last executing test programs: 9.349280054s ago: executing program 3 (id=229): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x80) r0 = mq_open(0x0, 0x842, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0xffffffffffffffea, 0x9, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 9.086005729s ago: executing program 3 (id=231): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640), &(0x7f0000000340)) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x8000}], 0x1, 0x2102, 0x0) (fail_nth: 2) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 8.72925832s ago: executing program 3 (id=236): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x2, 0x1, 0xfc, 0x0, 0x0, 0x40000b, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x4, 0x800002, 0x2, 0x6e0e, 0x5, 0x8, 0x0, 0x0, 0x0, 0x40020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) flock(r0, 0x5) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x64e, 0x2, 0x10000, 0x8, 0x2}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) setreuid(0x0, 0xee00) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth1_to_bridge\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="5c0000001c00000328bd7000ffdbdf252b4800020070636263286165732d6165736e69290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ce12f55955a93897916f561851a7"], 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000015) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003804e"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000104000680600fe00000000000001fe8000000000000000000000000000aa00004e22a7c1619c38c89bf501036d2bea546c78f4d08cfce69eb49fb8e58291b4f01ef5971f09097710f96bf158e27bf4b581026b1f4745ca6b631f22f96026606008b9e6da84e4f37967b3d337b2de74c0df64de45cec9e0b7df7c3c5273935184676ce0da4e7e602a44b8be6aeb8f962490de3457ddebbb7c1e59c319d1afacfde4fd8c670a28c01e32", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780008149887d93e3bd87eadd421ecb5fc26340087bf18321f94d16c60f2ce7bec3677ecba1a11d8ea97d9ff48ec1c1e29dd542a879eb98187636e82dbd57ce8c918775163ac269cbb177ac565d268f49e0cb6d0b8f3a5"], 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) close(r6) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) sendmmsg$inet(r8, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="07a2b0cebf5e75786f6d0e3c29d0d5432c3fb21e12bbca742e59b53c03da203a64bc722b81b93b9f4b4bab1b4cf8e129781e4e9a76ebd03f2a30066def57baf4452f6bdd5587534615259a657fb188ab8b8bdc928eea1a05c16e0ee35092c47e0aabfb1026c625b66205221dd29c1a177b1ce1e6548d0d8d88b353af1fd0976c4a7098b19857f4943377ae3b3527803c00b06d26cc7096b70d64b76f70304a39535f246f67ecf30e6a76562abe95ff85a949d15080952e6f7e1232f5a3213cb0156dedcad76deaee0133f2f59653b7095de2f10c2e791900cc190e73f7cb754c36a66282199d587d9672c2855c986673e4b4ed96fb05f2d810d3ba675a35f446914840d87339316f96da94f609d7846a9ea7039ccf3346293dfd59b53e9614bdc4658fa5ddf476f6833f1aeef148f0e374bbdb225aeb8e69ccedf12dc93d7a5be537a1d12725eb26df82523425d5eaea0ee9502f3d020051db473e70cc4d0dedd42fd574e572a34e96c9f0021fe1222b888c4fe226560c54e8c4c7d44881b9ed87adb8ae4947be4d86b76d20473683a71d904923c8580169fc72f70139cf075e9543d55cb9fc8bb95cece4309ddcfaae517dedc4879e2016bcbe76a4675575a9514933bd8ee876aca0b9061576426769babacfd88a27f75499e012b1cbafe404b9cdfed6a43f029a30d85106cf4397044954497ab4d775d3f021632a1d3f8b577d6abec1854445026258b11d867fb96955992d91128fa549db5ad33d693f09a70ca4caea6fcb073aba7594b54cd8139da243487e98d81ce8d5a597fc5b4149e2933c93e1a47d912b2ea3ed05f0f9297f66a123d00c3bf08b2b3a372ad4c7f4f28dbeb80f8db27b70beea836840a191392c874de72fb0e7d1a74b05f4dc3f1b86e7fab7d09c61f558a094df13cc29ab320cd6482e9a1986e87d8c245d78012bc8d6896e9eab1c9f178f97d776b2c17b92ea71d66446d4014c276acf34c3615a04594d8e138aac54831bdedb4840816df0c53330874b9c76fe60f36826e60daeb1da526b682f7ebc2acb481c48d84bece5b427f4cb473bf710fee748c1371a7ceb646ec4b067a8e5e04a464b21c01dc534a14fbb3f57b3b4c314944e543fc32fced7436305fffc7da77ccd50699020486689fdb0f86489cbd353c8e98c80c225494404c5611cf055b25a982bf495c2b52d9780d38ee69655a1ffe90a473ae53fbac7a679960a3dab8666bf31410159329399905b8842d4dcb86d18a0c2fe555f559fbc2d2adca6a66b11c23af73dcd239042c21d11bc2bcbc24692c1a95046849169aea770548640656acfc04a3263ec39b226b8aba1ab6d7a5ecd08a3c3bfaf50c1bfe6bcd7ea229815186cef15e68de290a92fb46a97013c47e3b223caf96ff59e7ee279ce09e9fcb6cd14b05c69b5cb42237533c131e8b99cc3495517e0a981298a83aec7d2f554fce317e59d31c8ce6951324c4e87bea19ec0eab27735c6167ed50c4a27cd5f547d1ba9c596a62dea88a71bed2df65117888e7f1b197525023488d355386723fbaca4cfb8cf17c66f9e8d7f7a3891c346d3bec24834201a3298554258d22c98b7fab00791c7f34f9554f4378b25b08786e139fd9a800b013e37637bca534a0e972e02cdec9b11f20298e73ac502f88e7c10a8be963986afb6ccd5a4c18f4d56fa663497b2a27ac5eb328c7eb3ab44126ca0a2fa9511275579f86b36455e1c1c2c65e236484554f9dbd70fa6166cbfbccae41b0c492f316d74dc487acc1660f0a2d027f67e4c762c7bcbe6ad7c9355f26788da2a8db288328b55b0c1214f604877517339fb17937293f3ffeeca82c91e1cbecc18db47f836221bf765bdf9a30bd97f79092b33e5268c4aae5c58e69dccbf48e6418fd34558073cf40f4a6ce9201c5fa4d65867055bda2928541a912f7822e3f46606d24c022bdd623ee6221d710e8c1fe08366f955bb825495990b86f0ad4c49054654f7c226d8b8fa3787a357035331a38dbbc8718b3ce75be0531f1e625f178e4daec05b37065e4956b558aae9153b9c5458eeb446379f638b57e4ef56e3717cd298e2358d91ab2388f156cb792cd1e3fcef44baee0a53f3791a3ad5894505a4349da4a99897043a82bc122acd8d1f12491652c1af37fa5a36f7e122373492d047c5d107952972560202d3ba5c3748255df09fc1e4b10d5c63cdbddba7455917fdbbc6e33452d9bbc6b4a56134352bbb2ec1d4dac6cb4babcf55fbe053bd329dd425a3dac40a2c272b62cf99828d5c979df988119a2ab227d07b54a3bce0a8faee3811878465add71bed86837405fbda03379a1b6b7c0fae8d6ee1bf0fce77d258b82c10d3908e9ebd676bda6dc8f60e9bed81e14bcef4a5272dd8bbdf91d34dbd03e0cba613103d9447771aca072fd05e65752ff9c586d881e7799e7ea8d784d17572214c9c79f736b7ef9cea06ea0243c6e7788982c937483878dcacb2296b6307f082f152861d47c328d1048c12f23f4590a64280d2ca3d7b4b8f3b764cb54cd0c6098e84dcbbe9844edb886bcc4573c28bbc3a22a826024615405bfe32de36844519b950e853ba7fe9ea40897ba25c52b4a2ba43f9ef27857170464f4275ea5f2e49b70e4518c22f459db07ab4b0e94a511ea6abb8a8bb805437225db8e949262b13664becd37731c4ccf43019a41181aba47a83537759e50ba342401dd621fb6dbc3762e1cca7307abb3f89d8a2063edfb95a82ede7845a332b23540985e1e045881e3fdd3f12114df51a84682bb4c25ebbf4cf672acec3bf99fdbf6d35a3aa67a00d5b036dfb9f59872b9d895bebcaca2ea3a1311303bca79ce9330b31573b890e51417c00bfec907c30de56b6272c797bbed9ae667166e18a311b1a5fa000a0c8ada0c9287f952535a47713a00d3b840d402de86712ce73a4bffae79edd55f7184ee645311759128e6c2ce22ecd7a3e34230d43616df555732f462db04001fc4d3abf7e7cab3aaf3ffd65628b8c3c21de80b1687c0fa4527dd2434bfb76bb51e7481802baab8e3bb16e6b8215dae9e710c573a74fa0350c6b124e48175fd864dff7533f192cff463fd86efb4b97f6d63488820eb121a310cd787126acc8a919a3c486a9194954f4b5b97feba77f69f2e0b3d167aebb66b40ad6c37e5664c54ae220a1a683185547349ff899706d3dc6d31d1c0a91dbdc5f6956a36fe11418da9ebf323fee7a6f971564df42a71ed81dd4dd45e7a32e98a7700d042b13ba07f71f8fce1642ade880ac9160ec78c41630998e34794b10f934a4dd7cfce415805cd1a9ba251e1f026a5eabaafc2b65c5cd809b181d8e6a9036bf4195984535befd3086a92a8a2595c759ff41386df5d0a83ecd0c8abbf7f7caeab54a1aae5c5245af635c6d52005e80dae89e89bebe01778b09f03f0401c1ce97b0a049b99a1f02a160adc662cf8a204df48ef0a569147b1f23f143679f9d6f8d8f1ae3e6abc63f8e43ce9ad0e06740c1482c2110f619c7bf4f7c2f649a9d8c1712716935cdab7c582b9fa5dfdf7f33a93bef6890d80f6ac4667419006823f88a75bccfbb6cdbfafd36ffe9b2c155979ef32e467620f3d13420ac1ac449ad9bba696e65238864613c13bb84f9b57b8ec2f47630dfd619c3ebeef7f9e5066d827e6cff958f232cb73df592a174ea6980604267d7e7aee0ae0072dbce28dbc69e5392b7db5366eed41ec21718dc7bfa0c679d984cbf71af39bc09340f9cf10720f8751aa1d96d969956de963509511d2c6f61c9eb28e9e15f86dd4bc47f2074033fd4cf3d6614b519c6724f21575d134f3bc392cf1733d95325aea40f335725fd4f93223e30a76561b5dfa16defa24edc6df2f1a66f22cda4c040ac4aaa7533e41204942897cb480010d85136dbf3d54efb829487431eb5bb42cbd3ef4614ecea45f78406c7693def6218a58e45ffaf63d1f8710867b1430f837f45b00b55d2230f0f19da0e1f399795bbcac563193e63543a5515e48d7a44140d7a693f606986648573cd94a521fbe48d957a113b4da22177056f03cce900d45a00237c504ad3d603b249ecff897e6d33b2ca489872dc0333d45efa2c84c2b164aabb4674226a1a6bc9ac06c768cec98a1f77bd8571b3b258619266ef9d30278a57e1460285c10aeb5dad00a846b20940026ae3818ad2aee9d1faa22ce236b5de8fdd8ce794d290d05cd705d53109dacfd92f34c91e7efc91cb8f34014fa32fc2695c64e66c3892b70ca003c2687c071dadfe4a09f50dcdb18d53e69943d409011755379cc26cff9ccb4e216320561cef9235bfd03439dfd4e72970dce45d12535b0d2de36e3df3ecdb57b42df1d153511a16917396936b3c312ad027e7f8e612eb2e5f01a55575c6a38ae28f0ad270b4b25949bf9312c254ed04a5a40fe56258a795e33534d717de46c1dcdec7e636d344b2e4d2e8e8c605492869dfd0be9f1a4d7613f6332d457198f8e75e8ec0d66ce9a370c203e45f909ba8821f8b54bdc084057d2b07f01fb1eef0b693a7da25b92bccccb083e60371c3445ce1574625e50e2b45aa20de6465c52561910101f8ccf76c5886f4fb70281c1c48b40fed120fde76203cea16f41632a4fcca9aa582c5f773ad8213db9a5ba2358ae422ef5953e12d1fbf0c35e29ceef4679bb30a4658236eb34bebfd30916be381fab74605c0fec68de4cd84cc011217d0d53e993cb4c04aaf7bc0db2fe4924b7a81d2b212ff9bc58bc458a8980064c9f61927f7d13748c6223550a1d80a4ee7a8974b4c9e43a4f96e35aad90a465ab56de29371fd08e7ec94939905cf89e6ad731fee4a667b844f08b6f6f8f7e0df5847a276667969e0b090525988689b877d8561a2a3cd51d62804da49676ad25d304da41b6fe1533a9640cace28682521f1bda0937b3525dca81c16835ae9b5bbaf44e660c57ad7af57c3b886241139c4bf52e553b365a2883ee17bf10e6639d423e3b183d87832869cfb92ef9c6f55a9999499fbc230d9a73d7633431dc7f809a3ded0962b2f5bbdc5afa992bb1fb49791214ad268e8d536af56471d7cce8d6970b8b3049115dff0338fab63ca159890471820786d5ca61125301bb452933c85950ee3fed9cfbffee6ce80d2255926534b623aed31f8e88c8063e5a24f3da458704ac9ee673b307964c9a36e89adf16fcb92513fa6c4591514d003d08df1abe09bdb64f1419b819116c39e4a6234280ab07f2e9b5c78659840b135a7cf4f0b25690d8f34125880ab1fe898ed0cbb57d703d45d897dc788e81ecc74a2e506aee7fdd08586ca4f79d8c17b05ff495f33de248f15a4ffe0c74dc24df7e6cc95aa31ab1ee0a52a204e46f900e460509f02e257436f054199fc3703c802820f4e5e46602c3b74207b5ba673edfa19478f8b3d66843617bb103e87026fcf88f721e4daf822234bca35df418f354b428da5eaa9b224c7a016a0f455106f79c258e1483d8d11b3c6fb335419bfa743f74fae35710f7a30d2572db1ec1da5dab5b5c1481bbae71544338a1b5740cb4fe2d3e0a887da6b010ff4283af6074997273b8bc00940a0d0eb7c5a84a3c49091dfff7184f75b1dad16034137461dda1b47e26299f201c9a7266c93c12cbb7501d680da9df3ce0158dbd356fc7a19549272f752160d44e567ce8785ae757db1667a726eed5c5a1cbed0ed46d4c9e07871fdf62a3f8c25c7057b1e69c078de15a7804e671c27b60dc083737bf6774bd34a4bca23fd332ffb5edee794d49378ce962beb356f500300c0b7aa465804c38a715403fd4a3b814ce5fb9192bf", 0x1000}, {&(0x7f0000000180)="57e16c4f00f1c330ec040abbeb2e3b13caa0045ab5d800"/34, 0x22}, {&(0x7f0000000000)='5', 0x1}], 0x3}}, {{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001200)="1c72ccd7bcec5461ff66356d0496344e9e21264d2648f3d6137ed39d0424a295664a0de821b77a929eab219232982fe3d2272409d8847ae3d1128a363edd5357f257a433133cd98fda8e354ebfe836983979f7d4a468fb72ede669096697f07e8a75dce7f4e8c71cede5e7855054001fdfe2ee9b002d86a22724f96253d7a51380db61466086e91a937495d0029085868105eb9ab75d9b60982d68b1caabbfbd85457ce216cbe5cb3965d062b1cae9fb7be044120822dfbcb7321aea7e73d57229a5e2e4dc32fa0bdbca05c77a4baf380d418ce8dcce22e2b4e1fdc5f67ac4aa2b", 0xe1}, {&(0x7f0000001480)="77a32306f27a367f1a4e9aea3a27a4aa24b3c60ff13cd3bae28b16d741713fbc787ccf197c6b62aac086edb563ec5bf4fb54c0f921761b35c99e6ab4c278c2bf0cda3d5db119a2384374936f2141c4b52a4cdafe7deac8b85ae72fc8dd", 0x5d}, {&(0x7f0000001340)="9f9712026ebeeb1fc71c0bf0e4a586437b90cfa45fec717258ba59bb597eed63b61ab3fad9e94da68df6", 0x2a}], 0x3, &(0x7f00000013c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}], 0x38}}], 0x2, 0x4008004) pselect6(0x40, &(0x7f0000000000)={0xb, 0x9, 0x4000000001, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r5, 0x0) setns(r9, 0x24020000) 8.094607717s ago: executing program 3 (id=264): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0x3f32, 0x40000000000001, 0x0, 0xb, 0x101, 0x905}) r1 = socket(0x15, 0x5, 0x0) r2 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x4, 0x0) mq_notify(r2, &(0x7f0000000200)={0x0, 0x26, 0x0, @thr={0x0, 0x0}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) mq_timedsend(r2, 0x0, 0x0, 0x4, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000005b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000840000000100000027007f000100000003f3000008000000000000000600000007000000", @ANYRES32, @ANYBLOB="1800000000000000840000000000007f"], 0x60, 0x4000000}], 0x1, 0x20040099) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB="caad"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) getsockopt(r1, 0x200000000114, 0x2718, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r10, &(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r10) read(r9, &(0x7f0000001100)=""/114, 0x72) copy_file_range(r0, &(0x7f0000000040)=0x8001, r0, 0x0, 0x4, 0x0) 7.898756748s ago: executing program 3 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0xbdf, {0x0, 0x0, 0x0, 0x0, 0x20b01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x24000090) 7.233277017s ago: executing program 3 (id=283): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) setreuid(0x0, 0xee00) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xc}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.1956034s ago: executing program 32 (id=283): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) setreuid(0x0, 0xee00) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xc}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.890212361s ago: executing program 5 (id=369): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fstat(r0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r2, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000f0000000000000000000000000000000000000100"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r3, 0x4}, 