last executing test programs: 3m53.133135026s ago: executing program 32 (id=584): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xc, 0xa, 0x0, 0x1}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1700}, 0x94) 3m10.587539663s ago: executing program 33 (id=940): r0 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = dup(r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x5, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@user_xattr}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@debug}, {@nolazytime}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',msize=0x0000000000001008,version=9p2000']) 3m8.775955119s ago: executing program 34 (id=1009): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000001000000000000"], 0xfc}}, 0x0) 2m43.377800324s ago: executing program 6 (id=1459): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff00"], 0xac}, 0x1, 0x0, 0xff0f}, 0x4000) 2m43.253463621s ago: executing program 6 (id=1460): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x102) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file7\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) write$cgroup_subtree(r0, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) fallocate(r0, 0x0, 0x9, 0x1c0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001, 0xc1f}}, './file0\x00'}) 2m43.204982854s ago: executing program 6 (id=1462): r0 = socket$inet6(0xa, 0x80003, 0xff) (async) socket$inet6(0xa, 0x80003, 0xff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x83, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x22, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0xffffa888}, 0x20000890) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c0035000000000000000000080003800400328008002f"], 0x30}], 0x1}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) (async) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) 2m43.113551409s ago: executing program 6 (id=1464): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semtimedop(r1, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0) semop(r1, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) fallocate(r0, 0x0, 0x0, 0x8800000) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001b40)='8', 0x1, 0x7f, 0x0, 0x1, r0}]) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2m43.016978695s ago: executing program 6 (id=1469): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x230, &(0x7f0000000a00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0xffffffff, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9b6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001b00)) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, &(0x7f0000001300)=""/4075, 0xfeb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2c, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000440), 0x4) chmod(&(0x7f0000000100)='./file0\x00', 0x361) 2m42.481765566s ago: executing program 6 (id=1481): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000210425bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000180000020001280080001006772650014000280060010"], 0x40}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000180)=ANY=[@ANYBLOB="6d61703d6f66662c6f76657272696465726f636b7065726d2c63727566742c757466382c756e686964652c696f636861727365743d63703401372c6d61703d6f66662c6d6f64653d307830303030303085df56d141c00c82af930a1d"], 0xff, 0x55a, &(0x7f0000000940)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4004000) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) 2m42.162761355s ago: executing program 35 (id=1481): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000210425bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000180000020001280080001006772650014000280060010"], 0x40}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000180)=ANY=[@ANYBLOB="6d61703d6f66662c6f76657272696465726f636b7065726d2c63727566742c757466382c756e686964652c696f636861727365743d63703401372c6d61703d6f66662c6d6f64653d307830303030303085df56d141c00c82af930a1d"], 0xff, 0x55a, &(0x7f0000000940)="$eJzs3V1v01gawPHHpV2irFShZYVQVeBQdqUileAkEBRx5XVO0gOJHdkOaq9QRVNUkcKKstK2Nyw37K40czv3zOV8iPlGaD7BaEa2k77QJJ6+0un8fxGcE/vY5zlu5KdO4xMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiuTXbLlrSNF5nSY3m1gK/tfu0v/WBBXJ3XzGmXxEr/ie5nFxPF13/6+7qa/F/czKbPpuVXFzkZPvP1648vjo5Mdh+TMCH8v0R97S5tf1qpdfrvj2pQM6hG5dHr2toz4S+aTkNrUzoq2qlYt9frIeqbpo6XA4j3VJuoJ3ID9S8e1cVq9Wy0oVlv+M1ak5TDxY+uley7Yp6UmhrJwh97/6TQugummbTeI2kTbw6bvMofiE+NZGKtNNSam291y1nDSBuVPwtjUpZjUp2qVQslkrFysPqw0e2PXlggf0FOdDi5F60+H06wbM3cDwT/fwvTTHiSUeWRA19uFKTQHxpjVjfN8j/f7+vx/a7N/8Psvz13dUzkuT/m+mzm6Py/4hYzu6xKVuyLa9kRXrSk668HdbKGozq8Ps/2lZn92iIFk+MhOKLkZY4yRLVX6KkKhWpiC3PZVHqEoqSuhhpipZQliWUSHTyinIlEC2OROJLIErmxZW7oqQoValKWZRoKciy+NIRTxpSEyfZy5qsJ8e9LMoaeQzX5ErSqDhyGPnBT6grpTGjJf/j+E7mxA2cgF8G+R8AAAAAAFxYVvLue3z9PyU3klrdNLX9tcMCAAAAAAAnKPnL/2xcTMW1G2Jx/Q8AAAAAwEVjJffYWSKSl1tpbU2s5HYp3gQAAAAAAOCCSP7+fzMukjlQbom1M6cK1/8AAAAAAFwQ/8ucYz9sX7Z+/EmCYMr60F76m7WRzM3rbFxKt7v05R6j+ow13d9JUlTSYnLS1bNWLm20Mwnm536xlhWHtRuAsxPAfw4TwNVJ+UZup21ur6bl6mBN2ku+bpq64PrNx0VxnOmJSC9F/3q9/m9Jhv9/rzVt5WS91y28eNNbTWL5EO/lw0Z/AsUD8yiOieVdMt9Ccs/F0BFPJTdi9PvNW7K23uvae8c/kW4+sb/H99Nj+vwoc2mruf6Mt/n948/FfRYLo0bfj6J4zJF/lDtpmzvzd9JiSBSlrChKe6MYfiyOH0U5K4ryMaMAgK9lLSMLWXIg7x7hLHe07C6HzO4fZT5tMz+TnFgnZ4ac0e2sM7p9zOz2w4HvQBqVY+N+v/0iq36KN/g0st+wWbLiQ3jp3cY/5drm1va99Y2Vl92X3delUrliP7DthyWZSobRL8g9AIAh9n7HjjU0/w9a/Pxd2vBg7n6QcVX9l52PFBTkhbyRnqzKQnK3QfKJg6G/EeT3fAxhIeOqNZ+kyfQbXhbGXNX9KbnLYbDf0ti2+2Mon/4PAgCAMzSXkYet7G/hsxYyrrv35/LxV8e7bYtnfCQAAPjj0MFnKx/91woC035erFaLTrSoVeC7T1Vgag2tjBfpwF10vIZW7cCPfNdvxpVnpqZDFXbabT+IVN0PVNsPzVIyfaDqf/V7qFuOFxl38Da263uR40aqZkJXtTv/aJpwUQfJxmFbu6ZuXCcyvqdCvxO4uqBUqPWehqamvcjUTVz1VDswLSfIqWd+s9PSqqZDNzDtyE93OOjLeHU/aCW7LXzlYw0AwHmxubX9aqXX6749xcrQjnNnPlQAANCXkaUBAAAAAAAAAAAAAAAAAAAAAMA5cBb3/1G54JXBVNDnJR4qJ1DJPHW8P/WTE4BT9WsAAAD//3nnTbg=") syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4004000) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) 2m36.904949292s ago: executing program 5 (id=1553): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000025c0)=[{{&(0x7f0000004940)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x21, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000007c0)='j', 0x1}], 0x1}}], 0x1, 0x41) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0xf7, r3, 0x1, 0x16, 0x6, @remote}, 0x14) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xc, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x89}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000000300004802c000180090001007866726d000000001c0002242b0f3b4000000004050003000200000008000240000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x84}}, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000300000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1, 0x3, 0x5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="e80300ee00", @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf2589000000f4001d805000008005000b0000000000060005006000000005000b00000000000c0003000800000000000000050006000000000005000700e2000000050006000100000005000800cb00000005000c00020000001400008006000500f900000005000a00010000003c00008005000600010000000500060000000000050008007300000005000c0001000000060005002400000005000700e900000005000c00010000005000008027000500840000000c00020007000000000000000500060001000000050008007600000006000500b800000005000700a100000005000b000100000005000800ec00000005000b000000000054001d80100000800400040005000800b50000000800008004000400380000800500070019000000050006000000000005000900000000000c000300040000000000000005000b0001000000050006000000000088021d80100000800400040005000a00010000000400008040000080050009000100000005000c00020000000c0003000800000000000000050009000100000005000a000100000005000c000000000005000a00010000000c000080060005002e0000001c000080050008000600000005000800500000000500060000000000d00100800c00020005000000000000000400040005000700fb00000090010d806c0003801a0001000603031b05240c02020409044803050418010501060b0000140003000100050002000d00ffff0500090001000600010012040000050004000300000005000700010000001f0001000601071604482811031803012401020b242d6c366c361b0b0b18090028000180140001000318010901304848600001060b18056c0500060000000000050006000000000040000080050007000000000005000700010000000500060001000000050004000200000014000500030006000900220000100080080003000500060000000000b80000804a000200073c3a57544221493e4f2c4a1a10133c512f435340402c3b3950003d2011252d2e540307074101305406502b350f391009384a45130a080c5039264a4151330218214818312c000014000300070045000080f8ff73600300080006000500070000000000050004000200000041000200123941571757263b281647400d215119012929170117532348042454355207424906452a33463b3a4812401f2137191e402c0b2b321e552705071a4d100000000400040005000a000100000005000800fc000000050006000000000006000500850000002800008005000a000100000005000900010000000c0002009ff400000000000005000b0000000000100000800c000300070000000000000004001d80"], 0x3e8}, 0x1, 0x0, 0x0, 0x88000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$vsock_stream(0x28, 0x1, 0x0) 2m36.094998299s ago: executing program 5 (id=1569): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x10, &(0x7f0000000240)={[{@lazytime}]}, 0x1, 0x7de, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xa142, 0x189) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80300, 0x0) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x7, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf25e0000001000000000000000000000000000100040b6e4e210002000000002100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d432000000640101010000000000000000000000000000000000000000000000000000000009000000000000000100000000000080fffffffffeffffff1000000000000000018000000000000043050000000002000400000000000000ffffffffffffff7f0b00000000000000fdffffffffffffff000000000e000000000000002cbd7000003500000200000070000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{@fixed}]}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000000800154000000064240001801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000"], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000100), 0x80800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m35.928383789s ago: executing program 5 (id=1576): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8407, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c005, 0x0, 0x0) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, r1) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0) r2 = semget$private(0x0, 0x1, 0x110) semctl$SETVAL(r2, 0x3, 0x10, 0x0) 2m35.838094175s ago: executing program 5 (id=1581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = io_uring_setup(0x68af, &(0x7f0000000240)={0x0, 0x0, 0x1880, 0xfffffffd}) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x7, 0x1, 'CT\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008040) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x300, 0x0, 0x3, 0x9, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffe]}, 0x0, 0x0, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000811179000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2m35.525240853s ago: executing program 5 (id=1592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08000100e00000022c0010"], 0x1f0}, 0x1, 0x0, 0x84}, 0x0) 2m35.275853467s ago: executing program 5 (id=1597): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x831, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) io_setup(0x97e5ad60, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000180)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) r3 = socket(0x10, 0x3, 0x0) unshare(0x610d4603d33dedd9) socket(0x1f, 0x80000, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000400), 0x0}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000000003000000080001000100"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4004c}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYRES8=r2], 0x48}}, 0x404c080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0xa2, 0xf, 0x397, 0x6}, 0x8, 0x8, 0x1d, 0x0, 0x2000, 0x1ffffd, 0x0}) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x6c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x9, 0x7}, {0xb, 0x2, 0x6, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x14}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008012, &(0x7f0000000080)={[], [{@seclabel}, {@audit}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x1, 0x582, &(0x7f0000000600)="$eJzs3c+PG1cdAPDvzP7Mj2YT6AEqIAEKAUXxZp02qnppuYBQVQlRcUAc0mXXWS3xxiH2lu4Sie3fABJInOBP4IDEAaknDnDiiMQBEOWAVCACZZF6GDTjya6z6yVO7LUb+/ORJjNv3pv5vmdn/MbPXr8AJtaFiNiJiNmIeDMiFsr9SbnEq+0lL3f/3t2V3Xt3V5LIsjf+mRT5+b7oOCZ3qjznfER8/SsR304Ox21ubd9crtdrd8r0Ymvj9mJza/vy+sbyWm2tdqtavbZ07cpLV1+sDqyt5zd+8f6X11/7xq9/9cn3fr/zxe/n1Tpd5nW2Y5DaTZ/Zi5ObjojXjiPYCEyV69kR14Mnk0bERyLiM8X1vxBTxf9OAGCcZdlCZAudaQBg3KXFGFiSViIiTcubgEp7DO/ZOJnWG83WpRuNzVur7bGyszGT3liv166cm/vjd4vCM0meXiryivwiXT2QvhoR5yLiR3MninRlpVFfHc0tDwBMvFOd/X9E/GcuTSuVng7t8qkeAPDUmB91BQCAodP/A8Dk0f8DwOTpof8vP+zfOfa6AADD4f0/AEwe/T8ATB79PwBMlK+9/nq+ZLvl71+vvrW1ebPx1uXVWvNmZWNzpbLSuHO7stZorBW/2bPxqPPVG43bSy/E5tuLrVqztdjc2r6+0di81bpe/K739drMUFoFAPw/586/+4ckInZePlEs0TGXg74axlv65KX8/hc85ab6OdgNAjzVzPYFk6unLry4SfjtsdcFGI2ub+bnu24+7CePEcT3jOBD5eLHex//N8czjJcDI/sfZKOqCDB0U122Hu2VY6kLMFxPPP7/58HWAxi+LEsOzvk/u5cFAIylPr7Cl/1gUDchwEg96sv8A/n8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMbM6Yj4TiRppZgLPM3/TSuViGci4mzMJDfW67UrEXEmzkfEzFyeXhp1pQGAPqV/T8r5vy4uPH/6YO5s8t+5Yh0R3/vpGz9+e7nVurOU7//X3v65B9OHVfeP62NeQQCgd3/tpVDRf1fLdccb+fv37q48WI6xjoe8/6W9yUdXdu/dLZZ2znRkWZZFzBf3Eif/ncR0ecx8RDwXEVMDiL/zTkR8rFv7k2Js5Gw582ln/ChjPzPU+OlD8dMir73OH76PDqAuMGnezV9/Xi2uv3j4+kvjQrHufv3PF69Q/Ste/+YjHrz27XbEny4jTXWJn1/zF3qN8cJvvnpoZ7bQznsn4rnpbvGTvfjJEfGf7zH+nz7xqR++ckRe9rOIi3Ew/uxDZfJYi62N24vNre3L6xvLa7W12q1q9drStSsvXX2xuliMUS8+GKk+7B8vXzrTbf/uiXb7Tx6K347afuZPHWj/ft0+12P7f/7Bm9/69H5yrjMvj/+Fz3Z//p8tInZ//PM+8fM9xl8++csjp+/O468e0f5HPf+Xeoz/3t+2V3ssCgAMQXNr++ZyvV6709dG/i50EOc5tJFXsbfCSdmg/oL+JYqN/YcliSQe5zzz0bFn5qgyEb2ccGavOUmPD8KHZWN6715xsGf+Zn7GITcnHXgrnmQjzpYb9x/jqPxZ6OvSA8bZ/kUfEb8bdW0AAAAAAAAAAAAAAIBuOv/o58wx/Z3TqNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+PpfAAAA//9cc8Da") symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m35.214472302s ago: executing program 36 (id=1597): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x831, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) io_setup(0x97e5ad60, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000180)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) r3 = socket(0x10, 0x3, 0x0) unshare(0x610d4603d33dedd9) socket(0x1f, 0x80000, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000400), 0x0}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000000003000000080001000100"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4004c}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYRES8=r2], 0x48}}, 0x404c080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0xa2, 0xf, 0x397, 0x6}, 0x8, 0x8, 0x1d, 0x0, 0x2000, 0x1ffffd, 0x0}) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x6c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x9, 0x7}, {0xb, 0x2, 0x6, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x14}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008012, &(0x7f0000000080)={[], [{@seclabel}, {@audit}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x1, 0x582, &(0x7f0000000600)="$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") symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m19.598989801s ago: executing program 9 (id=3145): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4c001, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000001900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000002a000000bf0900000000000066090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b503fcff000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m18.713074913s ago: executing program 9 (id=3170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000004800000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x0) 1m18.608977519s ago: executing program 9 (id=3174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff7ffe}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300ea000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m18.076397891s ago: executing program 9 (id=3185): r0 = syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) lremovexattr(&(0x7f0000000400)='./file1\x00', &(0x7f0000000540)=ANY=[]) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_names='bond0\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) preadv2(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000600)=""/187, 0xbb}], 0x9, 0x7, 0x9, 0x1) 1m17.719902901s ago: executing program 9 (id=3191): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400080, &(0x7f00000000c0)={[{@subsystem='perf_event'}, {@xattr}, {@cpuset_v2_mode}, {@noprefix}], [{@dont_measure}, {@fsname={'fsname', 0x3d, 'mb_optimize_scan'}}, {@obj_role={'obj_role', 0x3d, 'mb_optimize_scan'}}, {@appraise}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000280)=0xe8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}], [], 0x6b}}) mount$9p_xen(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80000, &(0x7f0000000480)={'trans=xen,', {[{@cache_loose}, {@dfltuid}, {@loose}, {@aname={'aname', 0x3d, '-\x00'}}, {@afid={'afid', 0x3d, 0x8000}}, {@access_user}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '+'}}, {@flag='nolazytime'}, {@subj_role={'subj_role', 0x3d, '%^*}{'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_gt={'euid>', r2}}, {@dont_measure}, {@fowner_lt={'fowner<', r7}}, {@hash}]}}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") (async) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400080, &(0x7f00000000c0)={[{@subsystem='perf_event'}, {@xattr}, {@cpuset_v2_mode}, {@noprefix}], [{@dont_measure}, {@fsname={'fsname', 0x3d, 'mb_optimize_scan'}}, {@obj_role={'obj_role', 0x3d, 'mb_optimize_scan'}}, {@appraise}]}) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000280)=0xe8) (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) dup(r4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}], [], 0x6b}}) (async) mount$9p_xen(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80000, &(0x7f0000000480)={'trans=xen,', {[{@cache_loose}, {@dfltuid}, {@loose}, {@aname={'aname', 0x3d, '-\x00'}}, {@afid={'afid', 0x3d, 0x8000}}, {@access_user}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '+'}}, {@flag='nolazytime'}, {@subj_role={'subj_role', 