [ 125.734257][ T8653] EXT4-fs (loop4): Remounting filesystem read-only [ 125.790818][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.800020][ T2065] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 125.840623][ T8660] loop4: detected capacity change from 0 to 1024 [ 125.862310][ T8660] EXT4-fs: Mount option(s) incompatible with ext2 [ 125.944856][ T8665] loop5: detected capacity change from 0 to 164 [ 125.970299][ T8665] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.987653][ T8665] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.012315][ T8665] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.035928][ T8665] rock: directory entry would overflow storage [ 126.042217][ T8665] rock: sig=0x4f50, size=4, remaining=3 [ 126.050472][ T8665] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 126.118104][ T8677] netlink: 'syz.2.1148': attribute type 13 has an invalid length. [ 126.127423][ T8677] netlink: 'syz.2.1148': attribute type 17 has an invalid length. [ 126.149624][ T8677] ip6gretap0: left promiscuous mode [ 126.159501][ T8677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.185311][ T8677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.201175][ T3404] lo speed is unknown, defaulting to 1000 [ 126.207389][ T3404] syz0: Port: 1 Link ACTIVE [ 126.222042][ T8683] tipc: Enabled bearer , priority 0 [ 126.233781][ T8683] tipc: Resetting bearer [ 126.244439][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.252629][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.266295][ T8683] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 126.327939][ T8692] sock: sock_timestamping_bind_phc: sock not bind to device [ 126.419723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.419741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.690390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.765053][ T8698] lo speed is unknown, defaulting to 1000 [ 127.220440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.228543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.428653][ T8710] loop3: detected capacity change from 0 to 1024 [ 127.443231][ T8710] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.461346][ T8710] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 127.481839][ T8716] __nla_validate_parse: 82 callbacks suppressed [ 127.481855][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 127.497312][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 127.522026][ T8718] syzkaller1: entered promiscuous mode [ 127.531898][ T8710] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.549667][ T8718] syzkaller1: entered allmulticast mode [ 127.565646][ T8720] FAT-fs (loop4): count of clusters too big (178174) [ 127.569087][ T8710] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 127.573980][ T8720] FAT-fs (loop4): Can't find a valid FAT filesystem [ 127.594778][ T8710] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 127.603532][ T8710] EXT4-fs (loop3): 1 truncate cleaned up [ 127.609596][ T8710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.646044][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.710957][ T8726] team0 (unregistering): Port device team_slave_0 removed [ 127.742000][ T8726] team0 (unregistering): Port device team_slave_1 removed [ 127.773799][ T8732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1165'. [ 127.940585][ T8742] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 128.001104][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1169'. [ 128.017931][ T8742] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=8742 comm=syz.5.1169 [ 128.166947][ T8757] cgroup: fork rejected by pids controller in /syz5 [ 128.283121][ T8937] EXT4-fs (loop5): Unsupported encryption level 255 [ 128.300461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.331106][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'. [ 128.714633][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1179'. [ 128.774750][ T8966] set_capacity_and_notify: 4 callbacks suppressed [ 128.774767][ T8966] loop3: detected capacity change from 0 to 1024 [ 129.111799][ T8966] EXT4-fs: dax option not supported [ 129.340381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.864295][ T8998] loop5: detected capacity change from 0 to 512 [ 129.903818][ T8998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.070901][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 130.070914][ T28] audit: type=1400 audit(1774387649.313:1853): avc: denied { relabelfrom } for pid=8997 comm="syz.5.1195" name="" dev="pipefs" ino=20818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 130.099672][ T9003] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 130.162510][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.175752][ T28] audit: type=1400 audit(1774387649.363:1854): avc: denied { relabelto } for pid=8997 comm="syz.5.1195" name="" dev="pipefs" ino=20818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:iptables_unit_file_t:s0" [ 130.327388][ T9014] sctp: [Deprecated]: syz.3.1198 (pid 9014) Use of int in maxseg socket option. [ 130.327388][ T9014] Use struct sctp_assoc_value instead [ 130.381801][ T28] audit: type=1400 audit(1774387649.623:1855): avc: denied { ioctl } for pid=9013 comm="syz.3.1198" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.534944][ T9015] loop2: detected capacity change from 0 to 8192 [ 130.699708][ T9034] netlink: 7104 bytes leftover after parsing attributes in process `syz.4.1202'. [ 130.715448][ T9037] netlink: 'syz.5.1203': attribute type 1 has an invalid length. [ 131.430393][ C1] net_ratelimit: 3 callbacks suppressed [ 131.430421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.498669][ T9012] syz.2.1197 (9012) used greatest stack depth: 7256 bytes left [ 131.736606][ T9061] netlink: 'syz.5.1212': attribute type 10 has an invalid length. [ 131.745981][ T9061] batman_adv: batadv0: Removing interface: dummy0 [ 131.747321][ T9067] siw: device registration error -23 [ 131.771937][ T9069] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 131.772174][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'. [ 131.807957][ T9073] ipt_REJECT: ECHOREPLY no longer supported. [ 131.815089][ T9070] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 131.880871][ T9069] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 131.921580][ T9062] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1212'. [ 131.949797][ T9088] loop3: detected capacity change from 0 to 4096 [ 131.956776][ T9064] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1212'. [ 132.015682][ T9088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.029003][ T9088] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.189064][ T9099] loop4: detected capacity change from 0 to 1024 [ 132.202181][ T9099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.231354][ T9099] GUP no longer grows the stack in syz.4.1221 (9099): 200000004000-200000005000 (200000001000) [ 132.241959][ T9099] CPU: 1 UID: 0 PID: 9099 Comm: syz.4.1221 Tainted: G W syzkaller #0 PREEMPT(full) [ 132.241987][ T9099] Tainted: [W]=WARN [ 132.241994][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.242005][ T9099] Call Trace: [ 132.242011][ T9099] [ 132.242018][ T9099] __dump_stack+0x1d/0x30 [ 132.242117][ T9099] dump_stack_lvl+0x95/0xd0 [ 132.242137][ T9099] dump_stack+0x15/0x1b [ 132.242227][ T9099] __get_user_pages+0x195b/0x1ea0 [ 132.242311][ T9099] ? should_fail_ex+0x30/0x280 [ 132.242336][ T9099] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 132.242358][ T9099] __gup_longterm_locked+0x8d7/0xe30 [ 132.242453][ T9099] ? __rcu_read_unlock+0x33/0x70 [ 132.242474][ T9099] ? try_get_folio+0x369/0x3b0 [ 132.242493][ T9099] ? mod_node_page_state+0x1c/0xa0 [ 132.242568][ T9099] ? try_grab_folio_fast+0x24e/0x370 [ 132.242588][ T9099] gup_fast_fallback+0x1f3/0x13c0 [ 132.242732][ T9099] pin_user_pages_fast+0x5f/0x90 [ 132.242756][ T9099] iov_iter_extract_pages+0x261/0x440 [ 132.242782][ T9099] iov_iter_extract_bvecs+0x93/0x5c0 [ 132.242975][ T9099] ? __rcu_read_unlock+0x33/0x70 [ 132.242994][ T9099] ? bio_associate_blkg_from_css+0x5ed/0x6b0 [ 132.243023][ T9099] ? __rcu_read_unlock+0x4e/0x70 [ 132.243042][ T9099] bio_iov_iter_get_pages+0x217/0x470 [ 132.243146][ T9099] iomap_dio_bio_iter+0x8d6/0xe40 [ 132.243175][ T9099] __iomap_dio_rw+0xbdc/0x14c0 [ 132.243210][ T9099] iomap_dio_rw+0x40/0x90 [ 132.243250][ T9099] ext4_file_write_iter+0xae2/0xfa0 [ 132.243274][ T9099] do_iter_readv_writev+0x4fd/0x5a0 [ 132.243376][ T9099] vfs_writev+0x2e1/0x900 [ 132.243405][ T9099] __se_sys_pwritev2+0xfc/0x1c0 [ 132.243426][ T9099] __x64_sys_pwritev2+0x67/0x80 [ 132.243525][ T9099] x64_sys_call+0xe07/0x3020 [ 132.243716][ T9099] do_syscall_64+0x12c/0x370 [ 132.243758][ T9099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.243847][ T9099] RIP: 0033:0x7f3c51b6c799 [ 132.243863][ T9099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.243879][ T9099] RSP: 002b:00007f3c505bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 132.243899][ T9099] RAX: ffffffffffffffda RBX: 00007f3c51de5fa0 RCX: 00007f3c51b6c799 [ 132.243991][ T9099] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000006 [ 132.244003][ T9099] RBP: 00007f3c51c02c99 R08: 0000000000000000 R09: 0000000000000003 [ 132.244059][ T9099] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000000 [ 132.244069][ T9099] R13: 00007f3c51de6038 R14: 00007f3c51de5fa0 R15: 00007ffcd07ce118 [ 132.244085][ T9099] [ 132.504822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.512899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.550257][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.881277][ T9121] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.1225'. [ 132.890621][ T9121] netlink: zone id is out of range [ 132.895721][ T9121] netlink: zone id is out of range [ 132.900893][ T9121] netlink: zone id is out of range [ 132.906000][ T9121] netlink: zone id is out of range [ 132.911213][ T9121] netlink: zone id is out of range [ 132.916311][ T9121] netlink: zone id is out of range [ 132.921427][ T9121] netlink: zone id is out of range [ 132.929471][ T9121] loop5: detected capacity change from 0 to 512 [ 132.946087][ T9118] loop3: detected capacity change from 0 to 128 [ 132.966645][ T9115] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 133.006602][ T9124] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 133.041190][ T9121] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.1225: missing EA_INODE flag [ 133.053174][ T9121] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 133.056824][ T9121] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1225: error while reading EA inode 12 err=-117 [ 133.065969][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 133.065989][ C0] EXT4-fs (loop5): initial error at time 1774387652: ext4_xattr_inode_iget:441: inode 12 [ 133.066023][ C0] EXT4-fs (loop5): last error at time 1774387652: ext4_xattr_inode_iget:441: inode 12 [ 133.104181][ T9121] loop5: lost filesystem error report for type 5 error -117 [ 133.105614][ T9126] netlink: 'syz.3.1228': attribute type 10 has an invalid length. [ 133.121115][ T9121] EXT4-fs (loop5): 1 orphan inode deleted [ 133.128512][ T9121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.274409][ T9115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.308881][ T9132] loop4: detected capacity change from 0 to 512 [ 133.332564][ T9126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1228'. [ 133.384188][ T9132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.418632][ T9122] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 133.441314][ T9126] batadv0: entered promiscuous mode [ 133.446635][ T9126] batadv0: entered allmulticast mode [ 133.469371][ T9126] bridge0: port 3(batadv0) entered blocking state [ 133.477198][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.507123][ T9126] bridge0: port 3(batadv0) entered disabled state [ 133.514358][ T9126] bridge0: port 3(batadv0) entered blocking state [ 133.520882][ T9126] bridge0: port 3(batadv0) entered forwarding state [ 133.533503][ T9118] tipc: Started in network mode [ 134.452195][ T6890] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 134.461487][ T6890] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 134.483031][ T9118] tipc: Node identity , cluster identity 4711 [ 134.499642][ T9118] tipc: Failed to obtain node identity [ 134.525217][ T9118] tipc: Enabling of bearer rejected, failed to enable media [ 135.521515][ T9152] netlink: 'syz.5.1232': attribute type 10 has an invalid length. [ 135.581377][ T9160] syzkaller1: entered promiscuous mode [ 136.479445][ T28] audit: type=1400 audit(1774387654.813:1856): avc: denied { ioctl } for pid=9159 comm="syz.2.1235" path="/dev/usbmon8" dev="devtmpfs" ino=166 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.513302][ T9160] syzkaller1: entered allmulticast mode [ 136.526127][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 136.634003][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1232'. [ 136.700380][ C1] net_ratelimit: 15 callbacks suppressed [ 136.700417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.608118][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1236'. [ 137.750415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.758510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.079262][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.102071][ T9167] loop2: detected capacity change from 0 to 512 [ 138.120454][ T28] audit: type=1400 audit(1774387657.353:1857): avc: denied { ioctl } for pid=9169 comm="syz.3.1240" path="socket:[21155]" dev="sockfs" ino=21155 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.160492][ T6890] Bluetooth: hci0: Frame reassembly failed (-84) [ 138.190145][ T28] audit: type=1400 audit(1774387657.423:1858): avc: denied { write } for pid=9169 comm="syz.3.1240" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 138.247369][ T9167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.261427][ T9167] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.404405][ T9194] futex_wake_op: syz.4.1246 tries to shift op by -1; fix this program [ 138.427416][ T9194] program syz.4.1246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.527263][ T9199] loop5: detected capacity change from 0 to 512 [ 138.534216][ T9199] EXT4-fs: test_dummy_encryption option not supported [ 138.585373][ T28] audit: type=1400 audit(1774387657.823:1859): avc: denied { setopt } for pid=9191 comm="syz.5.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.790376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.302000][ T9209] futex_wake_op: syz.0.1249 tries to shift op by 32; fix this program [ 139.327993][ T9215] netlink: 'syz.4.1251': attribute type 2 has an invalid length. [ 139.674967][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1256'. [ 139.698110][ T9231] netlink: 'syz.5.1256': attribute type 7 has an invalid length. [ 139.726289][ T9231] netlink: 'syz.5.1256': attribute type 8 has an invalid length. [ 139.727061][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1256'. [ 139.750095][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1256'. [ 139.813405][ T9232] bond0: entered promiscuous mode [ 139.818443][ T9232] bond_slave_0: entered promiscuous mode [ 139.830447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.838550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.846837][ T9232] bond_slave_1: entered promiscuous mode [ 139.871350][ T9232] gretap0: entered promiscuous mode [ 139.880454][ T9232] hsr1: entered promiscuous mode [ 140.140827][ T3535] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.146937][ T9172] Bluetooth: hci0: command 0x1003 tx timeout [ 140.187914][ T28] audit: type=1400 audit(1774387659.423:1860): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.208459][ T9253] loop3: detected capacity change from 0 to 1024 [ 140.281300][ T9255] ip6erspan0: entered allmulticast mode [ 140.287433][ T28] audit: type=1400 audit(1774387659.513:1861): avc: denied { map } for pid=9241 comm="syz.4.1261" path="socket:[21281]" dev="sockfs" ino=21281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.341470][ T28] audit: type=1400 audit(1774387659.513:1862): avc: denied { read accept } for pid=9241 comm="syz.4.1261" path="socket:[21281]" dev="sockfs" ino=21281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.581248][ T9253] EXT4-fs: Ignoring removed oldalloc option [ 140.752063][ T9253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.860414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.868502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.917827][ T9261] loop5: detected capacity change from 0 to 128 [ 141.910446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.920922][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.955866][ T9261] FAT-fs (loop5): FAT read failed (blocknr 128) [ 141.967941][ T28] audit: type=1326 audit(1774387661.203:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.033349][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1266'. [ 142.080585][ T28] audit: type=1326 audit(1774387661.203:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.109051][ T9271] xt_hashlimit: size too large, truncated to 1048576 [ 142.156733][ T9270] ucma_write: process 1006 (syz.5.1266) changed security contexts after opening file descriptor, this is not allowed. [ 142.179388][ T28] audit: type=1326 audit(1774387661.203:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.260429][ T28] audit: type=1326 audit(1774387661.203:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.285595][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.300725][ T28] audit: type=1326 audit(1774387661.203:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.331780][ T9273] lo speed is unknown, defaulting to 1000 [ 142.350398][ T28] audit: type=1326 audit(1774387661.203:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.408102][ T28] audit: type=1326 audit(1774387661.203:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.476220][ T28] audit: type=1326 audit(1774387661.203:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.540426][ T28] audit: type=1326 audit(1774387661.203:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.610373][ T28] audit: type=1326 audit(1774387661.203:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 142.756725][ T9299] netlink: 'syz.2.1274': attribute type 1 has an invalid length. [ 142.766905][ T3404] kernel write not supported for file bpf-prog (pid: 3404 comm: kworker/1:4) [ 142.796871][ T9301] loop5: detected capacity change from 0 to 164 [ 142.820727][ T9301] Unable to read rock-ridge attributes [ 142.863557][ T9306] loop4: detected capacity change from 0 to 164 [ 142.873188][ T9301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1276'. [ 142.882530][ T9306] Unable to read rock-ridge attributes [ 142.898861][ T9299] gretap1: entered allmulticast mode [ 142.931583][ T9299] bond3: (slave gretap1): making interface the new active one [ 142.940404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.948506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.970425][ T9299] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 142.985451][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1278'. [ 143.980423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.573217][ T9326] loop2: detected capacity change from 0 to 8192 [ 145.020404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.028496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.442744][ T9352] loop4: detected capacity change from 0 to 164 [ 145.457115][ T9350] ipvlan2: entered allmulticast mode [ 145.463197][ T9350] dummy0: entered allmulticast mode [ 145.484032][ T9352] Unable to read rock-ridge attributes [ 145.499656][ T9352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1291'. [ 145.551423][ T9360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1296'. [ 145.575152][ T9360] loop2: detected capacity change from 0 to 512 [ 145.582851][ T9360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.672039][ T9360] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 145.712356][ T9360] EXT4-fs (loop2): orphan cleanup on readonly fs [ 145.743445][ T9360] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 145.761620][ T9366] netlink: 'syz.4.1298': attribute type 1 has an invalid length. [ 145.808718][ T9360] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 145.834290][ T9360] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.1296: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 145.895277][ T9360] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 145.895563][ T9360] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1296: couldn't read orphan inode 13 (err -117) [ 145.904735][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 145.904752][ C1] EXT4-fs (loop2): last error at time 1774387665: ext4_ext_check_inode:521: inode 13 [ 145.932870][ T9360] loop2: lost filesystem error report for type 5 error -117 [ 145.935205][ T9360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.965838][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1302'. [ 145.972997][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'. [ 146.001378][ T9360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.010085][ T9360] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 146.031282][ T9360] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2842c09c, mo2=0002] [ 146.040699][ T9360] System zones: 0-2, 18-18, 34-34 [ 146.046158][ T9360] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 146.070210][ T9387] xt_hashlimit: max too large, truncated to 1048576 [ 146.076877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.076892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.094001][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.142658][ T9388] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.165803][ T9388] block device autoloading is deprecated and will be removed. [ 146.177019][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1304'. [ 146.209751][ T9400] lo speed is unknown, defaulting to 1000 [ 146.258128][ T9404] loop5: detected capacity change from 0 to 164 [ 146.276861][ T9404] Unable to read rock-ridge attributes [ 146.443713][ T9419] loop5: detected capacity change from 0 to 1764 [ 146.460751][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1312'. [ 146.470182][ T9419] iso9660: Bad value for 'session' [ 146.581673][ T9397] loop2: detected capacity change from 0 to 4096 [ 146.596325][ T9397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.766590][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.103074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.251175][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 147.251190][ T28] audit: type=1326 audit(1774911954.487:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 147.283557][ T28] audit: type=1326 audit(1774911954.487:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 147.307240][ T28] audit: type=1326 audit(1774911954.487:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 147.332356][ T28] audit: type=1326 audit(1774911954.487:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 147.587530][ T9511] loop5: detected capacity change from 0 to 164 [ 147.605435][ T28] audit: type=1326 audit(1774911954.487:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 147.697436][ T9511] Unable to read rock-ridge attributes [ 147.768457][ T28] audit: type=1326 audit(1774911954.487:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 147.793857][ T9519] loop4: detected capacity change from 0 to 512 [ 147.801236][ T28] audit: type=1326 audit(1774911954.517:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 147.826318][ T9519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.828847][ T28] audit: type=1326 audit(1774911954.517:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 147.877444][ T28] audit: type=1326 audit(1774911954.517:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 147.887542][ T9519] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.910479][ T9530] lo speed is unknown, defaulting to 1000 [ 147.923063][ T28] audit: type=1326 audit(1774911954.517:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc50559c799 code=0x7ffc0000 [ 148.045149][ T3325] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 148.151322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.159417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.171586][ T3325] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 148.349693][ T9530] lo speed is unknown, defaulting to 1000 [ 148.951829][ T9564] lo speed is unknown, defaulting to 1000 [ 148.980131][ T9541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.209280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.261296][ T70] bridge_slave_1: left allmulticast mode [ 149.282237][ T70] bridge_slave_1: left promiscuous mode [ 149.295271][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.313766][ T70] bridge_slave_0: left allmulticast mode [ 149.319510][ T70] bridge_slave_0: left promiscuous mode [ 149.346585][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.594121][ T70] bond1 (unregistering): Released all slaves [ 149.631253][ T70] hsr_slave_0: left promiscuous mode [ 149.639763][ T70] hsr_slave_1: left promiscuous mode [ 149.646829][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.663564][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.815169][ T9568] lo speed is unknown, defaulting to 1000 [ 149.883520][ T9597] 8021q: VLANs not supported on caif0 [ 150.044035][ T9611] loop3: detected capacity change from 0 to 128 [ 150.052601][ T9568] chnl_net:caif_netlink_parms(): no params data found [ 150.170376][ T9555] loop5: detected capacity change from 0 to 8192 [ 150.198421][ T9601] loop2: detected capacity change from 0 to 256 [ 150.213832][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.244622][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.257408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.265623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.277780][ T9568] bridge_slave_0: entered allmulticast mode [ 150.284978][ T9568] bridge_slave_0: entered promiscuous mode [ 150.570512][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.664667][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.752772][ T9568] bridge_slave_1: entered allmulticast mode [ 150.816650][ T9568] bridge_slave_1: entered promiscuous mode [ 151.001308][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.037268][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.118727][ T9555] lo speed is unknown, defaulting to 1000 [ 151.151834][ T9568] team0: Port device team_slave_0 added [ 151.171275][ T9568] team0: Port device team_slave_1 added [ 151.294832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.299879][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.302935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.327401][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.389587][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.463539][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.479261][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.532167][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.676552][ T9568] hsr_slave_0: entered promiscuous mode [ 151.700992][ T9568] hsr_slave_1: entered promiscuous mode [ 151.712387][ T9568] debugfs: 'hsr0' already exists in 'hsr' [ 151.721656][ T9568] Cannot create hsr debugfs directory [ 151.746541][ T6436] kernel write not supported for file bpf-prog (pid: 6436 comm: kworker/0:8) [ 152.012656][ T9568] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.042918][ T9568] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.097697][ T9568] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.174201][ T9568] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 152.245100][ T9701] FAULT_INJECTION: forcing a failure. [ 152.245100][ T9701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.273838][ T9704] loop5: detected capacity change from 0 to 512 [ 152.285090][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.291908][ T9701] CPU: 0 UID: 0 PID: 9701 Comm: syz.2.1351 Tainted: G W syzkaller #0 PREEMPT(full) [ 152.291993][ T9701] Tainted: [W]=WARN [ 152.291999][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.292072][ T9701] Call Trace: [ 152.292078][ T9701] [ 152.292085][ T9701] __dump_stack+0x1d/0x30 [ 152.292110][ T9701] dump_stack_lvl+0x95/0xd0 [ 152.292129][ T9701] dump_stack+0x15/0x1b [ 152.292205][ T9701] should_fail_ex+0x263/0x280 [ 152.292278][ T9701] should_fail+0xb/0x20 [ 152.292298][ T9701] should_fail_usercopy+0x1a/0x20 [ 152.292323][ T9701] _copy_from_user+0x1c/0xb0 [ 152.292404][ T9701] io_register_iowq_aff+0x88/0x120 [ 152.292424][ T9701] __se_sys_io_uring_register+0x115a/0x12d0 [ 152.292449][ T9701] ? mutex_unlock+0x4e/0x90 [ 152.292579][ T9701] ? fput+0x8f/0xc0 [ 152.292601][ T9701] ? ksys_write+0x194/0x1a0 [ 152.292700][ T9701] __x64_sys_io_uring_register+0x55/0x70 [ 152.292723][ T9701] x64_sys_call+0x2be0/0x3020 [ 152.292776][ T9701] do_syscall_64+0x12c/0x370 [ 152.292796][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.292814][ T9701] RIP: 0033:0x7f43f113c799 [ 152.292840][ T9701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.292853][ T9701] RSP: 002b:00007f43efb97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 152.292880][ T9701] RAX: ffffffffffffffda RBX: 00007f43f13b5fa0 RCX: 00007f43f113c799 [ 152.292891][ T9701] RDX: 0000200000000580 RSI: 0000000000000011 RDI: 0000000000000003 [ 152.292901][ T9701] RBP: 00007f43efb97090 R08: 0000000000000000 R09: 0000000000000000 [ 152.292912][ T9701] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 152.292922][ T9701] R13: 00007f43f13b6038 R14: 00007f43f13b5fa0 R15: 00007fff96b81968 [ 152.292938][ T9701] [ 152.315706][ T9568] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.345694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.493245][ T9704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.526694][ T9568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.537144][ T9568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.555112][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.562184][ T8621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.621743][ T9714] loop3: detected capacity change from 0 to 1024 [ 152.644290][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.651376][ T8621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.691584][ T9704] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.1352: Unimplemented hash flags: 0x0001 [ 152.718841][ T9704] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1352: Corrupt directory, running e2fsck is recommended [ 152.737334][ T9714] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 152.747687][ T9714] System zones: 0-1, 3-36 [ 152.757075][ T9714] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1353: bad orphan inode 134217728 [ 152.769363][ T9714] loop3: lost filesystem error report for type 5 error -117 [ 152.773595][ T9714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.018751][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.137546][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.399383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.407503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.438468][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.453845][ T9568] veth0_vlan: entered promiscuous mode [ 153.486211][ T9568] veth1_vlan: entered promiscuous mode [ 153.514450][ T9568] veth0_macvtap: entered promiscuous mode [ 153.538780][ T9568] veth1_macvtap: entered promiscuous mode [ 153.545093][ T9762] FAULT_INJECTION: forcing a failure. [ 153.545093][ T9762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.560753][ T9762] CPU: 0 UID: 0 PID: 9762 Comm: syz.2.1363 Tainted: G W syzkaller #0 PREEMPT(full) [ 153.560840][ T9762] Tainted: [W]=WARN [ 153.560847][ T9762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.560857][ T9762] Call Trace: [ 153.560910][ T9762] [ 153.560916][ T9762] __dump_stack+0x1d/0x30 [ 153.560979][ T9762] dump_stack_lvl+0x95/0xd0 [ 153.560996][ T9762] dump_stack+0x15/0x1b [ 153.561013][ T9762] should_fail_ex+0x263/0x280 [ 153.561088][ T9762] should_fail+0xb/0x20 [ 153.561176][ T9762] should_fail_usercopy+0x1a/0x20 [ 153.561197][ T9762] _copy_to_user+0x20/0xa0 [ 153.561218][ T9762] simple_read_from_buffer+0xb5/0x130 [ 153.561235][ T9762] proc_fail_nth_read+0x10e/0x150 [ 153.561310][ T9762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.561335][ T9762] vfs_read+0x1ab/0x7f0 [ 153.561437][ T9762] ? __rcu_read_unlock+0x4e/0x70 [ 153.561455][ T9762] ? __fget_files+0x184/0x1c0 [ 153.561473][ T9762] ? mutex_lock+0x57/0x90 [ 153.561616][ T9762] ksys_read+0xdc/0x1a0 [ 153.561632][ T9762] __x64_sys_read+0x40/0x50 [ 153.561649][ T9762] x64_sys_call+0x2886/0x3020 [ 153.561744][ T9762] do_syscall_64+0x12c/0x370 [ 153.561766][ T9762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.561785][ T9762] RIP: 0033:0x7f43f10fcfce [ 153.561839][ T9762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.561854][ T9762] RSP: 002b:00007f43efb96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.561870][ T9762] RAX: ffffffffffffffda RBX: 00007f43efb976c0 RCX: 00007f43f10fcfce [ 153.561886][ T9762] RDX: 000000000000000f RSI: 00007f43efb970a0 RDI: 0000000000000004 [ 153.561898][ T9762] RBP: 00007f43efb97090 R08: 0000000000000000 R09: 0000000000000000 [ 153.561960][ T9762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.561972][ T9762] R13: 00007f43f13b6038 R14: 00007f43f13b5fa0 R15: 00007fff96b81968 [ 153.561990][ T9762] [ 153.572779][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.679249][ T9766] loop2: detected capacity change from 0 to 512 [ 153.690574][ T9757] lo speed is unknown, defaulting to 1000 [ 153.714993][ T9766] journal_path: Non-blockdev passed as './bus' [ 153.793134][ T9766] EXT4-fs: error: could not find journal device path [ 153.797480][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.815541][ T9766] loop2: detected capacity change from 0 to 736 [ 153.843754][ T9766] iso9660: Bad value for 'check' [ 153.895314][ T9764] loop3: detected capacity change from 0 to 256 [ 153.920305][ T28] kauditd_printk_skb: 311 callbacks suppressed [ 153.920398][ T28] audit: type=1400 audit(1774912088.113:2223): avc: denied { mounton } for pid=9568 comm="syz-executor" path="/root/syzkaller.nnfHUl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 153.986533][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.999516][ T9773] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1366'. [ 154.008537][ T28] audit: type=1400 audit(1774912088.183:2224): avc: denied { mount } for pid=9568 comm="syz-executor" name="/" dev="gadgetfs" ino=4764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 154.152733][ T9781] loop2: detected capacity change from 0 to 512 [ 154.216157][ T9781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.250748][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.266651][ T9781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.286314][ T9781] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.299417][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.318424][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.340836][ T9781] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1369: Allocating blocks 41-42 which overlap fs metadata [ 154.429333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.525647][ T9781] loop2: lost filesystem error report for type 5 error -117 [ 154.529305][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 154.543044][ C1] EXT4-fs (loop2): initial error at time 1774912088: ext4_mb_mark_diskspace_used:4222 [ 154.552595][ C1] EXT4-fs (loop2): last error at time 1774912088: ext4_mb_mark_diskspace_used:4222 [ 154.569536][ T9781] EXT4-fs (loop2): Remounting filesystem read-only [ 154.576123][ T9781] Quota error (device loop2): write_blk: dquota write failed [ 154.583561][ T9781] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 154.593311][ T9781] Quota error (device loop2): write_blk: dquota write failed [ 154.600740][ T9781] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 154.610719][ T9781] EXT4-fs (loop2): 1 truncate cleaned up [ 154.616771][ T9781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.732187][ T9786] loop6: detected capacity change from 0 to 164 [ 154.794014][ T9786] Unable to read rock-ridge attributes [ 154.862104][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.937163][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 155.049521][ T28] audit: type=1326 audit(1774912089.173:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.2.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f113c799 code=0x7ffc0000 [ 155.111137][ T28] audit: type=1326 audit(1774912089.173:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.2.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f113c799 code=0x7ffc0000 [ 155.205745][ T28] audit: type=1326 audit(1774912089.173:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.2.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f113c799 code=0x7ffc0000 [ 155.426017][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 155.479340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.487430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.495977][ T28] audit: type=1326 audit(1774912089.173:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.2.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f113c799 code=0x7ffc0000 [ 155.515535][ T9806] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1376'. [ 155.880645][ T9826] loop6: detected capacity change from 0 to 128 [ 155.949141][ T9826] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.990353][ T9826] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.011735][ T9826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19994 sclass=netlink_route_socket pid=9826 comm=syz.6.1382 [ 156.040338][ T9568] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.137677][ T9829] team0 (unregistering): Port device team_slave_0 removed [ 156.150937][ T9829] team0 (unregistering): Port device team_slave_1 removed [ 156.287527][ T9835] loop5: detected capacity change from 0 to 256 [ 156.509363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.517550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.994296][ T9841] loop3: detected capacity change from 0 to 8192 [ 157.060279][ T4322] loop3: p1 p2 p3 p4 [ 157.064502][ T4322] loop3: p1 size 196608 extends beyond EOD, truncated [ 157.074189][ T4322] loop3: p2 size 150994944 extends beyond EOD, truncated [ 157.175606][ T4322] loop3: p3 size 66846464 extends beyond EOD, truncated [ 157.204100][ T9841] loop3: p1 p2 p3 p4 [ 157.214535][ T9841] loop3: p1 size 196608 extends beyond EOD, truncated [ 157.238928][ T9841] loop3: p2 size 150994944 extends beyond EOD, truncated [ 157.248962][ T9841] loop3: p3 size 66846464 extends beyond EOD, truncated [ 157.444716][ T9910] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1395'. [ 157.470116][ T9909] sit0: entered promiscuous mode [ 157.476453][ T9909] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1394'. [ 157.480153][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 157.490678][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 157.497546][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 157.516049][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 157.533286][ T9912] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 157.822083][ T9927] loop3: detected capacity change from 0 to 128 [ 158.169028][ T9950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1406'. [ 158.221904][ T9957] syz_tun: entered allmulticast mode [ 158.232544][ T9957] syz_tun: left allmulticast mode [ 158.246089][ T9957] sctp: [Deprecated]: syz.2.1408 (pid 9957) Use of int in maxseg socket option. [ 158.246089][ T9957] Use struct sctp_assoc_value instead [ 158.338703][ T9942] loop6: detected capacity change from 0 to 1024 [ 158.359516][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1411'. [ 158.368595][ T9966] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1411'. [ 158.389992][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1411'. [ 158.481796][ T9940] loop3: detected capacity change from 0 to 32768 [ 158.556259][ T3302] loop3: p1 p3 < > [ 158.571444][ T9940] loop3: p1 p3 < > [ 158.673106][ T9979] loop6: detected capacity change from 0 to 8192 [ 158.920455][ T9993] loop5: detected capacity change from 0 to 32768 [ 158.930445][ T28] kauditd_printk_skb: 438 callbacks suppressed [ 158.930467][ T28] audit: type=1326 audit(1774912093.123:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 158.969908][ T9984] xt_hashlimit: max too large, truncated to 1048576 [ 159.004157][ T23] hid_parser_main: 91 callbacks suppressed [ 159.004284][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.035772][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.096400][ T9985] xt_hashlimit: max too large, truncated to 1048576 [ 159.152030][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.169441][ T9993] loop5: p1 p3 < > [ 159.196881][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.280260][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.361890][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.374586][T10021] sch_fq: defrate 4294967295 ignored. [ 159.392709][ T28] audit: type=1326 audit(1774912093.153:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 159.416480][ T28] audit: type=1326 audit(1774912093.153:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 159.416920][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.455874][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.464022][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.471623][ T28] audit: type=1326 audit(1774912093.153:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 159.471703][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.509967][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 159.521324][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 159.525383][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 159.554867][T10024] fido_id[10024]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.578817][ T28] audit: type=1326 audit(1774912093.153:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 159.621333][ T28] audit: type=1326 audit(1774912093.153:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 159.646803][T10030] delete_channel: no stack [ 159.649558][ T28] audit: type=1326 audit(1774912093.153:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 159.723961][ T28] audit: type=1326 audit(1774912093.153:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 159.747618][T10033] loop3: detected capacity change from 0 to 1024 [ 159.780886][T10040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10040 comm=syz.2.1430 [ 159.794607][T10040] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1430'. [ 159.868355][ T28] audit: type=1326 audit(1774912093.153:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 159.882038][T10043] loop2: detected capacity change from 0 to 128 [ 159.891890][ T28] audit: type=1326 audit(1774912093.153:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6d7ccfce code=0x7ffc0000 [ 159.904505][T10033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.929770][T10043] msdos: Bad value for 'uid' [ 159.938491][T10043] msdos: Bad value for 'uid' [ 160.005485][T10047] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1433'. [ 160.014594][T10047] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1433'. [ 160.023782][T10047] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1433'. [ 160.465991][T10052] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 160.476443][T10052] System zones: 0-1, 3-36 [ 160.489590][T10052] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1434: bad orphan inode 134217728 [ 160.500700][T10052] loop2: lost filesystem error report for type 5 error -117 [ 160.503916][T10052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.698918][T10057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.716053][T10057] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.759130][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1437'. [ 160.770369][ T3316] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 160.800288][T10068] Unable to read rock-ridge attributes [ 160.816984][ T3316] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 160.850311][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1438'. [ 160.972375][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.985632][ T5216] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.024376][T10087] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 161.697199][ T9568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.038636][T10118] IPv6: addrconf: prefix option has invalid lifetime [ 162.045672][ T8621] bridge_slave_1: left allmulticast mode [ 162.064398][ T8621] bridge_slave_1: left promiscuous mode [ 162.079589][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.095741][ T8621] bridge_slave_0: left allmulticast mode [ 162.113298][T10124] set_capacity_and_notify: 3 callbacks suppressed [ 162.113360][T10124] loop3: detected capacity change from 0 to 164 [ 162.139488][ T8621] bridge_slave_0: left promiscuous mode [ 162.145171][ T8621] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.159505][T10124] Unable to read rock-ridge attributes [ 162.287110][ T8621] bond3 (unregistering): (slave gretap1): Releasing active interface [ 162.339630][T10137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1453'. [ 162.402004][ T8621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.417144][ T8621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.435067][ T8621] bond0 (unregistering): Released all slaves [ 162.452578][ T8621] bond1 (unregistering): Released all slaves [ 162.471871][ T8621] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 162.490826][ T8621] bond2 (unregistering): Released all slaves [ 162.498943][ T8621] bond3 (unregistering): Released all slaves [ 162.559759][T10098] lo speed is unknown, defaulting to 1000 [ 162.587268][ T8621] tipc: Disabling bearer [ 162.599336][ T8621] tipc: Left network mode [ 162.671168][ T8621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.740961][ T8621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.940556][ T23] lo speed is unknown, defaulting to 1000 [ 162.960561][ T23] infiniband syz0: ib_query_port failed (-19) [ 163.010873][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1460'. [ 163.041365][T10098] chnl_net:caif_netlink_parms(): no params data found [ 163.076678][T10181] tipc: Started in network mode [ 163.098088][T10181] tipc: Node identity 4246, cluster identity 4711 [ 163.121408][T10181] tipc: Node number set to 16966 [ 163.147992][T10190] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1461'. [ 163.210852][T10196] loop3: detected capacity change from 0 to 128 [ 163.236532][T10181] loop6: detected capacity change from 0 to 8192 [ 163.264728][T10190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.303915][T10190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.308537][T10196] syz.3.1463: attempt to access beyond end of device [ 163.308537][T10196] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 163.330675][T10190] bond0 (unregistering): Released all slaves [ 163.368840][T10203] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 163.378467][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.398041][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.405405][T10098] bridge_slave_0: entered allmulticast mode [ 163.412065][T10098] bridge_slave_0: entered promiscuous mode [ 163.418959][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.426472][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.433961][T10098] bridge_slave_1: entered allmulticast mode [ 163.440497][T10098] bridge_slave_1: entered promiscuous mode [ 163.457780][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.478655][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.497098][T10098] team0: Port device team_slave_0 added [ 163.503697][T10098] team0: Port device team_slave_1 added [ 163.542900][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.555290][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.581308][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.631957][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.638977][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.643247][T10220] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1468'. [ 163.665219][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.704412][T10098] hsr_slave_0: entered promiscuous mode [ 163.710564][T10098] hsr_slave_1: entered promiscuous mode [ 163.716328][T10098] debugfs: 'hsr0' already exists in 'hsr' [ 163.723910][T10098] Cannot create hsr debugfs directory [ 163.845989][T10098] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 163.865379][T10098] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 163.882647][T10098] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 163.902410][T10240] loop3: detected capacity change from 0 to 164 [ 163.913107][T10098] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 163.950780][T10240] Unable to read rock-ridge attributes [ 164.082423][T10250] loop6: detected capacity change from 0 to 1024 [ 164.115409][T10250] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 164.124231][T10250] System zones: 0-1, 3-36 [ 164.133124][T10250] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1471: bad orphan inode 134217728 [ 164.144380][T10250] loop6: lost filesystem error report for type 5 error -117 [ 164.147384][T10250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.387136][T10098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.398096][T10098] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.462225][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.469321][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.545377][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.552592][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.696931][T10273] pimreg: entered allmulticast mode [ 164.728171][T10274] pimreg: left allmulticast mode [ 164.773827][ T9568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.807714][T10098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.015171][T10313] __nla_validate_parse: 1 callbacks suppressed [ 165.015184][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1479'. [ 165.050539][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 165.050622][ T28] audit: type=1400 audit(1774912099.243:2741): avc: denied { mount } for pid=10314 comm="syz.3.1480" name="/" dev="hugetlbfs" ino=24416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 165.059570][T10313] netlink: 'syz.6.1479': attribute type 1 has an invalid length. [ 165.196226][T10337] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1482'. [ 165.200100][T10098] veth0_vlan: entered promiscuous mode [ 165.232503][T10098] veth1_vlan: entered promiscuous mode [ 165.365044][T10098] veth0_macvtap: entered promiscuous mode [ 165.372532][T10098] veth1_macvtap: entered promiscuous mode [ 165.392486][T10098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.431170][T10098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.469428][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4 [ 165.614464][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 165.740557][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 165.740592][ T3317] Tainted: [W]=WARN [ 165.740599][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.740636][ T3317] Call Trace: [ 165.740642][ T3317] [ 165.740649][ T3317] __dump_stack+0x1d/0x30 [ 165.740671][ T3317] dump_stack_lvl+0x95/0xd0 [ 165.740776][ T3317] dump_stack+0x15/0x1b [ 165.740796][ T3317] dump_header+0x80/0x240 [ 165.740814][ T3317] oom_kill_process+0x295/0x350 [ 165.740832][ T3317] out_of_memory+0x97d/0xb80 [ 165.740879][ T3317] try_charge_memcg+0x62e/0xa10 [ 165.740980][ T3317] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 165.741008][ T3317] __swap_cache_prepare_and_add+0x386/0x530 [ 165.741107][ T3317] swap_cache_alloc_folio+0xa2/0x120 [ 165.741134][ T3317] swap_cluster_readahead+0x26e/0x3d0 [ 165.741159][ T3317] swapin_readahead+0xde/0x840 [ 165.741243][ T3317] ? __rcu_read_unlock+0x4e/0x70 [ 165.741259][ T3317] ? __perf_event_task_sched_in+0xa65/0xad0 [ 165.741278][ T3317] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 165.741300][ T3317] ? xfd_validate_state+0x45/0xf0 [ 165.741328][ T3317] ? __rcu_read_unlock+0x4e/0x70 [ 165.741355][ T3317] ? swap_cache_get_folio+0x26f/0x280 [ 165.741377][ T3317] do_swap_page+0x30d/0x2220 [ 165.741403][ T3317] ? __schedule+0x93c/0xd40 [ 165.741442][ T3317] ? __rcu_read_lock+0x36/0x50 [ 165.741457][ T3317] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 165.741479][ T3317] handle_mm_fault+0xb46/0x3020 [ 165.741528][ T3317] ? vma_start_read+0x1c7/0x2c0 [ 165.741612][ T3317] do_user_addr_fault+0x62f/0x1050 [ 165.741675][ T3317] ? trace_page_fault_user+0x1f/0xe0 [ 165.741699][ T3317] exc_page_fault+0x62/0xa0 [ 165.741726][ T3317] asm_exc_page_fault+0x26/0x30 [ 165.741746][ T3317] RIP: 0033:0x7fc505557917 [ 165.741770][ T3317] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 165.741786][ T3317] RSP: 002b:00007fff913a4ab0 EFLAGS: 00010202 [ 165.741799][ T3317] RAX: 0000000000000000 RBX: 000055558c008500 RCX: 00007fc505557917 [ 165.741888][ T3317] RDX: 00007fff913a4af0 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.741899][ T3317] RBP: 00007fff913a4b5c R08: 0000000000000000 R09: 0000000000000000 [ 165.741909][ T3317] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 165.741926][ T3317] R13: 00000000000927c0 R14: 0000000000028552 R15: 00007fff913a4bb0 [ 165.741945][ T3317] [ 166.010272][ T3317] memory: usage 288780kB, limit 307200kB, failcnt 62 [ 166.048528][ T3317] memory+swap: usage 299580kB, limit 9007199254740988kB, failcnt 0 [ 166.062105][ T6908] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.074607][ T6908] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.161178][ T3317] kmem: usage 251328kB, limit 9007199254740988kB, failcnt 0 [ 166.169658][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 166.178518][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 166.200025][ T6908] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.207830][ T3317] Memory cgroup stats for /syz0: [ 166.208838][ T6908] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.209061][ T3317] cache 57344 [ 166.278990][T10376] loop3: detected capacity change from 0 to 512 [ 166.289495][T10371] netlink: 'syz.3.1486': attribute type 14 has an invalid length. [ 166.353801][T10371] netlink: 'syz.3.1486': attribute type 11 has an invalid length. [ 166.367343][T10376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.428989][ T3317] rss 94208 [ 166.439764][T10376] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.464646][ T3317] shmem 0 [ 166.478243][ T3317] mapped_file 4096 [ 166.506482][ T3317] dirty 4096 [ 166.531342][T10371] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1486: iget: bad i_size value: 2533274857506816 [ 166.564264][ T3317] writeback 0 [ 166.567560][ T3317] workingset_refault_anon 172 [ 166.590945][ T3317] workingset_refault_file 109 [ 166.611967][T10371] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1486: iget: bad i_size value: 2533274857506816 [ 166.631501][ T3317] swap 720896 [ 166.634790][ T3317] swapcached 7102464 [ 166.652039][T10371] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1486: iget: bad i_size value: 2533274857506816 [ 166.667884][T10371] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1486: iget: bad i_size value: 2533274857506816 [ 166.709452][ T3317] pgpgin 273121 [ 166.712944][ T3317] pgpgout 273082 [ 166.718220][ T3317] pgfault 201613 [ 166.728002][ T3317] pgmajfault 38 [ 166.733181][T10371] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1486: iget: bad i_size value: 2533274857506816 [ 166.743201][ T3317] inactive_anon 40960 [ 166.773826][ T3317] active_anon 53248 [ 166.791626][ T3317] inactive_file 0 [ 166.795285][ T3317] active_file 65536 [ 166.824688][ T3317] unevictable 0 [ 166.828175][ T3317] hierarchical_memory_limit 314572800 [ 166.856888][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 166.873103][ T3317] total_cache 57344 [ 166.877111][ T3317] total_rss 94208 [ 166.881018][ T3317] total_shmem 0 [ 166.884472][ T3317] total_mapped_file 4096 [ 166.888746][ T3317] total_dirty 4096 [ 166.893658][ T3317] total_writeback 0 [ 166.897031][T10412] loop6: detected capacity change from 0 to 2048 [ 166.897463][ T3317] total_workingset_refault_anon 172 [ 166.897472][ T3317] total_workingset_refault_file 109 [ 166.897478][ T3317] total_swap 720896 [ 166.897484][ T3317] total_swapcached 7102464 [ 166.897490][ T3317] total_pgpgin 273121 [ 166.897495][ T3317] total_pgpgout 273082 [ 166.897501][ T3317] total_pgfault 201613 [ 166.897507][ T3317] total_pgmajfault 38 [ 166.897513][ T3317] total_inactive_anon 40960 [ 166.897519][ T3317] total_active_anon 53248 [ 166.987021][T10404] loop5: detected capacity change from 0 to 512 [ 167.012674][T10404] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 167.026307][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.036228][ T3317] total_inactive_file 0 [ 167.049039][T10404] EXT4-fs (loop5): 1 truncate cleaned up [ 167.049393][ T3317] total_active_file 65536 [ 167.049403][ T3317] total_unevictable 0 [ 167.049451][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.214,pid=4350,uid=0 [ 167.049598][ T3317] Memory cgroup out of memory: Killed process 4350 (syz.0.214) total-vm:94032kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 167.118720][T10422] tipc: Started in network mode [ 167.132319][T10404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.145682][T10422] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 167.147853][T10425] x_tables: duplicate underflow at hook 2 [ 167.164844][T10425] loop3: detected capacity change from 0 to 1024 [ 167.243206][T10422] tipc: Enabled bearer , priority 12 [ 167.264351][T10425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.718161][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.731001][T10445] loop6: detected capacity change from 0 to 512 [ 167.763240][T10445] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 167.784935][T10445] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 167.800219][T10445] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1499: Corrupt directory, running e2fsck is recommended [ 167.845252][T10445] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 167.853470][T10445] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1499: corrupted in-inode xattr: invalid ea_ino [ 167.867032][T10445] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.869311][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 167.871627][T10445] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1499: couldn't read orphan inode 15 (err -117) [ 167.878454][ C0] EXT4-fs (loop6): initial error at time 1774912102: ext4_iget_extra_inode:5025: inode 15 [ 167.906585][ C0] EXT4-fs (loop6): last error at time 1774912102: ext4_iget_extra_inode:5025: inode 15 [ 167.923179][T10445] loop6: lost filesystem error report for type 5 error -117 [ 167.924176][T10445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.944090][T10445] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #2: comm syz.6.1499: corrupted xattr block 255: invalid header [ 167.958041][T10445] SELinux: (dev loop6, type ext4) getxattr errno 117 [ 167.965216][T10445] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.042458][T10458] 9p: Bad value for 'wfdno' [ 168.049999][ T3687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.206681][T10445] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1499'. [ 168.366716][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1507'. [ 168.375808][T10485] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1507'. [ 168.385130][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1507'. [ 168.394181][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1507'. [ 168.403243][T10485] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1507'. [ 168.419888][ T10] tipc: Node number set to 15444650 [ 168.636497][T10491] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 169.336536][T10493] syzkaller0: entered promiscuous mode [ 169.342182][ T3425] kernel write not supported for file bpf-prog (pid: 3425 comm: kworker/0:3) [ 169.355646][T10497] loop6: detected capacity change from 0 to 512 [ 169.363835][T10493] syzkaller0: entered allmulticast mode [ 169.388246][T10497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.434168][T10497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.773221][T10516] sctp: [Deprecated]: syz.0.1520 (pid 10516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.773221][T10516] Use struct sctp_sack_info instead [ 170.265646][T10534] loop6: detected capacity change from 0 to 164 [ 170.323441][T10534] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 170.381525][T10534] __nla_validate_parse: 27 callbacks suppressed [ 170.381541][T10534] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1525'. [ 170.850458][T10552] loop6: detected capacity change from 0 to 164 [ 170.864970][T10552] Unable to read rock-ridge attributes [ 171.133408][T10568] loop7: detected capacity change from 0 to 512 [ 171.219912][ T28] audit: type=1400 audit(1774912105.393:2742): avc: denied { append } for pid=10573 comm="syz.5.1541" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.265940][T10568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.478974][T10098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.535310][T10587] loop7: detected capacity change from 0 to 1024 [ 171.555624][T10587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 171.564209][T10587] System zones: 0-1, 3-36 [ 171.571246][T10587] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1545: bad orphan inode 134217728 [ 171.582505][T10587] loop7: lost filesystem error report for type 5 error -117 [ 171.584409][T10587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.633430][T10594] loop6: detected capacity change from 0 to 512 [ 171.701773][T10597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10597 comm=syz.6.1549 [ 171.798426][T10098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.841929][ T28] audit: type=1326 audit(1774912106.033:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.7.1552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c07f9c799 code=0x0 [ 172.070053][T10615] loop7: detected capacity change from 0 to 128 [ 172.437953][T10627] loop6: detected capacity change from 0 to 164 [ 172.493455][T10627] Unable to read rock-ridge attributes [ 173.153857][ T6434] kernel write not supported for file bpf-prog (pid: 6434 comm: kworker/0:7) [ 173.658892][T10665] loop7: detected capacity change from 0 to 512 [ 174.074645][ T28] audit: type=1400 audit(1774912108.263:2744): avc: denied { mount } for pid=10676 comm="syz.0.1568" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 174.115811][ T28] audit: type=1400 audit(1774912108.293:2745): avc: denied { create } for pid=10678 comm="syz.3.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.140311][ T28] audit: type=1400 audit(1774912108.293:2746): avc: denied { write } for pid=10678 comm="syz.3.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.168646][ T28] audit: type=1400 audit(1774912108.293:2747): avc: denied { setopt } for pid=10678 comm="syz.3.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.271689][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 174.283401][T10697] loop3: detected capacity change from 0 to 512 [ 174.293615][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 174.303921][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 174.315830][T10697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.329155][T10697] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.350722][T10703] macsec0: entered allmulticast mode [ 174.381990][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 174.393173][ T28] audit: type=1400 audit(1774912108.583:2748): avc: denied { append } for pid=10687 comm="syz.3.1573" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.405827][T10703] veth1_macvtap: entered allmulticast mode [ 174.422616][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 174.423327][T10703] macsec0: left allmulticast mode [ 174.433693][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 174.441820][T10703] veth1_macvtap: left allmulticast mode [ 174.479078][T10691] netlink: 'syz.6.1574': attribute type 10 has an invalid length. [ 174.487224][T10691] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1574'. [ 174.540074][ T28] audit: type=1400 audit(1774912108.723:2749): avc: denied { map } for pid=10687 comm="syz.3.1573" path="socket:[27160]" dev="sockfs" ino=27160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.572680][T10691] : entered promiscuous mode [ 174.584111][T10691] bridge0: port 3() entered blocking state [ 174.590799][T10691] bridge0: port 3() entered disabled state [ 174.601662][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 174.610760][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 174.620326][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.655251][T10691] : entered allmulticast mode [ 174.684581][T10691] bridge0: entered allmulticast mode [ 174.694769][T10691] : left allmulticast mode [ 174.704875][T10691] bridge0: left allmulticast mode [ 174.725496][ T7525] kernel write not supported for file bpf-prog (pid: 7525 comm: kworker/1:12) [ 174.734983][T10718] tipc: MTU too low for tipc bearer [ 174.875612][T10738] sctp: [Deprecated]: syz.3.1588 (pid 10738) Use of int in max_burst socket option deprecated. [ 174.875612][T10738] Use struct sctp_assoc_value instead [ 174.922526][T10740] bond0 (unregistering): Released all slaves [ 174.996809][T10749] loop7: detected capacity change from 0 to 128 [ 175.018885][T10749] vfat: Unknown parameter '00000000000000000000ÿÿÿÿÿÿÿÿ' [ 175.121175][ T28] audit: type=1326 audit(1774912109.313:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.1587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc50559c799 code=0x0 [ 175.142414][T10751] xt_TCPMSS: Only works on TCP SYN packets [ 175.151130][T10745] bridge0: port 3(batadv0) entered disabled state [ 175.157722][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.164936][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.202889][T10745] bridge1: port 1(vlan2) entered disabled state [ 175.239444][T10774] netlink: 'syz.7.1593': attribute type 1 has an invalid length. [ 175.249622][ T28] audit: type=1400 audit(1774912109.423:2751): avc: denied { ioctl } for pid=10759 comm="syz.7.1593" path="socket:[27238]" dev="sockfs" ino=27238 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 175.360027][T10745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.378063][T10745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.425935][T10745] syzkaller0: left promiscuous mode [ 175.437127][T10745] syzkaller0: left allmulticast mode [ 175.445535][T10745] sit2: left allmulticast mode [ 175.466259][T10745] bond3: left promiscuous mode [ 175.474351][T10750] gretap0: left promiscuous mode [ 175.505093][T10791] bridge0: port 3(macsec1) entered blocking state [ 175.512464][T10791] bridge0: port 3(macsec1) entered disabled state [ 175.519008][T10791] macsec1: entered allmulticast mode [ 175.526880][T10791] bridge0: entered allmulticast mode [ 175.533726][T10791] macsec1: left allmulticast mode [ 175.538840][T10791] bridge0: left allmulticast mode [ 175.551954][ T317] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.560606][ T317] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.571698][ T317] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.585197][ T317] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.659249][T10811] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 175.677502][T10811] 9pnet_fd: p9_fd_create_unix (10811): problem connecting socket: ./file0: -2 [ 175.687212][T10811] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10811 comm=syz.5.1603 [ 175.843081][T10817] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 175.924259][ T3004] ================================================================== [ 175.932797][ T3004] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 175.941136][ T3004] [ 175.943440][ T3004] write to 0xffff88811da8ec80 of 8 bytes by task 3302 on cpu 1: [ 175.951040][ T3004] inode_set_ctime_current+0x5f2/0x960 [ 175.956480][ T3004] simple_unlink+0x2d/0x80 [ 175.960871][ T3004] shmem_unlink+0x12d/0x140 [ 175.965365][ T3004] vfs_unlink+0x1c7/0x490 [ 175.969677][ T3004] filename_unlinkat+0x1e2/0x410 [ 175.974588][ T3004] __se_sys_unlink+0x2b/0xe0 [ 175.979154][ T3004] __x64_sys_unlink+0x1f/0x30 [ 175.983812][ T3004] x64_sys_call+0x2eb6/0x3020 [ 175.988484][ T3004] do_syscall_64+0x12c/0x370 [ 175.993066][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.998941][ T3004] [ 176.001268][ T3004] read to 0xffff88811da8ec80 of 8 bytes by task 3004 on cpu 0: [ 176.008792][ T3004] atime_needs_update+0x2ef/0x3e0 [ 176.013811][ T3004] touch_atime+0x4a/0x330 [ 176.018138][ T3004] do_readlinkat+0x137/0x2f0 [ 176.022718][ T3004] __x64_sys_readlink+0x47/0x60 [ 176.027567][ T3004] x64_sys_call+0x2b51/0x3020 [ 176.032245][ T3004] do_syscall_64+0x12c/0x370 [ 176.036819][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.042698][ T3004] [ 176.045003][ T3004] value changed: 0x0000000069cb026d -> 0x0000000069cb026e [ 176.052086][ T3004] [ 176.054390][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 176.060519][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 176.070918][ T3004] Tainted: [W]=WARN [ 176.074698][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.084741][ T3004] ==================================================================