0x38) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = creat(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x1) write$P9_RVERSION(r5, 0x0, 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.266260228s ago: executing program 4 (id=384): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22040028}, 0x0) 2.102137007s ago: executing program 5 (id=387): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents64(r2, &(0x7f0000000200)=""/106, 0x6a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = syz_io_uring_setup(0x3c, &(0x7f00000012c0)={0x0, 0x1d2b, 0x13500}, &(0x7f0000000200), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x2) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x850) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x100) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@debug}, {@noblock_validity}, {@noload}, {@nombcache}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47f, &(0x7f0000000340)="$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") chdir(&(0x7f0000000080)='./file0\x00') rename(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file1\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0x0, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getdents64(r6, 0x0, 0x0) 2.101279467s ago: executing program 4 (id=389): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x400000000000000}, 0x20008844) 2.005454653s ago: executing program 4 (id=390): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040045}, 0x40008) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 1.993201484s ago: executing program 4 (id=391): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}, 0x1) 1.833682783s ago: executing program 4 (id=392): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000000)={0x2, 0x4e27, @multicast1}, 0x10) 1.657322233s ago: executing program 4 (id=393): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$eJzs3c9vW0kdAPCvnThxstlNdukBEOyW3YWCVnUSdzda7QHKCSFUCdEjSG1I3CiKHUf5UZpQifTMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TB6D0/p25qN1aT2FH8+UhPb+aN4+936nrGnsSeAIbW1YjYj4ixiLgbEdPZ9Vx2xM3mkdzu2cHDpcODh0u5aDRu/zOXtifXou1nEm9k91mMiB98J+LHuZfjbu3urS1Wq5XNrD67XduY3drdu75aW1yprFTWy+WF+YW5T298Uj6zvr5XG8tKX376h/1v/DRJayq70t6Ps9TseuEoTmI0Ir53HsEGYCTrz9igE+G15CPinYh4P33+T8dI+mgCAJdZozEdjen2euGoBABcTvl0DSyXL2VrAVORz5dKzTW8KzE5nr0Y2Flfbq6VzUQhf2+1WpnL1gpnopBL6vNp+Xm9fKx+IyLejohfjE+k9dJSvbo8iBc8AEA6z7fP//8Zb87/AMAlVxx0AgBA35n/AWD4mP8BYPiY/wFg+DTn/4lBpwEA9JH3/wAwfMz/ADBUvn/rVnI0DrPvv16+v7uzVr9/fbmytVaq7SyVluqbG6WVen0l/c6e2kn3V63XN+Y/jp0HM9/c2Nqe3drdu1Or76xv30m/1/tOpfntgvt96BkA0M3b7z35cy6ZkT+bSI9o28uhMNDMgPOWH3QCwMCMDDoBYGBO3u3LfmBwWZ3iPb7lAbgkOmzR+4Jipw8INRqNxvmlBJyza1+w/g/Dqm39318Bw5Cx/g/Dy+o+DK9GI9frTv/R6w0BgIvNGj/Q5ff/72Tn32a/HPjR8vFbPD7PrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBia+3/W8r2Ap+KfL5UingzImaikLu3Wq3MRcRbEfGn8cJ4Up8fcM4AwGnl/5bL9v+6Nv3h1AtN775xVByLiJ/86vYvHyxub2/+MWIs96/x1vXtx9n1cv+zBwBO1pqn03PbG/lnBw+XWkc/8/n7tyOiGFeSuIcHY3F4FH80RtNzMQoRMfnvXFZvyrWtXZzG/qOI+Hyn/udiKl0Dae58ejx+EvvNvsbPvxA/n7Y1z8m/xefOIBcYNk+S8edmp+dfPq6m587P/2I6Qp1eNv4ld7V0mI6Bz+O3xr+RLuPf1V5jfPz77zZLEy+3PYr44mhEK/Zh2/jTip/rEv/DHuP/5Uvvvt+trfHriGvROX57rNnt2sbs1u7e9dXa4kplpbJeLi/ML8x9euOT8my6Rj3bfTb4x2cfvdWtLen/ZJf4xRP6/9Ue+/+b/9394VdeEf/rH3SKn48rr4ifzIlf6zH+4uTvit3akvjLXfp/0uP/UY/xn/51r7Vt+M96/BEA4Bxt7e6tLVarlU2FoS1k/xX2L0Q+yQvbV6c66Ay7Fb7Vr1hj0bnp5x80H8hjTY3Ga8XqNmKcxaobcBEcPekj4r+DTgYAAAAAAAAAAAAAAOioH59YGnQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLz+HwAA///TQsBX") r0 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0xa, 0x0, 0x0, 0xb, 0x693ca, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x3, 0x404, 0x0, 0x0, 0xfffffffd, 0x0, 0xc0}, r0, 0x3, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x299a, &(0x7f0000000480)={0x0, 0x8900, 0x20, 0x2, 0x3c7}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c4947d3"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4000000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r7, 0x80000001, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x2b00b100, 0x0, 0xffffffffffffff4b, &(0x7f00000000c0), 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0xa, 0x80, 0x2a, 0x1, 0x4, 0x0, 0x0, 0x5, 0x100, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xe, 0x3}, 0x0, 0x10000, 0x80, 0x1, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r2, @ANYRESOCT=r1, @ANYRES64=r7, @ANYRESDEC=r8], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.656784994s ago: executing program 2 (id=394): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xbe8}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.598320466s ago: executing program 5 (id=395): r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xc0}}, 0x0) r4 = gettid() setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000080)=0x1c8, 0x4) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfb, "2af01c3d0040fbffffffffffffff00"}) r7 = syz_open_pts(r6, 0x0) r8 = syz_open_pts(r6, 0x141601) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000440)={0xff7f, 0x2000, 0x3, 0x3, 0x1a, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000700)=0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00_'], 0x20}], 0x1}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010003704000000000200000000000000", @ANYRES32=r10, @ANYBLOB="770405000000000000010062726964676500000c00028005002b0003f8ff000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.164126812s ago: executing program 1 (id=401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x40}}, 0x4000) 1.108517815s ago: executing program 1 (id=403): socket(0x10, 0x80003, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000800), 0x20000, 0x0) write$rfkill(r1, &(0x7f0000000840)={0x4, 0x5}, 0x8) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2000000000000002, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) shutdown(r2, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x3, {{0x2, 0x4e21, @multicast2}}, 0x1, 0xa, [{{0x2, 0x4e23, @initdev={0xac, 0x1e, 0xfc, 0x0}}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}, {{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @multicast1}}]}, 0x590) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x122) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) close(r5) socket(0x1e, 0x805, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0xfffffffffffffffe) close_range(r4, r0, 0x0) 933.030896ms ago: executing program 1 (id=408): perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x27, 0x8, 0x0, 0x0, 0x0, 0x3, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xbc, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipv4_newrule={0x0, 0x20, 0x20, 0x70bd2a, 0x25dfdbfc, {0x2, 0x20, 0x14, 0x5, 0x8, 0x0, 0x0, 0x2, 0x10}, [@FRA_SRC={0x0, 0x2, @loopback}, @FRA_TUN_ID={0x0, 0xc, 0x1, 0x0, 0x9}, @FRA_TUN_ID={0x0, 0xc, 0x1, 0x0, 0x4}, @FRA_TUN_ID={0x0, 0xc, 0x1, 0x0, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x1410}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x7fffffff, 0x7ec, 0x8002000010000, 0x2000000000002, 0x3, 0x0, 0x10cf}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ptrace$cont(0x21, 0x0, 0x80000001, 0xfffffffffffffffa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 932.559046ms ago: executing program 0 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653df374617469633a372d393a302f4e"]) getpid() umount2(&(0x7f00000000c0)='./file1\x00', 0x0) 829.379922ms ago: executing program 0 (id=410): unshare(0x2000400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x800003, 0x78, 0x4, 0x6}}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x400, 0x9, 0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) setuid(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xee1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x625, 0x4c1, 0xc1, 0x0, 0x0) 739.127677ms ago: executing program 2 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 681.96778ms ago: executing program 2 (id=412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000030a0fdb00000000000000000a00000508000b40000000030900010073797a310000000014000480080002403cb140bb08000140000000021c0008800c00014000000000000000090c000240000000000000066e140000001100010000000000000000000100000a856729c84590763e49c33938bb94cd9a87cf157bbdb0d55e2452fb75ee8cade852fb289cfaf88ec6047de69c9f8de8d06538777c45"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 658.443222ms ago: executing program 5 (id=413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = dup3(r1, r1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket(0xa, 0x2, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={r5, 0x8, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x8}, &(0x7f0000000100)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES8=r0], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xc45aa, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9412, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x3, 0x0, 0xf, 0x0, 0x200b}, 0x0, 0xa, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000000) r7 = semget$private(0x0, 0x3, 0x220) semtimedop(r7, &(0x7f0000000440)=[{0x2, 0x17c, 0x800}, {0x2, 0x5, 0x1000}], 0x2, 0x0) unshare(0x2c040000) sendmsg$NFT_MSG_GETCHAIN(r6, 0x0, 0x20000040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000200)=""/47, 0x2f, 0x46, 0x9, 0x5, 0x1, 0x1}}, 0x120) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'bond_slave_0\x00', @broadcast}) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x8, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28000000000000002900000032000000ff"], 0x28}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x4}}, 0x14) 655.572731ms ago: executing program 0 (id=414): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000, 0x2cf}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x8, {}, 0xa6, 0x3}) r3 = io_uring_setup(0x2ad8, &(0x7f0000000280)={0x0, 0x6843, 0x800, 0x802, 0x12}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0xfb, 0x0, 0x223d}, 0xc) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f00000008c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000d40)="01", 0x1) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x44855}, 0x24004052) 529.414589ms ago: executing program 2 (id=415): perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x27, 0x8, 0x0, 0x0, 0x0, 0x3, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xbc, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipv4_newrule={0x0, 0x20, 0x20, 0x70bd2a, 0x25dfdbfc, {0x2, 0x20, 0x14, 0x5, 0x8, 0x0, 0x0, 0x2, 0x10}, [@FRA_SRC={0x0, 0x2, @loopback}, @FRA_TUN_ID={0x0, 0xc, 0x1, 0x0, 0x9}, @FRA_TUN_ID={0x0, 0xc, 0x1, 0x0, 0x4}, @FRA_TUN_ID={0x0, 0xc, 0x1, 0x0, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = eventfd(0x80000000) ppoll(&(0x7f0000000240)=[{r1, 0x1410}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$eJzs3c9rHG0dAPDvzCZ5kzS+6SsiNigGPLQgTZNarHqxrQd7KFiwBxEPDU1SQ7c/SFKwtdAEPCgoiHgt0ov/gHfp3ZsI6s2zUEUqFrR0ZWZnm81mN7ttsrtJ5vOBzT7zzLN5nm9mn8wzM/vsBFBas9mPNOJUxNubScR007qpqK+cLcq9+teTW9kjiVrtu/9MIinyGuWT4vlEsTAeEX+8EvHpyu561x89vrNYrdU9jTi3cffBufVHj8+u3l28vXx7+d7C+a9duDj/9YULC00N/XAniuer177z+V/85IdfXflT9WwSl+LG6I+XoiWOgzIbs/G2CLE5fyQiLmaJNn+Xo+YYhFBqleL9OBoRn43pqORLddOx+vOhNg7oq1olora3pFsB4KjSvaGsGuOAxrF9b8fBN/o8Khmcl5frB0C74x8pTjmM58dGk6+SpiOj+rmNkwdQf1bHmyfjz948mXkWO85DvH63dUYOoJ5ONrci4nPt4k/ytp3MI83iT3cc6ycRMR8RY0X7vrWPNiRN6X6ch9lLj/FXsvibt0MaEZeK5yz/ygfW33paa9DxA1BOLy4XO/LNbGl7/5eNPRrjn9ge/zxtvG5q/5dkcsPe/3Ue/zX29+P5uCdtGYdlY5br7X/laGvG33529Ved6q+P/2aeNR5Z/Y2x4CC83IqYaYn/p1mwxfgniz9pM/7Nity81Fsd3/7zP652Wjfs+GvPI063Pf7ZHpVmqT2uT55bWa0uz9d/tq3j93/4wW871d8+/o/6EGl72faf7BB/0/ZPW1+X/U0etP+VW60Zv7v+/G6n+qe6bv/072NJ/XhzrMj50dbGxtpCxFhyrShS5C9ubKyd3zveepnXtfx5oR7/mS+17/873v8tUU00/mX24MH37rzqtO5D3v9NF5Pf1npsQydZ/Evdt/+u/p/l/bLHOv7z/Ydf6LSuffzJvmICAAAAAACAskrza7BJOvcunaZzc/X5sp+JybR6f33jyyv3H95bijiTfx5yNI00yT8yMl1fTlZWq8sLxedhG8vnW5a/EhGfRMSvKxP58tyt+9WlYQcPAAAAAAAAAAAAAAAAAAAAh8SJYv5/4z7V/67U5/8DJdH9BnO77v8AHBP9vMEkcLjl/X+vXfzHg2sLMFj2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCx9MkXX/w1iYjNb0zkj8xYsc6kXzjeRt+rdKVv7QAGT4+G8np36d9gH0qnp/H/f4svB+x/c4AhSNpl5oOD2t6d/0XbV27b2n/bAAAAAAAAAAAAAIC606c6z/9/v7nBwFFj2h+U1z7m//vqADjifPU/lJdjfKDLLP4Y77Si2/x/AAAAAAAAAAAAAODATOWPJJ0r5gJPRZrOzUV8KiJOxmiyslpdno+IjyPiL5XRj7LlhWE3GgAAAAAAAAAAAAAAAAAAAI6Z9UeP7yxWq8trzYn/7co53onGXVC7F671UGbPxDfjPV8VyeD/LBMRMfSN0rfESFNOErGZbflD0bC19TgczcgTQ/7HBAAAAAAAAAAAAAAAAAAAJdQ097i9md8MuEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHjb9//vkliarL+gp8I7E8OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mv4fAAD//6AzO/k=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 521.14713ms ago: executing program 1 (id=416): syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x28, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@routing={0xc, 0x2, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) memfd_secret(0x80000) creat(&(0x7f0000000080)='./file0\x00', 0x8) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x40000000000015b, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000001}, {0xffffffff, 0x0, 0x9, 0xa}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x14}}, 0x4014) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@o_path={0x0, 0x0, 0x20, r1}, 0x18) r5 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) msgget$private(0x0, 0x790) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newnexthop={0x54, 0x68, 0x800, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}, @NHA_OIF={0x8, 0x5, r8}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x54}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 470.108203ms ago: executing program 0 (id=417): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@multicast1, @private}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002142401800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 297.233683ms ago: executing program 