0x3d, '%^*}{'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_gt={'euid>', r2}}, {@dont_measure}, {@fowner_lt={'fowner<', r7}}, {@hash}]}}) (async) 1m17.213127021s ago: executing program 9 (id=3195): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) shutdown(r0, 0x1) r1 = memfd_secret(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000100)=@framed={{}, [@map_val={0x18, 0x2, 0x2, 0x0, r1}]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000002e00)=""/4086, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1m17.187236183s ago: executing program 37 (id=3195): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) shutdown(r0, 0x1) r1 = memfd_secret(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000100)=@framed={{}, [@map_val={0x18, 0x2, 0x2, 0x0, r1}]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000002e00)=""/4086, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1m4.289414476s ago: executing program 8 (id=3380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9012000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000002000000000000000001f000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000080000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000b1a0010049011400"], 0x1290}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m4.282611397s ago: executing program 8 (id=3381): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m4.189549192s ago: executing program 8 (id=3383): read$watch_queue(0xffffffffffffffff, &(0x7f0000004280)=""/144, 0x90) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x3f00000000000000, 0x0, 0x0) 1m4.184027273s ago: executing program 8 (id=3384): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x41, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x2824, 0x10000, 0x4, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x806, &(0x7f0000001180)="$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") r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f0000000040)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)='>K', 0x2}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008811) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r1, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x240880) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x41, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x2824, 0x10000, 0x4, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x806, &(0x7f0000001180)="$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") (async) gettid() (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) (async) timer_create(0x3, &(0x7f0000000040)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000000140)) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)='>K', 0x2}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008811) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r2, 0x0, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_gettime(r1, 0x0) (async) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x240880) (async) 1m4.114448937s ago: executing program 8 (id=3385): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000000c0)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@max_batch_time}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xf5}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) r1 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000740)='./file2\x00', 0x2, &(0x7f0000000980)={[], [{@obj_role={'obj_role', 0x3d, '\\\xf5'}}, {@obj_role={'obj_role', 0x3d, '\x00f=\xd8'}}]}, 0xfa, 0x477, &(0x7f00000000c0)="$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") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="020027bd7000ffdbdf251600000028000580240002800800010014000000080001001f000000080004000500000008000200010c000054000380080001000180ffff0800030003000000080001000900000008000200010000000800010004000000080001000080000008000100040000000800010004000000080003000e000000080001000d000000240007800800010003000000080001000500000008000100030000000800010000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x40000d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="1100000004000000"], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) close(r5) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0xd3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000000206010800000000000000000300fffd0500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e65740000000088033b7fbe9e1f5584fb784daaef2a68f3cfccaccf046e72c54cb4b7410c78662aae95c2f42c51ad4a5134072955668bf83deea1f94393686d1d63e2e9fd3f2be2a50b8fda186b462e7c68e57efd5b5ed85821acf2620f62fd47b8b7bd35e2309cd562dbf8b6f3"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) 1m3.976847505s ago: executing program 8 (id=3386): syz_clone(0x4498d280, 0x0, 0xffffffffffffffec, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28050600) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xff}], 0x2, 0x40000100, 0x0) 1m3.949007906s ago: executing program 38 (id=3386): syz_clone(0x4498d280, 0x0, 0xffffffffffffffec, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28050600) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xff}], 0x2, 0x40000100, 0x0) 28.08541887s ago: executing program 0 (id=3847): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000080)={0x800100, 0x7, 0x22, 0x5, 0x82, 0x3}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r8, &(0x7f0000000340)=""/163, 0xa3) r9 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000000)=0xfffffffffffffef1) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000340)={r10, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x198e, 0x7ca3, 0xffffff36, 0x8000, 0xff, 0xfc5d, 0x7}, &(0x7f0000000300)=0x9c) 28.034924653s ago: executing program 0 (id=3851): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x49a, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x80000000, 0xffffffffffffffff, 0x4, 0x101}) 27.653361645s ago: executing program 0 (id=3865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000440)) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11002200000000000100000000"], 0x48) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000540)}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 32) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000340)=0x10, 0x4) (rerun: 32) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) clock_adjtime(0x7, &(0x7f0000000480)={0x8000, 0x6, 0x2, 0x0, 0x3, 0x3, 0xfffffffffffffffc, 0x7fffffff, 0xfffffffffffffffe, 0x5, 0x100000000, 0x7ff, 0x54, 0x4, 0x1, 0x4, 0x2, 0xb, 0x0, 0x2, 0xfffffffffffffff2, 0x86, 0xffffffff, 0x10, 0x2, 0x5}) r8 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) (async) sendmsg$nl_route(r8, 0x0, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x3104004, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_mmap}, {@version_L}, {@dfltgid}, {@version_9p2000}, {@cache_fscache}, {@noextend}], [{@dont_measure}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_gt}, {@fowner_eq}]}}) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 27.291491216s ago: executing program 0 (id=3876): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x1, 0x1aa, &(0x7f00000016c0)="$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") r0 = syz_open_dev$vcsa(&(0x7f0000001540), 0x3, 0x40000) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) r4 = syz_io_uring_setup(0x1215, &(0x7f00000001c0)={0x0, 0x7d0d, 0x80, 0x100000, 0x1a3}, &(0x7f0000000000), &(0x7f0000000580)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='gr'], 0xa) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000004cc0)={0x2, 0xe}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') socket(0x6, 0x806, 0x8000) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000040)=""/119, 0xcc}, {&(0x7f00000000c0)=""/85, 0x55}], 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001580)='hybla', 0x5) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet_sctp(r8, &(0x7f0000000280)={&(0x7f0000000100)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="4989b94985113285299d3fd9063c56d5826c1d9f8e41f78399a9ac88e1a52795fe3871fbea27717622e78ea4b9971cebfab323050b85b2ac51e49fb8c421f1afe8f56e16523021d3", 0x48}, {&(0x7f00000015c0)="6f751a0bf7145dce78dc9bc420737c23ad1030d426ff51141e54b438d4bdc5e46cdaadfc6fb510326b9293f3684f48cc23b0516b9c033e936b19aac878c8c08374d72878bcded95fe045762833dc7471f5b18b0a0e39f603d9e3e4c03f3602b995aecf6684a2324122d73b0930c459704b71a1499e63801571afee8267636708da9b2a93a31b252994125946978955a11a287c6b0ceec780ad555495eeaaacf9dfa1b6936717ddb13cfb32e77675945b118c2a1ea4d500009a470fda3e9a3a4be011b81861daf9a6886b", 0xca}, {&(0x7f0000000540)="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", 0x1000}], 0x3, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0x8, 0x7f, 0x3ff, 0xc}}], 0x18, 0x800}, 0x20000090) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 27.204578552s ago: executing program 0 (id=3877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1808000000000000000000000000000008000000000000000000000000000000956bf8a7dc7ba77e369cb1bdbeff1f51984d9a62ce102ed41992b2c2739a0d9c331972a236"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x154, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x12, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x401, 0x9, 0x13, 0x6, 0x2, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x80000001}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r7, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x1c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r8 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r8, 0x400, 0x1) r9 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r8, 0x1, &(0x7f0000000980)={{r11, r12+60000000}, {r13, r14+60000000}}, &(0x7f00000009c0)) sendmsg$nl_route_sched(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) 26.904535339s ago: executing program 0 (id=3880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0xce21, @empty=0x2000000}}, 0xeffd, 0x86}, &(0x7f0000000500)=0x90) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r2, 0x8, 0x70bd2d, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0xfffffffffffffe21, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 26.857742522s ago: executing program 39 (id=3880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0xce21, @empty=0x2000000}}, 0xeffd, 0x86}, &(0x7f0000000500)=0x90) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r2, 0x8, 0x70bd2d, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0xfffffffffffffe21, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.665592985s ago: executing program 2 (id=4262): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfffffffffffffeef, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x40, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) preadv2(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000200)=""/166, 0xa6}], 0x2, 0x3, 0xfffffc02, 0x4) 2.913242949s ago: executing program 2 (id=4279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc, 0x2, 0x0, 0xcd1}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.625460826s ago: executing program 3 (id=4282): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf251b0000000400ef99d7391ecc0006002100610000000400cc00070021006241c7c6523f9246969bd9f0951aca"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2.606190597s ago: executing program 3 (id=4283): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x49a, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x80000000, 0xffffffffffffffff, 0x4, 0x101}) 2.135012245s ago: executing program 3 (id=4286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000a20600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000003180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 2.066995849s ago: executing program 3 (id=4287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000500)="e0b9d5a2a00a3c6ffda2e38611215d", 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200), 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10, 0x4}, 0x20) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x80000000, &(0x7f0000000380)) 1.918621398s ago: executing program 2 (id=4288): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000030000000800000000000004040000000800000002000004f7ffffff0400000001000000000000000300000001000000010000000030615f5f5f2e2e5f"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x28) 1.918397358s ago: executing program 7 (id=4289): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 1.918237128s ago: executing program 2 (id=4290): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="712000000500000018510000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800005a1400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='syzkaller\x00', 0x1e2d, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @sk_skb=0x4, r0, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x8, 0x4, 0xe}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x1}, 0x94) socket(0x10, 0x3, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r1, &(0x7f0000000100)='./file1\x00') 1.88362608s ago: executing program 1 (id=4291): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000c12, &(0x7f00000004c0)=ANY=[], 0x81, 0xa5a, &(0x7f0000001500)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) connect$can_bcm(r0, &(0x7f0000000000), 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000000ac0)="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"/472, 0x1d8}, {&(0x7f00000002c0)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b042a3105e6ff295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74f9afe55639834dc4c941dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb47ee61e5be16f4c7701cc671d25000000000000aeebbef22d7f2d931c963877fead2ab06279afc4ae478a7078a7bbdac4c800a22f128ee9bc899bfd5deb66020573afcc8defb54a535ea2b58349463561392e0524203e7be632e162559fc3b538b8338b4bf1e6de1bc735612bb2fc209ba7eb2dbdd06fed65af89e8b314b5a6b309e10c4a50d56fafac82f33c79cd5b0d4324fd65e76f059f29ab898eeacc72ff0299a6c434fda16e04721b0a4b6ff9698edda863d6511e6b5a531197b508318d6ccaaac93baed37b29d42ba4f7bcec7bf73b01f307ce317774f78b245f53a1b2a746c2af0357c3adcd2c1a25e14bb3b4262c66becae48d37d8cb602cc911341c71d3b2011215cd29f5844a277d9f48f3096366405f32fd866ee6a6eaaba51628919f78374a13baeb3c64efe1b36845e4ef44c545fcb86bf851289081cef3a358f10e49b5c923d729315ac0e6ad", 0x224}, {&(0x7f0000000840)="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", 0x13f}, {&(0x7f00000001c0)="f39a9e8346ddfd46f5ba7fbc251c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec00"/66, 0x42}, {&(0x7f0000000240)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a5d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3c2", 0x44}], 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000094be36ff741e00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000000003fd31340e92c4bb8"], 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="0500000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000020000000000000007000000f01881a1deb9fbff"], 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86e46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r6 = epoll_create1(0x80000) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4010, r4}, 0x18) 1.8798906s ago: executing program 7 (id=4292): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fe"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x49a, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x80000000, 0xffffffffffffffff, 0x4, 0x101}) 1.70721639s ago: executing program 7 (id=4293): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf251b0000000400ef99d7391ecc0006002100610000000400cc00070021006241c7c6523f9246969bd9f0951aca"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.280166125s ago: executing program 2 (id=4295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000048020000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.066379278s ago: executing program 1 (id=4296): preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) 1.009926881s ago: executing program 1 (id=4297): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async) 1.009376411s ago: executing program 3 (id=4298): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fe"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x49a, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x80000000, 0xffffffffffffffff, 0x4, 0x101}) (fail_nth: 2) 913.653947ms ago: executing program 1 (id=4299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000003000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 913.363197ms ago: executing program 7 (id=4300): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/raw\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1) lseek(r1, 0x401, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) recvmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/7, 0x7}, 0x80000000}], 0x1, 0x60010002, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000fc0)=""/4093, 0xffd}], 0x2}}], 0x1, 0x102, 0x0) (async) fcntl$addseals(r3, 0x409, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xa, &(0x7f00000001c0)=@framed={{}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 872.362199ms ago: executing program 7 (id=4301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000500)="e0b9d5a2a00a3c6ffda2e38611215d", 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200), 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10, 0x4}, 0x20) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, &(0x7f0000000240), 0x80000000, 0x0) 845.157931ms ago: executing program 1 (id=4302): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000002", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 309.420493ms ago: executing program 3 (id=4304): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) socket$unix(0x1, 0x5, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 306.818833ms ago: executing program 4 (id=4305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 306.549323ms ago: executing program 2 (id=4306): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00ffffff7f000000007000fddbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0200820a"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000000) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000100), 0x3d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="888001008000000008000300", @ANYRES32=0x0, @ANYBLOB="369d5aa327610be3ebc9b0b66fa0413a9b84b128627eadf87261484972a6cb0d068fabecb75b98015d37f92d47104e2c1125"], 0x50}, 0x1, 0x8}, 