2 (id=418): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x1, 0x1, 0x3c1, 0x8001, 0xfff7, 0xfff5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 233.051967ms ago: executing program 5 (id=419): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac030000000000008500000033000000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090343056000695800183afffe800000000000000000000000000018ff0200000000000000000000000000018800907849000000fc000000000000000000000000000001"], 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r8, &(0x7f0000000340)=[{&(0x7f0000000200)=""/260, 0x104}], 0x1, 0x102, 0xfffffffa, 0x2f) r9 = syz_open_dev$loop(&(0x7f0000000640), 0x9, 0xc4c0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r5) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c) getsockopt$sock_buf(r10, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r11, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x145c02, 0x115) 220.943847ms ago: executing program 2 (id=420): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbb, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "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"}}, 0xfc9) 214.164008ms ago: executing program 1 (id=421): syz_io_uring_setup(0x79e, &(0x7f0000000200)={0x0, 0x4f69, 0x40, 0x3, 0x353}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0}, 0x48) 178.932089ms ago: executing program 0 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 77.492366ms ago: executing program 0 (id=423): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000002180)='attr/prev\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28) syz_emit_ethernet(0x217, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @ipv6=@udp={0x3, 0x6, "83ac83", 0x1d9, 0x11, 0xff, @private1, @private1, {[@hopopts={0x16}, @dstopts={0x29, 0x6, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x9, 0x826, [0x0, 0x1c0000, 0x8]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x3c, 0x9, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x8, [0x8, 0x7]}}, @jumbo={0xc2, 0x4, 0x72e}, @ra={0x5, 0x2, 0xef4}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x5, [0x2]}}, @pad1, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x13ce}]}, @srh={0x67, 0x6, 0x4, 0x3, 0xc, 0x60, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @remote]}, @fragment={0x3c, 0x0, 0x1, 0x1, 0x0, 0x10, 0x65}, @fragment={0x87, 0x0, 0xf, 0x1, 0x0, 0x10, 0x66}, @srh={0x5c, 0x2, 0x4, 0x1, 0x5, 0x60, 0xe140, [@private0]}], {0x4e22, 0x4e20, 0xd9, 0x0, @opaque="1664ee1f1ed1be2d7c3177985d24f1e1212bbe7b91cb7c3958f75fd4d42239e6718726d4408cb0b860d90bba1cd8eab85ff249ca4b00a49b1e90e757f19b82559a569d9d2454b7d8f4703157f7ef6583eaeb33dd5e56de3c17bbfe04c7b9b4f3b28532415dda960b7ec68bc39a83ab29eb9e602fe7c5106ed1ab623b233c5f1203885f3d02226ba8dc8bd413af5b3195e6e0e583cca03b3c411507bed003ee9292e776e397f7e0105ed0f08209b0e97f83064e747630d67a30cfc9da2e4b68632a47775f74a22039492d14bb85dc1b413c"}}}}}}}, 0x0) 76.885545ms ago: executing program 1 (id=424): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, &(0x7f00000000c0)}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r8 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x702, 0xe, 0xfffffffffffffeb9, &(0x7f0000000580)="e46033fd99d6bc00eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(0x0, 0xfffffffffffffea2, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) 0s ago: executing program 5 (id=425): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 34.658113][ T29] audit: type=1400 audit(1770077075.662:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.681208][ T29] audit: type=1400 audit(1770077075.682:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.683591][ T3302] cgroup: Unknown subsys name 'net' [ 34.709001][ T29] audit: type=1400 audit(1770077075.712:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.826721][ T3302] cgroup: Unknown subsys name 'cpuset' [ 34.833014][ T3302] cgroup: Unknown subsys name 'rlimit' [ 34.946326][ T29] audit: type=1400 audit(1770077075.952:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.983366][ T29] audit: type=1400 audit(1770077075.952:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.003929][ T29] audit: type=1400 audit(1770077075.952:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.024411][ T29] audit: type=1400 audit(1770077075.952:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.044819][ T29] audit: type=1400 audit(1770077075.962:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.064926][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.069825][ T29] audit: type=1400 audit(1770077075.962:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.101540][ T29] audit: type=1400 audit(1770077075.982:71): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.140868][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.020259][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.090983][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.114510][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.121654][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.129098][ T3315] bridge_slave_0: entered allmulticast mode [ 37.135825][ T3315] bridge_slave_0: entered promiscuous mode [ 37.142840][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.150086][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.157437][ T3315] bridge_slave_1: entered allmulticast mode [ 37.163882][ T3315] bridge_slave_1: entered promiscuous mode [ 37.211284][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.226072][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.242679][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.276443][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.283612][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.290818][ T3314] bridge_slave_0: entered allmulticast mode [ 37.297482][ T3314] bridge_slave_0: entered promiscuous mode [ 37.317316][ T3315] team0: Port device team_slave_0 added [ 37.327464][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.334624][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.341987][ T3314] bridge_slave_1: entered allmulticast mode [ 37.348548][ T3314] bridge_slave_1: entered promiscuous mode [ 37.360455][ T3315] team0: Port device team_slave_1 added [ 37.394270][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 37.408307][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.415298][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.441408][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.455072][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.462054][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.488018][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.510860][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.520128][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 37.537708][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.544820][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.552189][ T3316] bridge_slave_0: entered allmulticast mode [ 37.558696][ T3316] bridge_slave_0: entered promiscuous mode [ 37.569662][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.576777][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.583927][ T3316] bridge_slave_1: entered allmulticast mode [ 37.590939][ T3316] bridge_slave_1: entered promiscuous mode [ 37.598427][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.646146][ T3314] team0: Port device team_slave_0 added [ 37.664993][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.677949][ T3314] team0: Port device team_slave_1 added [ 37.687423][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.698932][ T3315] hsr_slave_0: entered promiscuous mode [ 37.705086][ T3315] hsr_slave_1: entered promiscuous mode [ 37.749645][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.756876][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.764120][ T3321] bridge_slave_0: entered allmulticast mode [ 37.770681][ T3321] bridge_slave_0: entered promiscuous mode [ 37.781710][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.788842][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.796242][ T3321] bridge_slave_1: entered allmulticast mode [ 37.803027][ T3321] bridge_slave_1: entered promiscuous mode [ 37.810104][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.817105][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.843212][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.859336][ T3316] team0: Port device team_slave_0 added [ 37.864975][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.872196][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.879410][ T3318] bridge_slave_0: entered allmulticast mode [ 37.886227][ T3318] bridge_slave_0: entered promiscuous mode [ 37.907625][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.914665][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.940684][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.952525][ T3316] team0: Port device team_slave_1 added [ 37.961159][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.968343][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.975814][ T3318] bridge_slave_1: entered allmulticast mode [ 37.982479][ T3318] bridge_slave_1: entered promiscuous mode [ 37.997331][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.007844][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.035471][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.055548][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.062637][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.088795][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.103043][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.124411][ T3321] team0: Port device team_slave_0 added [ 38.130485][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.137584][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.163663][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.191881][ T3318] team0: Port device team_slave_0 added [ 38.202980][ T3321] team0: Port device team_slave_1 added [ 38.209537][ T3318] team0: Port device team_slave_1 added [ 38.229404][ T3314] hsr_slave_0: entered promiscuous mode [ 38.235557][ T3314] hsr_slave_1: entered promiscuous mode [ 38.241679][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.247433][ T3314] Cannot create hsr debugfs directory [ 38.272756][ T3316] hsr_slave_0: entered promiscuous mode [ 38.278881][ T3316] hsr_slave_1: entered promiscuous mode [ 38.284740][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 38.290546][ T3316] Cannot create hsr debugfs directory [ 38.301682][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.308834][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.334790][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.346018][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.352992][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.378931][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.406919][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.414112][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.440275][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.466708][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.473708][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.499698][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.559458][ T3318] hsr_slave_0: entered promiscuous mode [ 38.565631][ T3318] hsr_slave_1: entered promiscuous mode [ 38.571848][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 38.577648][ T3318] Cannot create hsr debugfs directory [ 38.585741][ T3321] hsr_slave_0: entered promiscuous mode [ 38.592000][ T3321] hsr_slave_1: entered promiscuous mode [ 38.598029][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 38.603760][ T3321] Cannot create hsr debugfs directory [ 38.696321][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.707798][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.719471][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.743286][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.811047][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.821753][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.831396][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.840380][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.880081][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.890351][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.909675][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.919616][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.954688][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.967930][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.979726][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.989141][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.005231][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.031699][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.052732][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.069251][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.076355][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.090788][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.103539][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.112834][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.124224][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.131366][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.141749][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.150685][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.169933][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.177081][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.191738][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.199003][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.229138][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.262475][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.282623][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.293385][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.303866][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.325746][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.350506][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.363230][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.370529][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.380455][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.387616][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.404190][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.414762][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.443196][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.450341][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.459770][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.466949][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.516670][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.526295][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.544734][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.565054][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.591919][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.602570][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.647022][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.654136][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.682714][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.689853][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.708961][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.800381][ T3315] veth0_vlan: entered promiscuous mode [ 39.807191][ T3314] veth0_vlan: entered promiscuous mode [ 39.825202][ T3316] veth0_vlan: entered promiscuous mode [ 39.833133][ T3314] veth1_vlan: entered promiscuous mode [ 39.842350][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.861640][ T3315] veth1_vlan: entered promiscuous mode [ 39.878006][ T3315] veth0_macvtap: entered promiscuous mode [ 39.890246][ T3316] veth1_vlan: entered promiscuous mode [ 39.914331][ T3315] veth1_macvtap: entered promiscuous mode [ 39.922001][ T3314] veth0_macvtap: entered promiscuous mode [ 39.938550][ T3314] veth1_macvtap: entered promiscuous mode [ 39.952018][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.961903][ T3316] veth0_macvtap: entered promiscuous mode [ 39.973608][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.993858][ T3318] veth0_vlan: entered promiscuous mode [ 40.002527][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.013559][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.025468][ T3318] veth1_vlan: entered promiscuous mode [ 40.032277][ T3316] veth1_macvtap: entered promiscuous mode [ 40.042472][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055452][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.073918][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.088693][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.106298][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.117250][ T3318] veth0_macvtap: entered promiscuous mode [ 40.127093][ T3318] veth1_macvtap: entered promiscuous mode [ 40.141987][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.152328][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.169316][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.180351][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.190836][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.204859][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 40.204943][ T29] audit: type=1400 audit(1770077081.202:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.gnQqtc/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.240305][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.256593][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.266749][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.274455][ T29] audit: type=1400 audit(1770077081.212:86): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.294025][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.297026][ T29] audit: type=1400 audit(1770077081.222:87): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.wrqEYQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.330669][ T29] audit: type=1400 audit(1770077081.222:88): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.352814][ T29] audit: type=1400 audit(1770077081.222:89): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.wrqEYQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.379746][ T29] audit: type=1400 audit(1770077081.222:90): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.wrqEYQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.407346][ T29] audit: type=1400 audit(1770077081.222:91): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.427092][ T29] audit: type=1400 audit(1770077081.242:92): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.450237][ T29] audit: type=1400 audit(1770077081.242:93): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.481320][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.483116][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.508335][ T29] audit: type=1400 audit(1770077081.512:94): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.534785][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.588117][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.627150][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.664289][ T3483] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.674497][ T3483] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.695034][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.707067][ T3321] veth0_vlan: entered promiscuous mode [ 40.728962][ T3321] veth1_vlan: entered promiscuous mode [ 40.739280][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.753022][ T3495] dummy0: entered promiscuous mode [ 40.781296][ T3495] bond0: entered promiscuous mode [ 40.786487][ T3495] bond_slave_0: entered promiscuous mode [ 40.792260][ T3495] bond_slave_1: entered promiscuous mode [ 40.807929][ T3495] hsr1: entered allmulticast mode [ 40.813069][ T3495] dummy0: entered allmulticast mode [ 40.818391][ T3495] bond0: entered allmulticast mode [ 40.823607][ T3495] bond_slave_0: entered allmulticast mode [ 40.829468][ T3495] bond_slave_1: entered allmulticast mode [ 40.843491][ T3321] veth0_macvtap: entered promiscuous mode [ 40.850848][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.876553][ T3502] FAULT_INJECTION: forcing a failure. [ 40.876553][ T3502] name failslab, interval 1, probability 0, space 0, times 1 [ 40.879600][ T3321] veth1_macvtap: entered promiscuous mode [ 40.889443][ T3502] CPU: 1 UID: 0 PID: 3502 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.889653][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.889715][ T3502] Call Trace: [ 40.889745][ T3502] [ 40.889817][ T3502] __dump_stack+0x1d/0x30 [ 40.889917][ T3502] dump_stack_lvl+0x95/0xd0 [ 40.890043][ T3502] dump_stack+0x15/0x1b [ 40.890108][ T3502] should_fail_ex+0x263/0x280 [ 40.890211][ T3502] should_failslab+0x8c/0xb0 [ 40.890278][ T3502] kmem_cache_alloc_noprof+0x68/0x490 [ 40.890371][ T3502] ? skb_clone+0x151/0x1f0 [ 40.890443][ T3502] skb_clone+0x151/0x1f0 [ 40.890529][ T3502] __netlink_deliver_tap+0x2c9/0x500 [ 40.890661][ T3502] ? netlink_attachskb+0x2e2/0x660 [ 40.890827][ T3502] netlink_sendskb+0x126/0x150 [ 40.891006][ T3502] netlink_unicast+0x2a2/0x690 [ 40.891111][ T3502] netlink_ack+0x4c8/0x500 [ 40.891219][ T3502] netlink_rcv_skb+0x192/0x220 [ 40.891352][ T3502] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 40.891447][ T3502] rtnetlink_rcv+0x1c/0x30 [ 40.891591][ T3502] netlink_unicast+0x5c0/0x690 [ 40.891706][ T3502] netlink_sendmsg+0x5c8/0x6f0 [ 40.891743][ T3502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.891885][ T3502] ____sys_sendmsg+0x5af/0x600 [ 40.891961][ T3502] ___sys_sendmsg+0x195/0x1e0 [ 40.892060][ T3502] __x64_sys_sendmsg+0xd4/0x160 [ 40.892136][ T3502] x64_sys_call+0x17ba/0x3000 [ 40.892312][ T3502] do_syscall_64+0xc0/0x2a0 [ 40.892428][ T3502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.892503][ T3502] RIP: 0033:0x7fc22367aeb9 [ 40.892584][ T3502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.892648][ T3502] RSP: 002b:00007fc2220d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.892766][ T3502] RAX: ffffffffffffffda RBX: 00007fc2238f5fa0 RCX: 00007fc22367aeb9 [ 40.892816][ T3502] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 40.892846][ T3502] RBP: 00007fc2220d7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.892889][ T3502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.892935][ T3502] R13: 00007fc2238f6038 R14: 00007fc2238f5fa0 R15: 00007ffc929f1458 [ 40.892998][ T3502] [ 41.146987][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.169083][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.186463][ T3516] FAULT_INJECTION: forcing a failure. [ 41.186463][ T3516] name failslab, interval 1, probability 0, space 0, times 0 [ 41.199241][ T3516] CPU: 1 UID: 0 PID: 3516 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.199276][ T3516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.199292][ T3516] Call Trace: [ 41.199300][ T3516] [ 41.199310][ T3516] __dump_stack+0x1d/0x30 [ 41.199336][ T3516] dump_stack_lvl+0x95/0xd0 [ 41.199362][ T3516] dump_stack+0x15/0x1b [ 41.199385][ T3516] should_fail_ex+0x263/0x280 [ 41.199425][ T3516] should_failslab+0x8c/0xb0 [ 41.199450][ T3516] kmem_cache_alloc_noprof+0x68/0x490 [ 41.199501][ T3516] ? copy_sighand+0x52/0x1b0 [ 41.199540][ T3516] copy_sighand+0x52/0x1b0 [ 41.199625][ T3516] copy_process+0xc68/0x1f10 [ 41.199676][ T3516] kernel_clone+0x16b/0x5b0 [ 41.199701][ T3516] ? vfs_write+0x86e/0x9f0 [ 41.199721][ T3516] __x64_sys_clone+0x143/0x180 [ 41.199814][ T3516] x64_sys_call+0x12d0/0x3000 [ 41.199986][ T3516] do_syscall_64+0xc0/0x2a0 [ 41.200030][ T3516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.200060][ T3516] RIP: 0033:0x7f37045aaeb9 [ 41.200094][ T3516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.200118][ T3516] RSP: 002b:00007f3703006fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 41.200145][ T3516] RAX: ffffffffffffffda RBX: 00007f3704825fa0 RCX: 00007f37045aaeb9 [ 41.200159][ T3516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080040000 [ 41.200175][ T3516] RBP: 00007f3703007090 R08: 0000000000000000 R09: 0000000000000000 [ 41.200259][ T3516] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 41.200273][ T3516] R13: 00007f3704826038 R14: 00007f3704825fa0 R15: 00007ffea6aa1558 [ 41.200298][ T3516] [ 41.236199][ T587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.389104][ T587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.401525][ T3518] loop2: detected capacity change from 0 to 512 [ 41.467502][ T587] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.473464][ T3520] loop0: detected capacity change from 0 to 1024 [ 41.477310][ T587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.498668][ T3520] ======================================================= [ 41.498668][ T3520] WARNING: The mand mount option has been deprecated and [ 41.498668][ T3520] and is ignored by this kernel. Remove the mand [ 41.498668][ T3520] option from the mount to silence this warning. [ 41.498668][ T3520] ======================================================= [ 41.545658][ T3520] EXT4-fs: Ignoring removed nobh option [ 41.574613][ T3520] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.575050][ T3518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.609556][ T3518] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.638745][ T3520] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.13: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 41.659675][ T3507] loop3: detected capacity change from 0 to 512 [ 41.673939][ T3507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.687005][ T3520] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.13: couldn't read orphan inode 11 (err -117) [ 41.699716][ T3531] netlink: 332 bytes leftover after parsing attributes in process `syz.2.12'. [ 41.716932][ T3507] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.8: bg 0: block 5: invalid block bitmap [ 41.743084][ T3520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.752654][ T3507] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 41.809960][ T3507] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8: invalid indirect mapped block 3 (level 2) [ 41.823976][ T3507] EXT4-fs (loop3): 1 orphan inode deleted [ 41.829811][ T3507] EXT4-fs (loop3): 1 truncate cleaned up [ 41.837035][ T3507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.878588][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.943697][ T3539] xt_l2tp: missing protocol rule (udp|l2tpip) [ 41.978692][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.024771][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.072927][ T3547] syzkaller0: entered promiscuous mode [ 42.078574][ T3547] syzkaller0: entered allmulticast mode [ 42.098372][ T3549] syzkaller1: entered promiscuous mode [ 42.103918][ T3549] syzkaller1: entered allmulticast mode [ 42.254585][ T3560] netlink: 196 bytes leftover after parsing attributes in process `syz.0.22'. [ 42.374198][ C0] hrtimer: interrupt took 46321 ns [ 42.406656][ T587] tipc: Subscription rejected, illegal request [ 42.513234][ T3557] syz.3.21 (3557) used greatest stack depth: 10296 bytes left [ 42.529011][ T3575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 42.590932][ T3577] mmap: syz.3.28 (3577) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.699673][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 42.725558][ T3583] Zero length message leads to an empty skb [ 42.745198][ T3586] loop0: detected capacity change from 0 to 2048 [ 42.827297][ T3591] loop0: detected capacity change from 0 to 2048 [ 42.849793][ T3594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 42.877294][ T3308] Alternate GPT is invalid, using primary GPT. [ 42.883689][ T3308] loop0: p1 p2 p3 [ 42.887567][ T3308] loop0: partition table partially beyond EOD, truncated [ 42.923257][ T3591] Alternate GPT is invalid, using primary GPT. [ 42.929804][ T3591] loop0: p1 p2 p3 [ 42.933584][ T3591] loop0: partition table partially beyond EOD, truncated [ 43.399908][ T3616] loop4: detected capacity change from 0 to 1024 [ 43.411089][ T3616] EXT4-fs: Ignoring removed nobh option [ 43.422112][ T3616] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.434097][ T3616] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.40: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 43.452980][ T3616] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.40: couldn't read orphan inode 11 (err -117) [ 43.465744][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.487678][ T3623] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 43.495769][ T3623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 43.570058][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.885841][ T3650] syzkaller1: entered promiscuous mode [ 43.891525][ T3650] syzkaller1: entered allmulticast mode [ 44.017514][ T3652] netlink: 'syz.4.52': attribute type 8 has an invalid length. [ 44.025105][ T3652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 44.036062][ T3652] bond0: entered promiscuous mode [ 44.041327][ T3652] bond_slave_0: entered promiscuous mode [ 44.047200][ T3652] bond_slave_1: entered promiscuous mode [ 44.054719][ T3652] gretap0: entered promiscuous mode [ 44.060848][ T3652] debugfs: 'hsr1' already exists in 'hsr' [ 44.066679][ T3652] Cannot create hsr debugfs directory [ 44.072073][ T3652] hsr1: entered promiscuous mode [ 44.138804][ T3658] netlink: 228 bytes leftover after parsing attributes in process `syz.4.55'. [ 44.684547][ T3684] netlink: 'syz.4.67': attribute type 1 has an invalid length. [ 44.810224][ T3684] macvlan2: entered promiscuous mode [ 44.815659][ T3684] macvlan2: entered allmulticast mode [ 45.025083][ T3704] ipt_rpfilter: unknown options [ 45.042686][ T3705] loop3: detected capacity change from 0 to 2048 [ 45.061117][ T3705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.083821][ T3705] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.221666][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 45.221681][ T29] audit: type=1400 audit(1770077086.222:341): avc: denied { setopt } for pid=3703 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.247864][ T3710] x_tables: duplicate underflow at hook 1 [ 45.342765][ T3709] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.72: bg 0: block 345: padding at end of block bitmap is not set [ 45.360563][ T3709] EXT4-fs (loop3): Remounting filesystem read-only [ 45.367474][ T587] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 45.401129][ T3715] syzkaller1: entered promiscuous mode [ 45.406867][ T3715] syzkaller1: entered allmulticast mode [ 45.412839][ T3709] syz.3.72 (3709) used greatest stack depth: 9792 bytes left [ 45.474815][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.504430][ T3717] loop3: detected capacity change from 0 to 1024 [ 45.511488][ T29] audit: type=1400 audit(1770077086.522:342): avc: denied { remount } for pid=3716 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.563614][ T29] audit: type=1400 audit(1770077086.562:343): avc: denied { read } for pid=3718 comm="syz.4.76" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 45.587929][ T29] audit: type=1400 audit(1770077086.562:344): avc: denied { open } for pid=3718 comm="syz.4.76" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 45.612964][ T29] audit: type=1400 audit(1770077086.592:345): avc: denied { ioctl } for pid=3718 comm="syz.4.76" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 45.642103][ T29] audit: type=1400 audit(1770077086.642:346): avc: denied { read } for pid=3720 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.666191][ T3721] loop3: detected capacity change from 0 to 512 [ 45.673984][ T3721] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.710254][ T3721] EXT4-fs (loop3): 1 orphan inode deleted [ 45.727613][ T3446] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 45.728660][ T3721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.737551][ T3446] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 45.762300][ T3721] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.798459][ T3727] loop0: detected capacity change from 0 to 1024 [ 45.805252][ T3727] EXT4-fs: Ignoring removed nobh option [ 45.813274][ T3727] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.828042][ T3727] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.79: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 45.846974][ T3727] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.79: couldn't read orphan inode 11 (err -117) [ 45.917826][ T3727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.947673][ T3735] EXT4-fs: Ignoring removed nobh option [ 45.955690][ T3735] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.977171][ T3735] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.81: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 46.042521][ T29] audit: type=1326 audit(1770077087.022:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37045aaeb9 code=0x7ffc0000 [ 46.066338][ T29] audit: type=1326 audit(1770077087.022:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37045aaeb9 code=0x7ffc0000 [ 46.090145][ T29] audit: type=1326 audit(1770077087.022:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37045aaeb9 code=0x7ffc0000 [ 46.122857][ T3735] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.81: couldn't read orphan inode 11 (err -117) [ 46.136622][ T3735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.156212][ T3735] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.81: Invalid block bitmap block 0 in block_group 0 [ 46.169923][ T3735] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.81: Failed to acquire dquot type 0 [ 46.237826][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.303613][ T3751] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 46.318476][ T3751] __nla_validate_parse: 3 callbacks suppressed [ 46.318491][ T3751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 46.349530][ T3753] syzkaller1: entered promiscuous mode [ 46.355138][ T3753] syzkaller1: entered allmulticast mode [ 46.378247][ T3755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.391016][ T3755] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.454379][ T3759] netlink: 332 bytes leftover after parsing attributes in process `syz.1.88'. [ 46.479426][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.558794][ T3761] set_capacity_and_notify: 2 callbacks suppressed [ 46.558815][ T3761] loop2: detected capacity change from 0 to 512 [ 46.573139][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.615166][ T3766] syz.1.91 uses obsolete (PF_INET,SOCK_PACKET) [ 46.632023][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.641924][ T3761] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 46.652697][ T3761] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.663118][ T3761] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.89: Failed to acquire dquot type 1 [ 46.676840][ T3761] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.89: bg 0: block 40: padding at end of block bitmap is not set [ 46.693172][ T3761] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 46.708544][ T3761] EXT4-fs (loop2): 1 truncate cleaned up [ 46.714934][ T3761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.728928][ T3761] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.89: corrupted xattr block 31: invalid header [ 46.742288][ T3761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 46.752218][ T3761] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.89: corrupted xattr block 31: invalid header [ 46.765516][ T3761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 46.775833][ T3761] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.89: bad symlink. [ 46.786129][ T3772] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.89: corrupted xattr block 31: invalid header [ 46.801653][ T3772] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 46.820994][ T3772] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.89: bad symlink. [ 46.895206][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.934907][ T3777] loop2: detected capacity change from 0 to 128 [ 47.064280][ T3785] netlink: 'syz.2.95': attribute type 3 has an invalid length. [ 47.111447][ T3794] loop1: detected capacity change from 0 to 1024 [ 47.118316][ T3794] EXT4-fs: Ignoring removed nobh option [ 47.124700][ T3794] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.149485][ T3794] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.100: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 47.169286][ T3794] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.100: couldn't read orphan inode 11 (err -117) [ 47.188807][ T3794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.209873][ T3794] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.100: Invalid block bitmap block 0 in block_group 0 [ 47.224782][ T3794] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.100: Failed to acquire dquot type 0 [ 47.251903][ T3802] loop2: detected capacity change from 0 to 512 [ 47.283069][ T3802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.322513][ T3802] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.352117][ T3802] netlink: 332 bytes leftover after parsing attributes in process `syz.2.102'. [ 47.411699][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.427949][ T3814] loop4: detected capacity change from 0 to 512 [ 47.436778][ T3814] EXT4-fs (loop4): filesystem is read-only [ 47.442786][ T3814] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 47.454706][ T3814] EXT4-fs (loop4): filesystem is read-only [ 47.460682][ T3814] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.467677][ T3814] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.107: bg 0: block 64: padding at end of block bitmap is not set [ 47.482309][ T3814] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 47.491454][ T3814] EXT4-fs (loop4): 1 orphan inode deleted [ 47.497707][ T3814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.536142][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.547024][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.580980][ T3818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.627059][ T3822] syzkaller1: entered promiscuous mode [ 47.632691][ T3822] syzkaller1: entered allmulticast mode [ 47.703289][ T3830] loop4: detected capacity change from 0 to 512 [ 47.720072][ T3832] Illegal XDP return value 76161012 on prog (id 30) dev N/A, expect packet loss! [ 47.732134][ T3830] ext2: Unknown parameter '"' [ 47.747248][ T3830] ieee802154 phy0 wpan0: encryption failed: -22 [ 47.843669][ T3841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.119'. [ 47.864254][ T3839] loop4: detected capacity change from 0 to 1024 [ 47.886358][ T3839] EXT4-fs: Ignoring removed nobh option [ 47.901095][ T3839] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.941725][ T3846] loop2: detected capacity change from 0 to 512 [ 47.958191][ T3839] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.118: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 47.982656][ T3839] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.118: couldn't read orphan inode 11 (err -117) [ 48.002054][ T3839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.017830][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.031987][ T3827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.050326][ T3846] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.063470][ T3846] netlink: 332 bytes leftover after parsing attributes in process `syz.2.120'. [ 48.098406][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.108889][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.213036][ T3861] syzkaller1: entered promiscuous mode [ 48.218668][ T3861] syzkaller1: entered allmulticast mode [ 48.231535][ T3862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 48.259356][ T3864] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 48.271694][ T3864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 48.371442][ T3873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 48.389769][ T3873] bond1: entered promiscuous mode [ 48.391751][ T3878] loop2: detected capacity change from 0 to 512 [ 48.394873][ T3873] bond1: entered allmulticast mode [ 48.406669][ T3873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.427027][ T3878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.440511][ T3881] netlink: 'syz.4.133': attribute type 3 has an invalid length. [ 48.450779][ T3878] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.475441][ T3878] netlink: 332 bytes leftover after parsing attributes in process `syz.2.132'. [ 48.564158][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.635801][ T3887] loop2: detected capacity change from 0 to 128 [ 48.642568][ T3887] vfat: Unknown parameter 'batadv0' [ 48.651420][ T3887] capability: warning: `syz.2.135' uses deprecated v2 capabilities in a way that may be insecure [ 48.706306][ T3889] netlink: 48 bytes leftover after parsing attributes in process `syz.3.136'. [ 49.180668][ T3902] syzkaller1: entered promiscuous mode [ 49.186361][ T3902] syzkaller1: entered allmulticast mode [ 49.277776][ T3910] xt_hashlimit: size too large, truncated to 1048576 [ 49.339346][ T3913] netlink: 'syz.0.144': attribute type 29 has an invalid length. [ 49.542749][ T3926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.551056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.859747][ T3945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.868377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.886154][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.899599][ T3947] capability: warning: `syz.3.157' uses 32-bit capabilities (legacy support in use) [ 49.988837][ T3955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.004615][ T3955] vfat: Unknown parameter 'G3 2I\b4*btSi\xy1  ۹iV63:%' [ 50.032361][ T3955] ext4: Invalid gid '0x00000000ffffffff' [ 50.083866][ T3958] EXT4-fs: Ignoring removed nobh option [ 50.089799][ T3961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.104641][ T3958] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.123883][ T3958] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.162: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 50.143264][ T3958] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.162: couldn't read orphan inode 11 (err -117) [ 50.155757][ T3958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.212347][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.366208][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 50.366226][ T29] audit: type=1400 audit(1770077091.352:667): avc: denied { write } for pid=3971 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.460972][ T3982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.473784][ T3982] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.487605][ T29] audit: type=1400 audit(1770077091.492:668): avc: denied { mounton } for pid=3981 comm="syz.1.171" path="/26/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.492276][ T3982] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.171: lblock 3 mapped to illegal pblock 3 (length 3) [ 50.526478][ T3982] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 50.538884][ T3982] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.538884][ T3982] [ 50.548811][ T29] audit: type=1400 audit(1770077091.552:669): avc: denied { map } for pid=3981 comm="syz.1.171" path="/26/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.596135][ T29] audit: type=1400 audit(1770077091.592:670): avc: denied { read write } for pid=3991 comm="syz.3.174" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 50.619651][ T29] audit: type=1400 audit(1770077091.602:671): avc: denied { open } for pid=3991 comm="syz.3.174" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 50.644599][ T3992] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 50.668463][ T29] audit: type=1400 audit(1770077091.652:672): avc: denied { watch_reads } for pid=3991 comm="syz.3.174" path="/32" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.726405][ T29] audit: type=1400 audit(1770077091.732:673): avc: denied { setattr } for pid=3981 comm="syz.1.171" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.752363][ T3992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.765289][ T3992] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.777526][ T3992] ..0{X: renamed from gretap0 (while UP) [ 50.798470][ T3992] ..0{X: entered allmulticast mode [ 50.804566][ T3992] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 50.823503][ T3992] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz.3.174: Directory hole found for htree leaf block 0 [ 50.826882][ T29] audit: type=1400 audit(1770077091.832:674): avc: denied { getopt } for pid=3991 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.855811][ T29] audit: type=1400 audit(1770077091.832:675): avc: denied { remove_name } for pid=3991 comm="syz.3.174" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.878444][ T29] audit: type=1400 audit(1770077091.832:676): avc: denied { rmdir } for pid=3991 comm="syz.3.174" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.900615][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.930274][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.946555][ T12] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 3) [ 50.964133][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 50.976656][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.976656][ T12] [ 50.996285][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.005697][ T12] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:0: lblock 4 mapped to illegal pblock 4 (length 2) [ 51.029983][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 51.042402][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.042402][ T12] [ 51.080907][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.107267][ T4008] EXT4-fs: Ignoring removed nobh option [ 51.138792][ T4014] netlink: 'syz.0.183': attribute type 4 has an invalid length. [ 51.171357][ T4008] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.216154][ T4008] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.178: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 51.243622][ T4008] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.178: couldn't read orphan inode 11 (err -117) [ 51.256679][ T4008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.316769][ T4030] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 51.337801][ T4030] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 51.349531][ T4030] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 51.364955][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.457425][ T4030] bond2: (slave gretap1): making interface the new active one [ 51.477999][ T4030] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 51.536487][ T4030] macvlan2: entered promiscuous mode [ 51.541861][ T4030] macvlan2: entered allmulticast mode [ 51.720915][ T4049] xt_hashlimit: size too large, truncated to 1048576 [ 51.871647][ T4055] __nla_validate_parse: 5 callbacks suppressed [ 51.871667][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 51.888450][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 51.897818][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 51.968962][ T4061] set_capacity_and_notify: 6 callbacks suppressed [ 51.968977][ T4061] loop2: detected capacity change from 0 to 1024 [ 51.982303][ T4061] EXT4-fs: Ignoring removed nobh option [ 51.988732][ T4061] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.008526][ T4063] loop4: detected capacity change from 0 to 512 [ 52.019206][ T4063] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.028358][ T4063] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 52.042346][ T4061] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.198: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 52.062418][ T4063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 52.072111][ T4063] System zones: 0-2, 18-18, 34-35 [ 52.077366][ T4061] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.198: couldn't read orphan inode 11 (err -117) [ 52.098108][ T4063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.118880][ T4061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.143822][ T4063] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 52.165373][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.166028][ T4063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 52.207143][ T4063] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 52.497667][ T4105] Cannot find add_set index 65520 as target [ 52.524258][ T4107] xt_hashlimit: size too large, truncated to 1048576 [ 52.537267][ T4107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.208'. [ 52.554102][ T4107] loop0: detected capacity change from 0 to 128 [ 52.565477][ T4107] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.593366][ T4107] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.624601][ T4111] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 52.636940][ T587] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.670750][ T4116] net_ratelimit: 6 callbacks suppressed [ 52.670768][ T4116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.680562][ T4111] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 52.684839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.699414][ T4111] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 52.794238][ T4111] bond1: (slave gretap1): making interface the new active one [ 52.816397][ T4111] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 52.843956][ T4111] macvlan2: entered promiscuous mode [ 52.849401][ T4111] macvlan2: entered allmulticast mode [ 52.889468][ T4130] netlink: 68 bytes leftover after parsing attributes in process `syz.0.218'. [ 53.006249][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.070204][ T4141] xt_hashlimit: size too large, truncated to 1048576 [ 53.225546][ T4148] loop0: detected capacity change from 0 to 1024 [ 53.232495][ T4148] EXT4-fs: Ignoring removed nobh option [ 53.241653][ T4148] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.253370][ T4148] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.225: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 53.272442][ T4148] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.225: couldn't read orphan inode 11 (err -117) [ 53.284983][ T4148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.311477][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.348878][ T4152] loop3: detected capacity change from 0 to 1024 [ 53.368383][ T4152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.388052][ T4152] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.402146][ T4152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'. [ 53.415959][ T4159] netlink: 3 bytes leftover after parsing attributes in process `syz.2.228'. [ 53.428572][ T4152] process 'syz.3.227' launched '/dev/fd/7' with NULL argv: empty string added [ 53.440375][ T4152] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.227: lblock 3 mapped to illegal pblock 3 (length 3) [ 53.456061][ T4152] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 53.468445][ T4152] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.468445][ T4152] [ 53.479469][ T4152] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.227: bg 0: block 112: padding at end of block bitmap is not set [ 53.495128][ T4152] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 3 with error 117 [ 53.507617][ T4152] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.507617][ T4152] [ 53.518141][ T4152] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 53.570339][ T3417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.581596][ T4152] syz.3.227 (4152) used greatest stack depth: 9224 bytes left [ 53.597664][ T52] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 53.616057][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 53.628665][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.628665][ T52] [ 53.678011][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.721376][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 53.734564][ T4165] team_slave_0: entered promiscuous mode [ 53.740353][ T4165] team_slave_1: entered promiscuous mode [ 53.746979][ T4165] vlan2: entered promiscuous mode [ 53.752054][ T4165] team0: entered promiscuous mode [ 53.923159][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 53.924399][ T52] tipc: Subscription rejected, illegal request [ 53.938896][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 54.004703][ T4178] loop2: detected capacity change from 0 to 512 [ 54.011636][ T4178] EXT4-fs: test_dummy_encryption option not supported [ 54.046295][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.055022][ T4184] syzkaller1: entered promiscuous mode [ 54.060625][ T4184] syzkaller1: entered allmulticast mode [ 54.061075][ T4178] xt_CT: No such helper "netbios-ns" [ 54.209996][ T2965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.257632][ T4201] loop0: detected capacity change from 0 to 2048 [ 54.264614][ T4203] loop2: detected capacity change from 0 to 256 [ 54.284977][ T4201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.307411][ T4201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.335716][ T4201] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.241: bg 0: block 2: invalid block bitmap [ 54.349896][ T4216] loop1: detected capacity change from 0 to 1024 [ 54.357995][ T4201] EXT4-fs (loop0): Remounting filesystem read-only [ 54.445743][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.500923][ T4233] syzkaller1: entered promiscuous mode [ 54.506497][ T4233] syzkaller1: entered allmulticast mode [ 54.538996][ T4239] loop1: detected capacity change from 0 to 2048 [ 54.557737][ T4239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.577542][ T4239] netlink: 'syz.1.254': attribute type 12 has an invalid length. [ 54.585316][ T4239] netlink: 'syz.1.254': attribute type 29 has an invalid length. [ 54.613508][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.618967][ T4247] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 54.632501][ T4247] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 54.642739][ T4247] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 54.655465][ T4247] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 54.829889][ T4268] netlink: 'syz.2.263': attribute type 27 has an invalid length. [ 54.856879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.879024][ T4271] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.898829][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.906252][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.913793][ T4271] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.943045][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.981017][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.991339][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.024421][ T4268] macvlan2: left promiscuous mode [ 55.029963][ T4268] macvlan2: left allmulticast mode [ 55.047336][ T3446] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.081868][ T3446] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.091560][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.107084][ T3446] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.116163][ T3446] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.130411][ T4279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=4279 comm=syz.1.267 [ 55.207394][ T4291] FAULT_INJECTION: forcing a failure. [ 55.207394][ T4291] name failslab, interval 1, probability 0, space 0, times 0 [ 55.220120][ T4291] CPU: 0 UID: 0 PID: 4291 Comm: syz.2.273 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.220154][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.220249][ T4291] Call Trace: [ 55.220256][ T4291] [ 55.220264][ T4291] __dump_stack+0x1d/0x30 [ 55.220359][ T4291] dump_stack_lvl+0x95/0xd0 [ 55.220388][ T4291] dump_stack+0x15/0x1b [ 55.220412][ T4291] should_fail_ex+0x263/0x280 [ 55.220444][ T4291] should_failslab+0x8c/0xb0 [ 55.220467][ T4291] __kmalloc_cache_noprof+0x64/0x4a0 [ 55.220578][ T4291] ? fl_change+0xcc/0x1c40 [ 55.220609][ T4291] fl_change+0xcc/0x1c40 [ 55.220640][ T4291] ? mutex_unlock+0x4e/0x90 [ 55.220669][ T4291] ? radix_tree_lookup+0x12d/0x140 [ 55.220718][ T4291] ? __rcu_read_unlock+0x4e/0x70 [ 55.220758][ T4291] tc_new_tfilter+0xe56/0x1110 [ 55.220797][ T4291] ? ns_capable+0x7c/0xb0 [ 55.220838][ T4291] ? __pfx_tc_new_tfilter+0x10/0x10 [ 55.220857][ T4291] rtnetlink_rcv_msg+0x64b/0x720 [ 55.220887][ T4291] ? avc_has_perm_noaudit+0xab/0x130 [ 55.221000][ T4291] netlink_rcv_skb+0x123/0x220 [ 55.221035][ T4291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.221093][ T4291] rtnetlink_rcv+0x1c/0x30 [ 55.221119][ T4291] netlink_unicast+0x5c0/0x690 [ 55.221196][ T4291] netlink_sendmsg+0x5c8/0x6f0 [ 55.221256][ T4291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.221365][ T4291] ____sys_sendmsg+0x5af/0x600 [ 55.221395][ T4291] ___sys_sendmsg+0x195/0x1e0 [ 55.221464][ T4291] __x64_sys_sendmsg+0xd4/0x160 [ 55.221492][ T4291] x64_sys_call+0x17ba/0x3000 [ 55.221517][ T4291] do_syscall_64+0xc0/0x2a0 [ 55.221548][ T4291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.221628][ T4291] RIP: 0033:0x7fc22367aeb9 [ 55.221656][ T4291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.221674][ T4291] RSP: 002b:00007fc2220d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.221694][ T4291] RAX: ffffffffffffffda RBX: 00007fc2238f5fa0 RCX: 00007fc22367aeb9 [ 55.221716][ T4291] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 55.221733][ T4291] RBP: 00007fc2220d7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.221750][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.221766][ T4291] R13: 00007fc2238f6038 R14: 00007fc2238f5fa0 R15: 00007ffc929f1458 [ 55.221792][ T4291] [ 55.583823][ T4302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.586737][ T4275] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.593132][ T4302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.603462][ T3446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.630229][ T4303] EXT4-fs: Ignoring removed nobh option [ 55.656440][ T4303] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.679276][ T3446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.698813][ T4303] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.279: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 55.721694][ T4303] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.279: couldn't read orphan inode 11 (err -117) [ 55.736567][ T4303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.766201][ T3446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.813815][ T29] kauditd_printk_skb: 831 callbacks suppressed [ 55.813830][ T29] audit: type=1326 audit(1770077096.812:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b178aeb9 code=0x7ffc0000 [ 55.877805][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.897132][ T3446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.933348][ T29] audit: type=1326 audit(1770077096.852:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b178aeb9 code=0x7ffc0000 [ 55.956838][ T29] audit: type=1326 audit(1770077096.852:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b178aeb9 code=0x7ffc0000 [ 55.980613][ T29] audit: type=1326 audit(1770077096.852:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f27b178aeb9 code=0x7ffc0000 [ 56.004008][ T29] audit: type=1326 audit(1770077096.852:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b178aeb9 code=0x7ffc0000 [ 56.027738][ T29] audit: type=1326 audit(1770077096.852:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b178aeb9 code=0x7ffc0000 [ 56.051232][ T29] audit: type=1326 audit(1770077096.852:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f27b178aeb9 code=0x7ffc0000 [ 56.074999][ T29] audit: type=1326 audit(1770077096.852:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f27b178aeb9 code=0x7ffc0000 [ 56.098510][ T29] audit: type=1400 audit(1770077096.932:1516): avc: denied { write } for pid=4329 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.136866][ T29] audit: type=1400 audit(1770077096.962:1517): avc: denied { map } for pid=4329 comm="syz.2.291" path="socket:[7448]" dev="sockfs" ino=7448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 56.301734][ T3446] bridge_slave_1: left allmulticast mode [ 56.307668][ T3446] bridge_slave_1: left promiscuous mode [ 56.313574][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.337402][ T4357] EXT4-fs: Ignoring removed nobh option [ 56.376527][ T4357] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.392995][ T3446] bridge_slave_0: left allmulticast mode [ 56.398807][ T3446] bridge_slave_0: left promiscuous mode [ 56.404562][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.411826][ T4366] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 56.411826][ T4366] [ 56.414209][ T4357] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.299: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 56.466079][ T4357] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.299: couldn't read orphan inode 11 (err -117) [ 56.505074][ T4357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.592958][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.608947][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.626843][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.670678][ T3446] bond0 (unregistering): Released all slaves [ 56.697016][ T4379] syzkaller1: entered promiscuous mode [ 56.702623][ T4379] syzkaller1: entered allmulticast mode [ 56.751796][ T3446] hsr_slave_0: left promiscuous mode [ 56.768190][ T4396] FAULT_INJECTION: forcing a failure. [ 56.768190][ T4396] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.781464][ T4396] CPU: 0 UID: 0 PID: 4396 Comm: syz.2.308 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.781579][ T4396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.781596][ T4396] Call Trace: [ 56.781605][ T4396] [ 56.781616][ T4396] __dump_stack+0x1d/0x30 [ 56.781668][ T4396] dump_stack_lvl+0x95/0xd0 [ 56.781697][ T4396] dump_stack+0x15/0x1b [ 56.781724][ T4396] should_fail_ex+0x263/0x280 [ 56.781767][ T4396] should_fail+0xb/0x20 [ 56.781878][ T4396] should_fail_usercopy+0x1a/0x20 [ 56.781922][ T4396] _copy_from_user+0x1c/0xb0 [ 56.781981][ T4396] ___sys_sendmsg+0xc1/0x1e0 [ 56.782024][ T4396] __x64_sys_sendmsg+0xd4/0x160 [ 56.782056][ T4396] x64_sys_call+0x17ba/0x3000 [ 56.782090][ T4396] do_syscall_64+0xc0/0x2a0 [ 56.782182][ T4396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.782286][ T4396] RIP: 0033:0x7fc22367aeb9 [ 56.782308][ T4396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.782333][ T4396] RSP: 002b:00007fc2220d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.782359][ T4396] RAX: ffffffffffffffda RBX: 00007fc2238f5fa0 RCX: 00007fc22367aeb9 [ 56.782410][ T4396] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 56.782426][ T4396] RBP: 00007fc2220d7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.782511][ T4396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.782528][ T4396] R13: 00007fc2238f6038 R14: 00007fc2238f5fa0 R15: 00007ffc929f1458 [ 56.782554][ T4396] [ 56.789348][ T4398] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 56.952461][ T3446] hsr_slave_1: left promiscuous mode [ 56.958241][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.965651][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.974381][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.981888][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.994960][ T3446] veth1_macvtap: left promiscuous mode [ 57.000770][ T3446] veth0_macvtap: left promiscuous mode [ 57.006400][ T3446] veth1_vlan: left promiscuous mode [ 57.011782][ T3446] veth0_vlan: left promiscuous mode [ 57.093775][ T3446] team_slave_1 (unregistering): left promiscuous mode [ 57.106839][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 57.117429][ T3446] team_slave_0 (unregistering): left promiscuous mode [ 57.126138][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 57.302487][ T4410] macvlan3: entered promiscuous mode [ 57.308026][ T4410] macvlan3: entered allmulticast mode [ 57.352859][ T4421] set_capacity_and_notify: 3 callbacks suppressed [ 57.352891][ T4421] loop2: detected capacity change from 0 to 1024 [ 57.368644][ T4421] EXT4-fs: Ignoring removed nobh option [ 57.383712][ T4421] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.404132][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 57.416340][ T4421] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.315: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 57.437398][ T4421] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.315: couldn't read orphan inode 11 (err -117) [ 57.500564][ T4421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.577949][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.597136][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.604270][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.612215][ T4319] bridge_slave_0: entered allmulticast mode [ 57.618851][ T4319] bridge_slave_0: entered promiscuous mode [ 57.628808][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.635960][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.643395][ T4319] bridge_slave_1: entered allmulticast mode [ 57.650303][ T4319] bridge_slave_1: entered promiscuous mode [ 57.668991][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.679576][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.721458][ T4319] team0: Port device team_slave_0 added [ 57.746987][ T4319] team0: Port device team_slave_1 added [ 57.789330][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.796513][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.822518][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.882266][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.889343][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.915364][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.027081][ T4479] loop2: detected capacity change from 0 to 128 [ 58.073704][ T4319] hsr_slave_0: entered promiscuous mode [ 58.096606][ T4319] hsr_slave_1: entered promiscuous mode [ 58.117128][ T4486] syz.2.328: attempt to access beyond end of device [ 58.117128][ T4486] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 58.126313][ T4319] debugfs: 'hsr0' already exists in 'hsr' [ 58.136439][ T4319] Cannot create hsr debugfs directory [ 58.165708][ T4486] syz.2.328: attempt to access beyond end of device [ 58.165708][ T4486] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 58.199759][ T4486] syz.2.328: attempt to access beyond end of device [ 58.199759][ T4486] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 58.211918][ T36] net_ratelimit: 3 callbacks suppressed [ 58.211969][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.231839][ T4488] syzkaller1: entered promiscuous mode [ 58.237455][ T4488] syzkaller1: entered allmulticast mode [ 58.242013][ T4486] syz.2.328: attempt to access beyond end of device [ 58.242013][ T4486] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 58.263442][ T4479] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 58.290464][ T4479] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 58.380364][ T4502] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 58.445293][ T4501] __nla_validate_parse: 13 callbacks suppressed [ 58.445346][ T4501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.333'. [ 58.466930][ T4512] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 58.482243][ T4512] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 58.499099][ T4514] netlink: 92 bytes leftover after parsing attributes in process `syz.2.333'. [ 58.645226][ T4525] bond1: (slave gretap1): making interface the new active one [ 58.653526][ T4525] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 58.678969][ T4512] macvlan3: entered promiscuous mode [ 58.684337][ T4512] macvlan3: entered allmulticast mode [ 58.703493][ T4536] vhci_hcd vhci_hcd.0: invalid port number 65 [ 58.709900][ T4536] vhci_hcd vhci_hcd.0: invalid port number 65 [ 58.716793][ T4319] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.748139][ T4319] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.791956][ T4319] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.805073][ T4319] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.901829][ T4553] netlink: 'syz.1.343': attribute type 21 has an invalid