0x0) unshare(0x26020480) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c070000180a05000000000000000000020001000c00054000000000000000020900010073797a3000000000140000001100010000e60000000000000300000aa008b6e5a9832050d74c63b0e1f828cfd1d0facd20b01eb787d4c6338410ddfd6784bcae3b6ac520fab84fd1f1cc9e6950d3e36b3dd69db3f32985c8f508ae0e13"], 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) r5 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x1, {0x1, 0x1, 0x3}}, 0x18) r9 = syz_io_uring_setup(0x42d1, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) 296.290363ms ago: executing program 4 (id=4307): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) 265.616715ms ago: executing program 4 (id=4308): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0xa, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) timer_create(0x0, &(0x7f0000000200)={0x0, 0xd}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x1, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) socket(0x2, 0x1, 0x40002) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 219.641228ms ago: executing program 4 (id=4309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9012000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000002000000000000000001f000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000008000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000b1a0010049011400"], 0x1290}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 117.599013ms ago: executing program 4 (id=4310): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf251b0000000400ef99d7391ecc0006002100610000000400cc00070021006241c7c6523f9246969bd9f0951aca"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 106.314454ms ago: executing program 1 (id=4311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002"], 0x50}}, 0x4000850) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x28}], 0x1) write$UHID_CREATE2(r1, &(0x7f0000000640)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x38, 0x1, 0xfffffff7, 0xd051, 0x8, 0x7, "7d5c03270c0fd001a7a074f0a33f9bd00f70d5fed6a1b7b45a212cd2eabdca450f36aac47efbe3bbf62e1e73555203f424604b846304a189"}}, 0x150) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000380)=0x40000) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) socket$caif_stream(0x25, 0x1, 0x1) r4 = syz_open_dev$sg(&(0x7f0000000300), 0xfffffffffffffffe, 0x44001) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.04386ms ago: executing program 4 (id=4312): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001000000000000"], 0xfc}}, 0x0) 0s ago: executing program 7 (id=4313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000050000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301802c0002"], 0x428}}, 0x40088) kernel console output (not intermixed with test programs): ill use data=ordered instead of data journaling mode [ 242.737023][T15423] total_writeback 0 [ 242.741189][T14483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.747199][T15423] total_workingset_refault_anon 578 [ 242.759054][T15423] total_workingset_refault_file 473 [ 242.760451][T15607] netlink: 'syz.2.3557': attribute type 1 has an invalid length. [ 242.764347][T15423] total_swap 196608 [ 242.776174][T15423] total_swapcached 0 [ 242.779148][T15599] EXT4-fs error (device loop7): ext4_init_orphan_info:583: comm syz.7.3554: inode #0: comm syz.7.3554: iget: illegal inode # [ 242.780834][T15423] total_pgpgin 49797 [ 242.820937][T15599] loop7: lost filesystem error report for type 5 error -117 [ 242.825511][T15413] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.825785][T15599] EXT4-fs (loop7): Remounting filesystem read-only [ 242.840909][T15423] total_pgpgout 49794 [ 242.850140][T15423] total_pgfault 69763 [ 242.854383][T15423] total_pgmajfault 51 [ 242.856336][T15599] EXT4-fs (loop7): get orphan inode failed [ 242.860695][T15423] total_inactive_anon 0 [ 242.865245][T15413] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.868541][T15423] total_active_anon 0 [ 242.879205][T15423] total_inactive_file 8192 [ 242.883852][T15423] total_active_file 4096 [ 242.888192][T15423] total_unevictable 0 [ 242.892026][T15599] EXT4-fs (loop7): mount failed [ 242.900492][T15423] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3514,pid=15422,uid=0 [ 242.907019][T15607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.921908][T15423] Memory cgroup out of memory: Killed process 15422 (syz.1.3514) total-vm:94096kB, anon-rss:1344kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 242.943757][T15413] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.953019][T15413] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.002886][T15413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.024227][T15413] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.038450][T10175] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.045529][T10175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.094655][T10175] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.101804][T10175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.176372][ T869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.208466][T15644] loop2: detected capacity change from 0 to 512 [ 243.264658][ T869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.299204][T15644] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3561: corrupted in-inode xattr: bad e_name length [ 243.366190][ T869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.391006][T15644] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 243.391255][T15644] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3561: couldn't read orphan inode 15 (err -117) [ 243.450573][T15413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.508714][ T869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.511259][T15644] loop2: lost filesystem error report for type 5 error -117 [ 243.548703][T15644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.605279][T15643] lo speed is unknown, defaulting to 1000 [ 243.663310][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.785757][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3567'. [ 243.830101][ T869] bridge_slave_1: left allmulticast mode [ 243.856363][ T869] bridge_slave_1: left promiscuous mode [ 243.883832][ T869] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.892714][T15706] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3571'. [ 243.922790][ T869] bridge_slave_0: left allmulticast mode [ 243.931126][ T28] audit: type=1400 audit(244.027:1663): avc: denied { associate } for pid=15718 comm="syz.7.3572" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 243.964990][ T869] bridge_slave_0: left promiscuous mode [ 243.970714][ T869] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.130682][T15722] loop1: detected capacity change from 0 to 512 [ 244.171653][T15746] loop2: detected capacity change from 0 to 512 [ 244.190419][T15722] EXT4-fs: Ignoring removed orlov option [ 244.227446][T15722] EXT4-fs: dax option not supported [ 244.236586][T15746] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3576: corrupted in-inode xattr: bad e_name length [ 244.290020][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 244.301950][T15746] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 244.302282][ T869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.320280][T15746] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3576: couldn't read orphan inode 15 (err -117) [ 244.332764][T15746] loop2: lost filesystem error report for type 5 error -117 [ 244.333404][T15746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.353306][ T869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.363884][ T869] bond0 (unregistering): Released all slaves [ 244.372223][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.373836][ T869] bond1 (unregistering): Released all slaves [ 244.419243][T15755] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 244.458961][ T869] IPVS: stopping backup sync thread 14984 ... [ 244.477475][T15758] loop2: detected capacity change from 0 to 256 [ 244.509902][T15413] veth0_vlan: entered promiscuous mode [ 244.521599][T15758] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 244.539695][T15758] ..0ªî{X¹¦: entered allmulticast mode [ 244.546349][T15758] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 244.608920][T15413] veth1_vlan: entered promiscuous mode [ 244.633745][ T869] hsr_slave_0: left promiscuous mode [ 244.639969][ T869] hsr_slave_1: left promiscuous mode [ 244.654326][ T869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.662552][ T869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.672334][ T869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.680596][ T869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.697299][ T869] veth1_macvtap: left promiscuous mode [ 244.708188][ T869] veth0_macvtap: left promiscuous mode [ 244.715369][ T869] veth1_vlan: left promiscuous mode [ 244.726847][ T869] veth0_vlan: left promiscuous mode [ 244.828812][ T869] team0 (unregistering): Port device team_slave_1 removed [ 244.841262][ T869] team0 (unregistering): Port device team_slave_0 removed [ 244.918362][T15643] chnl_net:caif_netlink_parms(): no params data found [ 244.925488][T15799] loop2: detected capacity change from 0 to 512 [ 244.953558][T15799] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3590: corrupted in-inode xattr: bad e_name length [ 244.981106][T15799] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 244.984692][T15799] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3590: couldn't read orphan inode 15 (err -117) [ 244.991005][T15413] veth0_macvtap: entered promiscuous mode [ 245.001061][T15799] loop2: lost filesystem error report for type 5 error -117 [ 245.013567][T15413] veth1_macvtap: entered promiscuous mode [ 245.028275][T15799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.046504][T15413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.063401][T15413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.077822][T15796] loop7: detected capacity change from 0 to 128 [ 245.095104][T15796] syz.7.3589: attempt to access beyond end of device [ 245.095104][T15796] loop7: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 245.110214][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.122932][T15796] syz.7.3589: attempt to access beyond end of device [ 245.122932][T15796] loop7: rw=0, sector=97, nr_sectors = 32 limit=128 [ 245.136530][T15643] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.143820][T15796] syz.7.3589: attempt to access beyond end of device [ 245.143820][T15796] loop7: rw=0, sector=145, nr_sectors = 88 limit=128 [ 245.150988][T15643] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.166067][T15643] bridge_slave_0: entered allmulticast mode [ 245.172590][ T28] audit: type=1400 audit(245.277:1664): avc: denied { accept } for pid=15794 comm="syz.7.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.194894][T15643] bridge_slave_0: entered promiscuous mode [ 245.215308][T10179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.234064][T15643] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.242765][T15643] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.254701][T15643] bridge_slave_1: entered allmulticast mode [ 245.262022][T15643] bridge_slave_1: entered promiscuous mode [ 245.269928][T10179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.309275][T10179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.323888][T15643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.352122][ T869] IPVS: stop unused estimator thread 0... [ 245.362054][T10179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.374112][T15643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.423181][T15643] team0: Port device team_slave_0 added [ 245.430031][T15643] team0: Port device team_slave_1 added [ 245.471794][ T28] audit: type=1400 audit(245.567:1665): avc: denied { read } for pid=15838 comm="syz.1.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.496228][T15843] __nla_validate_parse: 2 callbacks suppressed [ 245.496245][T15843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3598'. [ 245.499574][T15643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.524254][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.550503][T15643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.561526][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'. [ 245.564786][T15643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.578125][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.605361][T15643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.621601][T15822] netdevsim netdevsim2 ì: renamed from netdevsim0 (while UP) [ 245.639380][T15843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3598'. [ 245.723649][T15643] hsr_slave_0: entered promiscuous mode [ 245.739847][T15643] hsr_slave_1: entered promiscuous mode [ 245.758092][T15643] debugfs: 'hsr0' already exists in 'hsr' [ 245.764144][T15643] Cannot create hsr debugfs directory [ 245.828849][T15869] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3601: corrupted in-inode xattr: bad e_name length [ 245.844332][T15869] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 245.844517][T15869] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3601: couldn't read orphan inode 15 (err -117) [ 245.865877][T15869] loop7: lost filesystem error report for type 5 error -117 [ 245.896143][T15869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.976596][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.988493][ T28] audit: type=1326 audit(246.077:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 246.016404][ T28] audit: type=1326 audit(246.077:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 246.040964][ T28] audit: type=1326 audit(246.077:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 246.065068][ T28] audit: type=1326 audit(246.077:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 246.090931][ T28] audit: type=1326 audit(246.077:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 246.134349][ T28] audit: type=1326 audit(246.077:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 246.167623][T15859] syz.2.3600 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 246.200748][T15859] CPU: 1 UID: 0 PID: 15859 Comm: syz.2.3600 Tainted: G W syzkaller #0 PREEMPT(full) [ 246.200786][T15859] Tainted: [W]=WARN [ 246.200793][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 246.200846][T15859] Call Trace: [ 246.200854][T15859] [ 246.200863][T15859] __dump_stack+0x1d/0x30 [ 246.200890][T15859] dump_stack_lvl+0x95/0xd0 [ 246.200913][T15859] dump_stack+0x15/0x1b [ 246.200937][T15859] dump_header+0x80/0x240 [ 246.201005][T15859] oom_kill_process+0x295/0x350 [ 246.201048][T15859] out_of_memory+0x97d/0xb80 [ 246.201089][T15859] try_charge_memcg+0x62e/0xa10 [ 246.201144][T15859] obj_cgroup_charge_pages+0x23/0xc0 [ 246.201168][T15859] __memcg_kmem_charge_page+0x9e/0x170 [ 246.201190][T15859] __alloc_frozen_pages_noprof+0x18a/0x350 [ 246.201214][T15859] alloc_pages_mpol+0xb3/0x260 [ 246.201241][T15859] alloc_pages_noprof+0x8f/0x130 [ 246.201266][T15859] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 246.201311][T15859] __kvmalloc_node_noprof+0x3c3/0x620 [ 246.201447][T15859] ? ip_set_alloc+0x24/0x30 [ 246.201487][T15859] ? ip_set_alloc+0x24/0x30 [ 246.201555][T15859] ? __kmalloc_cache_noprof+0x18a/0x400 [ 246.201592][T15859] ip_set_alloc+0x24/0x30 [ 246.201676][T15859] hash_netiface_create+0x282/0x740 [ 246.201713][T15859] ? __pfx_hash_netiface_create+0x10/0x10 [ 246.201761][T15859] ip_set_create+0x3cf/0x970 [ 246.201790][T15859] ? __nla_parse+0x40/0x60 [ 246.201825][T15859] nfnetlink_rcv_msg+0x509/0x5d0 [ 246.201882][T15859] netlink_rcv_skb+0x123/0x220 [ 246.201943][T15859] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 246.201989][T15859] nfnetlink_rcv+0x167/0x1720 [ 246.202063][T15859] ? __kfree_skb+0x109/0x150 [ 246.202103][T15859] ? nlmon_xmit+0x4f/0x60 [ 246.202139][T15859] ? consume_skb+0x49/0x140 [ 246.202271][T15859] ? nlmon_xmit+0x4f/0x60 [ 246.202306][T15859] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 246.202329][T15859] ? __dev_queue_xmit+0x139a/0x1f20 [ 246.202352][T15859] ? __dev_queue_xmit+0x148/0x1f20 [ 246.202386][T15859] ? ref_tracker_free+0x37d/0x3e0 [ 246.202428][T15859] ? __netlink_deliver_tap+0x4dc/0x500 [ 246.202454][T15859] netlink_unicast+0x5c0/0x690 [ 246.202516][T15859] netlink_sendmsg+0x5c8/0x6f0 [ 246.202544][T15859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.202574][T15859] ____sys_sendmsg+0x5af/0x600 [ 246.202678][T15859] ___sys_sendmsg+0x195/0x1e0 [ 246.202709][T15859] __x64_sys_sendmsg+0xd4/0x160 [ 246.202767][T15859] x64_sys_call+0x194c/0x3020 [ 246.202804][T15859] do_syscall_64+0x12c/0x370 [ 246.202875][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.202898][T15859] RIP: 0033:0x7f77c054bf79 [ 246.202914][T15859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.202933][T15859] RSP: 002b:00007f77bef9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.202962][T15859] RAX: ffffffffffffffda RBX: 00007f77c07c5fa0 RCX: 00007f77c054bf79 [ 246.203017][T15859] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 246.203033][T15859] RBP: 00007f77c05e27e0 R08: 0000000000000000 R09: 0000000000000000 [ 246.203048][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.203108][T15859] R13: 00007f77c07c6038 R14: 00007f77c07c5fa0 R15: 00007fffb1b988c8 [ 246.203128][T15859] [ 246.551014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.571789][T15859] memory: usage 220616kB, limit 307200kB, failcnt 1237 [ 246.582489][T15859] memory+swap: usage 201196kB, limit 9007199254740988kB, failcnt 0 [ 246.601275][T10413] IPVS: starting estimator thread 0... [ 246.629248][T15859] kmem: usage 126064kB, limit 9007199254740988kB, failcnt 0 [ 246.650279][T15859] Memory cgroup stats for /syz2: [ 246.650566][T15859] cache 282624 [ 246.668471][T15859] rss 118784 [ 246.673060][T15859] shmem 0 [ 246.679370][T15859] mapped_file 65536 [ 246.685159][T15915] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3609'. [ 246.693661][T15859] dirty 4096 [ 246.701002][T15903] IPVS: using max 2496 ests per chain, 124800 per kthread [ 246.716138][T15859] writeback 0 [ 246.731040][T15859] workingset_refault_anon 175 [ 246.733327][T15643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.747585][T15859] workingset_refault_file 4619 [ 246.752868][T15859] swap 69632 [ 246.758126][T15859] swapcached 122880 [ 246.758994][T15643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.769980][T15859] pgpgin 223416 [ 246.772181][T15922] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3610'. [ 246.775685][T15643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.785194][ T28] kauditd_printk_skb: 235 callbacks suppressed [ 246.785208][ T28] audit: type=1326 audit(246.877:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dbbf9c84e code=0x7ffc0000 [ 246.789220][T15859] pgpgout 223314 [ 246.800876][ T28] audit: type=1326 audit(246.877:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dbbf9c84e code=0x7ffc0000 [ 246.820186][T15859] pgfault 205381 [ 246.832475][ T28] audit: type=1326 audit(246.897:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6dbbfd5d97 code=0x7ffc0000 [ 246.879158][T15859] pgmajfault 104 [ 246.884303][T15859] inactive_anon 8192 [ 246.888335][T15859] active_anon 118784 [ 246.907032][ T28] audit: type=1326 audit(246.897:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6dbbf7d399 code=0x7ffc0000 [ 246.930425][ T28] audit: type=1326 audit(246.897:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 246.933732][T10179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.954288][T15859] inactive_file 20480 [ 246.975889][T15859] active_file 270336 [ 246.999789][T15859] unevictable 0 [ 247.012331][T15859] hierarchical_memory_limit 314572800 [ 247.017847][T15859] hierarchical_memsw_limit 9223372036854771712 [ 247.024095][T15643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.026469][ T28] audit: type=1326 audit(246.897:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6dbbfd5d97 code=0x7ffc0000 [ 247.031633][T15859] total_cache 282624 [ 247.061403][T15859] total_rss 118784 [ 247.065195][T15859] total_shmem 0 [ 247.068795][T15859] total_mapped_file 65536 [ 247.071537][ T28] audit: type=1326 audit(246.897:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6dbbf7d399 code=0x7ffc0000 [ 247.080699][T15859] total_dirty 4096 [ 247.152174][T15859] total_writeback 0 [ 247.167530][ T28] audit: type=1326 audit(246.897:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 247.180780][T15859] total_workingset_refault_anon 175 [ 247.193762][ T28] audit: type=1326 audit(246.897:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dbbf9c84e code=0x7ffc0000 [ 247.233384][T15643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.252350][T15859] total_workingset_refault_file 4619 [ 247.253532][T15643] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.265913][T15964] set_capacity_and_notify: 1 callbacks suppressed [ 247.265927][T15964] loop7: detected capacity change from 0 to 512 [ 247.273530][ T28] audit: type=1326 audit(246.907:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6dbbfd5d97 code=0x7ffc0000 [ 247.278921][T15859] total_swap 69632 [ 247.306821][T15859] total_swapcached 122880 [ 247.317309][T15925] lo speed is unknown, defaulting to 1000 [ 247.320019][T15859] total_pgpgin 223416 [ 247.329829][ T869] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.336942][ T869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.344481][T15859] total_pgpgout 223314 [ 247.351989][T15859] total_pgfault 205381 [ 247.352613][T15964] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3617: corrupted in-inode xattr: bad e_name length [ 247.356355][T15859] total_pgmajfault 104 [ 247.373666][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.373888][T15859] total_inactive_anon 8192 [ 247.380784][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.385829][T15859] total_active_anon 118784 [ 247.396861][T15859] total_inactive_file 20480 [ 247.401426][T15859] total_active_file 270336 [ 247.405952][T15859] total_unevictable 0 [ 247.412835][T15964] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.413038][T15964] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3617: couldn't read orphan inode 15 (err -117) [ 247.417926][T15859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3600,pid=15857,uid=0 [ 247.449635][T15859] Memory cgroup out of memory: Killed process 15859 (syz.2.3600) total-vm:94168kB, anon-rss:1348kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 247.486554][T15964] loop7: lost filesystem error report for type 5 error -117 [ 247.488799][T15964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.526671][T10179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.565094][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.633057][T10179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.689768][T15643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.723579][T10179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.756977][T15925] chnl_net:caif_netlink_parms(): no params data found [ 247.949040][T10179] bridge_slave_1: left allmulticast mode [ 247.966899][T10179] bridge_slave_1: left promiscuous mode [ 247.991162][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.020000][T10179] bridge_slave_0: left allmulticast mode [ 248.036661][T10179] bridge_slave_0: left promiscuous mode [ 248.051406][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.223800][T10179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.235671][T10179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.260946][T10179] bond0 (unregistering): Released all slaves [ 248.289556][T15925] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.298070][T16044] loop2: detected capacity change from 0 to 512 [ 248.299081][T15925] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.319034][T16044] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3628: corrupted in-inode xattr: bad e_name length [ 248.335366][T15925] bridge_slave_0: entered allmulticast mode [ 248.341425][T16044] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.342133][T15925] bridge_slave_0: entered promiscuous mode [ 248.357722][T16044] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3628: couldn't read orphan inode 15 (err -117) [ 248.370785][T16044] loop2: lost filesystem error report for type 5 error -117 [ 248.379688][T15643] veth0_vlan: entered promiscuous mode [ 248.393375][T16044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.410970][T15925] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.428597][T15925] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.437097][T15925] bridge_slave_1: entered allmulticast mode [ 248.444510][T15925] bridge_slave_1: entered promiscuous mode [ 248.467955][T15643] veth1_vlan: entered promiscuous mode [ 248.477265][T10179] hsr_slave_0: left promiscuous mode [ 248.484311][T10179] hsr_slave_1: left promiscuous mode [ 248.495509][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.507227][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.514798][T10179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.528849][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.550768][T10179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.568328][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3629'. [ 248.582271][T10179] veth1_macvtap: left promiscuous mode [ 248.588005][T10179] veth0_macvtap: left promiscuous mode [ 248.596330][T16059] loop2: detected capacity change from 0 to 512 [ 248.599798][T10179] veth1_vlan: left promiscuous mode [ 248.607981][T10179] veth0_vlan: left promiscuous mode [ 248.627541][T16059] EXT4-fs: Ignoring removed orlov option [ 248.643278][T16059] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.671218][T16059] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3629: corrupted in-inode xattr: e_value size too large [ 248.700646][T16059] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.702811][T16074] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3632'. [ 248.703846][T16059] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3629: couldn't read orphan inode 15 (err -117) [ 248.741651][T16059] loop2: lost filesystem error report for type 5 error -117 [ 248.742751][T16059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.779241][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.827040][T10179] team0 (unregistering): Port device team_slave_1 removed [ 248.839624][T10179] team0 (unregistering): Port device team_slave_0 removed [ 248.915055][T15925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.925981][T15925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.946034][T15925] team0: Port device team_slave_0 added [ 248.964734][T15643] veth0_macvtap: entered promiscuous mode [ 248.972128][T15643] veth1_macvtap: entered promiscuous mode [ 248.983217][T15643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.001548][T16074] FAULT_INJECTION: forcing a failure. [ 249.001548][T16074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.019592][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3633'. [ 249.033742][T16074] CPU: 0 UID: 0 PID: 16074 Comm: syz.7.3632 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.033779][T16074] Tainted: [W]=WARN [ 249.033787][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 249.033814][T16074] Call Trace: [ 249.033822][T16074] [ 249.033830][T16074] __dump_stack+0x1d/0x30 [ 249.033858][T16074] dump_stack_lvl+0x95/0xd0 [ 249.033882][T16074] dump_stack+0x15/0x1b [ 249.033956][T16074] should_fail_ex+0x263/0x280 [ 249.033984][T16074] should_fail+0xb/0x20 [ 249.034007][T16074] should_fail_usercopy+0x1a/0x20 [ 249.034034][T16074] _copy_to_user+0x20/0xa0 [ 249.034188][T16074] simple_read_from_buffer+0xb5/0x130 [ 249.034223][T16074] proc_fail_nth_read+0x10e/0x150 [ 249.034247][T16074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.034272][T16074] vfs_read+0x1ab/0x7f0 [ 249.034306][T16074] ? __rcu_read_unlock+0x4e/0x70 [ 249.034343][T16074] ? __fget_files+0x184/0x1c0 [ 249.034405][T16074] ? mutex_lock+0x57/0x90 [ 249.034442][T16074] ksys_read+0xdc/0x1a0 [ 249.034489][T16074] __x64_sys_read+0x40/0x50 [ 249.034517][T16074] x64_sys_call+0x2886/0x3020 [ 249.034546][T16074] do_syscall_64+0x12c/0x370 [ 249.034631][T16074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.034716][T16074] RIP: 0033:0x7ffae548c84e [ 249.034782][T16074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.034799][T16074] RSP: 002b:00007ffae3f26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.034819][T16074] RAX: ffffffffffffffda RBX: 00007ffae3f276c0 RCX: 00007ffae548c84e [ 249.034891][T16074] RDX: 000000000000000f RSI: 00007ffae3f270a0 RDI: 0000000000000005 [ 249.034906][T16074] RBP: 00007ffae3f27090 R08: 0000000000000000 R09: 0000000000000000 [ 249.034921][T16074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.034935][T16074] R13: 00007ffae5746038 R14: 00007ffae5745fa0 R15: 00007fffb51df518 [ 249.035040][T16074] [ 249.285651][T15925] team0: Port device team_slave_1 added [ 249.426097][T15925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.467730][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.585860][T15925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.659458][T15643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.680208][T16128] FAULT_INJECTION: forcing a failure. [ 249.680208][T16128] name failslab, interval 1, probability 0, space 0, times 0 [ 249.711624][T15925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.720632][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.7.3638 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.720666][T16128] Tainted: [W]=WARN [ 249.720674][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 249.720732][T16128] Call Trace: [ 249.720802][T16128] [ 249.720810][T16128] __dump_stack+0x1d/0x30 [ 249.720836][T16128] dump_stack_lvl+0x95/0xd0 [ 249.720954][T16128] dump_stack+0x15/0x1b [ 249.720977][T16128] should_fail_ex+0x263/0x280 [ 249.721004][T16128] ? shmem_init_fs_context+0x36/0x110 [ 249.721037][T16128] should_failslab+0x8c/0xb0 [ 249.721134][T16128] __kmalloc_cache_noprof+0x5f/0x400 [ 249.721232][T16128] shmem_init_fs_context+0x36/0x110 [ 249.721345][T16128] finish_clean_context+0x68/0xc0 [ 249.721381][T16128] vfs_fsconfig_locked+0x1e/0x210 [ 249.721415][T16128] __se_sys_fsconfig+0x684/0x7d0 [ 249.721436][T16128] __x64_sys_fsconfig+0x67/0x80 [ 249.721458][T16128] x64_sys_call+0xd6e/0x3020 [ 249.721486][T16128] do_syscall_64+0x12c/0x370 [ 249.721532][T16128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.721556][T16128] RIP: 0033:0x7ffae54cbf79 [ 249.721575][T16128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.721595][T16128] RSP: 002b:00007ffae3f27028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 249.721622][T16128] RAX: ffffffffffffffda RBX: 00007ffae5745fa0 RCX: 00007ffae54cbf79 [ 249.721695][T16128] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 249.721709][T16128] RBP: 00007ffae3f27090 R08: 0000000000000000 R09: 0000000000000000 [ 249.721721][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.721736][T16128] R13: 00007ffae5746038 R14: 00007ffae5745fa0 R15: 00007fffb51df518 [ 249.721756][T16128] [ 249.880884][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.968978][T15925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.001839][T16133] netlink: 'syz.7.3641': attribute type 10 has an invalid length. [ 250.009944][T10178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.020123][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3640'. [ 250.021087][T10178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.069836][T16139] netlink: 'syz.1.3642': attribute type 1 has an invalid length. [ 250.075922][T15925] hsr_slave_0: entered promiscuous mode [ 250.084469][T15925] hsr_slave_1: entered promiscuous mode [ 250.116543][T16133] team0: Port device dummy0 added [ 250.130045][T10178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.154796][T16147] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3644'. [ 250.187467][T16139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.256716][T10178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.300764][T16153] loop0: detected capacity change from 0 to 512 [ 250.336762][T16160] loop7: detected capacity change from 0 to 512 [ 250.345396][T16153] EXT4-fs: Ignoring removed oldalloc option [ 250.398437][T16153] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.3647: Parent and EA inode have the same ino 15 [ 250.421431][T16160] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3649: corrupted in-inode xattr: bad e_name length [ 250.430583][T16153] loop0: lost filesystem error report for type 5 error -117 [ 250.453207][T16153] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.3647: Parent and EA inode have the same ino 15 [ 250.474327][T16153] loop0: lost filesystem error report for type 5 error -117 [ 250.474541][T16153] EXT4-fs (loop0): 1 orphan inode deleted [ 250.485181][T16160] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.494984][T16153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.495464][T16160] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3649: couldn't read orphan inode 15 (err -117) [ 250.530337][T16160] loop7: lost filesystem error report for type 5 error -117 [ 250.536063][T16160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.594907][T16188] __nla_validate_parse: 1 callbacks suppressed [ 250.594924][T16188] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3655'. [ 250.641177][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.674300][T16200] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3656'. [ 250.729254][T15643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.762073][T16211] netlink: 4172 bytes leftover after parsing attributes in process `syz.2.3660'. [ 250.853158][T16222] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3664'. [ 250.857874][T16217] lo speed is unknown, defaulting to 1000 [ 250.891600][T16222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3664'. [ 251.064475][T16232] loop0: detected capacity change from 0 to 512 [ 251.084589][T15925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.119593][T15925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.127331][T16232] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3666: corrupted in-inode xattr: bad e_name length [ 251.171477][T15925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.215024][T15925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.235906][T16232] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.236050][T16232] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3666: couldn't read orphan inode 15 (err -117) [ 251.259496][T16243] loop7: detected capacity change from 0 to 256 [ 251.267840][T16247] loop2: detected capacity change from 0 to 512 [ 251.276662][T16243] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 251.297157][T16247] EXT4-fs: Ignoring removed orlov option [ 251.305194][T16232] loop0: lost filesystem error report for type 5 error -117 [ 251.306048][T16232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.336272][T16247] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.356031][T16242] lo speed is unknown, defaulting to 1000 [ 251.369734][T16247] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3670: corrupted in-inode xattr: e_value size too large [ 251.413452][T16247] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.414258][T15643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.434442][T16247] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3670: couldn't read orphan inode 15 (err -117) [ 251.476313][T15925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.490942][T16247] loop2: lost filesystem error report for type 5 error -117 [ 251.491494][T16247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.526354][T15925] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.573929][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.581037][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.609807][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.616907][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.651424][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.747959][T16286] loop2: detected capacity change from 0 to 512 [ 251.769388][T16286] EXT4-fs: Ignoring removed orlov option [ 251.781019][T16286] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.801407][T16286] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3673: corrupted in-inode xattr: e_value size too large [ 251.813474][T15925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.825798][T16283] loop7: detected capacity change from 0 to 8192 [ 251.858464][T16293] netlink: 'syz.1.3675': attribute type 29 has an invalid length. [ 251.871473][T16293] netlink: 'syz.1.3675': attribute type 29 has an invalid length. [ 251.874634][T16286] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.901232][T16286] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3673: couldn't read orphan inode 15 (err -117) [ 251.911539][T16293] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3675'. [ 251.922778][T16286] loop2: lost filesystem error report for type 5 error -117 [ 251.932168][T16286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.986667][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.121282][T15925] veth0_vlan: entered promiscuous mode [ 252.143131][T15925] veth1_vlan: entered promiscuous mode [ 252.198237][T15925] veth0_macvtap: entered promiscuous mode [ 252.208544][T15925] veth1_macvtap: entered promiscuous mode [ 252.220056][T15925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.233301][T15925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.275633][T10179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.351808][T10179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.472784][T16318] FAULT_INJECTION: forcing a failure. [ 252.472784][T16318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.503278][T10179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.586774][T10179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.637277][T16318] CPU: 0 UID: 0 PID: 16318 Comm: syz.0.3680 Tainted: G W syzkaller #0 PREEMPT(full) [ 252.637316][T16318] Tainted: [W]=WARN [ 252.637323][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 252.637336][T16318] Call Trace: [ 252.637343][T16318] [ 252.637350][T16318] __dump_stack+0x1d/0x30 [ 252.637379][T16318] dump_stack_lvl+0x95/0xd0 [ 252.637516][T16318] dump_stack+0x15/0x1b [ 252.637540][T16318] should_fail_ex+0x263/0x280 [ 252.637571][T16318] should_fail+0xb/0x20 [ 252.637594][T16318] should_fail_usercopy+0x1a/0x20 [ 252.637712][T16318] _copy_to_user+0x20/0xa0 [ 252.637756][T16318] simple_read_from_buffer+0xb5/0x130 [ 252.637790][T16318] proc_fail_nth_read+0x10e/0x150 [ 252.637821][T16318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.637846][T16318] vfs_read+0x1ab/0x7f0 [ 252.637878][T16318] ? __rcu_read_unlock+0x4e/0x70 [ 252.637982][T16318] ? __fget_files+0x184/0x1c0 [ 252.638077][T16318] ? fput+0x8f/0xc0 [ 252.638093][T16318] ? mutex_lock+0x57/0x90 [ 252.638165][T16318] ksys_read+0xdc/0x1a0 [ 252.638188][T16318] __x64_sys_read+0x40/0x50 [ 252.638211][T16318] x64_sys_call+0x2886/0x3020 [ 252.638240][T16318] do_syscall_64+0x12c/0x370 [ 252.638412][T16318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.638492][T16318] RIP: 0033:0x7f240245c84e [ 252.638506][T16318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.638653][T16318] RSP: 002b:00007f2400ef6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.638672][T16318] RAX: ffffffffffffffda RBX: 00007f2400ef76c0 RCX: 00007f240245c84e [ 252.638686][T16318] RDX: 000000000000000f RSI: 00007f2400ef70a0 RDI: 0000000000000005 [ 252.638752][T16318] RBP: 00007f2400ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 252.638767][T16318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.638782][T16318] R13: 00007f2402716038 R14: 00007f2402715fa0 R15: 00007ffdb3302538 [ 252.638803][T16318] [ 252.885245][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3683'. [ 252.957439][T16332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16332 comm=syz.1.3684 [ 253.017248][T16341] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3688'. [ 253.151043][T16360] loop0: detected capacity change from 0 to 512 [ 253.173450][T16360] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3695: corrupted in-inode xattr: bad e_name length [ 253.190901][T16360] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 253.196044][T16360] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3695: couldn't read orphan inode 15 (err -117) [ 253.196118][T16364] netlink: 4172 bytes leftover after parsing attributes in process `syz.4.3696'. [ 253.225829][T16360] loop0: lost filesystem error report for type 5 error -117 [ 253.226927][T16360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.256056][T15643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.329763][T16368] netlink: 'syz.0.3697': attribute type 1 has an invalid length. [ 253.339667][T16366] SELinux: failed to load policy [ 253.354977][T16369] netlink: 'syz.0.3697': attribute type 1 has an invalid length. [ 253.539442][T16377] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3702'. [ 253.723135][T16385] sctp: [Deprecated]: syz.4.3703 (pid 16385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.723135][T16385] Use struct sctp_sack_info instead [ 253.839035][T16402] loop0: detected capacity change from 0 to 1024 [ 253.850353][T16402] EXT4-fs: Ignoring removed orlov option [ 253.860273][T16402] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 253.873991][T16402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.897581][T16403] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 253.901668][T16409] netlink: 'syz.1.3715': attribute type 1 has an invalid length. [ 253.918772][T10412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.002950][T16409] bond2: entered promiscuous mode [ 254.008285][T16409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.050929][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 254.050944][ T28] audit: type=1400 audit(254.147:1930): avc: denied { read write } for pid=16424 comm="syz.7.3719" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 254.093572][T16409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.101671][T16409] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 254.112238][T16409] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 254.126931][T16409] bond2: (slave vcan1): making interface the new active one [ 254.137356][T16409] vcan1: entered promiscuous mode [ 254.146659][T16409] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 254.489844][T16425] syzkaller0: entered promiscuous mode [ 254.538130][ T28] audit: type=1400 audit(254.147:1931): avc: denied { open } for pid=16424 comm="syz.7.3719" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 254.540178][T16425] syzkaller0: entered allmulticast mode [ 254.653478][T16442] loop4: detected capacity change from 0 to 512 [ 254.729232][T15643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.739418][T16442] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3723: corrupted in-inode xattr: bad e_name length [ 254.809105][T16442] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 254.809253][T16442] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3723: couldn't read orphan inode 15 (err -117) [ 254.845736][T16442] loop4: lost filesystem error report for type 5 error -117 [ 254.846447][T16442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.930206][T15925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.987619][T16449] lo speed is unknown, defaulting to 1000 [ 254.988382][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.584673][T16481] loop2: detected capacity change from 0 to 512 [ 255.642153][T16481] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3738: corrupted in-inode xattr: bad e_name length [ 255.659379][T16481] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.660886][T16481] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3738: couldn't read orphan inode 15 (err -117) [ 255.695253][T16481] loop2: lost filesystem error report for type 5 error -117 [ 255.697320][T16481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.769258][T16497] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16497 comm=syz.4.3745 [ 255.783038][T16498] netlink: 'syz.1.3743': attribute type 1 has an invalid length. [ 255.795625][T16495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.807708][T16498] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.815387][T16495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.824015][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.981917][T16519] loop2: detected capacity change from 0 to 512 [ 255.988733][T16519] EXT4-fs: Ignoring removed orlov option [ 256.050940][T16519] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.068464][T16519] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3754: corrupted in-inode xattr: e_value size too large [ 256.159726][T16519] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 256.159969][T16519] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3754: couldn't read orphan inode 15 (err -117) [ 256.201948][T16519] loop2: lost filesystem error report for type 5 error -117 [ 256.202542][T16519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.397866][T16526] loop0: detected capacity change from 0 to 512 [ 256.423209][T16526] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3757: corrupted in-inode xattr: bad e_name length [ 256.442481][T16526] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 256.442661][T16526] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3757: couldn't read orphan inode 15 (err -117) [ 256.464222][T16526] loop0: lost filesystem error report for type 5 error -117 [ 256.464764][T16526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.750708][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.761132][T15643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.831202][T16538] __nla_validate_parse: 77 callbacks suppressed [ 256.831219][T16538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3760'. [ 256.849346][T16546] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 257.344212][T16566] loop4: detected capacity change from 0 to 512 [ 257.401853][T16566] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3768: corrupted in-inode xattr: bad e_name length [ 257.452424][T16566] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.452666][T16566] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3768: couldn't read orphan inode 15 (err -117) [ 257.545460][T16566] loop4: lost filesystem error report for type 5 error -117 [ 257.546252][T16566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.851188][T15925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.181214][T16583] netlink: 4172 bytes leftover after parsing attributes in process `syz.4.3773'. [ 258.193562][T16587] netlink: 'syz.7.3774': attribute type 29 has an invalid length. [ 258.232716][T16587] netlink: 'syz.7.3774': attribute type 29 has an invalid length. [ 258.413220][T16587] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3774'. [ 258.504518][T16601] loop7: detected capacity change from 0 to 512 [ 258.513686][T16601] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3779: corrupted in-inode xattr: bad e_name length [ 258.654557][T16601] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.655038][T16601] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3779: couldn't read orphan inode 15 (err -117) [ 258.790584][ T3527] IPVS: starting estimator thread 0... [ 258.804729][T16601] loop7: lost filesystem error report for type 5 error -117 [ 258.807862][T16601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.951062][T16608] IPVS: using max 2496 ests per chain, 124800 per kthread [ 258.970942][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.094812][T16627] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3790'. [ 259.107183][T16629] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 259.273074][ T28] audit: type=1400 audit(259.377:1932): avc: denied { setopt } for pid=16640 comm="syz.4.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.325406][T16647] loop7: detected capacity change from 0 to 512 [ 259.333224][T16647] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3795: corrupted in-inode xattr: bad e_name length [ 259.354143][T16647] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.354377][T16647] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3795: couldn't read orphan inode 15 (err -117) [ 259.375779][T16647] loop7: lost filesystem error report for type 5 error -117 [ 259.376276][T16647] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.416367][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.510794][T16653] loop0: detected capacity change from 0 to 128 [ 259.650505][T16673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16673 comm=syz.4.3802 [ 259.666382][T16675] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3804'. [ 259.791694][T16680] loop0: detected capacity change from 0 to 512 [ 259.820427][T16680] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3806: corrupted in-inode xattr: bad e_name length [ 259.844191][T16680] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.848343][T16680] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3806: couldn't read orphan inode 15 (err -117) [ 259.888891][T16680] loop0: lost filesystem error report for type 5 error -117 [ 259.894085][T16680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.928159][T15643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.951054][T16691] loop4: detected capacity change from 0 to 128 [ 259.983280][T16691] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 260.001649][T16691] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (fffc1829) [ 260.044538][T16678] loop7: detected capacity change from 0 to 512 [ 260.094193][T16696] netlink: 4172 bytes leftover after parsing attributes in process `syz.0.3812'. [ 260.113519][T16678] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 260.132520][T16678] System zones: 0-2, 18-18, 34-34 [ 260.138417][T16678] EXT4-fs (loop7): too many log groups per flexible block group [ 260.147343][T16678] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 260.156092][T16678] EXT4-fs (loop7): mount failed [ 260.220318][T16678] netlink: 15 bytes leftover after parsing attributes in process `syz.7.3805'. [ 260.323575][T16707] netlink: 'syz.0.3815': attribute type 29 has an invalid length. [ 260.332214][T16711] netlink: 'syz.0.3815': attribute type 29 has an invalid length. [ 260.342101][T16707] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3815'. [ 260.506431][ T28] audit: type=1400 audit(260.607:1933): avc: denied { create } for pid=16720 comm="syz.2.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 260.539378][T16721] netlink: 47 bytes leftover after parsing attributes in process `syz.2.3820'. [ 260.560741][T16724] loop0: detected capacity change from 0 to 512 [ 260.583447][T16724] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3821: corrupted in-inode xattr: bad e_name length [ 260.619933][T16724] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 260.620177][T16724] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3821: couldn't read orphan inode 15 (err -117) [ 260.643824][T16724] loop0: lost filesystem error report for type 5 error -117 [ 260.658172][T16724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.688343][T15643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.722450][T16729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3823'. [ 260.746559][T16729] loop0: detected capacity change from 0 to 512 [ 260.817000][T16729] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 260.924972][T16741] loop2: detected capacity change from 0 to 1764 [ 260.946032][T16741] isofs_fill_super: bread failed, dev=loop2, iso_blknum=3303, block=6606 [ 260.976209][T16747] netlink: 'syz.1.3829': attribute type 1 has an invalid length. [ 261.018496][T16747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.075846][T16758] loop2: detected capacity change from 0 to 512 [ 261.166256][T16766] Symlink component flag not implemented [ 261.183546][T16758] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3833: corrupted in-inode xattr: bad e_name length [ 261.195521][T16766] Symlink component flag not implemented (7) [ 261.204016][T16758] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 261.211088][T16758] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3833: couldn't read orphan inode 15 (err -117) [ 261.241211][T16758] loop2: lost filesystem error report for type 5 error -117 [ 261.387047][T16758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.421895][ T28] audit: type=1400 audit(261.477:1934): avc: denied { getopt } for pid=16777 comm="syz.7.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.594928][T16773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.639432][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.031306][T16815] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3851: corrupted in-inode xattr: bad e_name length [ 262.049164][T16815] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 262.049569][T16815] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3851: couldn't read orphan inode 15 (err -117) [ 262.070999][T16815] loop0: lost filesystem error report for type 5 error -117 [ 262.080065][T16815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.202347][T16839] netlink: 'syz.4.3864': attribute type 29 has an invalid length. [ 262.250549][T15643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.259891][T16839] netlink: 'syz.4.3864': attribute type 29 has an invalid length. [ 262.271837][T16839] __nla_validate_parse: 4 callbacks suppressed [ 262.271854][T16839] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3864'. [ 262.294234][T16834] 9p: Bad value for 'wfdno' [ 262.473397][T16857] pim6reg: tun_chr_ioctl cmd 1074025681 [ 262.634162][ T28] audit: type=1400 audit(262.737:1935): avc: denied { name_bind } for pid=16874 comm="syz.0.3876" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 262.665661][T16870] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3875: corrupted in-inode xattr: bad e_name length [ 262.712013][ T28] audit: type=1400 audit(262.767:1936): avc: denied { create } for pid=16874 comm="syz.0.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 262.731508][T16870] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 262.731711][T16870] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3875: couldn't read orphan inode 15 (err -117) [ 262.752969][T16870] loop4: lost filesystem error report for type 5 error -117 [ 262.753606][T16870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.785762][T15925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.844663][T16878] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3878'. [ 262.984901][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.037962][T16883] netlink: 'syz.7.3881': attribute type 1 has an invalid length. [ 263.064127][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.110087][T16883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.183615][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.354927][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.456036][T16906] veth1_to_team: entered promiscuous mode [ 263.461841][T16906] veth1_to_team: entered allmulticast mode [ 263.468821][ T28] audit: type=1400 audit(263.557:1937): avc: denied { create } for pid=16905 comm="syz.1.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.488951][ T50] bridge_slave_1: left allmulticast mode [ 263.512649][T16910] set_capacity_and_notify: 6 callbacks suppressed [ 263.512664][T16910] loop7: detected capacity change from 0 to 512 [ 263.521720][ T28] audit: type=1400 audit(263.557:1938): avc: denied { ioctl } for pid=16905 comm="syz.1.3887" path="socket:[52024]" dev="sockfs" ino=52024 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.527539][ T50] bridge_slave_1: left promiscuous mode [ 263.578714][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.585992][T16910] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3888: corrupted in-inode xattr: bad e_name length [ 263.599877][T16910] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 263.600142][T16910] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3888: couldn't read orphan inode 15 (err -117) [ 263.621905][T16910] loop7: lost filesystem error report for type 5 error -117 [ 263.622096][ T50] bridge_slave_0: left allmulticast mode [ 263.635428][ T50] bridge_slave_0: left promiscuous mode [ 263.635544][T16910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.641320][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.701332][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.750477][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3889'. [ 263.784098][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.796883][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.807525][ T50] bond0 (unregistering): Released all slaves [ 263.843947][T16886] lo speed is unknown, defaulting to 1000 [ 263.911391][ T50] IPVS: stopping backup sync thread 16629 ... [ 263.921191][T16935] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.933765][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3893'. [ 263.995922][ T50] hsr_slave_0: left promiscuous mode [ 264.019698][ T50] hsr_slave_1: left promiscuous mode [ 264.026006][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.041805][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.063126][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.079653][T16958] loop7: detected capacity change from 0 to 512 [ 264.086914][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.105129][T16958] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3898: corrupted in-inode xattr: bad e_name length [ 264.119112][T16958] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.119298][T16958] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3898: couldn't read orphan inode 15 (err -117) [ 264.135112][T16963] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3900'. [ 264.141146][T16958] loop7: lost filesystem error report for type 5 error -117 [ 264.149591][ T50] veth1_macvtap: left promiscuous mode [ 264.150348][T16958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.157080][ T50] veth0_macvtap: left promiscuous mode [ 264.182957][ T50] veth1_vlan: left promiscuous mode [ 264.188252][ T50] veth0_vlan: left promiscuous mode [ 264.204689][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.350678][ T50] team0 (unregistering): Port device team_slave_1 removed [ 264.367440][ T50] team0 (unregistering): Port device team_slave_0 removed [ 264.717043][T16886] chnl_net:caif_netlink_parms(): no params data found [ 264.862066][ T3527] IPVS: starting estimator thread 0... [ 264.892547][T17000] loop7: detected capacity change from 0 to 512 [ 264.927897][T17000] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3911: corrupted in-inode xattr: bad e_name length [ 264.949243][T17000] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.950374][T17000] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3911: couldn't read orphan inode 15 (err -117) [ 264.982990][T16993] IPVS: using max 2448 ests per chain, 122400 per kthread [ 264.987024][T17000] loop7: lost filesystem error report for type 5 error -117 [ 264.991353][T17000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.032725][T16886] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.039835][T16886] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.047215][T16886] bridge_slave_0: entered allmulticast mode [ 265.052543][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.053872][T16886] bridge_slave_0: entered promiscuous mode [ 265.069129][T17018] netlink: 'syz.4.3913': attribute type 29 has an invalid length. [ 265.077643][T16886] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.084806][T16886] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.093171][T16886] bridge_slave_1: entered allmulticast mode [ 265.099764][T16886] bridge_slave_1: entered promiscuous mode [ 265.111003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.125808][T16886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.136244][T16886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.156853][T16886] team0: Port device team_slave_0 added [ 265.168000][T17019] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3913'. [ 265.181906][T17018] netlink: 'syz.4.3913': attribute type 29 has an invalid length. [ 265.224833][T16886] team0: Port device team_slave_1 added [ 265.267662][ T50] IPVS: stop unused estimator thread 0... [ 265.314972][T16886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.330389][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.359188][T16886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.385132][T16886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.392639][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.421288][T16886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.440157][T17028] lo speed is unknown, defaulting to 1000 [ 265.503842][T16886] hsr_slave_0: entered promiscuous mode [ 265.519440][T16886] hsr_slave_1: entered promiscuous mode [ 265.527943][T16886] debugfs: 'hsr0' already exists in 'hsr' [ 265.547861][T16886] Cannot create hsr debugfs directory [ 265.754930][T17058] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3921'. [ 266.034400][T17092] loop2: detected capacity change from 0 to 512 [ 266.061571][T17092] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3924: corrupted in-inode xattr: bad e_name length [ 266.129473][T17102] netlink: 'syz.1.3926': attribute type 1 has an invalid length. [ 266.137595][T16886] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.144874][T17092] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.145093][T17092] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3924: couldn't read orphan inode 15 (err -117) [ 266.168721][T16886] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.175631][T17092] loop2: lost filesystem error report for type 5 error -117 [ 266.176201][T17092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.206570][T17102] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.229477][T16886] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.242797][T16886] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.267328][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.295240][T16886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.310990][T16886] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.321909][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.328994][T10179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.360010][T10179] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.367121][T10179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.409616][T16886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.428873][T16886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.478450][T17139] netlink: 4172 bytes leftover after parsing attributes in process `syz.1.3931'. [ 266.489041][T16886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.615667][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3934'. [ 266.625467][T16886] veth0_vlan: entered promiscuous mode [ 266.644437][T16886] veth1_vlan: entered promiscuous mode [ 266.705271][T16886] veth0_macvtap: entered promiscuous mode [ 266.732468][T16886] veth1_macvtap: entered promiscuous mode [ 266.760577][T16886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.780592][T16886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.802361][T10175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.806910][T17189] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3942'. [ 266.826944][T10175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.847271][T10175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.859546][T10175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.980530][ T28] audit: type=1400 audit(267.077:1939): avc: denied { mounton } for pid=17216 comm="syz.3.3948" path="/proc/7/cgroup" dev="proc" ino=53159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 267.081444][T17231] loop7: detected capacity change from 0 to 512 [ 267.092290][T17234] netlink: 'syz.1.3947': attribute type 39 has an invalid length. [ 267.118643][T17231] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3950: corrupted in-inode xattr: bad e_name length [ 267.144710][T17231] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.144894][T17231] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3950: couldn't read orphan inode 15 (err -117) [ 267.166771][T17231] loop7: lost filesystem error report for type 5 error -117 [ 267.167432][T17231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.200715][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.293569][T17262] netlink: 'syz.7.3955': attribute type 5 has an invalid length. [ 267.302207][T17262] bridge0: port 3(veth0_to_bridge) entered blocking state [ 267.316010][T17262] bridge0: port 3(veth0_to_bridge) entered disabled state [ 267.328785][T17262] veth0_to_bridge: entered allmulticast mode [ 267.345032][T17262] veth0_to_bridge: entered promiscuous mode [ 267.355995][T17262] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.370362][T17262] bridge0: port 3(veth0_to_bridge) entered blocking state [ 267.377617][T17262] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 267.445093][ T28] audit: type=1326 audit(267.547:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17283 comm="syz.7.3959" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffae54cbf79 code=0x0 [ 267.607700][T17300] loop4: detected capacity change from 0 to 512 [ 267.734468][T17300] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3961: corrupted in-inode xattr: bad e_name length [ 267.779727][T17300] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.818138][T17300] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3961: couldn't read orphan inode 15 (err -117) [ 267.872321][T17300] loop4: lost filesystem error report for type 5 error -117 [ 267.875489][T17300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.019743][T15925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.278783][T17345] __nla_validate_parse: 3 callbacks suppressed [ 268.278874][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3971'. [ 268.320872][T17345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3971'. [ 268.356797][T17355] netlink: 4172 bytes leftover after parsing attributes in process `syz.2.3974'. [ 268.404391][T17362] loop7: detected capacity change from 0 to 512 [ 268.431738][T17362] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 268.474709][T17371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3979'. [ 268.487935][T17362] EXT4-fs (loop7): 1 truncate cleaned up [ 268.531572][T17362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.602363][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3975'. [ 268.679046][T17389] loop4: detected capacity change from 0 to 512 [ 268.691317][T17393] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3984'. [ 268.725661][T17389] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3983: corrupted in-inode xattr: bad e_name length [ 268.745413][T17389] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 268.750468][T17389] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3983: couldn't read orphan inode 15 (err -117) [ 268.758081][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.780629][T17389] loop4: lost filesystem error report for type 5 error -117 [ 268.786660][T17389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.904471][T17411] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3986'. [ 268.934782][T17411] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3986'. [ 268.969175][T15925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.069886][T17424] loop2: detected capacity change from 0 to 512 [ 269.109278][T17424] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.3994: iget: bad i_size value: 12154757448730 [ 269.138711][ T3401] IPVS: starting estimator thread 0... [ 269.138725][T17424] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 269.156551][T17424] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3994: couldn't read orphan inode 13 (err -117) [ 269.204594][T17424] loop2: lost filesystem error report for type 5 error -117 [ 269.205177][T17424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.252957][T17424] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 269.287032][ T28] audit: type=1400 audit(269.387:1941): avc: denied { create } for pid=17422 comm="syz.2.3994" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 269.312586][T17433] IPVS: using max 2496 ests per chain, 124800 per kthread [ 269.319990][T17424] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 269.522498][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.600027][T17452] netlink: 'syz.1.4003': attribute type 10 has an invalid length. [ 269.630669][T17452] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 269.661563][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4003'. [ 269.679704][T17452] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.777841][ T28] audit: type=1400 audit(269.797:1942): avc: denied { create } for pid=17451 comm="syz.1.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 269.846416][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4011'. [ 269.990628][T17476] loop2: detected capacity change from 0 to 1024 [ 270.033278][T17476] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.049748][T17476] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.063746][T17476] JBD2: no valid journal superblock found [ 270.069631][T17476] EXT4-fs (loop2): Could not load journal inode [ 270.127382][T17484] netlink: 'syz.4.4016': attribute type 2 has an invalid length. [ 270.358368][T17493] netlink: 'syz.7.4018': attribute type 29 has an invalid length. [ 270.386518][T17493] netlink: 'syz.7.4018': attribute type 29 has an invalid length. [ 270.405219][T17501] loop2: detected capacity change from 0 to 128 [ 270.417519][T17501] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.437159][T17501] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.490959][T17507] loop4: detected capacity change from 0 to 512 [ 270.500066][T17507] EXT4-fs: Ignoring removed orlov option [ 270.516123][T17507] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.645700][T17517] netlink: 'syz.3.4030': attribute type 1 has an invalid length. [ 270.667839][T17507] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.4025: corrupted in-inode xattr: e_value size too large [ 270.685530][T17517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.695638][T17507] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 270.696298][T17507] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4025: couldn't read orphan inode 15 (err -117) [ 270.717774][T17507] loop4: lost filesystem error report for type 5 error -117 [ 270.718476][T17507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.112146][T17528] netlink: 'syz.2.4032': attribute type 49 has an invalid length. [ 271.171693][T15925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.488135][T17551] team0: Device gtp0 is of different type [ 271.534411][T17556] loop7: detected capacity change from 0 to 128 [ 271.550659][ T28] audit: type=1400 audit(271.647:1943): avc: denied { lock } for pid=17550 comm="syz.7.4041" path="socket:[54623]" dev="sockfs" ino=54623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 271.617045][T17562] netlink: 'syz.3.4045': attribute type 49 has an invalid length. [ 271.670317][T17564] loop2: detected capacity change from 0 to 512 [ 271.689166][T17564] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 271.734185][T17564] EXT4-fs (loop2): 1 truncate cleaned up [ 271.744893][T17568] loop7: detected capacity change from 0 to 512 [ 271.750473][T17564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.778009][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.787107][T17568] EXT4-fs error (device loop7): __ext4_fill_super:5565: inode #2: comm syz.7.4049: iget: checksum invalid [ 271.802838][T17568] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 271.803102][T17568] EXT4-fs (loop7): get root inode failed [ 271.866473][T17568] EXT4-fs (loop7): mount failed [ 271.967417][ T28] audit: type=1326 audit(272.067:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.006148][ T28] audit: type=1326 audit(272.067:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.039596][ T28] audit: type=1326 audit(272.067:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.082879][ T28] audit: type=1326 audit(272.187:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.111136][ T28] audit: type=1326 audit(272.187:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.161348][ T28] audit: type=1326 audit(272.187:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.206421][ T28] audit: type=1326 audit(272.187:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.245871][ T28] audit: type=1326 audit(272.207:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.297080][ T28] audit: type=1326 audit(272.207:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.330852][ T28] audit: type=1326 audit(272.207:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.376160][ T28] audit: type=1326 audit(272.207:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6dbbfdbf79 code=0x7ffc0000 [ 272.740865][T17604] netlink: 'syz.7.4060': attribute type 1 has an invalid length. [ 272.791680][T17604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.826079][T17604] vlan2: entered allmulticast mode [ 272.831442][T17604] veth0_to_bond: entered allmulticast mode [ 272.840490][T17604] bond2: (slave vlan2): making interface the new active one [ 272.849529][T17604] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 272.867204][T17604] macvlan0: entered allmulticast mode [ 272.872828][T17604] veth1_vlan: entered allmulticast mode [ 272.911975][T17628] loop3: detected capacity change from 0 to 1024 [ 272.928243][T17636] netlink: 'syz.7.4073': attribute type 28 has an invalid length. [ 272.936342][T17636] netlink: 'syz.7.4073': attribute type 3 has an invalid length. [ 272.958017][T17628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.987672][ T3401] IPVS: starting estimator thread 0... [ 273.090937][T17643] IPVS: using max 2496 ests per chain, 124800 per kthread [ 273.134348][T17653] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.163942][T16886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.185774][T17658] netlink: 'syz.7.4080': attribute type 1 has an invalid length. [ 273.219077][T17658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.821149][T17678] __nla_validate_parse: 11 callbacks suppressed [ 273.821163][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 273.853192][T17681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4090'. [ 273.862847][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 273.904887][T17686] loop3: detected capacity change from 0 to 512 [ 273.928249][T17686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 273.958613][T17686] EXT4-fs (loop3): 1 truncate cleaned up [ 273.965219][T17686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.062824][T10416] kernel read not supported for file /newroot/103 (pid: 10416 comm: kworker/0:13) [ 274.331865][T16886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.416197][T17670] loop2: detected capacity change from 0 to 1024 [ 274.453870][T17670] ext4: Unknown parameter 'nombc' [ 274.890284][T17710] netlink: 'syz.7.4100': attribute type 10 has an invalid length. [ 274.960334][T17717] loop4: detected capacity change from 0 to 512 [ 275.018349][ T7276] bond0 (unregistering): Released all slaves [ 275.026566][ T7276] bond1 (unregistering): Released all slaves [ 275.039079][T17719] loop2: detected capacity change from 0 to 2048 [ 275.048163][ T7276] bond2 (unregistering): Released all slaves [ 275.062419][ T7276] bond3 (unregistering): Released all slaves [ 275.083001][ T7276] bond4 (unregistering): Released all slaves [ 275.106465][ T6439] loop2: p2 p3 < > p4 < p5 > [ 275.109457][ T7276] bond5 (unregistering): Released all slaves [ 275.111386][ T6439] loop2: partition table partially beyond EOD, truncated [ 275.131348][ T6439] loop2: p2 start 53543428 is beyond EOD, truncated [ 275.141100][ T6439] loop2: p3 start 4284289 is beyond EOD, truncated [ 275.143285][ T7276] bond6 (unregistering): Released all slaves [ 275.154094][ T6439] loop2: p5 start 53543428 is beyond EOD, truncated [ 275.173071][T17719] loop2: p2 p3 < > p4 < p5 > [ 275.184383][T17719] loop2: partition table partially beyond EOD, truncated [ 275.199497][ T7276] bond7 (unregistering): Released all slaves [ 275.216100][T17719] loop2: p2 start 53543428 is beyond EOD, truncated [ 275.234827][ T7276] bond8 (unregistering): Released all slaves [ 275.249815][T17719] loop2: p3 start 4284289 is beyond EOD, truncated [ 275.263293][T17719] loop2: p5 start 53543428 is beyond EOD, truncated [ 275.270304][ T7276] bond9 (unregistering): (slave bond10): Releasing backup interface [ 275.286581][ T7276] bond9 (unregistering): Released all slaves [ 275.315966][ T7276] bond10 (unregistering): Released all slaves [ 275.323861][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 275.344899][T17725] netlink: 'syz.1.4105': attribute type 27 has an invalid length. [ 275.356717][T17710] bridge0: port 4(netdevsim1) entered blocking state [ 275.364014][T17710] bridge0: port 4(netdevsim1) entered disabled state [ 275.375897][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 275.381355][T17710] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 275.388010][T17725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4105'. [ 275.423811][T17710] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 275.440923][T17710] bridge0: port 4(netdevsim1) entered blocking state [ 275.447658][T17710] bridge0: port 4(netdevsim1) entered forwarding state [ 275.473005][ T7276] tipc: Left network mode [ 275.494943][ T7276] IPVS: stopping backup sync thread 8528 ... [ 275.851099][T17751] netlink: 824 bytes leftover after parsing attributes in process `syz.3.4112'. [ 275.919758][ T7276] hsr_slave_0: left promiscuous mode [ 276.072034][T17757] loop7: detected capacity change from 0 to 256 [ 276.306890][ T7276] hsr_slave_1: left promiscuous mode [ 276.318027][ T7255] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 276.333396][ T7255] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 276.346207][ T7255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 276.346207][ T7255] [ 276.361426][ T7255] EXT4-fs (loop4): Total free blocks count 0 [ 276.368689][ T7255] EXT4-fs (loop4): Free/Dirty block details [ 276.374713][ T7255] EXT4-fs (loop4): free_blocks=65280 [ 276.380083][ T7255] EXT4-fs (loop4): dirty_blocks=8014 [ 276.385668][ T7255] EXT4-fs (loop4): Block reservation details [ 276.391948][T17763] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4116'. [ 276.401246][ T7276] macvlan0: left allmulticast mode [ 276.407634][ T7255] EXT4-fs (loop4): i_reserved_data_blocks=8014 [ 276.426913][ T7255] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 276.439920][ T7255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 276.439920][ T7255] [ 276.519192][T10163] smc: removing ib device syz0 [ 276.524887][T17755] bridge0: port 4(netdevsim1) entered disabled state [ 276.531770][T17755] bridge0: port 3(veth0_to_bridge) entered disabled state [ 276.539004][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.546248][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.570448][T17755] bridge0: entered allmulticast mode [ 276.579218][T17767] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4119'. [ 276.615319][T17756] netdevsim netdevsim7 netdevsim1: left allmulticast mode [ 276.651262][T17756] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 276.678717][T17756] bridge0: port 4(netdevsim1) entered disabled state [ 276.698802][T17756] veth0_to_bridge: left allmulticast mode [ 276.713529][T17756] veth0_to_bridge: left promiscuous mode [ 276.723348][T17756] bridge0: port 3(veth0_to_bridge) entered disabled state [ 276.733612][T17756] bridge_slave_1: left allmulticast mode [ 276.739398][T17756] bridge_slave_1: left promiscuous mode [ 276.745199][T17756] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.762023][T17756] bridge_slave_0: left allmulticast mode [ 276.767788][T17756] bridge_slave_0: left promiscuous mode [ 276.773744][T17756] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.802387][T17759] netlink: 'syz.2.4116': attribute type 29 has an invalid length. [ 276.810694][T10415] lo speed is unknown, defaulting to 1000 [ 276.818203][T10415] syz0: Port: 1 Link DOWN [ 276.834778][T17772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=17772 comm=syz.4.4120 [ 276.862018][T17760] netlink: 'syz.2.4116': attribute type 29 has an invalid length. [ 276.912662][T17780] netlink: 'syz.2.4124': attribute type 28 has an invalid length. [ 276.921437][T17780] netlink: 'syz.2.4124': attribute type 3 has an invalid length. [ 276.929206][T17780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4124'. [ 276.973005][T17780] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4124'. [ 277.025601][T17796] loop2: detected capacity change from 0 to 512 [ 277.053076][T17792] random: crng reseeded on system resumption [ 277.066968][T17796] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.4129: corrupted in-inode xattr: bad e_name length [ 277.082848][ T7276] IPVS: stop unused estimator thread 0... [ 277.113590][T17796] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.130901][T17796] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4129: couldn't read orphan inode 15 (err -117) [ 277.152278][T17796] loop2: lost filesystem error report for type 5 error -117 [ 277.207704][T17807] netlink: 'syz.4.4131': attribute type 1 has an invalid length. [ 277.228560][T17807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.580857][T17800] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 277.860360][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 277.860377][ T28] audit: type=1400 audit(277.957:2017): avc: denied { write } for pid=17817 comm="syz.3.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 277.861069][T17818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4136'. [ 277.871845][ T28] audit: type=1400 audit(277.957:2018): avc: denied { nlmsg_write } for pid=17817 comm="syz.3.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 277.932457][ T28] audit: type=1400 audit(278.027:2019): avc: denied { read write } for pid=14497 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.956965][ T28] audit: type=1400 audit(278.027:2020): avc: denied { open } for pid=14497 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.023729][ T28] audit: type=1400 audit(278.027:2021): avc: denied { ioctl } for pid=14497 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.049832][ T28] audit: type=1400 audit(278.027:2022): avc: denied { recv } for pid=14497 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.181 dest=59606 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.083753][T17830] netlink: 'syz.1.4141': attribute type 10 has an invalid length. [ 278.098332][T17830] bridge0: port 3(netdevsim1) entered blocking state [ 278.120668][ T28] audit: type=1400 audit(278.097:2023): avc: denied { prog_load } for pid=17819 comm="syz.2.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 278.139244][ T28] audit: type=1400 audit(278.107:2024): avc: denied { bpf } for pid=17823 comm="syz.2.4140" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.160854][T17830] bridge0: port 3(netdevsim1) entered disabled state [ 278.177456][T17837] loop4: detected capacity change from 0 to 512 [ 278.188849][T17830] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 278.207885][T17830] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 278.234378][ T28] audit: type=1400 audit(278.117:2025): avc: denied { bpf } for pid=17821 comm="syz.4.4138" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.264482][T17830] bridge0: port 3(netdevsim1) entered blocking state [ 278.271245][T17830] bridge0: port 3(netdevsim1) entered forwarding state [ 278.279577][ T28] audit: type=1400 audit(278.117:2026): avc: denied { open } for pid=17821 comm="syz.4.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 278.415147][T17837] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.4143: corrupted in-inode xattr: bad e_name length [ 278.429250][T17837] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 278.429690][T17837] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4143: couldn't read orphan inode 15 (err -117) [ 278.455743][T17837] loop4: lost filesystem error report for type 5 error -117 [ 278.604504][T17854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17854 comm=syz.1.4150 [ 278.637360][T17854] dummy0: entered promiscuous mode [ 278.883970][T17854] dummy0 (unregistering): left promiscuous mode [ 278.902874][T17868] __nla_validate_parse: 3 callbacks suppressed [ 278.902944][T17868] netlink: 824 bytes leftover after parsing attributes in process `syz.2.4154'. [ 279.509415][T17892] loop7: detected capacity change from 0 to 512 [ 279.516018][T17891] netlink: 'syz.3.4156': attribute type 10 has an invalid length. [ 279.539285][T17892] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.4158: corrupted in-inode xattr: bad e_name length [ 279.545287][T17891] bridge0: port 3(netdevsim1) entered blocking state [ 279.577184][T17892] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 279.577374][T17892] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4158: couldn't read orphan inode 15 (err -117) [ 279.595500][T17891] bridge0: port 3(netdevsim1) entered disabled state [ 279.605955][T17891] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 279.615027][T17891] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 279.622955][T17891] bridge0: port 3(netdevsim1) entered blocking state [ 279.629698][T17891] bridge0: port 3(netdevsim1) entered forwarding state [ 279.639835][T17892] loop7: lost filesystem error report for type 5 error -117 [ 279.702407][T17902] random: crng reseeded on system resumption [ 279.713759][T17905] netlink: 4172 bytes leftover after parsing attributes in process `syz.4.4163'. [ 279.779823][T17902] loop3: detected capacity change from 0 to 512 [ 280.042441][T17914] loop3: detected capacity change from 0 to 128 [ 280.279675][T17946] loop3: detected capacity change from 0 to 512 [ 280.309446][T17946] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.4174: corrupted in-inode xattr: bad e_name length [ 280.361910][T17955] IPVS: sync thread started: state = MASTER, mcast_ifn = vxcan1, syncid = 0, id = 0 [ 280.387339][T17946] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 280.387595][T17946] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4174: couldn't read orphan inode 15 (err -117) [ 280.446433][T17959] loop7: detected capacity change from 0 to 512 [ 280.472931][T17946] loop3: lost filesystem error report for type 5 error -117 [ 280.536984][T17959] EXT4-fs mount: 9 callbacks suppressed [ 280.537002][T17959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.762028][T16886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.220924][T18006] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4185'. [ 281.242519][T18006] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 281.267933][T18007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4185'. [ 281.269673][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.312253][T18009] netlink: 'syz.3.4187': attribute type 1 has an invalid length. [ 281.347127][T18009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.373513][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4189'. [ 281.382666][T18011] loop4: detected capacity change from 0 to 512 [ 281.446848][T18011] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.4188: corrupted in-inode xattr: bad e_name length [ 281.488815][T18011] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 281.489011][T18011] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4188: couldn't read orphan inode 15 (err -117) [ 281.520347][T18011] loop4: lost filesystem error report for type 5 error -117 [ 281.521177][T18011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.577725][T15925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.606698][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4193'. [ 281.696137][T18042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4196'. [ 282.433402][T18068] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4202'. [ 282.453409][T18068] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 282.666467][T18082] netlink: 4172 bytes leftover after parsing attributes in process `syz.7.4209'. [ 283.217599][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 283.217639][ T28] audit: type=1400 audit(283.317:2121): avc: denied { setopt } for pid=18097 comm="syz.4.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 283.244806][T18098] loop4: detected capacity change from 0 to 512 [ 283.274186][T18098] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 283.444808][T18098] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.4215: iget: bad i_size value: 12154757448730 [ 283.540896][T18098] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 283.558152][T18098] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4215: couldn't read orphan inode 13 (err -117) [ 283.607082][ T28] audit: type=1400 audit(283.697:2122): avc: denied { read write } for pid=18077 comm="syz.1.4208" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.681068][ T28] audit: type=1400 audit(283.697:2123): avc: denied { open } for pid=18077 comm="syz.1.4208" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.709107][T18083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4208'. [ 283.723073][T18098] loop4: lost filesystem error report for type 5 error -117 [ 283.730639][T18098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.781561][ T28] audit: type=1400 audit(283.697:2124): avc: denied { map } for pid=18077 comm="syz.1.4208" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.931322][T15925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.970912][ T28] audit: type=1400 audit(284.067:2125): avc: denied { read } for pid=18109 comm="syz.4.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 284.022016][ T28] audit: type=1400 audit(284.127:2126): avc: denied { watch watch_reads } for pid=18113 comm="syz.3.4220" path="/49" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 284.070140][ T28] audit: type=1400 audit(284.157:2127): avc: denied { bind } for pid=18109 comm="syz.4.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 284.202862][ T28] audit: type=1400 audit(284.307:2128): avc: denied { create } for pid=18121 comm="syz.2.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.257740][ T28] audit: type=1400 audit(284.337:2129): avc: denied { name_connect } for pid=18109 comm="syz.4.4217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 284.296975][ T28] audit: type=1400 audit(284.387:2130): avc: denied { listen } for pid=18109 comm="syz.4.4217" lport=59314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.333329][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4227'. [ 284.386527][T18141] loop3: detected capacity change from 0 to 512 [ 284.400611][T18141] EXT4-fs (loop3): filesystem is read-only [ 284.408524][T18141] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 284.420281][T18141] EXT4-fs (loop3): filesystem is read-only [ 284.426153][T18141] EXT4-fs (loop3): orphan cleanup on readonly fs [ 284.433222][T18141] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4229: bg 0: block 64: padding at end of block bitmap is not set [ 284.447541][T18141] loop3: lost filesystem error report for type 5 error -117 [ 284.447825][T18141] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 284.464092][T18141] loop3: lost filesystem error report for type 5 error -117 [ 284.467835][T18141] EXT4-fs (loop3): 1 orphan inode deleted [ 284.481263][T18141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 284.521147][T16886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.599386][T18151] loop7: detected capacity change from 0 to 512 [ 284.605900][T18152] loop2: detected capacity change from 0 to 512 [ 284.634855][T18151] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.4233: corrupted in-inode xattr: bad e_name length [ 284.650889][T18152] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.4232: corrupted in-inode xattr: bad e_name length [ 284.653873][T18155] loop3: detected capacity change from 0 to 512 [ 284.711065][T18151] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 284.711335][T18151] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4233: couldn't read orphan inode 15 (err -117) [ 284.721015][T18152] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 284.736266][T18155] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.4234: corrupted in-inode xattr: bad e_name length [ 284.764926][T18151] loop7: lost filesystem error report for type 5 error -117 [ 284.764959][T18152] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4232: couldn't read orphan inode 15 (err -117) [ 284.765723][T18151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.780787][T18152] loop2: lost filesystem error report for type 5 error -117 [ 284.784911][T18155] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 284.831570][T18152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.842948][T18155] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4234: couldn't read orphan inode 15 (err -117) [ 284.864899][T18155] loop3: lost filesystem error report for type 5 error -117 [ 284.865726][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.865972][T18155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.895204][T18155] FAULT_INJECTION: forcing a failure. [ 284.895204][T18155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.908690][T18155] CPU: 1 UID: 0 PID: 18155 Comm: syz.3.4234 Tainted: G W syzkaller #0 PREEMPT(full) [ 284.908721][T18155] Tainted: [W]=WARN [ 284.908728][T18155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 284.908785][T18155] Call Trace: [ 284.908792][T18155] [ 284.908800][T18155] __dump_stack+0x1d/0x30 [ 284.908898][T18155] dump_stack_lvl+0x95/0xd0 [ 284.908942][T18155] dump_stack+0x15/0x1b [ 284.908964][T18155] should_fail_ex+0x263/0x280 [ 284.908994][T18155] should_fail+0xb/0x20 [ 284.909030][T18155] should_fail_usercopy+0x1a/0x20 [ 284.909129][T18155] _copy_from_user+0x1c/0xb0 [ 284.909158][T18155] ext4_ioctl+0x8ba/0x3170 [ 284.909194][T18155] ? ioctl_has_perm+0x27e/0x2d0 [ 284.909216][T18155] ? do_vfs_ioctl+0x84f/0xe70 [ 284.909306][T18155] ? selinux_file_ioctl+0x5f7/0xcb0 [ 284.909340][T18155] ? __rcu_read_unlock+0x4e/0x70 [ 284.909401][T18155] ? __rcu_read_unlock+0x4e/0x70 [ 284.909434][T18155] ? __fget_files+0x184/0x1c0 [ 284.909537][T18155] ? mutex_lock+0x57/0x90 [ 284.909560][T18155] ? __pfx_ext4_ioctl+0x10/0x10 [ 284.909666][T18155] __se_sys_ioctl+0xce/0x140 [ 284.909693][T18155] __x64_sys_ioctl+0x43/0x50 [ 284.909718][T18155] x64_sys_call+0x1563/0x3020 [ 284.909745][T18155] do_syscall_64+0x12c/0x370 [ 284.909816][T18155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.909893][T18155] RIP: 0033:0x7f603f56bf79 [ 284.909908][T18155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.909924][T18155] RSP: 002b:00007f603dfc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.910011][T18155] RAX: ffffffffffffffda RBX: 00007f603f7e5fa0 RCX: 00007f603f56bf79 [ 284.910034][T18155] RDX: 0000200000000200 RSI: 00000000c020662a RDI: 0000000000000004 [ 284.910049][T18155] RBP: 00007f603dfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 284.910063][T18155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.910077][T18155] R13: 00007f603f7e6038 R14: 00007f603f7e5fa0 R15: 00007ffcd9a1d768 [ 284.910146][T18155] [ 285.166872][T18165] netlink: 'syz.1.4238': attribute type 1 has an invalid length. [ 285.181364][T18165] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.201804][T18161] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4237'. [ 285.211215][T18162] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4237'. [ 285.233311][T16886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.266994][T18171] netlink: 'syz.7.4241': attribute type 10 has an invalid length. [ 285.319387][T18171] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 285.337730][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.354727][T18179] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4243'. [ 285.376978][T18180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.400777][T18184] sit1: entered allmulticast mode [ 286.010540][T18210] netlink: 4172 bytes leftover after parsing attributes in process `syz.7.4255'. [ 286.045628][T18212] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4256'. [ 286.080694][T18215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43 sclass=netlink_audit_socket pid=18215 comm=syz.7.4257 [ 286.093999][T18215] x_tables: duplicate underflow at hook 3 [ 286.154038][T18219] netlink: 824 bytes leftover after parsing attributes in process `syz.3.4259'. [ 286.200220][T18223] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4260'. [ 286.213001][T18223] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 286.231748][T18225] loop2: detected capacity change from 0 to 512 [ 286.255199][T18225] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 286.407554][T18225] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4262: bg 0: block 104: invalid block bitmap [ 286.444213][T18225] loop2: lost filesystem error report for type 5 error -117 [ 286.445063][T18225] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 286.495763][T18225] loop2: lost filesystem error report for type 5 error -117 [ 286.597376][T18225] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4262: invalid indirect mapped block 1 (level 1) [ 286.747840][T18225] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 286.748715][T18225] EXT4-fs (loop2): 1 truncate cleaned up [ 286.783715][T18259] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4274'. [ 286.842520][T18259] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 286.873259][T18225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.908455][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.955344][T14497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.965674][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.069750][T18265] syz_tun: entered allmulticast mode [ 287.078541][T18264] syz_tun: left allmulticast mode [ 287.170087][T18277] loop3: detected capacity change from 0 to 512 [ 287.185022][T18277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.243471][T16886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.377957][T18287] loop3: detected capacity change from 0 to 512 [ 287.447755][T18287] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.4283: corrupted in-inode xattr: bad e_name length [ 287.471565][T18287] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.472710][T18287] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4283: couldn't read orphan inode 15 (err -117) [ 287.565923][T18287] loop3: lost filesystem error report for type 5 error -117 [ 287.568096][T18287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.776801][T16886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.963089][T18303] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4289'. [ 287.974673][T18303] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 288.004489][T18305] loop2: detected capacity change from 0 to 512 [ 288.029597][T18305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.052874][T18309] loop7: detected capacity change from 0 to 512 [ 288.093289][T18309] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.4292: corrupted in-inode xattr: bad e_name length [ 288.111123][T18309] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 288.114997][T18309] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4292: couldn't read orphan inode 15 (err -117) [ 288.153089][T18309] loop7: lost filesystem error report for type 5 error -117 [ 288.153958][T18309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.858844][T10163] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 288.874589][T14569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.921738][T10163] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 288.944642][T18326] loop3: detected capacity change from 0 to 512 [ 288.962932][T10163] EXT4-fs (loop2): This should not happen!! Data will be lost [ 288.962932][T10163] [ 288.975978][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 288.975993][ T28] audit: type=1400 audit(289.077:2161): avc: denied { create } for pid=18329 comm="syz.7.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.011063][T18326] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.4298: corrupted in-inode xattr: bad e_name length [ 289.025313][T10163] EXT4-fs (loop2): Total free blocks count 0 [ 289.041503][T10163] EXT4-fs (loop2): Free/Dirty block details [ 289.052436][T18326] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.066998][T18326] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4298: couldn't read orphan inode 15 (err -117) [ 289.090847][T10163] EXT4-fs (loop2): free_blocks=65280 [ 289.090908][ T28] audit: type=1400 audit(289.107:2162): avc: denied { setopt } for pid=18329 comm="syz.7.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.096167][T10163] EXT4-fs (loop2): dirty_blocks=8192 [ 289.096182][T10163] EXT4-fs (loop2): Block reservation details [ 289.096195][T10163] EXT4-fs (loop2): i_reserved_data_blocks=8192 [ 289.115100][T18326] loop3: lost filesystem error report for type 5 error -117 [ 289.122262][T18339] netlink: 'syz.1.4302': attribute type 1 has an invalid length. [ 289.153630][ T28] audit: type=1400 audit(289.107:2163): avc: denied { bind } for pid=18329 comm="syz.7.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.181370][T18326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.182717][ T7276] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 289.222343][T18339] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.240946][T18326] FAULT_INJECTION: forcing a failure. [ 289.240946][T18326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.316478][T18326] CPU: 1 UID: 0 PID: 18326 Comm: syz.3.4298 Tainted: G W syzkaller #0 PREEMPT(full) [ 289.316591][T18326] Tainted: [W]=WARN [ 289.316598][T18326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 289.316610][T18326] Call Trace: [ 289.316683][T18326] [ 289.316698][T18326] __dump_stack+0x1d/0x30 [ 289.316727][T18326] dump_stack_lvl+0x95/0xd0 [ 289.316751][T18326] dump_stack+0x15/0x1b [ 289.316813][T18326] should_fail_ex+0x263/0x280 [ 289.316843][T18326] should_fail+0xb/0x20 [ 289.316871][T18326] should_fail_usercopy+0x1a/0x20 [ 289.316900][T18326] _copy_to_user+0x20/0xa0 [ 289.317061][T18326] simple_read_from_buffer+0xb5/0x130 [ 289.317095][T18326] proc_fail_nth_read+0x10e/0x150 [ 289.317117][T18326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.317162][T18326] vfs_read+0x1ab/0x7f0 [ 289.317266][T18326] ? __rcu_read_unlock+0x4e/0x70 [ 289.317318][T18326] ? __fget_files+0x184/0x1c0 [ 289.317361][T18326] ? mutex_lock+0x57/0x90 [ 289.317390][T18326] ksys_read+0xdc/0x1a0 [ 289.317427][T18326] __x64_sys_read+0x40/0x50 [ 289.317522][T18326] x64_sys_call+0x2886/0x3020 [ 289.317548][T18326] do_syscall_64+0x12c/0x370 [ 289.317617][T18326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.317721][T18326] RIP: 0033:0x7f603f52c84e [ 289.317738][T18326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.317758][T18326] RSP: 002b:00007f603dfc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.317780][T18326] RAX: ffffffffffffffda RBX: 00007f603dfc76c0 RCX: 00007f603f52c84e [ 289.317848][T18326] RDX: 000000000000000f RSI: 00007f603dfc70a0 RDI: 0000000000000005 [ 289.317861][T18326] RBP: 00007f603dfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.317875][T18326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.317890][T18326] R13: 00007f603f7e6038 R14: 00007f603f7e5fa0 R15: 00007ffcd9a1d768 [ 289.317912][T18326] [ 289.700431][T18357] __nla_validate_parse: 1 callbacks suppressed [ 289.700447][T18357] netlink: 4172 bytes leftover after parsing attributes in process `syz.4.4309'. [ 289.762748][T16886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.807278][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4311'. [ 289.816675][T18362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4311'. [ 289.820976][ T28] audit: type=1400 audit(289.887:2164): avc: denied { ioctl } for pid=18349 comm="syz.2.4306" path="socket:[56739]" dev="sockfs" ino=56739 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 289.827056][ T3527] hid-generic 0001:FFFFFFF7:D051.0001: unknown main item tag 0x0 [ 289.861538][ T3527] hid-generic 0001:FFFFFFF7:D051.0001: unknown main item tag 0x0 [ 289.875220][T18364] loop3: detected capacity change from 0 to 512 [ 289.882001][ T3527] hid-generic 0001:FFFFFFF7:D051.0001: item fetching failed at offset 11/56 [ 289.908877][ T28] audit: type=1400 audit(289.907:2165): avc: denied { read write } for pid=18361 comm="syz.1.4311" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 289.932887][ T28] audit: type=1400 audit(289.907:2166): avc: denied { open } for pid=18361 comm="syz.1.4311" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 289.956044][ T28] audit: type=1400 audit(289.937:2167): avc: denied { read } for pid=18361 comm="syz.1.4311" path="socket:[56743]" dev="sockfs" ino=56743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.975016][T18364] EXT4-fs: Ignoring removed nobh option [ 289.991170][T14022] ================================================================== [ 289.996861][T18366] netlink: 824 bytes leftover after parsing attributes in process `syz.7.4313'. [ 289.999279][T14022] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 290.016917][T14022] [ 290.019235][T14022] read-write to 0xffff8881005f11f8 of 8 bytes by task 6435 on cpu 0: [ 290.021631][ T28] audit: type=1400 audit(289.967:2168): avc: denied { setattr } for pid=18361 comm="syz.1.4311" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 290.027462][T14022] delete_from_page_cache_batch+0x553/0x740 [ 290.056421][T14022] truncate_inode_pages_range+0x1fe/0x7e0 [ 290.062246][T14022] truncate_inode_pages+0x24/0x30 [ 290.067278][T14022] blkdev_flush_mapping+0xa4/0x1a0 [ 290.072397][T14022] bdev_release+0x2bf/0x3d0 [ 290.076908][T14022] blkdev_release+0x15/0x20 [ 290.081418][T14022] __fput+0x29b/0x650 [ 290.085491][T14022] fput_close_sync+0xad/0x190 [ 290.090244][T14022] __x64_sys_close+0x55/0xf0 [ 290.094827][T14022] x64_sys_call+0x275d/0x3020 [ 290.099494][T14022] do_syscall_64+0x12c/0x370 [ 290.104080][T14022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.110054][T14022] [ 290.112379][T14022] read to 0xffff8881005f11f8 of 8 bytes by task 14022 on cpu 1: [ 290.120012][T14022] nr_blockdev_pages+0x7e/0xd0 [ 290.124779][T14022] si_meminfo+0x87/0xd0 [ 290.128937][T14022] update_defense_level+0x47/0x5d0 [ 290.134043][T14022] defense_work_handler+0x1f/0x80 [ 290.139060][T14022] process_scheduled_works+0x4cd/0x9d0 [ 290.144514][T14022] worker_thread+0x581/0x770 [ 290.149102][T14022] kthread+0x22a/0x280 [ 290.153687][T14022] ret_from_fork+0x150/0x360 [ 290.158531][T14022] ret_from_fork_asm+0x1a/0x30 [ 290.163286][T14022] [ 290.165594][T14022] value changed: 0x0000000000000009 -> 0x0000000000000000 [ 290.172684][T14022] [ 290.174990][T14022] Reported by Kernel Concurrency Sanitizer on: [ 290.181137][T14022] CPU: 1 UID: 0 PID: 14022 Comm: kworker/1:9 Tainted: G W syzkaller #0 PREEMPT(full) [ 290.192157][T14022] Tainted: [W]=WARN [ 290.195949][T14022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 290.205999][T14022] Workqueue: events_long defense_work_handler [ 290.212064][T14022] ================================================================== [ 290.221131][ T3527] hid-generic 0001:FFFFFFF7:D051.0001: probe with driver hid-generic failed with error -22 [ 290.270119][T18364] EXT4-fs (loop3): orphan cleanup on readonly fs [ 290.278799][T18364] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.4304: EA inode hash validation failed [ 290.280060][ T28] audit: type=1400 audit(289.967:2169): avc: denied { create } for pid=18361 comm="syz.1.4311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 290.292183][T18364] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 290.324179][T18364] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.4304: corrupted inode contents [ 290.338040][T18364] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.338219][T18364] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.4304: mark_inode_dirty error [ 290.358920][T18364] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.359139][T18364] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.4304: corrupted inode contents [ 290.381149][T18370] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4312'. [ 290.390539][T18364] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.390768][T18364] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.4304: mark_inode_dirty error [ 290.392648][ T28] audit: type=1400 audit(289.967:2170): avc: denied { connect } for pid=18361 comm="syz.1.4311" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.399977][T18364] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.438266][T18364] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.4304: mark inode dirty (error -117) [ 290.460320][T18364] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.460544][T18364] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 290.487640][T18364] EXT4-fs (loop3): 1 orphan inode deleted [ 290.494142][T18364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 290.744608][T16886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.