length. [ 58.909791][ T4553] netlink: 128 bytes leftover after parsing attributes in process `syz.1.343'. [ 58.927178][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.940017][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.957927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.965151][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.987177][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.994387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.102402][ T4560] xt_TCPMSS: Only works on TCP SYN packets [ 59.122529][ T4563] xt_TCPMSS: Only works on TCP SYN packets [ 59.159686][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.248932][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.438272][ T4583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.445550][ T4583] IPv6: NLM_F_CREATE should be set when creating new route [ 59.454665][ T4586] netlink: 332 bytes leftover after parsing attributes in process `syz.2.350'. [ 59.482191][ T4319] veth0_vlan: entered promiscuous mode [ 59.501179][ T4319] veth1_vlan: entered promiscuous mode [ 59.536647][ T4319] veth0_macvtap: entered promiscuous mode [ 59.563039][ T4319] veth1_macvtap: entered promiscuous mode [ 59.616561][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.624466][ T4601] syzkaller1: entered promiscuous mode [ 59.630216][ T4601] syzkaller1: entered allmulticast mode [ 59.646153][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.660314][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.685027][ T4609] veth1_to_bond: entered allmulticast mode [ 59.693017][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.701896][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.711633][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.725033][ T4608] veth1_to_bond: left allmulticast mode [ 59.730960][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.810019][ T4615] sctp: [Deprecated]: syz.0.359 (pid 4615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.810019][ T4615] Use struct sctp_sack_info instead [ 59.863878][ T4615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.884271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.894464][ T4615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.917117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.939395][ T4614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.007498][ T4634] netlink: 332 bytes leftover after parsing attributes in process `syz.0.366'. [ 60.066164][ T4639] syzkaller1: entered promiscuous mode [ 60.071725][ T4639] syzkaller1: entered allmulticast mode [ 60.107631][ T4641] loop5: detected capacity change from 0 to 2048 [ 60.128563][ T4644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.137013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.164731][ T4641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.181472][ T4649] loop4: detected capacity change from 0 to 1024 [ 60.197383][ T4649] EXT4-fs: Ignoring removed nobh option [ 60.204196][ T4649] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.218587][ T4641] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.229108][ T4649] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.372: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 60.257965][ T4649] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.372: couldn't read orphan inode 11 (err -117) [ 60.280778][ T4649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.351494][ T4649] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.372: Invalid block bitmap block 0 in block_group 0 [ 60.410040][ T4649] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.372: Failed to acquire dquot type 0 [ 60.437819][ T4661] loop0: detected capacity change from 0 to 1024 [ 60.470591][ T4667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'. [ 60.573014][ T4676] netlink: 56 bytes leftover after parsing attributes in process `syz.0.380'. [ 60.679167][ T4689] syzkaller1: entered promiscuous mode [ 60.679850][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.684709][ T4689] syzkaller1: entered allmulticast mode [ 60.726218][ T4654] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.369: bg 0: block 345: padding at end of block bitmap is not set [ 60.756869][ T4654] EXT4-fs (loop5): Remounting filesystem read-only [ 60.768525][ T31] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 60.858908][ T4705] netlink: 256 bytes leftover after parsing attributes in process `syz.0.388'. [ 60.868053][ T4705] netlink: 'syz.0.388': attribute type 9 has an invalid length. [ 60.915769][ T4319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.963940][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 60.963963][ T29] audit: type=1326 audit(1770077101.962:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.010677][ T29] audit: type=1326 audit(1770077101.962:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.034337][ T29] audit: type=1326 audit(1770077101.962:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.057740][ T29] audit: type=1326 audit(1770077101.962:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.081233][ T29] audit: type=1326 audit(1770077101.962:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.104732][ T29] audit: type=1326 audit(1770077102.002:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.128183][ T29] audit: type=1326 audit(1770077102.002:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.151773][ T29] audit: type=1326 audit(1770077102.002:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.175829][ T29] audit: type=1326 audit(1770077102.002:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.199328][ T29] audit: type=1326 audit(1770077102.002:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.5.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f821d24aeb9 code=0x7ffc0000 [ 61.227541][ T4712] loop5: detected capacity change from 0 to 512 [ 61.371267][ T4720] loop5: detected capacity change from 0 to 512 [ 61.394086][ T4720] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.403081][ T4720] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.450590][ T4720] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.395: Allocating blocks 41-42 which overlap fs metadata [ 61.464834][ T4724] loop4: detected capacity change from 0 to 512 [ 61.478777][ T4720] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.395: Allocating blocks 41-42 which overlap fs metadata [ 61.492956][ T4720] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.395: Failed to acquire dquot type 1 [ 61.506040][ T4720] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 61.524382][ T4724] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.536153][ T4720] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.395: corrupted inode contents [ 61.548634][ T4720] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.395: mark_inode_dirty error [ 61.563762][ T4720] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.395: corrupted inode contents [ 61.576720][ T4720] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.395: mark_inode_dirty error [ 61.589334][ T4720] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.395: corrupted inode contents [ 61.613977][ T4720] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 61.633799][ T4720] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.395: corrupted inode contents [ 61.662827][ T4720] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.395: mark_inode_dirty error [ 61.690724][ T4720] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 61.700263][ T4720] EXT4-fs (loop5): 1 truncate cleaned up [ 61.809045][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 61.818106][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 61.954205][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 62.026148][ T4767] tmpfs: Bad value for 'mpol' [ 62.035737][ T4766] loop1: detected capacity change from 0 to 1024 [ 62.043183][ T4766] EXT4-fs: Ignoring removed nobh option [ 62.055813][ T4766] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.073010][ T4766] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.408: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 62.100046][ T4766] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.408: couldn't read orphan inode 11 (err -117) [ 62.117779][ T4766] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.408: Invalid block bitmap block 0 in block_group 0 [ 62.159956][ T4766] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.408: Failed to acquire dquot type 0 [ 62.309231][ T4780] loop0: detected capacity change from 0 to 128 [ 62.322025][ T4780] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.360521][ T4780] pim6reg9: entered allmulticast mode [ 62.400823][ T4786] loop2: detected capacity change from 0 to 1024 [ 62.449668][ T4786] EXT4-fs: Ignoring removed nobh option [ 62.458998][ T4786] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.470452][ T4716] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.393: bg 0: block 145: padding at end of block bitmap is not set [ 62.491766][ T4786] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.415: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 62.518509][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.526368][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.533825][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.541328][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.548879][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.556351][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.563779][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.571243][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.578709][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.586163][ T36] hid-generic 0046:0009:0005.0001: unknown main item tag 0x0 [ 62.603473][ T4786] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.415: couldn't read orphan inode 11 (err -117) [ 62.617477][ T36] hid-generic 0046:0009:0005.0001: hidraw0: HID v0.01 Device [syz1] on syz0 [ 62.743757][ T4799] fido_id[4799]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.771251][ T4803] loop5: detected capacity change from 0 to 1024 [ 62.778251][ T4805] syzkaller1: entered promiscuous mode [ 62.783782][ T4805] syzkaller1: entered allmulticast mode [ 62.819605][ T4803] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.958260][ T4319] ================================================================== [ 62.966418][ T4319] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 62.974016][ T4319] [ 62.976462][ T4319] read-write to 0xffff888237c26468 of 1 bytes by task 4814 on cpu 0: [ 62.984565][ T4319] folio_add_lru+0xa4/0x1e0 [ 62.989114][ T4319] shmem_get_folio_gfp+0x7b0/0xd60 [ 62.994270][ T4319] shmem_fault+0xf6/0x250 [ 62.998732][ T4319] __do_fault+0xbc/0x200 [ 63.003024][ T4319] handle_mm_fault+0x11d7/0x3030 [ 63.008015][ T4319] __get_user_pages+0x1023/0x1ea0 [ 63.013091][ T4319] __mm_populate+0x242/0x390 [ 63.017720][ T4319] vm_mmap_pgoff+0x23b/0x2d0 [ 63.022358][ T4319] ksys_mmap_pgoff+0xc1/0x310 [ 63.027177][ T4319] x64_sys_call+0x16bb/0x3000 [ 63.031941][ T4319] do_syscall_64+0xc0/0x2a0 [ 63.036493][ T4319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.042433][ T4319] [ 63.044795][ T4319] read to 0xffff888237c26468 of 1 bytes by task 4319 on cpu 1: [ 63.052373][ T4319] __lru_add_drain_all+0x17e/0x450 [ 63.054442][ T4819] program syz.1.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.057535][ T4319] lru_add_drain_all+0x10/0x20 [ 63.057572][ T4319] invalidate_bdev+0x47/0x70 [ 63.057607][ T4319] ext4_put_super+0x624/0x7d0 [ 63.057634][ T4319] generic_shutdown_super+0xe6/0x210 [ 63.086316][ T4319] kill_block_super+0x2a/0x70 [ 63.091046][ T4319] ext4_kill_sb+0x42/0x80 [ 63.095518][ T4319] deactivate_locked_super+0x75/0x1c0 [ 63.100941][ T4319] deactivate_super+0x97/0xa0 [ 63.105672][ T4319] cleanup_mnt+0x2bb/0x330 [ 63.110243][ T4319] __cleanup_mnt+0x19/0x20 [ 63.114712][ T4319] task_work_run+0x130/0x1a0 [ 63.119343][ T4319] exit_to_user_mode_loop+0x1f7/0x6f0 [ 63.124759][ T4319] do_syscall_64+0x1d3/0x2a0 [ 63.129535][ T4319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.135472][ T4319] [ 63.137832][ T4319] value changed: 0x17 -> 0x18 [ 63.142529][ T4319] [ 63.144878][ T4319] Reported by Kernel Concurrency Sanitizer on: [ 63.151073][ T4319] CPU: 1 UID: 0 PID: 4319 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.160992][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.171084][ T4319] ================================================================== [ 63.409002][ T3395] net_ratelimit: 6 callbacks suppressed [ 63.409021][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.806374][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.816009][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.448949][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.489897][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.529172][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.846052][ T2965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.568594][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.646992][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.619322][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.649498][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.886292][ T3417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.689026][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.486317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.495646][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.731142][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.766860][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.775041][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog