last executing test programs: 7m33.836761149s ago: executing program 3 (id=4): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18450, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1217, 0x10000, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c001280090001"], 0x7c}}, 0x4040004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000030101030000000000000000020000020c00198008000100090400003c0001"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) syz_clone(0x1200000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0x19001411, 0x0, 0x0, 0x0, 0x0, 0x0) 7m33.528848977s ago: executing program 3 (id=7): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0xff84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 7m31.708547959s ago: executing program 3 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) mq_open(&(0x7f00000001c0)='\x00', 0x1, 0xc, &(0x7f0000000200)={0x80000001, 0xe000000000000000, 0x5, 0x3}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x1e, 0x0, @val=@perf_event={0x400}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r6, &(0x7f0000000400), 0x20000000}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000380)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000080)={r9, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_deladdr={0x5c, 0x15, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x80, 0x20, 0xff, r9}, [@IFA_RT_PRIORITY={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0xb, 0x5453, 0xd605, 0x8}}, @IFA_LABEL={0x14, 0x3, 'syzkaller0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x2, 0x4, 0x5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000010) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4ea0, @remote}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000003c809001b0000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) 7m28.342283639s ago: executing program 3 (id=22): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xbdd8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300ea000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "54ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000001240)=@newtaction={0x2914, 0x30, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{0x14c, 0x1, [@m_csum={0x148, 0x1d, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x7, 0x2, 0x6, 0x4}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0xffffffffffffffff, 0x2, 0x7fff}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2000, 0x1, 0x0, 0x10000, 0x7}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x0, 0x9, 0x2}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7ff, 0x8, 0x77, 0x2}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x6, 0x8, 0x1, 0x7}, 0x45}}]}, {0x72, 0x6, "e2eae52530e75c84e3e904d1b6e564a339008955aeb7c087615fa4dba8653687cc440c86af34186b21438359bdb87a9479283c9b02bf50d7332c0985d76d238b7e599e642fd19a18b75e0d60f24fd8f606c8698d352cb46ccce62ec7c6d40dde4b655d7ff375304daef6265a703b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x27b4, 0x1, [@m_skbmod={0xec, 0xa, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc21}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa6, 0x8001, 0x10000000, 0xc, 0x6}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x0, 0x0, 0x30000000, 0x2}, 0xd}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x4b, 0x6, "edc5900d53905b3f69cd54cbe60744d1e81e697e165946405254e1c6408a72ed718c80eca7fdfc8b7d869ed49c5540d3b70b148b5bf4d80b52136106300c9614f626f8d3bc715d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xa4, 0x5, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x401}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0x4d, 0x6, "a7dcff8b018f7d6b1fba1369576dc95c611e44e970fbce8bb76b530cb3a9d536fdc7c22350272b2766b73dfa2545bab269b91a239088758575a2976e4bf02c82cd19fd270db1c63b01"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0xb0, 0x1b, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_PARMS={0x18, 0x1, {0x54, 0x401, 0xffffffffffffffff, 0xffffffad, 0x38}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}]}, {0x3c, 0x6, "4fd362b65a6aed65148163fa532b40cfdac02653a231333116302f79b9ae01cee27fd93df27290363709e8f2dbd84c84cb0ceab0d07c4e3f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_pedit={0xf58, 0x19, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x8, 0xfffff759, 0x4, 0x81, 0x100}, 0x1, 0xbb, [{0xf, 0xd, 0x35ac, 0x2, 0x6, 0x6}, {0x4, 0x7, 0x6, 0x250476d1, 0x3497, 0x2}, {0xcb, 0x4, 0x7, 0x7, 0x101, 0x6}]}, [{0x5, 0x7, 0xffffffff, 0x7fffffff, 0x6, 0x3}, {0x0, 0xfffffff8, 0x1, 0x7f, 0x80000000, 0xd479}, {0xffff57fa, 0x0, 0x7, 0x0, 0xd9e, 0x4}, {0x8, 0x6, 0x0, 0x8, 0x82c6}, {0x0, 0x3, 0x9, 0x2, 0x5, 0x2}, {0xfff, 0x4, 0x8, 0x5, 0x10000, 0x7f}, {0x5f3a, 0x2712e64d, 0x8001, 0x9, 0xffffffff, 0x7}, {0x5, 0x9, 0x5, 0x1, 0x2}, {0x10001, 0x401, 0x1, 0x7b, 0x1, 0xfffffffc}, {0x6, 0x8, 0xfa06, 0x3, 0x3, 0x8}, {0x8000, 0x6, 0x7fc, 0xfff, 0x2, 0xc4}, {0x1f800, 0x10, 0x200, 0xfff, 0x7, 0xfffffffd}, {0xffffffff, 0x0, 0x401, 0x4, 0x3, 0xfffffbff}, {0x8, 0x9, 0x3, 0xf7, 0x4, 0x401}, {0xa, 0x4, 0x1, 0x9, 0x5, 0x400}, {0x3, 0x5, 0x28a, 0x80, 0xba2, 0x9}, {0x5, 0x4, 0x9, 0xfffffffd, 0x5, 0x1}, {0xffffff01, 0x8, 0x9, 0xe, 0x4, 0x1000}, {0x5, 0x400, 0x8, 0x0, 0x0, 0x100}, {0x293, 0x80000001, 0x20e3, 0x1, 0x1, 0x6}, {0x2, 0x8, 0x0, 0x7, 0x1, 0x800}, {0x5, 0x8, 0x2, 0x3, 0x6, 0x8001}, {0x9, 0x2, 0x8, 0x8, 0xd5a9, 0x6}, {0xd, 0xd, 0x7, 0x7ff, 0x6, 0x7}, {0x3, 0x5, 0x7e0, 0x1, 0x1, 0x7}, {0x81, 0x3, 0x80, 0xa, 0x8000, 0x15}, {0x7, 0x9, 0x55d, 0xf5, 0x800, 0x1}, {0x4, 0xfff, 0x7, 0x80, 0x5e, 0x3ff}, {0x3, 0x3f1, 0x8, 0x4, 0x3504, 0x3ff}, {0x9, 0x0, 0x772f, 0x2000, 0x4, 0x7}, {0x81, 0x3, 0x2, 0x4, 0x7d608e06, 0x8000}, {0xffffffff, 0x6, 0xa, 0x2, 0x828, 0x7}, {0x4, 0x3, 0x9, 0x8, 0x5, 0x8}, {0xa8, 0x5, 0xb388, 0xd15, 0x2c, 0x8001}, {0x1000, 0xe40, 0x6, 0x6, 0x101, 0x3ff}, {0x4, 0x2e4, 0x0, 0x1, 0x0, 0x6}, {0x2, 0x0, 0xfffff184, 0xf2b, 0x7, 0x7}, {0xa4, 0xffff, 0x10000, 0x6, 0x3, 0x9}, {0x1ff, 0xff, 0x1, 0x9, 0x9, 0x2}, {0x0, 0x10, 0xfffffffe, 0x81, 0x4, 0x2}, {0x27, 0x5, 0x6, 0x8, 0xd, 0xfffffffa}, {0x5, 0x8, 0x81, 0x8, 0x0, 0x1}, {0x800, 0x3, 0x4, 0xe, 0x2, 0x7}, {0xfffffffc, 0xff, 0xffffffff, 0x40, 0x7, 0x10000}, {0x10, 0x2, 0x0, 0x6e86135, 0x4, 0xfffffff7}, {0x6, 0x200, 0x3, 0x3, 0x7f, 0x81}, {0x3, 0xe, 0x4, 0x800, 0x9, 0x40000}, {0x18ca7063, 0x4, 0x2, 0xffff, 0x7, 0x2d}, {0x4, 0x926, 0x80, 0x200, 0x9, 0x8000}, {0x4, 0x0, 0x1, 0x7, 0x7, 0x9c7}, {0x9, 0x1, 0x6, 0x3, 0x3000000, 0x8}, {0x3, 0x45b5, 0x5, 0xc9, 0x7fff, 0x1}, {0x0, 0x1, 0xc000, 0x1, 0x4, 0x2}, {0x3, 0x3, 0x0, 0xbc, 0x0, 0x99}, {0x6, 0xfffffff1, 0x4, 0x9, 0x800, 0x8b1e}, {0x80000001, 0x9, 0x40, 0xd5, 0x8, 0xc}, {0xa420, 0xb, 0x5, 0xaf, 0x200, 0x4}, {0x2, 0x1ff, 0xac5a, 0x94, 0x2, 0xffffffc0}, {0x7, 0x4, 0x80000000, 0x4, 0x1000, 0x2}, {0xfffffff3, 0x80000000, 0x7fff, 0x200, 0x0, 0x7}, {0xffffff57, 0xfffffff8, 0x7fff, 0x8, 0xef, 0x6}, {0x7, 0x18, 0x27, 0x8, 0x3, 0x41}, {0x4000000, 0x6, 0x1000, 0xfffffffc, 0x7ff, 0x40}, {0x0, 0x7, 0x7, 0x0, 0x5, 0x6}, {0x44d, 0x8, 0x0, 0x5, 0x4, 0x3ff}, {0xfffff87a, 0x6, 0x4c, 0x90, 0xe850, 0x10000}, {0x8, 0x5, 0x7ff, 0xd, 0xe, 0x200}, {0xf91d, 0x4a, 0x803c, 0x6, 0x8, 0xfff}, {0x32ff, 0xb, 0x0, 0x8001, 0x9}, {0x1, 0x3e4, 0x1251, 0x4f, 0x7, 0x3}, {0xdb45, 0x4, 0x24, 0x9, 0x2}, {0x7, 0x10, 0x7, 0x9, 0x3d10, 0x6}, {0xfffffff9, 0xffe00000, 0x7, 0x2, 0x14, 0x37c}, {0x9, 0xbc, 0x4a, 0x2, 0xffffffed, 0x7fffffff}, {0x0, 0x8001, 0x3, 0x1, 0x4, 0x5}, {0x2, 0x3ff, 0x2, 0x1, 0x40000000, 0x6}, {0xfffffff9, 0x6, 0x7fffffff, 0x4, 0x5, 0x1}, {0x1, 0x8e9, 0x80000000, 0x3, 0x1, 0x3}, {0xf84, 0xe, 0x3, 0x4, 0x5, 0xfffffffb}, {0xfffffffd, 0x7fff, 0x80000000, 0xb3d, 0x10001, 0x98}, {0x9, 0x3, 0x5, 0x8bae, 0x6, 0x1}, {0xbf, 0x0, 0x80000001, 0x5, 0x2, 0x8}, {0x3, 0x12c7, 0x4, 0x1, 0x7fff, 0x1}, {0x400, 0x23, 0x3, 0x5, 0x81, 0x4}, {0x0, 0x5, 0x7, 0x2, 0x80000000, 0x104}, {0x8, 0xd, 0xfffff000, 0x8000, 0x8, 0x6}, {0x2, 0x24e, 0x378, 0x5, 0x8, 0x252f}, {0x3, 0xff, 0xda0, 0x4, 0x80, 0x3}, {0x6, 0x8, 0x4, 0x4, 0xfffffff7, 0xfffffffd}, {0x1, 0x0, 0x9, 0x2, 0x7, 0x2}, {0xfffffffe, 0xfffff54c, 0x1, 0x4, 0x0, 0x7f}, {0xd89, 0x4, 0x5, 0x5, 0x0, 0xee80}, {0xb, 0x3eb0, 0x2, 0x1ff, 0xa9, 0x3}, {0x8, 0xffffffff, 0x80000000, 0x2, 0xf54, 0x100}, {0x6, 0xffff7744, 0xfffffffd, 0x8, 0x0, 0x400}, {0x21, 0x52, 0xc8, 0xddfb, 0x5}, {0x3, 0x0, 0x6, 0x699, 0x5, 0x1800}, {0x9, 0x7ff, 0xe57, 0x7fff, 0xcd1f, 0x9}, {0x3, 0x3, 0x840a, 0x4, 0x7, 0x182}, {0x3, 0x6a, 0xffffff00, 0x9, 0x2, 0x2}, {0x453, 0x9, 0x6, 0x5, 0x1}, {0x4, 0x40, 0x7, 0x6, 0x827, 0x7}, {0xbaaa, 0x8, 0xc5cc, 0x7ff, 0x0, 0x4}, {0x7, 0x7, 0x3, 0x7, 0x7c, 0xf0}, {0x9, 0x80000000, 0xaa7, 0x0, 0x1, 0x9}, {0x0, 0x5, 0x1, 0x8, 0x8, 0x9}, {0xfffffff7, 0x3d2, 0xffff2d08, 0x80, 0x40, 0xb}, {0x4f, 0x5, 0x6, 0x1000, 0x7, 0x4}, {0xffffffff, 0x6080, 0x0, 0x1, 0xffffff7e, 0x697}, {0x1, 0x10001, 0x0, 0x7ff, 0x100, 0x6}, {0x8, 0x3ff, 0x7, 0x2, 0x7, 0x7}, {0x400, 0x10001, 0x6, 0x7fff, 0x7, 0x7}, {0x7, 0x6, 0x4, 0x8, 0x8, 0x7}, {0xc9, 0x9, 0x3, 0xe, 0x0, 0x4}, {0x0, 0xd, 0x5, 0x4, 0x7fffffff, 0x8}, {0x4, 0x10001, 0x1, 0x0, 0x7, 0xd788}, {0x1, 0x80000000, 0x81, 0x100, 0x5, 0x8c}, {0x492, 0xc11, 0x4, 0x1ff, 0xffff, 0x1000}, {0x400, 0x2, 0x100, 0xffffffff, 0x3e5, 0x81}, {0x1, 0x80000001, 0x8, 0x3, 0x9, 0x4}, {0xbc, 0x100, 0x5, 0x1, 0x7, 0x8}, {0x54, 0x4, 0x1, 0x3ff, 0x3, 0x2}, {0x80000001, 0x5, 0x100, 0x3, 0x2, 0x3}, {0x81, 0x4, 0x3, 0x1, 0x6, 0xcf6}, {0x2, 0x101, 0x8, 0x9, 0xfffffffd, 0x10}, {0xff80000, 0x5, 0x3, 0xe71, 0x65b, 0x85}, {0x1, 0xf89, 0x2, 0x8, 0x5, 0x6}, {0x0, 0x4, 0x7, 0x5, 0x7, 0x8}], [{0x2}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0xe632d7afe54945bc, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0xd}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0xf15c2e4fbeb553ae, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0xa, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x68ec6da765bbcdcb}, {0x1}, {0x2, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x1}, {0x5}, {0x1}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {0x5}, {0x2, 0x1}, {0x7}, {0x1}, {0x5}, {0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x9c8f89feee8da217}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}]}}]}, {0xc4, 0x6, "2ff3eb1032eda283d4ab317d0ecbaacd8dc90495cfd88ae1e07ec346c85c6e0abfbb7d84114681e58572e98c2df1fc2a553ad847b72017167bd4ee03ae9a7134ef4430dcc96b64505f7d33828e7522aec6a2ba47bdd5d3d357755ca5ad3087f28f0abfaa9bd5ee302950cbd5530cac4d3999deb889635ad71ae2801072718c65401b128aa69159ed184dae38976b49d0b809e0cb1e4a7165bfb99fa217da47a787d4e3e36abe84456de96e0af9ed1f451136d21715559270ffb1def48d5b9f7c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x1618, 0x19, 0x0, 0x0, {{0xb}, {0x15b4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xe8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x6, 0x7, 0xffff, 0xbbf0, 0x7f, 0xf, 0x7, 0xc, 0x9, 0xffff, 0xc, 0x100, 0x8000, 0x455, 0x9, 0x6, 0x1, 0x400, 0x6, 0x7ff, 0x5, 0x6, 0x1ff, 0x2, 0x1ff, 0x3, 0x7, 0xfffff0b7, 0x8, 0x5d6, 0x8, 0xf, 0x401, 0x1, 0x80000001, 0x4, 0x8001, 0x5, 0x3, 0x5, 0x40, 0x0, 0x6, 0xfff, 0x7, 0xb6d, 0x3, 0xdd, 0xfffffffe, 0x5, 0x0, 0xe, 0x7, 0x76d7, 0x8, 0x7, 0x2, 0x80000001, 0x4, 0x6, 0x98b3, 0x40, 0x1, 0x800, 0x92, 0x6, 0x5, 0xfffff73f, 0x1ff0, 0x549c, 0xffffffff, 0x7fffffff, 0xfffffffc, 0x7, 0x7, 0x5, 0x6, 0x5, 0xb, 0x6, 0x9, 0x6, 0x8, 0x5, 0x40, 0x1, 0x7c, 0x3, 0x8, 0x9, 0x100020, 0x1ff, 0x6, 0x17b, 0x4, 0x6, 0x1fe4, 0x6, 0x873, 0x0, 0x8, 0x8, 0x9a, 0xffffffff, 0x3, 0x3, 0x0, 0x7, 0x10001, 0x100, 0x3, 0x8, 0xdb2, 0xffffffff, 0xfb, 0xff, 0xd, 0x9, 0xfffffffb, 0x4, 0x7ff, 0x2c7, 0x168f, 0x6, 0xe7, 0x6, 0xd21, 0x1ff, 0x5, 0x7, 0xb, 0x5, 0xff, 0x9, 0x401, 0x8, 0x4, 0x7, 0xc872, 0x6cb, 0x1, 0xffff0001, 0x9, 0x0, 0x9, 0x3, 0x1, 0x10001, 0x8, 0x7fff, 0x7, 0xf8, 0x1, 0x1, 0x2, 0xaa, 0x4, 0x8, 0x7, 0x7, 0x1, 0x225, 0x7, 0x3ff, 0x1ff, 0x20000000, 0x7, 0xf, 0x80000001, 0xb, 0x81, 0x2, 0x2, 0x3, 0x10001, 0x8, 0x40, 0x8, 0x2, 0x40, 0x3, 0x4, 0x6, 0x83da, 0x9, 0x8, 0x0, 0x7fff, 0x4f05, 0x40, 0x1, 0x9, 0x40008000, 0x80000001, 0xfffffff8, 0x0, 0xe, 0xfffffff2, 0x6e281031, 0xa803, 0x1, 0x4, 0xe, 0xb5b4, 0x2, 0xfffffff7, 0x1ff, 0x1000, 0x3ff, 0x9, 0x2, 0x3, 0x101, 0x8, 0x5, 0xfffffffc, 0x9, 0xfff, 0x2c, 0x1, 0x0, 0x9, 0x7f, 0x6, 0x3, 0x1, 0xe, 0x3, 0x3, 0x7, 0xffff25ea, 0x60000, 0x7, 0x1, 0x9, 0x3, 0x800, 0xf6, 0x7, 0x5, 0x7f, 0xffff, 0xfffffffc, 0xe7b, 0x6, 0x0, 0x5, 0x5, 0x8, 0x818, 0xffc, 0x6, 0x5, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x80, 0x69, 0x1000, {0x4, 0x3, 0x400, 0x2, 0xe, 0x9}, {0x4, 0x2, 0x1, 0x8, 0x6, 0x3ff}, 0x4, 0x0, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x401, 0xfff, 0x2, 0x10, 0x4, 0x2, 0xff, 0x7fff, 0x4, 0x9, 0x2, 0x6, 0x4, 0x7ff, 0x7fff, 0x6, 0x10, 0x1ff, 0x627f6b93, 0x4, 0x8, 0x5, 0x7, 0x6, 0xfffffffd, 0x7, 0x5, 0x82c1, 0x9, 0x9e8, 0x2, 0x8000, 0x9, 0x1, 0x9, 0x1f, 0x80000000, 0x1ff, 0x10, 0x6, 0x4, 0xb, 0x5, 0x621, 0x4, 0xffffffff, 0xc, 0xf, 0xffffffdc, 0x0, 0x1, 0x60, 0x2, 0x7fffffff, 0x1, 0x8, 0x4, 0xd, 0xeeca, 0xc, 0x76, 0x9, 0x7, 0x100, 0x4, 0x6, 0x3, 0x6, 0x8001, 0xff, 0xc, 0x7ff, 0x9, 0x4, 0x101, 0x8, 0x10001, 0xb12e, 0x6, 0xfffffff7, 0x9, 0x8, 0x5, 0x8, 0x8, 0x8, 0x400, 0x3, 0xc710, 0x8, 0x5, 0x0, 0x5, 0x6e3a, 0xc60, 0x7, 0x5, 0x7, 0x4, 0x1ff, 0x3, 0x0, 0x9, 0x8000, 0x5, 0xfffffff9, 0xad7c, 0xfffffffc, 0x4, 0x7, 0x3f5d, 0x7, 0xff, 0x1, 0x4, 0x5, 0x5, 0x5, 0x3ff, 0x101, 0x3, 0x2, 0x5, 0x0, 0x5, 0x3, 0x80, 0x6, 0xfc9c, 0x0, 0x7, 0x4, 0x7, 0x4, 0x3, 0x8000000, 0x7, 0x9, 0x7ca, 0x400, 0x3, 0x1, 0x6, 0x2, 0x9, 0xc, 0x8, 0x9, 0x1c, 0x5, 0x0, 0x74d3, 0x8, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1, 0x8, 0x8, 0x0, 0x9, 0xc, 0xffff8000, 0x6, 0x6, 0x2, 0x9, 0x80, 0x6a8000, 0x0, 0x7fff, 0x1, 0x81, 0x8eff, 0x3, 0x5, 0x6, 0x86, 0xfffffffc, 0xa0c, 0x3, 0x6, 0xe, 0x1000000, 0x3, 0xff, 0x6108, 0x40, 0x6, 0x9c, 0x2, 0xb3, 0x40, 0x6, 0x0, 0x0, 0x3ff, 0x9, 0x7, 0x4, 0x5, 0x0, 0x3a8e, 0x9, 0x8, 0xf656, 0x0, 0x3, 0x4, 0x0, 0x1, 0x1, 0x1, 0x4, 0x8000, 0x6, 0x0, 0x0, 0x9, 0x9, 0x11, 0xfffffffe, 0x10001, 0x0, 0x10000, 0x0, 0x3, 0x7, 0xff, 0xea36, 0x9, 0x538, 0x6, 0x9c, 0x2, 0xfff, 0x8, 0x8, 0x2, 0x7, 0x0, 0x8, 0x9, 0x6, 0x6, 0x6, 0x96, 0x5, 0xbda8, 0x10000, 0xffff0001, 0xe97, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x70}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x5, 0x3a, 0x9, 0xfffffffa, 0x2, 0x0, 0x3, 0x1, 0x6, 0x39e3, 0x7, 0x1, 0x101, 0xff, 0x2d1, 0x5, 0x1, 0x8, 0x98f, 0x800, 0x3, 0x6, 0xfffffffc, 0x8, 0x4, 0xd3, 0x2, 0x5, 0x7ddf8043, 0xb2e5, 0x1, 0x3, 0x2, 0x6, 0x4, 0x1cf, 0x81, 0x6, 0x8, 0x101, 0x6, 0x1, 0x4, 0xfffff001, 0xc73c, 0x1, 0x1ff, 0x0, 0x6, 0x9, 0x2, 0xff, 0x7, 0xa80, 0x5, 0x2, 0x8001, 0x3, 0x5, 0x10, 0x9, 0x0, 0x1, 0xd, 0x1, 0x4, 0x5, 0x41ef, 0x1, 0x400, 0x7e6a, 0x5, 0xca, 0xd, 0x5, 0xf0, 0x1, 0x8, 0x5, 0x1, 0x80000001, 0xf, 0x6, 0x6, 0x894c, 0x200, 0x524b8a33, 0x3, 0x7, 0x9, 0xd, 0x8, 0xcdb0, 0x1, 0xab9e, 0x1, 0xc3, 0x56ab, 0x1, 0x1, 0x4, 0x2, 0x8, 0x6cbd, 0x9, 0x7, 0x8, 0xfffffffa, 0x2, 0x9, 0x3ff, 0x8, 0x4, 0x1, 0x4a796648, 0x7, 0x0, 0x9, 0x5, 0x39d7, 0x28, 0x7fffffff, 0x4693, 0x7, 0x4, 0x12, 0x8, 0xdd, 0xdd5e, 0xfffff000, 0x8, 0x800, 0x2, 0x3, 0x3, 0x9, 0xff, 0x3, 0x80000001, 0xd00, 0x6, 0x9a, 0x2, 0x4, 0x0, 0x8, 0x3, 0x900, 0x656d, 0xd, 0x5, 0x55, 0xf, 0xc, 0x800, 0xd, 0x1ce4, 0x10, 0x7f, 0x5, 0x6, 0x6, 0x8, 0x0, 0x6, 0x2, 0x80000001, 0x6, 0x2, 0x7, 0x6, 0xa35, 0x7, 0x0, 0x1f60, 0x4, 0xe91, 0x1, 0xfffffffc, 0x5, 0x81, 0x0, 0x9, 0xa, 0x1, 0x7, 0x800, 0x401, 0x4, 0x3, 0x7, 0x3, 0x1bc0, 0xffffffff, 0x7, 0x4, 0x7, 0x3, 0x40, 0x9, 0x1, 0xb6a1, 0x4, 0x1, 0x3, 0x4, 0x4, 0x7, 0x7fff, 0x7, 0x2a1d, 0x4, 0x3, 0x101, 0x80, 0xfffffff8, 0x2e47, 0x10000, 0x7ff, 0x6, 0x52b21125, 0x221, 0x5, 0x9, 0x9, 0x4, 0x1, 0x38000000, 0x1, 0x2, 0x8, 0x6, 0x2, 0xa9e3, 0x40, 0x9, 0x9, 0x6, 0x0, 0x6, 0x6c0e1072, 0x6, 0x8, 0x400, 0x2, 0x4, 0x1, 0xb06, 0xff, 0x800, 0x86, 0xfffffffe, 0xe7f1, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xa, 0x459, 0xfffffffe, 0xaeab, 0x28b, 0x3880, 0x5, 0x3f, 0x829, 0x3ff, 0xfffffffa, 0x40, 0x2, 0xffff, 0x1, 0x9, 0x9, 0x6, 0x2, 0x8, 0x3, 0x7, 0x4e, 0x5, 0x9, 0x4, 0x3, 0x15f7, 0x4, 0xcd, 0xffffffff, 0xa, 0xfffffff2, 0x5, 0xfffffffc, 0x6, 0x3, 0xc, 0xc60a, 0x8001, 0x0, 0x6, 0x0, 0x3, 0x6, 0x5, 0x2, 0xc30a, 0x9, 0x40, 0xffffffff, 0x1ff, 0x6, 0x6, 0x5, 0x5, 0x3, 0x4, 0x3b7, 0xa6, 0x3, 0xff, 0x2, 0x2, 0x1dea8ace, 0x2, 0x401, 0xa, 0x8, 0x6, 0x0, 0x1e03, 0x7, 0x1, 0x200, 0x6, 0x4, 0xc44, 0x5, 0x4, 0x8fa9, 0x7f, 0x3, 0x7, 0x6, 0x0, 0x285f, 0x6, 0x55c07154, 0x4, 0x8, 0xbbe, 0x10000, 0x3, 0x2, 0x8000, 0x52e1, 0x2, 0xe0, 0x0, 0xfffffff7, 0x8001, 0x3, 0x1000, 0x1, 0x8000, 0xb46e, 0x80, 0x9, 0x9, 0x6, 0x80000000, 0x9, 0x6, 0x3, 0x3, 0x1fbb, 0x80, 0xd0e, 0x0, 0x5, 0x9, 0x6, 0x0, 0x7ff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x949d, 0x3, 0x1f, 0x45a5, 0x6, 0x4, 0xd098, 0x1, 0x5, 0x9, 0xa, 0x7fff, 0x3ff, 0x1000, 0x80000001, 0xe, 0x7, 0xd6, 0x7, 0x906, 0x28, 0xcf9db448, 0x2, 0x1, 0x7fff, 0xdb9f, 0x47e5243f, 0x100, 0x5, 0x6d3a, 0x4, 0x0, 0x0, 0xf5, 0xffff, 0xffff, 0xf58d, 0x3, 0x2, 0x2, 0x0, 0x8000, 0xff, 0x0, 0x2, 0xfffffc01, 0x6e3, 0xae8, 0xfff, 0x6, 0x7f, 0x4, 0x401, 0x9, 0x3, 0x4, 0x4, 0x200, 0x7, 0x4, 0xb6e1, 0x7fff, 0xfffffa69, 0x2152, 0x7ff, 0x6, 0xa, 0x5, 0x2, 0x7ff, 0x1, 0x8, 0xfffffffe, 0x5, 0x9, 0x1, 0x69, 0x4, 0x3ed0, 0x0, 0x9, 0x487, 0x1, 0x5, 0x1, 0x7, 0x5, 0x5, 0x7f, 0x9, 0x3, 0x4f, 0xf, 0x7, 0x800, 0xf5ef, 0x6, 0xbb, 0x1, 0x1, 0x7, 0x9, 0x4, 0xc, 0x2, 0x4, 0x7fff, 0x7, 0x2, 0xb, 0x5, 0xfff, 0x6, 0x80000000, 0x8000, 0x6, 0x8, 0x0, 0x101, 0x1ff, 0x0, 0x0, 0xa, 0x54, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x384f, 0x1, 0x3, 0x4397, 0x2, 0x2, 0x1000, 0x7fff, 0x9, 0x6, 0x0, 0xfff, 0x0, 0x3, 0x9, 0x3e, 0x7fffffff, 0x1, 0x3, 0x2, 0x1, 0x4, 0x101, 0x9, 0x1, 0x3, 0x2, 0x10001, 0x90e6, 0x0, 0x49, 0x2, 0x0, 0x6, 0xe, 0x1ff, 0x832f, 0x2, 0xffff, 0xa3af, 0x5, 0x3ff, 0xfffffffc, 0x1, 0x80, 0x7019, 0x800, 0x8, 0x2, 0x9981, 0x2, 0x6, 0x8, 0x8001, 0x7, 0x7fffffff, 0x7f, 0x5, 0x8001, 0x3, 0x7fffffff, 0x8, 0x10, 0x4, 0x0, 0x0, 0xae, 0x3, 0x5, 0x8, 0x200, 0xd418, 0x9, 0x10000, 0x80000001, 0x401, 0x4c5, 0x6, 0xfffffffb, 0xfffffffe, 0x0, 0xfffffff7, 0xfffff7fa, 0x1, 0x8, 0xadd, 0x5, 0x3, 0x5, 0x3782, 0x1c094a9, 0xd6b, 0xfd, 0x1888, 0x6, 0xfffffff8, 0x0, 0x1000, 0x1e3, 0x5, 0x9, 0x7, 0x0, 0x3, 0xa44, 0x8000, 0x9, 0x7a1, 0x3ff, 0xf, 0x4, 0xd9c, 0x7fffffff, 0xb, 0x7, 0x7, 0x0, 0x80000001, 0x80000000, 0x101, 0x800, 0x7, 0xc000, 0xffffffc0, 0x5, 0x8001, 0x1, 0xff, 0x80000000, 0x9a1, 0x2, 0x5, 0x7fa9, 0xffff, 0x200, 0x200, 0x7, 0x4, 0xc6, 0xffffffff, 0x2, 0x3932bae9, 0x4, 0x3, 0x1, 0x1000, 0x3, 0xffffffff, 0x100, 0x51, 0xb5, 0x3, 0xd, 0x96fe, 0x8, 0x1, 0x0, 0x4, 0x1, 0x200, 0x1, 0xfffffffd, 0x0, 0x101, 0x3, 0x4, 0x8, 0x4, 0xffffffff, 0x8, 0x1, 0x4, 0x2, 0x1, 0xe0, 0x4, 0x189, 0x0, 0x36, 0x9, 0x9dba, 0x81, 0x865, 0xf8, 0x8ac3, 0xfcf, 0xc0d1, 0x34, 0x9, 0x8, 0xffff, 0xf4, 0x4, 0x6, 0xa, 0x7, 0xfffffffb, 0x8, 0x0, 0x8, 0xc6c, 0x0, 0xa, 0xfffffffb, 0x3, 0xcd, 0x5, 0x80000001, 0x7f, 0x10, 0x9, 0xfffffffa, 0x401, 0xd, 0xc, 0x318, 0xf, 0x9, 0x1, 0x0, 0x9, 0x26, 0x9, 0x3000000, 0x2, 0x800, 0x0, 0x4, 0x10, 0x3, 0x200, 0x7fff, 0xfffffff9, 0xfff, 0x0, 0x8, 0xc, 0xff, 0xef6, 0x61f, 0x5, 0xd46, 0x6, 0x10001, 0x9dd4, 0xfffffffa, 0x5, 0x7, 0x6, 0x7, 0x7, 0x5, 0x6, 0x91d4, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x10000000, 0x0, 0x5, 0xfffffe00, {0x9, 0x2, 0x5, 0x339, 0x3ff, 0x200}, {0x4, 0x1, 0x20, 0x1, 0x8, 0x7cc6}, 0x7, 0x10001, 0xfffffffe}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_TBF={0x3c, 0x1, {0x94a6, 0x10000000, 0x4, 0x54a4, 0x6, {0xe, 0x0, 0x4, 0x6, 0x9, 0x2}, {0xf3, 0x1, 0x8, 0x3, 0x100}, 0xff, 0xc, 0xcd9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x1, 0xcbb, 0x4, {0x5, 0x2, 0x5, 0x5, 0x7, 0x1}, {0x8, 0x1, 0x8, 0x3, 0x8, 0x4}, 0x2, 0xe0, 0x10}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x54, 0x0, 0x8, 0x81, 0x252, {0x2, 0x1, 0x3, 0x6451, 0x7ff, 0x9}, {0x0, 0x0, 0x9d59, 0x2, 0x7, 0xf}, 0x0, 0x6, 0xf}}]]}, {0x3c, 0x6, "e816daacec3ca9d87d1ce7f51b8dd29698e1aa1b921c1740670182ef8a308318ffbe021ea2f0302da2e2e65d181ba0d65de6114883dfd781"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2914}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x57eb0f7a}, 0x8) 7m28.263814775s ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mq_open(&(0x7f00000001c0)='\x00', 0x1, 0xc, &(0x7f0000000200)={0x80000001, 0xe000000000000000, 0x5, 0x3}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x1e, 0x0, @val=@perf_event={0x400}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r6, &(0x7f0000000400), 0x20000000}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000380)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000080)={r9, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_deladdr={0x5c, 0x15, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x80, 0x20, 0xff, r9}, [@IFA_RT_PRIORITY={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0xb, 0x5453, 0xd605, 0x8}}, @IFA_LABEL={0x14, 0x3, 'syzkaller0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x2, 0x4, 0x5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000010) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4ea0, @remote}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000003c809001b0000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) 7m12.636148386s ago: executing program 32 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mq_open(&(0x7f00000001c0)='\x00', 0x1, 0xc, &(0x7f0000000200)={0x80000001, 0xe000000000000000, 0x5, 0x3}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x1e, 0x0, @val=@perf_event={0x400}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r6, &(0x7f0000000400), 0x20000000}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000380)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000080)={r9, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_deladdr={0x5c, 0x15, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x80, 0x20, 0xff, r9}, [@IFA_RT_PRIORITY={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0xb, 0x5453, 0xd605, 0x8}}, @IFA_LABEL={0x14, 0x3, 'syzkaller0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x2, 0x4, 0x5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000010) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4ea0, @remote}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000003c809001b0000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) 4.870199178s ago: executing program 5 (id=7660): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x13}}]}, 0x30}}, 0x4008024) 4.854274739s ago: executing program 5 (id=7661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_getlink={0x20, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x100, 0x1000}}, 0x12}, 0x1, 0x0, 0x0, 0x845}, 0x4084) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) r5 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x150, 0x1170, 0x1170, 0x150, 0x1170, 0x150, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x4, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'macvlan1\x00', {0xff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xfffffffffffffed2) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a3000000000140000001100"], 0x118}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xb0, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2010000) sendmmsg$inet6(r1, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x48) recvmsg$unix(r4, &(0x7f0000000640)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000100)=""/73, 0x49}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f00000004c0)=""/117, 0x75}], 0x4}, 0x2006) 4.635900699s ago: executing program 5 (id=7664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r6, &(0x7f0000000580)={'#! ', './file0', [{0x20, '['}, {0x20, '^(,'}, {0x20, '#! '}, {0x20, '\xe8%,'}], 0xa, "d229f1829289f06b784ccb33d48cec018c305dbc4ab87f9c5a61d811c86ec75f9139a3ad975e260b09d83c9b0fb506e0bafeb198c41256588d4239b31489c8b473945d98b3b5b901f98f28756a21a806f2f6ac2d1f29ed9aa1ca5eeadd1a694323a95e705f9e925dc8c27de643eb1980b439"}, 0x8b) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.693721692s ago: executing program 5 (id=7679): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) (async) socket$kcm(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) getpid() (rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="08aaaaaaaaaaaaaaaaaaaabb86dd604d05000000000000001dfe800000000000003f893f2d87f577f5208dd543e4bda5a80b12564fb988a5"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) r3 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x54}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socket$netlink(0x10, 0x3, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x40009) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) (async) io_uring_enter(r3, 0x6f58, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10a400, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$kcm(r7, &(0x7f0000001840)={&(0x7f0000000200)=@nfc={0x27, r8, 0x1, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)="541e5d8c0e10a16193ed495c32435e82f397501fcf40d5cf6b840020b84b928b2815da83ee368118e8c1eedb4a329f60b475d372e9c6de3d4ea3a7eca7f32cf4a8f9417a368d4f7ca101f27633f23a207e7667514940924e106d3acc2c52da0d35611a558d6955eae9ab44db9bb8b03edfa7a462b25573b58e52bf56a521b1", 0x7f}, {&(0x7f0000000300)="941768cc2efc71bca922d367a834fa72f2a95ae63d193e9d1db25c5b197289abda09019e4e4f77c2933a9a3d2fc1eb0855e2c71c8bad33eead7b9211605f11961984136c0564c2604615a14d1f53af7deb9bcc6f6dbe75ce8af9d724c43ab6079136d6a9fe52f454af19106db97132", 0x6f}, {&(0x7f0000000380)="978ab7d6116465c403eeef397a38117f93c9e21289e1a7c5925e6f1f26f2a4a59c409d495c0628d3d403fec9", 0x2c}, {&(0x7f00000003c0)="d088fdd6f417f6e93ab811eea15fa41343e6fa702d63d7378b422f4c8e5f6635a32b70894b3a3acc5bd9f4cbfbaaeaafe324fc868969e453765870c94e6ea97b2d305ddfd5ae981116cd38209ab0569130b9da974be53f218da9b7ae678075311bcb22c99a3dc71cf415e582f6143659e014348c44b70298cf67c5bbd09fc21a33d1e5227cdd512d5c1bab8122001caf0f5f6945aee9c611e473223dca6f6cf4da7c79441a726b00aea1f51435bd", 0xae}, {&(0x7f0000000480)="fb054839a1888b0ed6d0c60f7aa3f488399ee3bfd02b2f20504d14b8556be46db5a027fdb409270d3949faca6a522efa25", 0x31}, {&(0x7f00000004c0)="8df5e38fa5c0b6150b730ad25145400076ccc84d4e25113c0d63696aa38acf72008c9053ed49d1c1ee88e8f361d605885e8a4d0430adeed8a9dbe3e58c267c55d9ee1a27f3031f8f87208dc96e1f56753ce77aca8f95731f1a0876bef4c55e1977b34086b9b7f3bce5bec84a6d052c4a59afb8c96160c448b08ada80663bf27f0cd31a6bc0481762dc53e71ae1aa5f173ee4b4c4e742d92af056b08f6d63b12d46aa79ccc2a1e5394606146374", 0xad}], 0x6, &(0x7f0000000600)=[{0x30, 0x119, 0x0, "723d78b5532f592da1ac9d23611c7214cea72fef2ed26d32c1a6cf"}, {0x1010, 0x117, 0x6, "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"}, {0x50, 0x9d, 0x9, "93a19c17ba96febe67555e6c105b77fc0f683b96419ef81a6b6490b10679dba6795059d6339d069d3dac94cd80ac03e0c6a117e5c11d268adb27"}, {0xb0, 0x109, 0xff, "fc8e238ca5933944865dc5b26d960a06bfb8857e892630d27ba61b832509c49176af4165d9530926ef5e23acbc124ed9968dd7afe5194b43c04faafc9917221355d83709182d85fe9734a549b5521f0b9ee8ca77b93778fee84b56c5579a40730dea29b565da66cd7517106f8f51a3a933b735cc66033c1c225004f8bc9ad0778b5db6b33becb0316f58bfae6c21856eecdc811386d0ce5104"}, {0xd8, 0x11, 0x4, "b0eb27ab5943fba540d4f8919fd26aaf7865e8a9b7d06ce4d35884462cf79057d4f84f99a5caedd49e0ff5a818c81d35a8222378e7ce6b9d1c2e75d0eb894f4e894e69715501db854006ca866ad19c9fdd8c8eaea64fa1dc03b6aaf3fde7b852a02274fad2ad8e32d16036bbad97b009fd66210336f96601b46813c0d38d59e45172c631698e515a5dead28495837ecf539400173ec1ae1e818d5b32a5dc44c7c9323d98e038be92913abe1c70e327619858d02dd3b68ba78dbab67c20d63c89c0f71ea1ac7c86"}], 0x1218}, 0x20040001) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r6, &(0x7f0000000080)) 2.870781406s ago: executing program 1 (id=7694): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x1, 0x10, 0x0, 0x3ff, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x647, 0x2, @perf_config_ext={0x9, 0x6}, 0x22, 0xfffffffffffffffd, 0x4, 0x7, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc1080, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYRESDEC], 0x1, 0x28a, &(0x7f0000000980)="$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") ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x8, 0x5}}}, 0x90) socket$rds(0x15, 0x5, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(0xffffffffffffffff, 0x0, 0x0) 2.702194711s ago: executing program 0 (id=7699): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$xdp(0x2c, 0x3, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x15, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0xb, @mcast1, 0x8}, r3}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.80573161s ago: executing program 1 (id=7701): r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000020000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) 1.725913347s ago: executing program 0 (id=7702): r0 = fsopen(&(0x7f00000001c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x2c40, 0xb0, 0x12}, 0x18) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='\xff\xff', &(0x7f0000000200)='./file0\x00', r1) 1.627366446s ago: executing program 1 (id=7704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_getlink={0x20, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x100, 0x1000}}, 0x12}, 0x1, 0x0, 0x0, 0x845}, 0x4084) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) r5 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x150, 0x1170, 0x1170, 0x150, 0x1170, 0x150, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x4, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'macvlan1\x00', {0xff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xfffffffffffffed2) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a3000000000140000001100"], 0x118}}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xb0, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2010000) recvmsg$unix(r4, &(0x7f0000000640)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000100)=""/73, 0x49}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f00000004c0)=""/117, 0x75}], 0x4}, 0x2006) 1.598407638s ago: executing program 0 (id=7705): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xac) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000072c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3600000082"], 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.453148112s ago: executing program 0 (id=7707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000400000004000000ff00020000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e9976ed000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9, 0x3}, 0x4, 0x0, 0xd45, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x5fffffffffffffff, 0xffffffffffffffff, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) read$eventfd(r4, &(0x7f0000000000), 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x186, &(0x7f0000000200)={0x0, 0xc2d3, 0x10100, 0x2, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x79a5, 0x2, 0x46, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000540)}], 0x1}}], 0x1, 0x4000880) splice(r9, 0x0, r5, 0x0, 0x10000008ebc, 0x2) write$binfmt_elf32(r2, &(0x7f0000000c80)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sg(0x0, 0x6f5e, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x0, 0x6e, 0x0, 0x1}, 0x28) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r11, 0x6, 0x15, &(0x7f0000000000)=0x8, 0x4) 1.195678484s ago: executing program 5 (id=7709): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=@updsa={0xf0, 0x1a, 0x100, 0x70bd26, 0x25dfdbfc, {{@in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4e23, 0x25, 0x4e20, 0x6, 0xa, 0x80, 0x20, 0x4d}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x33}, @in=@broadcast, {0x4, 0x2, 0x46e, 0x6, 0x8c0, 0x4, 0xa, 0x7fff}, {0x2, 0x800, 0x9, 0x4}, {0x9, 0x3}, 0x70bd25, 0x3505, 0xa, 0x1, 0x5, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x20}, 0x8000) socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff0000000081000a0000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 998.858722ms ago: executing program 1 (id=7712): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$xdp(0x2c, 0x3, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0xb, @mcast1, 0x8}, r3}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 914.578489ms ago: executing program 1 (id=7713): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x0, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd=r0, 0x8000000000000001, {}, 0x5, 0x0, 0x1, {0x0, r3}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x2000)=nil) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x4, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x56d92c88, 0x0, 0x0, 0x10000}, 0x0, 0x0) shutdown(r5, 0x1) socket$kcm(0x10, 0x2, 0x0) r6 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}}, 0x8000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) tkill(r6, 0x12) 898.214251ms ago: executing program 2 (id=7714): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381edd7fc6e5539b0d430a8b089b3f383563030890e0879b0a71c6e70a9b334a959b3f9a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 813.212988ms ago: executing program 2 (id=7715): r0 = fsopen(&(0x7f00000001c0)='sockfs\x00', 0x0) fsmount(r0, 0x0, 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x2c40, 0xb0, 0x12}, 0x18) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='\xff\xff', &(0x7f0000000200)='./file0\x00', r1) 779.824131ms ago: executing program 2 (id=7716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB='b'], 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x80, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x6ef, @loopback, 0x773}, @in6={0xa, 0x4e21, 0xcd8c, @empty, 0x4}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x6}]}, &(0x7f0000000200)=0x10) 688.452159ms ago: executing program 2 (id=7717): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe4IH\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\x96\x9ch\xbc\xedi\x99\xf8\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000000340)=""/26, 0x1a}], 0x5, 0x3, 0x8) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r8, 0x22e1) (async) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xb}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x38}]}}]}]}, 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) (async) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08008e67093f00000000000190780a010102ac1414aa07040f0308009078ac141421450000000000000003000000ac1414bbffffffff"], 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = epoll_create1(0x80000) epoll_pwait2(r9, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xb5, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6a00ea00007f110000000000000000000000ffffe0000002fe8000000000000000000000000000aa4e1d4e20007f90"], 0x0) readv(r2, &(0x7f0000002680)=[{&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000380)=""/100, 0x64}], 0x2) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000), &(0x7f0000000040)=0x4) 482.822247ms ago: executing program 4 (id=7723): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$xdp(0x2c, 0x3, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0xb, @mcast1, 0x8}, r3}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 425.311133ms ago: executing program 4 (id=7724): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 376.204287ms ago: executing program 0 (id=7725): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000200850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/133, 0x85}, {&(0x7f0000001400)="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", 0x181}], 0x3}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x8, 0xc, 0x1, {{0x38, 0x4, 0x0, 0x1, 0xe0, 0x64, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x22, 0x0, [{0x0, 0x10, "abd062936d885224b3792687bfcb"}, {0x0, 0xc, "ddd5cb872420826f3f8d"}]}, @rr={0x7, 0x13, 0xd2, [@remote, @multicast1, @private=0xa010102, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x93, 0x1, 0x8, [{@broadcast, 0x2}]}, @timestamp_addr={0x44, 0x34, 0xda, 0x1, 0xa, [{@loopback, 0x37}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x1}, {@loopback, 0x6}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3}]}, @timestamp={0x44, 0xc, 0x68, 0x0, 0x1, [0x6, 0x27b]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0xd, [{@rand_addr=0x64010102, 0x8}]}, @generic={0x86, 0x6, "2bc8ddae"}, @timestamp={0x44, 0x1c, 0xe7, 0x0, 0x1, [0x0, 0x80, 0xfffffffe, 0x8, 0xfffffffb, 0x4]}, @lsrr={0x83, 0x1b, 0xae, [@multicast1, @broadcast, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000bdbd8162965bee9700", @ANYRES16=r0, @ANYBLOB="03062dbd7000fcdbdf2503000000040001800500050008000000"], 0x20}, 0x1, 0x0, 0x0, 0x42080}, 0x4000050) 375.815227ms ago: executing program 4 (id=7726): r0 = fsopen(&(0x7f00000001c0)='sockfs\x00', 0x0) fsmount(r0, 0x0, 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x2c40, 0xb0, 0x12}, 0x18) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='\xff\xff', &(0x7f0000000200)='./file0\x00', r1) 375.613597ms ago: executing program 0 (id=7727): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @broadcast}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000004c0)=""/4096) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/4\x00') exit(0x7) statx(r3, 0x0, 0x1000, 0x10, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0x73, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r5}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r5}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@map=r1, r4, 0x2f, 0x2038, 0x4}, 0x20) 339.6244ms ago: executing program 4 (id=7728): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 339.11915ms ago: executing program 4 (id=7729): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1f000000190081054e81f782db4cb904021d080000000000000000070a000a", 0x1f}], 0x1}, 0x14) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)={0x2c, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x7, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x20000000) 298.169204ms ago: executing program 4 (id=7730): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syslog(0x2, &(0x7f00000007c0)=""/210, 0xd2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80282, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe721, 0x0, 0x2, 0x41, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xdfffffffffffffff, r1, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(0x0, 0x268) r3 = socket$inet(0x2, 0xa, 0x86) bind$inet(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0xc0041, 0x0) r8 = epoll_create(0x80f04) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000300)) close(r7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f00000003c0)={0x2, 0x2, 0x0, 0xa, 0x2, 0x0, [{0x10001, 0x4, 0x10, '\x00', 0x80}, {0xf, 0x48d4fcf4, 0x8, '\x00', 0x401}]}) 0s ago: executing program 1 (id=7731): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file2\x00', 0x0, 0x8}, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r2 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r2}, 0x1) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, &(0x7f0000000380)=ANY=[@ANYBLOB="6e7241626c6f63c54b6b6b733d00"]) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r5, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x41, &(0x7f00000000c0)={[{@usrquota}, {@mblk_io_submit}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000040)='./cgroup\x00', 0x320b0b8, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): [ 437.604812][T23354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.633730][T23353] SELinux: Context : is not valid (left unmapped). [ 437.714633][T23365] syzkaller0: entered promiscuous mode [ 437.744251][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.756467][T23365] syzkaller0: entered allmulticast mode [ 438.225725][T23397] __nla_validate_parse: 5 callbacks suppressed [ 438.225840][T23397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6659'. [ 438.241600][T23397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.249210][T23397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.266662][T23397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.275428][T23397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.772222][T23406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6663'. [ 438.804733][T23404] loop0: detected capacity change from 0 to 8192 [ 438.843339][T23401] loop0: detected capacity change from 0 to 4096 [ 438.867802][T23401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.919945][T23416] loop1: detected capacity change from 0 to 128 [ 438.950154][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 438.950171][ T28] audit: type=1400 audit(1771415955.291:5247): avc: denied { remount } for pid=23415 comm="syz.1.6666" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 439.020411][ T28] audit: type=1400 audit(1771415955.365:5248): avc: denied { unmount } for pid=23400 comm="syz.0.6661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 439.164077][T23401] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.204274][T23431] loop5: detected capacity change from 0 to 512 [ 439.227054][T23431] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 439.269158][T23431] EXT4-fs (loop5): 1 truncate cleaned up [ 439.281848][T23431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.347091][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6675'. [ 439.412660][T11410] IPVS: starting estimator thread 0... [ 439.427684][T22406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.472908][T23457] netlink: 'syz.4.6685': attribute type 5 has an invalid length. [ 439.480790][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6685'. [ 439.496351][T23457] ip6erspan0: entered promiscuous mode [ 439.519377][T23459] netlink: 'syz.0.6684': attribute type 11 has an invalid length. [ 439.527349][T23449] IPVS: using max 2496 ests per chain, 124800 per kthread [ 439.585190][T23467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6688'. [ 439.626951][T23476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6691'. [ 439.642292][T23479] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6692'. [ 439.758071][T23485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23485 comm=syz.2.6694 [ 439.806919][T23490] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6696'. [ 440.061790][T23506] netlink: 'syz.2.6704': attribute type 33 has an invalid length. [ 440.077126][T23506] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6704'. [ 440.172037][ T28] audit: type=1326 audit(1771415956.432:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.1.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f981cc629 code=0x7ffc0000 [ 440.196933][ T28] audit: type=1326 audit(1771415956.432:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.1.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f981cc629 code=0x7ffc0000 [ 440.235588][T23517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6708'. [ 440.248718][ T28] audit: type=1326 audit(1771415956.451:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.1.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f981cc629 code=0x7ffc0000 [ 440.291845][ T28] audit: type=1326 audit(1771415956.451:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.1.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f981cc629 code=0x7ffc0000 [ 440.316255][ T28] audit: type=1326 audit(1771415956.451:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.1.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f981cc629 code=0x7ffc0000 [ 440.340249][ T28] audit: type=1326 audit(1771415956.451:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.1.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f981cc629 code=0x7ffc0000 [ 440.368489][ T28] audit: type=1326 audit(1771415956.451:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.1.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f981cc629 code=0x7ffc0000 [ 440.393012][ T28] audit: type=1326 audit(1771415956.451:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.1.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f981cc629 code=0x7ffc0000 [ 440.517946][T23535] netlink: 'syz.5.6715': attribute type 33 has an invalid length. [ 440.530893][T23535] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 440.546096][T23535] loop5: detected capacity change from 0 to 512 [ 440.736698][T23535] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.6715: corrupted inode contents [ 440.756406][T23535] fserror_report: 1 callbacks suppressed [ 440.756423][T23535] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 440.764438][T23535] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.6715: mark_inode_dirty error [ 440.773532][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 440.773553][ C1] EXT4-fs (loop5): initial error at time 1771415956: ext4_do_update_inode:5569: inode 3 [ 440.773595][ C1] EXT4-fs (loop5): last error at time 1771415956: ext4_do_update_inode:5569: inode 3 [ 440.810571][T23535] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 440.814528][T23535] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.6715: corrupted inode contents [ 440.854501][T23535] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 440.854746][T23535] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.6715: mark_inode_dirty error [ 440.875292][T23535] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 440.875774][T23535] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.6715: Failed to acquire dquot type 0 [ 440.896125][T23535] loop5: lost filesystem error report for type 5 error -117 [ 440.896599][T23535] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.6715: corrupted inode contents [ 440.915851][T23535] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 440.916072][T23535] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.6715: mark_inode_dirty error [ 440.936653][T23535] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 440.936867][T23535] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.6715: corrupted inode contents [ 440.970764][T23535] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 440.970953][T23535] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.6715: mark_inode_dirty error [ 440.995102][T23535] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 440.995321][T23535] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.6715: corrupted inode contents [ 441.017282][T23535] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 441.017587][T23535] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 441.037321][T23535] loop5: lost filesystem error report for type 5 error -117 [ 441.037985][T23535] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.6715: corrupted inode contents [ 441.057433][T23535] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 441.057976][T23535] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.6715: mark_inode_dirty error [ 441.080298][T23535] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 441.089669][T23535] loop5: lost filesystem error report for type 5 error -117 [ 441.100679][T23535] EXT4-fs (loop5): 1 truncate cleaned up [ 441.117233][T23535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.133848][T23535] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.148506][T23535] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.6715: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 441.148506][T23535] [ 441.191754][T22406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.270605][T23607] IPv6: NLM_F_CREATE should be specified when creating new route [ 442.665953][T23627] netlink: 'syz.4.6748': attribute type 4 has an invalid length. [ 442.702587][T23632] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.210569][T23659] loop4: detected capacity change from 0 to 512 [ 443.231206][T23659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 443.246571][T23659] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6761: iget: bad extended attribute block 262144 [ 443.272583][T23659] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6761: couldn't read orphan inode 15 (err -117) [ 443.284466][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 443.284484][ C1] EXT4-fs (loop4): initial error at time 1771415959: ext4_orphan_get:1391: inode 15 [ 443.284520][ C1] EXT4-fs (loop4): last error at time 1771415959: ext4_orphan_get:1391: inode 15 [ 443.309764][T23659] loop4: lost filesystem error report for type 5 error -117 [ 443.310452][T23659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.331667][T23659] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.6761: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 443.380708][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.413281][T23666] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.762483][T23688] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.875127][T23697] __nla_validate_parse: 7 callbacks suppressed [ 443.875148][T23697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6777'. [ 444.553973][T23720] loop5: detected capacity change from 0 to 1024 [ 444.578409][T23720] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 444.617193][T23720] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 444.645777][T23720] EXT4-fs (loop5): invalid journal inode [ 444.660767][T23720] EXT4-fs (loop5): can't get journal size [ 444.678001][T23720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.792902][T23735] net_ratelimit: 1 callbacks suppressed [ 444.792920][T23735] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 444.858236][T23738] geneve1: entered promiscuous mode [ 444.902164][T22406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.241259][T23762] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 445.259899][T23764] Cannot find add_set index 0 as target [ 445.513269][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 445.513284][ T28] audit: type=1400 audit(1771415961.439:5276): avc: denied { bind } for pid=23782 comm="syz.1.6812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.647069][ T28] audit: type=1400 audit(1771415961.477:5277): avc: denied { listen } for pid=23782 comm="syz.1.6812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.728064][ T28] audit: type=1400 audit(1771415961.477:5278): avc: denied { accept } for pid=23782 comm="syz.1.6812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 446.866953][T23816] loop5: detected capacity change from 0 to 1024 [ 446.911227][T23816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=23816 comm=syz.5.6826 [ 447.152524][T23824] loop5: detected capacity change from 0 to 8192 [ 447.170033][T23828] loop1: detected capacity change from 0 to 512 [ 447.191037][T23828] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 447.217687][T23824] loop5: p1 p2 p3 p4 [ 447.236045][T23824] loop5: p1 size 262144 extends beyond EOD, truncated [ 447.259126][T23824] loop5: p2 start 4293394690 is beyond EOD, truncated [ 447.279582][T23824] loop5: p4 start 1677721600 is beyond EOD, truncated [ 447.505399][T23844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6836'. [ 447.507707][T22894] udevd[22894]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 447.526164][T19705] udevd[19705]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 447.569383][T23841] loop5: detected capacity change from 0 to 512 [ 447.576117][T23841] EXT4-fs: Ignoring removed nobh option [ 447.675016][T23841] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 447.702434][T23851] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 447.738887][T23841] EXT4-fs (loop5): 1 truncate cleaned up [ 447.752215][T23841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.949794][T23855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.058180][ T28] audit: type=1400 audit(1771415963.817:5279): avc: denied { write } for pid=23840 comm="syz.5.6835" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 448.172287][T22406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.474298][T23875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6845'. [ 448.578809][T23888] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 448.597073][T23885] loop5: detected capacity change from 0 to 128 [ 448.686797][T23885] FAT-fs (loop5): Directory bread(block 32) failed [ 448.706199][T23885] FAT-fs (loop5): Directory bread(block 33) failed [ 448.726108][T23885] FAT-fs (loop5): Directory bread(block 34) failed [ 448.753031][T23885] FAT-fs (loop5): Directory bread(block 35) failed [ 448.771722][T23885] FAT-fs (loop5): Directory bread(block 36) failed [ 448.795321][T23885] FAT-fs (loop5): Directory bread(block 37) failed [ 448.819074][T23885] FAT-fs (loop5): Directory bread(block 38) failed [ 448.851942][T23885] FAT-fs (loop5): Directory bread(block 39) failed [ 448.869773][T23885] FAT-fs (loop5): Directory bread(block 40) failed [ 448.889215][T23885] FAT-fs (loop5): Directory bread(block 41) failed [ 448.951392][T23885] syz.5.6850: attempt to access beyond end of device [ 448.951392][T23885] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 449.060846][T23920] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 449.139764][T23924] x_tables: duplicate underflow at hook 2 [ 449.447134][T23958] netlink: 'syz.2.6877': attribute type 1 has an invalid length. [ 449.676164][T23969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6882'. [ 449.771735][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6883'. [ 449.811344][T23975] wg1: entered promiscuous mode [ 449.822159][T23975] wg1: entered allmulticast mode [ 449.980017][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6891'. [ 450.109348][T23994] netlink: 'syz.5.6893': attribute type 33 has an invalid length. [ 450.174462][T23994] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6893'. [ 450.185168][T23999] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 450.262752][T23994] loop5: detected capacity change from 0 to 512 [ 450.309768][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6895'. [ 450.325643][T23994] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.6893: corrupted inode contents [ 450.338570][T23998] x_tables: duplicate underflow at hook 1 [ 450.365499][T23994] fserror_report: 2 callbacks suppressed [ 450.365513][T23994] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 450.378509][T23933] syz.0.6868 (23933) used greatest stack depth: 4448 bytes left [ 450.410688][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 450.417171][ C0] EXT4-fs (loop5): initial error at time 1771415966: ext4_do_update_inode:5569: inode 3 [ 450.426980][ C0] EXT4-fs (loop5): last error at time 1771415966: ext4_do_update_inode:5569: inode 3 [ 450.451745][T23994] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.6893: mark_inode_dirty error [ 450.473644][T23994] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 450.485753][T23994] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.6893: corrupted inode contents [ 450.527231][T23994] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 450.527399][T23994] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.6893: mark_inode_dirty error [ 450.602768][T23994] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 450.603187][T23994] Quota error (device loop5): write_blk: dquota write failed [ 450.634994][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6901'. [ 450.659592][T24016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6901'. [ 450.668705][T23994] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 450.702523][T23994] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.6893: Failed to acquire dquot type 0 [ 450.719351][T23994] loop5: lost filesystem error report for type 5 error -117 [ 450.722270][T23994] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.6893: corrupted inode contents [ 450.762377][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6901'. [ 450.771510][T23994] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 450.771716][T23994] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.6893: mark_inode_dirty error [ 450.792350][T24016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6901'. [ 450.810859][T23994] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 450.818800][T23994] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.6893: corrupted inode contents [ 450.840013][T23994] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 450.840334][T23994] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.6893: mark_inode_dirty error [ 450.861239][T23994] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 450.861456][T23994] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.6893: corrupted inode contents [ 450.883031][T23994] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 450.883251][T23994] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 450.901471][T23994] loop5: lost filesystem error report for type 5 error -117 [ 450.901655][T23994] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.6893: corrupted inode contents [ 450.963217][T23994] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 450.963395][T23994] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.6893: mark_inode_dirty error [ 450.997989][T23994] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 451.007129][T23994] loop5: lost filesystem error report for type 5 error -117 [ 451.008138][T23994] EXT4-fs (loop5): 1 truncate cleaned up [ 451.023958][T23994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.037857][T23994] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.119468][T23994] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.6893: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 451.119468][T23994] [ 451.173364][ T28] audit: type=1400 audit(1771415966.737:5280): avc: denied { create } for pid=24028 comm="syz.4.6907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 451.203918][T22406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.238251][T24034] loop4: detected capacity change from 0 to 512 [ 451.255248][T24034] EXT4-fs: Ignoring removed bh option [ 451.260796][T24034] EXT4-fs: Ignoring removed oldalloc option [ 451.267684][T24034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 451.284375][T24034] EXT4-fs (loop4): 1 truncate cleaned up [ 451.295675][T24034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.326153][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.371001][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6912'. [ 452.244218][T24089] netlink: 'syz.0.6931': attribute type 3 has an invalid length. [ 452.258017][T24089] netlink: 'syz.0.6931': attribute type 3 has an invalid length. [ 452.619644][T24126] Invalid ELF header magic: != ELF [ 452.644983][T24131] IPVS: length: 24 != 3445080 [ 452.712151][T24137] loop4: detected capacity change from 0 to 512 [ 452.746873][T24137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.767666][T24137] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.781309][T24137] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.6948: corrupted xattr block 33: invalid header [ 452.801770][T24137] EXT4-fs (loop4): Remounting filesystem read-only [ 452.822712][T24137] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 452.835936][T24137] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 452.854323][T24137] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 452.856386][ T28] audit: type=1400 audit(1771415968.309:5281): avc: denied { read } for pid=24134 comm="syz.4.6948" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 452.897292][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.920149][ T28] audit: type=1400 audit(1771415968.318:5282): avc: denied { open } for pid=24134 comm="syz.4.6948" path="/144/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 453.114714][ T28] audit: type=1326 audit(1771415968.552:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.2.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 453.179002][ T28] audit: type=1326 audit(1771415968.552:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.2.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 453.203722][ T28] audit: type=1326 audit(1771415968.552:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.2.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 453.254875][ T28] audit: type=1326 audit(1771415968.552:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.2.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 453.278766][ T28] audit: type=1326 audit(1771415968.552:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.2.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 453.312498][T24163] loop4: detected capacity change from 0 to 256 [ 453.320047][ T28] audit: type=1326 audit(1771415968.552:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.2.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 453.345249][ T28] audit: type=1326 audit(1771415968.552:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.2.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 453.512343][T24174] loop4: detected capacity change from 0 to 1024 [ 453.525731][T24176] vlan0: entered promiscuous mode [ 453.533075][T24174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 453.551962][T24176] gretap0: entered promiscuous mode [ 453.560632][T24174] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.614745][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 454.087342][T24228] loop1: detected capacity change from 0 to 1024 [ 454.121125][T24228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 454.134328][T24228] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.218701][T24228] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 454.286949][T21472] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 454.342551][T24256] loop4: detected capacity change from 0 to 512 [ 454.361111][T24255] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=24255 comm=syz.1.6991 [ 454.382890][T24256] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 454.415297][T24256] EXT4-fs (loop4): 1 truncate cleaned up [ 454.429456][T24256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.478508][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.584157][T24279] loop4: detected capacity change from 0 to 128 [ 454.681112][T24286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11080 sclass=netlink_route_socket pid=24286 comm=syz.1.7000 [ 454.714296][T24288] loop4: detected capacity change from 0 to 1024 [ 454.738179][T24286] netlink: 'syz.1.7000': attribute type 1 has an invalid length. [ 454.755138][T24288] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.7001: Failed to acquire dquot type 0 [ 454.776387][T24286] bond3: (slave bridge1): making interface the new active one [ 454.778841][T24288] loop4: lost filesystem error report for type 5 error -117 [ 454.790219][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 454.802076][T24286] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 454.804128][ C0] EXT4-fs (loop4): initial error at time 1771415970: ext4_acquire_dquot:7003 [ 454.821418][ C0] EXT4-fs (loop4): last error at time 1771415970: ext4_acquire_dquot:7003 [ 454.882754][T24288] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 454.913816][T24288] EXT4-fs (loop4): 1 truncate cleaned up [ 454.926096][T24288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.956518][T24288] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.7001: Failed to acquire dquot type 0 [ 454.990815][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.273223][T24317] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.280575][T24317] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.291935][T24315] SELinux: failed to load policy [ 455.348058][T24326] loop1: detected capacity change from 0 to 512 [ 455.360779][T24326] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 455.411453][T24336] netlink: 'syz.1.7018': attribute type 33 has an invalid length. [ 455.424095][T24336] __nla_validate_parse: 7 callbacks suppressed [ 455.424110][T24336] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7018'. [ 455.439868][T24317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.454923][T24317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.467757][T24340] program syz.5.7019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.484994][T24341] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 455.529670][T24341] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.7018: corrupted inode contents [ 455.544701][T24341] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.7018: mark_inode_dirty error [ 455.556060][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 455.556080][ C1] EXT4-fs (loop1): initial error at time 1771415970: ext4_do_update_inode:5569: inode 3 [ 455.556127][ C1] EXT4-fs (loop1): last error at time 1771415970: ext4_do_update_inode:5569: inode 3 [ 455.599408][ T5594] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.612336][ T5594] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.625228][ T5594] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.634680][T24341] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.7018: corrupted inode contents [ 455.646870][ T5594] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.657374][ T297] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.658249][T24341] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.7018: mark_inode_dirty error [ 455.666321][ T297] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.691622][ T297] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.698902][T24348] set_capacity_and_notify: 1 callbacks suppressed [ 455.698949][T24348] loop5: detected capacity change from 0 to 128 [ 455.714405][T24341] fserror_report: 4 callbacks suppressed [ 455.714419][T24341] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 455.722288][ T297] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.745614][T24341] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.7018: Failed to acquire dquot type 0 [ 455.763505][T24341] loop1: lost filesystem error report for type 5 error -117 [ 455.775445][T24341] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7018: corrupted inode contents [ 455.815838][T24341] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.816363][T24341] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.7018: mark_inode_dirty error [ 455.855971][T24341] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.869107][T24341] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7018: corrupted inode contents [ 455.892361][T24341] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.892548][T24341] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.7018: mark_inode_dirty error [ 455.913399][T24341] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.913739][T24341] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7018: corrupted inode contents [ 455.934929][T24341] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.935165][T24341] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 455.953241][T24341] loop1: lost filesystem error report for type 5 error -117 [ 455.953465][T24341] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7018: corrupted inode contents [ 455.972866][T24341] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.973133][T24341] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.7018: mark_inode_dirty error [ 455.994765][T24341] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.994917][T24341] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 456.015862][T24341] loop1: lost filesystem error report for type 5 error -117 [ 456.024031][T24371] FAULT_INJECTION: forcing a failure. [ 456.024031][T24371] name failslab, interval 1, probability 0, space 0, times 0 [ 456.045357][T24371] CPU: 0 UID: 0 PID: 24371 Comm: syz.5.7030 Tainted: G W syzkaller #0 PREEMPT(full) [ 456.045386][T24371] Tainted: [W]=WARN [ 456.045392][T24371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.045406][T24371] Call Trace: [ 456.045414][T24371] [ 456.045422][T24371] __dump_stack+0x1d/0x30 [ 456.045523][T24371] dump_stack_lvl+0x95/0xd0 [ 456.045616][T24371] dump_stack+0x15/0x1b [ 456.045713][T24371] should_fail_ex+0x263/0x280 [ 456.045744][T24371] should_failslab+0x8c/0xb0 [ 456.045783][T24371] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 456.045839][T24371] ? dup_task_struct+0x5b/0x940 [ 456.045880][T24371] dup_task_struct+0x5b/0x940 [ 456.045977][T24371] ? copy_process+0x36d/0x20d0 [ 456.046000][T24371] copy_process+0x37e/0x20d0 [ 456.046019][T24371] ? kstrtouint+0x76/0xc0 [ 456.046046][T24371] ? kstrtouint_from_user+0xa8/0xf0 [ 456.046101][T24371] kernel_clone+0x16b/0x5d0 [ 456.046123][T24371] ? vfs_write+0x86e/0x9f0 [ 456.046156][T24371] __x64_sys_clone+0x143/0x180 [ 456.046215][T24371] x64_sys_call+0x1222/0x3020 [ 456.046246][T24371] do_syscall_64+0x12c/0x370 [ 456.046303][T24371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.046388][T24371] RIP: 0033:0x7f325d56c629 [ 456.046403][T24371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.046424][T24371] RSP: 002b:00007f325bfc6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 456.046443][T24371] RAX: ffffffffffffffda RBX: 00007f325d7e5fa0 RCX: 00007f325d56c629 [ 456.046457][T24371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 456.046472][T24371] RBP: 00007f325bfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 456.046487][T24371] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 456.046557][T24371] R13: 00007f325d7e6038 R14: 00007f325d7e5fa0 R15: 00007fff4022e768 [ 456.046582][T24371] [ 456.279832][T24341] EXT4-fs (loop1): 1 truncate cleaned up [ 456.285954][T24341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.298501][T24341] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.312003][T24336] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #3: comm syz.1.7018: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 456.312003][T24336] [ 456.429170][T24381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7029'. [ 456.458077][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7034'. [ 456.717265][T21472] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.995392][T24397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7040'. [ 457.152892][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 457.152909][ T28] audit: type=1400 audit(1771415972.333:5362): avc: denied { ioctl } for pid=24416 comm="syz.5.7046" path="socket:[87714]" dev="sockfs" ino=87714 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 457.189714][T24419] loop4: detected capacity change from 0 to 256 [ 457.582016][ T28] audit: type=1400 audit(1771415972.726:5363): avc: denied { create } for pid=24458 comm="syz.1.7065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 457.738411][T24476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7067'. [ 457.843939][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7073'. [ 457.970465][T24490] loop5: detected capacity change from 0 to 4096 [ 457.998072][T24490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.124322][T22406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.256604][T24505] loop5: detected capacity change from 0 to 512 [ 459.000165][ T28] audit: type=1400 audit(1771415974.055:5364): avc: denied { create } for pid=24544 comm="syz.0.7097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 459.176543][T24554] 9p: Bad value for 'rfdno' [ 459.234596][T24556] loop5: detected capacity change from 0 to 512 [ 459.244582][ T70] bond0: left allmulticast mode [ 459.262496][T24558] loop4: detected capacity change from 0 to 512 [ 459.274252][T24556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.281149][ T70] bond_slave_0: left allmulticast mode [ 459.295050][T24556] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.326106][T24558] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.353890][ T70] bond_slave_1: left allmulticast mode [ 459.374600][T24564] netlink: 59 bytes leftover after parsing attributes in process `syz.0.7103'. [ 459.411298][ T70] bridge0: port 3(bond0) entered disabled state [ 459.431724][ T70] bridge_slave_1: left allmulticast mode [ 459.454247][ T70] bridge_slave_1: left promiscuous mode [ 459.461156][ T28] audit: type=1326 audit(1771415974.392:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.0.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 459.497348][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.498043][ T28] audit: type=1326 audit(1771415974.392:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.0.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 459.535695][ T28] audit: type=1326 audit(1771415974.392:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.0.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 459.597761][ T28] audit: type=1326 audit(1771415974.392:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.0.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 459.673970][ T70] bridge_slave_0: left allmulticast mode [ 459.684588][ T28] audit: type=1326 audit(1771415974.392:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.0.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 459.698369][ T70] bridge_slave_0: left promiscuous mode [ 459.715847][ T28] audit: type=1326 audit(1771415974.402:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.0.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 459.755835][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.770594][ T28] audit: type=1326 audit(1771415974.402:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.0.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 460.233453][ T70] bond4 (unregistering): (slave geneve2): Releasing backup interface [ 460.263173][ T70] bridge0 (unregistering): left promiscuous mode [ 460.270031][ T70] team0: Port device bridge0 removed [ 460.456369][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.465376][ T70] bond_slave_0: left promiscuous mode [ 460.472152][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.482682][ T70] bond_slave_1: left promiscuous mode [ 460.489230][ T70] bond0 (unregistering): Released all slaves [ 460.497440][ T70] bond1 (unregistering): Released all slaves [ 460.506509][ T70] bond2 (unregistering): Released all slaves [ 460.516101][ T70] bond3 (unregistering): Released all slaves [ 460.525107][ T70] bond4 (unregistering): Released all slaves [ 460.534197][ T70] bond5 (unregistering): Released all slaves [ 460.543207][ T70] bond6 (unregistering): Released all slaves [ 460.555344][T24568] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 460.564852][T24568] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 460.635242][T22406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.647570][T24584] netlink: 'syz.4.7110': attribute type 33 has an invalid length. [ 460.655642][T24584] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7110'. [ 460.672493][T24584] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 460.687554][T24584] loop4: detected capacity change from 0 to 512 [ 460.702583][T24584] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.7110: corrupted inode contents [ 460.763950][T24584] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 460.765267][T24584] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #3: comm syz.4.7110: mark_inode_dirty error [ 460.774462][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 460.774479][ C0] EXT4-fs (loop4): initial error at time 1771415975: ext4_do_update_inode:5569: inode 3 [ 460.774510][ C0] EXT4-fs (loop4): last error at time 1771415975: ext4_do_update_inode:5569: inode 3 [ 460.824649][T24594] ------------[ cut here ]------------ [ 460.830361][T24594] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0) [ 460.846267][T24594] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.5.7114/24594 [ 460.857425][T24594] Modules linked in: [ 460.861477][T24594] CPU: 0 UID: 0 PID: 24594 Comm: syz.5.7114 Tainted: G W syzkaller #0 PREEMPT(full) [ 460.872597][T24594] Tainted: [W]=WARN [ 460.876438][T24594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.886613][T24594] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 460.893081][T24594] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 460.913023][T24594] RSP: 0018:ffffc90011b4b368 EFLAGS: 00010246 [ 460.919192][T24594] RAX: ffff88810a6dbbf8 RBX: 0000000000000000 RCX: 0000000000000002 [ 460.927548][T24594] RDX: ffffffff86816a73 RSI: ffffffff867eb05c RDI: ffffffff871d3f90 [ 460.935784][T24594] RBP: ffff88811b07b350 R08: 0000000000000000 R09: 0000000000000002 [ 460.943008][T24584] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 460.943838][T24594] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811b07b310 [ 460.961180][T24594] R13: 0000000000000000 R14: ffff88811b07b35c R15: ffff88811b07b348 [ 460.965029][T24584] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.7110: corrupted inode contents [ 460.969848][T24594] FS: 00007f325bfc76c0(0000) GS:ffff8882ae8dd000(0000) knlGS:0000000000000000 [ 460.986337][T24584] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.7110: mark_inode_dirty error [ 460.990211][T24594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.003139][T24584] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.7110: Failed to acquire dquot type 0 [ 461.008012][T24594] CR2: 00007f5f98219d40 CR3: 00000001166f2000 CR4: 00000000003506f0 [ 461.008047][T24594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 461.019951][T24584] loop4: lost filesystem error report for type 5 error -117 [ 461.027562][T24594] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 461.037670][T24584] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.7110: corrupted inode contents [ 461.043008][T24594] Call Trace: [ 461.051978][T24584] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.7110: mark_inode_dirty error [ 461.062778][T24594] [ 461.080552][T24594] reg_set_min_max+0x21c/0x260 [ 461.085492][T24594] check_cond_jmp_op+0x1355/0x1ab0 [ 461.085701][T24584] fserror_report: 3 callbacks suppressed [ 461.085754][T24584] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 461.090893][T24594] do_check+0x4a9b/0x9860 [ 461.110262][T24594] do_check_common+0xd0b/0x1630 [ 461.115349][T24594] bpf_check+0x2f6d/0xcc10 [ 461.120116][T24594] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 461.126256][T24594] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 461.132042][T24594] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 461.138084][T24594] ? try_charge_memcg+0x215/0xa10 [ 461.143466][T24594] ? pcpu_block_update+0x232/0x3b0 [ 461.148764][T24594] ? _find_next_zero_bit+0x29/0xa0 [ 461.154043][T24594] ? pcpu_block_refresh_hint+0x157/0x170 [ 461.159853][T24594] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 461.165991][T24594] ? css_rstat_updated+0xbb/0x280 [ 461.171243][T24594] ? irqentry_exit+0x91/0x520 [ 461.176117][T24594] ? __rcu_read_unlock+0x4e/0x70 [ 461.181166][T24594] ? avc_has_perm_noaudit+0xab/0x130 [ 461.186593][T24594] ? avc_has_perm+0x101/0x190 [ 461.191613][T24594] ? selinux_bpf_prog_load+0x197/0x1c0 [ 461.197197][T24594] ? security_bpf_prog_load+0x9e/0x140 [ 461.202827][T24594] bpf_prog_load+0xf76/0x1140 [ 461.207592][T24594] ? security_bpf+0x2b/0x90 [ 461.212308][T24594] __sys_bpf+0x505/0x7e0 [ 461.216749][T24594] __x64_sys_bpf+0x41/0x50 [ 461.221336][T24594] x64_sys_call+0x10cb/0x3020 [ 461.226132][T24594] do_syscall_64+0x12c/0x370 [ 461.230918][T24594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.237020][T24594] RIP: 0033:0x7f325d56c629 [ 461.241527][T24594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.245254][T24584] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.7110: corrupted inode contents [ 461.261299][T24594] RSP: 002b:00007f325bfc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.275226][T24584] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 461.281829][T24594] RAX: ffffffffffffffda RBX: 00007f325d7e5fa0 RCX: 00007f325d56c629 [ 461.299331][T24594] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 461.307423][T24594] RBP: 00007f325d602b39 R08: 0000000000000000 R09: 0000000000000000 [ 461.314795][T24584] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.7110: mark_inode_dirty error [ 461.315782][T24594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.329914][T24584] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 461.334849][T24594] R13: 00007f325d7e6038 R14: 00007f325d7e5fa0 R15: 00007fff4022e768 [ 461.340259][T24584] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.7110: corrupted inode contents [ 461.344589][T24594] [ 461.361494][T24584] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 461.364057][T24594] ---[ end trace 0000000000000000 ]--- [ 461.381785][T24584] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 461.392034][T24604] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7118'. [ 461.404199][T24584] loop4: lost filesystem error report for type 5 error -117 [ 461.468322][T24584] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.7110: corrupted inode contents [ 461.494703][T24584] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 461.494886][T24584] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.7110: mark_inode_dirty error [ 461.515881][T24584] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 461.516072][T24584] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 461.534592][T24584] loop4: lost filesystem error report for type 5 error -117 [ 461.535043][T24584] EXT4-fs (loop4): 1 truncate cleaned up [ 461.549614][T24584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.562607][T24584] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.599563][ T70] hsr_slave_0: left promiscuous mode [ 461.628854][T24584] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #3: comm syz.4.7110: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 461.628854][T24584] [ 461.629352][ T70] hsr_slave_1: left promiscuous mode [ 461.661713][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.669198][ T70] batadv0: mtu less than device minimum [ 461.710199][ T70] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.721283][ T70] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.732285][ T70] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.743383][ T70] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.754344][ T70] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.765597][ T70] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.776613][ T70] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.787598][ T70] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.798487][ T70] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.821995][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.848298][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.887118][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.949591][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.973858][ T70] batman_adv: batadv0: Interface deactivated: dummy0 [ 461.991544][ T70] batman_adv: batadv0: Removing interface: dummy0 [ 462.007844][ T70] veth1_macvtap: left promiscuous mode [ 462.024320][ T70] veth0_macvtap: left promiscuous mode [ 462.030050][ T70] veth1_vlan: left promiscuous mode [ 462.204068][ T70] pimreg (unregistering): left allmulticast mode [ 462.295924][ T70] team_slave_1 (unregistering): left promiscuous mode [ 462.325430][ T70] team0 (unregistering): Port device team_slave_1 removed [ 462.363031][ T70] team_slave_0 (unregistering): left promiscuous mode [ 462.399068][ T70] team0 (unregistering): Port device team_slave_0 removed [ 462.640310][T24644] netlink: 'syz.0.7130': attribute type 33 has an invalid length. [ 462.654126][T24644] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7130'. [ 462.695902][T24647] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7132'. [ 462.822821][T24652] hugetlbfs: syz.0.7134 (24652): Using mlock ulimits for SHM_HUGETLB is obsolete [ 462.851811][ T70] IPVS: stop unused estimator thread 0... [ 462.874246][T24655] loop4: detected capacity change from 0 to 256 [ 462.896913][T24655] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.937817][T24655] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 463.070154][T24665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24665 comm=syz.2.7141 [ 463.419088][T24682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7150'. [ 463.759004][T24692] netlink: 'syz.2.7154': attribute type 15 has an invalid length. [ 463.982243][T24686] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 463.990756][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 463.990771][ T28] audit: type=1400 audit(1771415978.726:5391): avc: denied { mount } for pid=24685 comm="syz.1.7151" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 464.077941][T24711] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7159'. [ 464.179253][T24711] loop4: detected capacity change from 0 to 8192 [ 464.189434][T24713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7160'. [ 464.215201][T24711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7159'. [ 464.417654][T24731] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44568 sclass=netlink_xfrm_socket pid=24731 comm=syz.2.7165 [ 465.120004][T24752] FAULT_INJECTION: forcing a failure. [ 465.120004][T24752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.135234][T24752] CPU: 0 UID: 0 PID: 24752 Comm: syz.1.7174 Tainted: G W syzkaller #0 PREEMPT(full) [ 465.135269][T24752] Tainted: [W]=WARN [ 465.135276][T24752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.135289][T24752] Call Trace: [ 465.135347][T24752] [ 465.135355][T24752] __dump_stack+0x1d/0x30 [ 465.135383][T24752] dump_stack_lvl+0x95/0xd0 [ 465.135409][T24752] dump_stack+0x15/0x1b [ 465.135433][T24752] should_fail_ex+0x263/0x280 [ 465.135472][T24752] should_fail+0xb/0x20 [ 465.135506][T24752] should_fail_usercopy+0x1a/0x20 [ 465.135531][T24752] _copy_from_user+0x1c/0xb0 [ 465.135578][T24752] ___sys_sendmsg+0xc1/0x1e0 [ 465.135622][T24752] __x64_sys_sendmsg+0xd4/0x160 [ 465.135699][T24752] x64_sys_call+0x194c/0x3020 [ 465.135729][T24752] do_syscall_64+0x12c/0x370 [ 465.135825][T24752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.135854][T24752] RIP: 0033:0x7f5f981cc629 [ 465.135871][T24752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.135899][T24752] RSP: 002b:00007f5f96c27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.135924][T24752] RAX: ffffffffffffffda RBX: 00007f5f98445fa0 RCX: 00007f5f981cc629 [ 465.135937][T24752] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 465.136021][T24752] RBP: 00007f5f96c27090 R08: 0000000000000000 R09: 0000000000000000 [ 465.136038][T24752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.136053][T24752] R13: 00007f5f98446038 R14: 00007f5f98445fa0 R15: 00007fff57d0eb68 [ 465.136155][T24752] [ 465.410304][T24762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7180'. [ 465.423044][ T28] audit: type=1326 audit(1771415980.073:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24763 comm="syz.1.7179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f981cc629 code=0x0 [ 465.648177][T24779] FAULT_INJECTION: forcing a failure. [ 465.648177][T24779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.664580][T24779] CPU: 0 UID: 0 PID: 24779 Comm: syz.5.7186 Tainted: G W syzkaller #0 PREEMPT(full) [ 465.664675][T24779] Tainted: [W]=WARN [ 465.664684][T24779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.664721][T24779] Call Trace: [ 465.664764][T24779] [ 465.664773][T24779] __dump_stack+0x1d/0x30 [ 465.664805][T24779] dump_stack_lvl+0x95/0xd0 [ 465.664835][T24779] dump_stack+0x15/0x1b [ 465.664880][T24779] should_fail_ex+0x263/0x280 [ 465.664925][T24779] should_fail+0xb/0x20 [ 465.664965][T24779] should_fail_usercopy+0x1a/0x20 [ 465.665059][T24779] _copy_from_user+0x1c/0xb0 [ 465.665167][T24779] __sys_bpf+0x183/0x7e0 [ 465.665283][T24779] __x64_sys_bpf+0x41/0x50 [ 465.665323][T24779] x64_sys_call+0x10cb/0x3020 [ 465.665367][T24779] do_syscall_64+0x12c/0x370 [ 465.665410][T24779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.665438][T24779] RIP: 0033:0x7f325d56c629 [ 465.665459][T24779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.665481][T24779] RSP: 002b:00007f325bfc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.665572][T24779] RAX: ffffffffffffffda RBX: 00007f325d7e5fa0 RCX: 00007f325d56c629 [ 465.665622][T24779] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 465.665639][T24779] RBP: 00007f325bfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 465.665656][T24779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.665687][T24779] R13: 00007f325d7e6038 R14: 00007f325d7e5fa0 R15: 00007fff4022e768 [ 465.665791][T24779] [ 465.941328][T24786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24786 comm=syz.2.7189 [ 466.229218][T24794] netlink: 'syz.2.7192': attribute type 33 has an invalid length. [ 466.246063][T24794] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7192'. [ 466.901291][T24820] FAULT_INJECTION: forcing a failure. [ 466.901291][T24820] name failslab, interval 1, probability 0, space 0, times 0 [ 466.950233][T24820] CPU: 0 UID: 0 PID: 24820 Comm: syz.1.7201 Tainted: G W syzkaller #0 PREEMPT(full) [ 466.950271][T24820] Tainted: [W]=WARN [ 466.950303][T24820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.950320][T24820] Call Trace: [ 466.950327][T24820] [ 466.950336][T24820] __dump_stack+0x1d/0x30 [ 466.950393][T24820] dump_stack_lvl+0x95/0xd0 [ 466.950420][T24820] dump_stack+0x15/0x1b [ 466.950446][T24820] should_fail_ex+0x263/0x280 [ 466.950542][T24820] ? __se_sys_memfd_create+0x1df/0x3b0 [ 466.950642][T24820] should_failslab+0x8c/0xb0 [ 466.950674][T24820] __kmalloc_cache_noprof+0x5f/0x410 [ 466.950703][T24820] ? fput+0x8f/0xc0 [ 466.950729][T24820] __se_sys_memfd_create+0x1df/0x3b0 [ 466.950806][T24820] __x64_sys_memfd_create+0x31/0x40 [ 466.950842][T24820] x64_sys_call+0x1f22/0x3020 [ 466.950891][T24820] do_syscall_64+0x12c/0x370 [ 466.950928][T24820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.950955][T24820] RIP: 0033:0x7f5f981cc629 [ 466.950973][T24820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.951076][T24820] RSP: 002b:00007f5f96c26e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 466.951095][T24820] RAX: ffffffffffffffda RBX: 0000000000000519 RCX: 00007f5f981cc629 [ 466.951108][T24820] RDX: 00007f5f96c26ee0 RSI: 0000000000000000 RDI: 00007f5f98262d19 [ 466.951120][T24820] RBP: 00002000000009c0 R08: 00000000ffffffff R09: 0000000000000000 [ 466.951135][T24820] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000980 [ 466.951152][T24820] R13: 00007f5f96c26ee0 R14: 00007f5f96c26ea0 R15: 0000200000000180 [ 466.951242][T24820] [ 467.074392][T24826] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 467.157051][T24824] loop1: detected capacity change from 0 to 512 [ 467.202190][T24824] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.7203: corrupted inode contents [ 467.306760][T24824] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 467.307560][T24824] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.7203: mark_inode_dirty error [ 467.316738][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 467.316773][ C1] EXT4-fs (loop1): initial error at time 1771415981: ext4_do_update_inode:5569: inode 3 [ 467.316807][ C1] EXT4-fs (loop1): last error at time 1771415981: ext4_do_update_inode:5569: inode 3 [ 467.374342][T24835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7207'. [ 467.392507][T24835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7207'. [ 467.417715][ T28] audit: type=1400 audit(1771415981.936:5393): avc: denied { create } for pid=24836 comm="syz.0.7206" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 467.462594][T24824] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 467.464444][T24824] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.7203: corrupted inode contents [ 467.492404][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7209'. [ 467.507529][T24824] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 467.512399][T24824] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.7203: mark_inode_dirty error [ 467.522509][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7209'. [ 467.539199][T24824] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 467.550441][T24824] Quota error (device loop1): write_blk: dquota write failed [ 467.570621][T24824] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 467.591605][T24824] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.7203: Failed to acquire dquot type 0 [ 467.615506][T24824] loop1: lost filesystem error report for type 5 error -117 [ 467.616711][T24824] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7203: corrupted inode contents [ 467.648999][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7209'. [ 467.661711][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7209'. [ 467.675801][T24824] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 467.677656][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7210'. [ 467.700950][T24824] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.7203: mark_inode_dirty error [ 467.727825][T24824] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 467.728248][T24824] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7203: corrupted inode contents [ 467.812573][T24824] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 467.812882][T24824] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.7203: mark_inode_dirty error [ 467.834008][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7209'. [ 467.844436][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7209'. [ 467.914353][T24824] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 467.914603][T24824] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7203: corrupted inode contents [ 467.957549][T24824] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 467.957837][T24824] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 467.998940][T24824] loop1: lost filesystem error report for type 5 error -117 [ 467.999159][T24824] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7203: corrupted inode contents [ 468.039550][T24824] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 468.039757][T24824] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.7203: mark_inode_dirty error [ 468.082336][T24824] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 468.103371][T24824] loop1: lost filesystem error report for type 5 error -117 [ 468.104171][T24824] EXT4-fs (loop1): 1 truncate cleaned up [ 468.150204][T24824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.178610][T24824] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.201950][T24824] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #3: comm syz.1.7203: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 468.201950][T24824] [ 468.278353][T21472] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.414467][ T5162] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.445072][ T5162] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.493401][ T5162] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.545120][T20144] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 468.557333][ T5162] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.591982][T20144] CPU: 1 UID: 0 PID: 20144 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 468.592083][T20144] Tainted: [W]=WARN [ 468.592090][T20144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.592103][T20144] Call Trace: [ 468.592109][T20144] [ 468.592116][T20144] __dump_stack+0x1d/0x30 [ 468.592145][T20144] dump_stack_lvl+0x95/0xd0 [ 468.592235][T20144] dump_stack+0x15/0x1b [ 468.592263][T20144] dump_header+0x80/0x240 [ 468.592290][T20144] oom_kill_process+0x295/0x350 [ 468.592364][T20144] out_of_memory+0x97d/0xb80 [ 468.592408][T20144] try_charge_memcg+0x62e/0xa10 [ 468.592481][T20144] __mem_cgroup_charge+0x65/0x150 [ 468.592520][T20144] filemap_add_folio+0x110/0x350 [ 468.592581][T20144] __filemap_get_folio_mpol+0x326/0x680 [ 468.592610][T20144] filemap_fault+0x486/0xb90 [ 468.592704][T20144] __do_fault+0xbc/0x200 [ 468.592743][T20144] handle_mm_fault+0x11d7/0x3020 [ 468.592778][T20144] ? vma_start_read+0x1c7/0x2c0 [ 468.592804][T20144] do_user_addr_fault+0x62f/0x1050 [ 468.592861][T20144] ? trace_page_fault_user+0x1f/0xe0 [ 468.592903][T20144] exc_page_fault+0x62/0xa0 [ 468.592933][T20144] asm_exc_page_fault+0x26/0x30 [ 468.592986][T20144] RIP: 0033:0x7f55a24ba6b4 [ 468.593001][T20144] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 [ 468.593020][T20144] RSP: 002b:00007ffe4bbfe590 EFLAGS: 00010206 [ 468.593041][T20144] RAX: 0000001b2f924000 RBX: 000000000000035b RCX: 000000000006f928 [ 468.593060][T20144] RDX: 0000000009e56397 RSI: 00007ffe4bbfe620 RDI: 0000000000000001 [ 468.593074][T20144] RBP: 00007ffe4bbfe5cc R08: 0000000025c01cba R09: 7fffffffffffffff [ 468.593087][T20144] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 468.593099][T20144] R13: 00000000000927c0 R14: 000000000006f942 R15: 00007ffe4bbfe620 [ 468.593119][T20144] [ 468.593216][T20144] memory: usage 307200kB, limit 307200kB, failcnt 1778 [ 469.124978][T20144] memory+swap: usage 77564kB, limit 9007199254740988kB, failcnt 0 [ 469.140801][T20144] kmem: usage 67636kB, limit 9007199254740988kB, failcnt 0 [ 469.162131][T20144] Memory cgroup stats for /syz2: [ 469.162406][T20144] cache 0 [ 469.185260][T20144] rss 24576 [ 469.188488][T20144] shmem 0 [ 469.191465][T20144] mapped_file 3149824 [ 469.213789][T20144] dirty 0 [ 469.225519][T20144] writeback 0 [ 469.245373][T20144] workingset_refault_anon 17 [ 469.251320][T20144] workingset_refault_file 18 [ 469.255957][T20144] swap 1007616 [ 469.259489][T20144] swapcached 3170304 [ 469.263595][T20144] pgpgin 645144 [ 469.267066][T20144] pgpgout 645136 [ 469.270810][T20144] pgfault 560599 [ 469.274367][T20144] pgmajfault 16 [ 469.277855][T20144] inactive_anon 0 [ 469.281774][T20144] active_anon 28672 [ 469.285607][T20144] inactive_file 0 [ 469.289561][T20144] active_file 4096 [ 469.293541][T20144] unevictable 0 [ 469.297028][T20144] hierarchical_memory_limit 314572800 [ 469.302565][T20144] hierarchical_memsw_limit 9223372036854771712 [ 469.335606][T20144] total_cache 0 [ 469.339129][T20144] total_rss 24576 [ 469.342788][T20144] total_shmem 0 [ 469.354259][T20144] total_mapped_file 3149824 [ 469.358955][T20144] total_dirty 0 [ 469.362660][T20144] total_writeback 0 [ 469.364085][T24888] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 469.374591][T24888] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 469.382283][T20144] total_workingset_refault_anon 17 [ 469.387486][T20144] total_workingset_refault_file 18 [ 469.392684][T20144] total_swap 1007616 [ 469.393276][T24889] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 469.397004][T20144] total_swapcached 3170304 [ 469.403200][T24889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 469.415130][T24888] vhci_hcd vhci_hcd.0: Device attached [ 469.422538][T20144] total_pgpgin 645144 [ 469.426540][T20144] total_pgpgout 645136 [ 469.444072][T20144] total_pgfault 560599 [ 469.448184][T20144] total_pgmajfault 16 [ 469.458924][T24889] vhci_hcd vhci_hcd.0: Device attached [ 469.471571][T20144] total_inactive_anon 0 [ 469.475819][T20144] total_active_anon 28672 [ 469.480351][T20144] total_inactive_file 0 [ 469.492533][T24900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7228'. [ 469.497027][T20144] total_active_file 4096 [ 469.513771][T24894] vhci_hcd: connection closed [ 469.513868][T24890] vhci_hcd: connection closed [ 469.518805][ T70] vhci_hcd vhci_hcd.4: stop threads [ 469.529971][T20144] total_unevictable 0 [ 469.535145][ T70] vhci_hcd vhci_hcd.4: release socket [ 469.548608][T20144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5565,pid=20358,uid=0 [ 469.567469][ T70] vhci_hcd vhci_hcd.4: disconnect device [ 469.578394][ T70] vhci_hcd vhci_hcd.4: stop threads [ 469.588935][ T70] vhci_hcd vhci_hcd.4: release socket [ 469.595230][T20144] Memory cgroup out of memory: Killed process 20358 (syz.2.5565) total-vm:104196kB, anon-rss:1232kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 469.621219][ T70] vhci_hcd vhci_hcd.4: disconnect device [ 469.674564][ T5425] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 469.682103][ T5425] usb 9-1: enqueue for inactive port 0 [ 469.688058][ T5425] usb 9-1: enqueue for inactive port 0 [ 469.698814][ T5425] usb 9-1: enqueue for inactive port 0 [ 469.781224][ T5425] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 469.894478][T24929] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 469.908874][T24929] loop1: detected capacity change from 0 to 512 [ 469.944212][T24929] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.7240: corrupted inode contents [ 469.962342][T24929] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.7240: mark_inode_dirty error [ 469.973709][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 469.973725][ C0] EXT4-fs (loop1): initial error at time 1771415984: ext4_do_update_inode:5569: inode 3 [ 469.973761][ C0] EXT4-fs (loop1): last error at time 1771415984: ext4_do_update_inode:5569: inode 3 [ 470.004384][T24929] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.7240: corrupted inode contents [ 470.016903][T24929] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.7240: mark_inode_dirty error [ 470.030064][T24929] Quota error (device loop1): write_blk: dquota write failed [ 470.037624][T24929] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 470.047583][T24929] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.7240: Failed to acquire dquot type 0 [ 470.058991][T24929] loop1: lost filesystem error report for type 5 error -117 [ 470.059481][T24929] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7240: corrupted inode contents [ 470.079162][T24929] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.7240: mark_inode_dirty error [ 470.090907][T24929] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7240: corrupted inode contents [ 470.104331][T24929] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.7240: mark_inode_dirty error [ 470.123159][T24929] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7240: corrupted inode contents [ 470.138949][T24929] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 470.147661][T24929] loop1: lost filesystem error report for type 5 error -117 [ 470.147883][T24929] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7240: corrupted inode contents [ 470.173257][T24929] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.7240: mark_inode_dirty error [ 470.192098][T24929] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 470.201430][T24929] loop1: lost filesystem error report for type 5 error -117 [ 470.202772][T24929] EXT4-fs (loop1): 1 truncate cleaned up [ 470.216584][T24929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.229325][T24929] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.241709][T24929] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #3: comm syz.1.7240: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 470.241709][T24929] [ 470.312143][T21472] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.333335][T24949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24949 comm=syz.2.7249 [ 470.370577][T24952] loop5: detected capacity change from 0 to 256 [ 470.382382][T24956] loop1: detected capacity change from 0 to 512 [ 470.407680][ T28] audit: type=1400 audit(1771415984.734:5394): avc: denied { append } for pid=24951 comm="syz.5.7250" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 470.477794][T24956] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 470.520854][T24956] EXT4-fs (loop1): 1 truncate cleaned up [ 470.527183][T24956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.694035][T24975] netlink: 'syz.2.7256': attribute type 2 has an invalid length. [ 470.733153][T24977] wireguard0: entered promiscuous mode [ 470.744663][T24977] wireguard0: entered allmulticast mode [ 470.783301][T21472] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.922079][T24987] loop4: detected capacity change from 0 to 1024 [ 470.930681][T24987] EXT4-fs: Ignoring removed orlov option [ 470.939135][T24987] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 470.954681][T24987] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 470.966149][T24987] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 470.974496][T24987] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 470.974496][T24987] [ 470.992649][T24987] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 471.001901][T24987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 471.014840][T24987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.039347][ T28] audit: type=1400 audit(1771415985.324:5395): avc: denied { create } for pid=24986 comm="syz.4.7261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 471.149420][T24997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24997 comm=syz.4.7266 [ 471.197713][T25001] netlink: 'syz.1.7267': attribute type 5 has an invalid length. [ 471.359228][ T28] audit: type=1400 audit(1771415985.623:5396): avc: denied { getopt } for pid=25020 comm="syz.5.7277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.409592][ T28] audit: type=1326 audit(1771415985.679:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 471.435681][T25025] netlink: 'syz.5.7278': attribute type 1 has an invalid length. [ 471.454486][ T28] audit: type=1326 audit(1771415985.679:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 471.478250][T25027] SELinux: truncated policydb string identifier [ 471.483837][ T28] audit: type=1326 audit(1771415985.698:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 471.490253][T25027] SELinux: failed to load policy [ 471.524685][ T28] audit: type=1326 audit(1771415985.698:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 471.566198][ T28] audit: type=1326 audit(1771415985.698:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 471.801682][T25052] TCP: TCP_TX_DELAY enabled [ 472.311074][ T5567] tipc: Subscription rejected, illegal request [ 472.696306][T25079] kernel profiling enabled (shift: 14) [ 473.249172][T25115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.715903][T25162] bridge0: entered promiscuous mode [ 473.723126][T25162] bridge0: port 3(macsec1) entered blocking state [ 473.729857][T25162] bridge0: port 3(macsec1) entered disabled state [ 473.736756][T25162] macsec1: entered allmulticast mode [ 473.742174][T25162] bridge0: entered allmulticast mode [ 473.748357][T25162] macsec1: left allmulticast mode [ 473.753460][T25162] bridge0: left allmulticast mode [ 473.759399][T25162] bridge0: left promiscuous mode [ 474.271099][T25187] loop4: detected capacity change from 0 to 256 [ 474.296258][T25187] FAT-fs (loop4): Directory bread(block 64) failed [ 474.310444][T25187] FAT-fs (loop4): Directory bread(block 65) failed [ 474.322287][T25187] FAT-fs (loop4): Directory bread(block 66) failed [ 474.335302][T25187] FAT-fs (loop4): Directory bread(block 67) failed [ 474.348540][T25187] FAT-fs (loop4): Directory bread(block 68) failed [ 474.356808][T25187] FAT-fs (loop4): Directory bread(block 69) failed [ 474.363421][T25187] FAT-fs (loop4): Directory bread(block 70) failed [ 474.370244][T25187] FAT-fs (loop4): Directory bread(block 71) failed [ 474.377089][T25187] FAT-fs (loop4): Directory bread(block 72) failed [ 474.383786][T25187] FAT-fs (loop4): Directory bread(block 73) failed [ 474.535798][T25202] net_ratelimit: 31 callbacks suppressed [ 474.535814][T25202] openvswitch: netlink: Message has 4 unknown bytes. [ 474.740195][T25219] loop5: detected capacity change from 0 to 128 [ 474.779136][T25219] loop5: detected capacity change from 0 to 1764 [ 474.875089][T25210] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 475.034030][T25227] loop1: detected capacity change from 0 to 128 [ 475.041866][T25227] FAT-fs (loop1): bogus number of reserved sectors [ 475.048494][T25227] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 475.059572][T25227] FAT-fs (loop1): Can't find a valid FAT filesystem [ 475.353004][T25251] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 475.534026][T25263] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 475.540626][T25263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.557667][T25263] vhci_hcd vhci_hcd.0: Device attached [ 475.564739][T25263] __nla_validate_parse: 21 callbacks suppressed [ 475.564756][T25263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7367'. [ 475.581686][T25268] vhci_hcd: connection closed [ 475.582190][ T70] vhci_hcd vhci_hcd.5: stop threads [ 475.594646][ T70] vhci_hcd vhci_hcd.5: release socket [ 475.600327][ T70] vhci_hcd vhci_hcd.5: disconnect device [ 475.904186][T25303] loop4: detected capacity change from 0 to 512 [ 475.912927][T25303] EXT4-fs: Ignoring removed nobh option [ 475.923505][T25303] EXT4-fs (loop4): 1 orphan inode deleted [ 475.930538][T25303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.945636][T25303] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7382'. [ 475.964535][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.021285][T25313] loop4: detected capacity change from 0 to 512 [ 476.028636][T25313] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 476.047918][T25313] batadv_slave_0: Caught tx_queue_len zero misconfig [ 476.144872][T25316] loop5: detected capacity change from 0 to 512 [ 476.151904][T25316] EXT4-fs: Ignoring removed nobh option [ 476.160453][T25316] EXT4-fs (loop5): 1 orphan inode deleted [ 476.166904][T25316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.191306][T22406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.336332][T25327] FAULT_INJECTION: forcing a failure. [ 476.336332][T25327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.350204][T25327] CPU: 0 UID: 0 PID: 25327 Comm: syz.1.7391 Tainted: G W syzkaller #0 PREEMPT(full) [ 476.350245][T25327] Tainted: [W]=WARN [ 476.350254][T25327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 476.350271][T25327] Call Trace: [ 476.350290][T25327] [ 476.350299][T25327] __dump_stack+0x1d/0x30 [ 476.350328][T25327] dump_stack_lvl+0x95/0xd0 [ 476.350359][T25327] dump_stack+0x15/0x1b [ 476.350458][T25327] should_fail_ex+0x263/0x280 [ 476.350510][T25327] should_fail+0xb/0x20 [ 476.350531][T25327] should_fail_usercopy+0x1a/0x20 [ 476.350564][T25327] _copy_from_user+0x1c/0xb0 [ 476.350613][T25327] do_ipt_set_ctl+0x3a9/0x8e0 [ 476.350677][T25327] ? _raw_spin_unlock_bh+0x18/0x20 [ 476.350751][T25327] ? tcp_release_cb+0xf1/0x370 [ 476.350789][T25327] nf_setsockopt+0x199/0x1b0 [ 476.350875][T25327] ip_setsockopt+0x102/0x110 [ 476.350902][T25327] tcp_setsockopt+0x98/0xb0 [ 476.350994][T25327] sock_common_setsockopt+0x69/0x80 [ 476.351090][T25327] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 476.351156][T25327] __sys_setsockopt+0x184/0x200 [ 476.351194][T25327] __x64_sys_setsockopt+0x64/0x80 [ 476.351263][T25327] x64_sys_call+0x2327/0x3020 [ 476.351416][T25327] do_syscall_64+0x12c/0x370 [ 476.351458][T25327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.351546][T25327] RIP: 0033:0x7f5f981cc629 [ 476.351567][T25327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.351587][T25327] RSP: 002b:00007f5f96c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 476.351638][T25327] RAX: ffffffffffffffda RBX: 00007f5f98445fa0 RCX: 00007f5f981cc629 [ 476.351697][T25327] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 476.351714][T25327] RBP: 00007f5f96c27090 R08: 0000000000000480 R09: 0000000000000000 [ 476.351731][T25327] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 476.351748][T25327] R13: 00007f5f98446038 R14: 00007f5f98445fa0 R15: 00007fff57d0eb68 [ 476.351773][T25327] [ 476.881915][ T5567] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.892400][ T5567] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.943428][ T5567] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.954122][ T5567] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.009088][ T5567] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.023229][ T5567] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.100464][ T5567] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.111094][ T5567] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.206312][T25364] chnl_net:caif_netlink_parms(): no params data found [ 477.228771][ T5567] bridge_slave_1: left allmulticast mode [ 477.236273][ T5567] bridge_slave_1: left promiscuous mode [ 477.246423][T25399] IPVS: set_ctl: invalid protocol: 43 172.20.20.57:20002 [ 477.253995][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.263860][ T5567] bridge_slave_0: left allmulticast mode [ 477.269699][ T5567] bridge_slave_0: left promiscuous mode [ 477.276233][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.422556][ T5567] bond3 (unregistering): (slave bridge1): Releasing active interface [ 477.476637][ T5567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.486759][ T5567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.496862][ T5567] bond0 (unregistering): Released all slaves [ 477.504766][ T5567] bond1 (unregistering): Released all slaves [ 477.513548][ T5567] bond2 (unregistering): Released all slaves [ 477.523762][ T5567] bond3 (unregistering): Released all slaves [ 477.570597][T25364] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.579441][T25422] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7417'. [ 477.590326][T25422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7417'. [ 477.599354][ T28] kauditd_printk_skb: 588 callbacks suppressed [ 477.599374][ T28] audit: type=1400 audit(1771415991.444:5990): avc: denied { ioctl } for pid=25414 comm="syz.0.7417" path="/300/file0" dev="tmpfs" ino=1574 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 477.630168][T25364] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.638734][T25364] bridge_slave_0: entered allmulticast mode [ 477.645364][T25364] bridge_slave_0: entered promiscuous mode [ 477.652323][T25364] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.659578][ T28] audit: type=1326 audit(1771415991.463:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.0.7417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 477.683208][T25364] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.691814][T25364] bridge_slave_1: entered allmulticast mode [ 477.698507][T25364] bridge_slave_1: entered promiscuous mode [ 477.708834][ T28] audit: type=1326 audit(1771415991.463:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.0.7417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 477.751877][T25364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.775786][T25364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.787245][ T28] audit: type=1326 audit(1771415991.463:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.0.7417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 477.832692][T25364] team0: Port device team_slave_0 added [ 477.838712][ T28] audit: type=1326 audit(1771415991.463:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.0.7417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 477.863958][T25364] team0: Port device team_slave_1 added [ 477.883734][T25364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.890888][ T28] audit: type=1326 audit(1771415991.463:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.0.7417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 477.914755][T25364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.941262][ T28] audit: type=1326 audit(1771415991.463:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.0.7417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 477.965108][T25364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.977020][T25364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.984187][T25364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.011601][T25364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.042108][T25364] hsr_slave_0: entered promiscuous mode [ 478.048454][T25364] hsr_slave_1: entered promiscuous mode [ 478.054638][T25364] debugfs: 'hsr0' already exists in 'hsr' [ 478.060573][T25364] Cannot create hsr debugfs directory [ 478.133020][ T28] audit: type=1326 audit(1771415991.969:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.0.7417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 478.161119][ T5567] hsr_slave_0: left promiscuous mode [ 478.168497][ T5567] hsr_slave_1: left promiscuous mode [ 478.174705][ T28] audit: type=1326 audit(1771415991.969:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25414 comm="syz.0.7417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x7ffc0000 [ 478.214645][ T5567] veth1_macvtap: left promiscuous mode [ 478.220242][ T5567] veth0_macvtap: left promiscuous mode [ 478.225890][ T5567] veth1_vlan: left promiscuous mode [ 478.231259][ T5567] veth0_vlan: left promiscuous mode [ 478.325840][ T5567] team0 (unregistering): Port device team_slave_1 removed [ 478.335880][ T5567] team0 (unregistering): Port device team_slave_0 removed [ 478.390265][T25439] xt_nat: multiple ranges no longer supported [ 478.450836][T25446] pimreg: entered allmulticast mode [ 478.595642][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7432'. [ 478.773648][T25364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.945531][T25364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 478.969320][T25364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 478.980182][ T28] audit: type=1400 audit(1771415992.755:5999): avc: denied { map } for pid=25503 comm="syz.2.7438" path="socket:[91750]" dev="sockfs" ino=91750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 479.009485][T25364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 479.082751][T25364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.105203][T25364] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.213105][T25364] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.241013][T25364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.474541][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.481673][ T5594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.499390][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.506536][ T5594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.550754][T25517] loop4: detected capacity change from 0 to 8192 [ 479.631434][T22894] loop4: p1 p3 p4 [ 479.635509][T22894] loop4: p1 size 196608 extends beyond EOD, truncated [ 479.666849][T22894] loop4: p3 size 66846464 extends beyond EOD, truncated [ 479.673389][T25364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.682904][T22894] loop4: p4 size 479744 extends beyond EOD, truncated [ 479.706394][T25517] loop4: p1 p3 p4 [ 479.718489][T25517] loop4: p1 size 196608 extends beyond EOD, truncated [ 479.727414][T25517] loop4: p3 size 66846464 extends beyond EOD, truncated [ 479.752562][T25517] loop4: p4 size 479744 extends beyond EOD, truncated [ 479.820492][T25559] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7447'. [ 479.870031][T25568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7450'. [ 479.916311][T25364] veth0_vlan: entered promiscuous mode [ 479.942003][T25364] veth1_vlan: entered promiscuous mode [ 479.968559][T22893] udevd[22893]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 479.971177][T22894] udevd[22894]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 479.990347][T19705] udevd[19705]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 480.002771][T25364] veth0_macvtap: entered promiscuous mode [ 480.036048][T25364] veth1_macvtap: entered promiscuous mode [ 480.042811][T19705] udevd[19705]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 480.054952][T22893] udevd[22893]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 480.056033][T22894] udevd[22894]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 480.089220][T25364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.129185][T25364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.145212][T25590] netlink: 4712 bytes leftover after parsing attributes in process `syz.2.7458'. [ 480.158095][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.170364][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.179370][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.201850][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.258219][T25595] netlink: 'syz.2.7460': attribute type 39 has an invalid length. [ 480.506768][T25617] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 480.527208][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.565807][T25621] netlink: 'syz.0.7469': attribute type 7 has an invalid length. [ 480.575121][T25621] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7469'. [ 480.738694][T25632] veth1_macvtap: left promiscuous mode [ 480.745606][T25632] macsec0: entered allmulticast mode [ 480.772526][T25635] 9p: Bad value for 'wfdno' [ 480.785192][T25632] veth1_macvtap: entered promiscuous mode [ 480.793403][T25632] veth1_macvtap: entered allmulticast mode [ 480.805424][T25632] macsec0: entered promiscuous mode [ 480.869450][T25632] loop5: detected capacity change from 0 to 512 [ 480.897939][T25632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.901674][T25641] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 480.956168][T25632] EXT4-fs error (device loop5): __ext4_iget:5378: inode #3: block 127754: comm syz.5.7474: invalid block [ 480.973993][T25632] fserror_report: 12 callbacks suppressed [ 480.974192][T25632] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 480.987612][T25632] EXT4-fs error (device loop5): ext4_quota_enable:7197: comm syz.5.7474: Bad quota inode: 3, type: 0 [ 480.997603][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 480.997655][ C0] EXT4-fs (loop5): initial error at time 1771415994: __ext4_iget:5378: inode 3: block 127754 [ 480.998210][ C0] EXT4-fs (loop5): last error at time 1771415994: __ext4_iget:5378: inode 3: block 127754 [ 481.043642][T25632] loop5: lost filesystem error report for type 5 error -117 [ 481.045734][T25632] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 481.083293][T25632] EXT4-fs (loop5): mount failed [ 481.235139][T25667] dummy0: entered promiscuous mode [ 481.240990][T25667] vlan2: entered promiscuous mode [ 481.318372][T25673] random: crng reseeded on system resumption [ 481.366440][T25650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7481'. [ 481.434621][T25677] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7485'. [ 481.444269][T25650] hsr_slave_0: left promiscuous mode [ 481.450765][T25650] hsr_slave_1: left promiscuous mode [ 482.169040][T25691] erspan0: entered promiscuous mode [ 482.183611][T25691] erspan0: entered allmulticast mode [ 482.249024][T25707] netlink: 'syz.1.7496': attribute type 1 has an invalid length. [ 482.289103][T25707] netlink: 'syz.1.7496': attribute type 3 has an invalid length. [ 482.297184][T25707] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7496'. [ 482.475209][T25726] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 482.751735][T25751] netlink: 'syz.5.7513': attribute type 4 has an invalid length. [ 483.081996][T25788] netlink: 'syz.5.7528': attribute type 1 has an invalid length. [ 483.091267][T25788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7528'. [ 483.139297][ T9949] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 483.151277][T25792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7530'. [ 483.160802][ T9949] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.177501][T25792] hsr_slave_0: left promiscuous mode [ 483.195450][T25792] hsr_slave_1: left promiscuous mode [ 483.214698][T25795] fido_id[25795]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 483.310880][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 483.310897][ T28] audit: type=1326 audit(1771415996.817:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.5.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 483.357139][ T28] audit: type=1326 audit(1771415996.817:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.5.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 483.382423][ T28] audit: type=1326 audit(1771415996.817:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.5.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 483.407293][ T28] audit: type=1326 audit(1771415996.817:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.5.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 483.434014][ T28] audit: type=1326 audit(1771415996.817:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.5.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325d56c629 code=0x7ffc0000 [ 483.527700][T25815] blkio.reset_stats is deprecated [ 483.684698][T25841] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 483.705117][T25847] netlink: 220 bytes leftover after parsing attributes in process `syz.5.7553'. [ 483.718688][T25841] loop4: detected capacity change from 0 to 512 [ 483.748593][T25841] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.7551: corrupted inode contents [ 483.775979][T25841] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 483.776178][T25841] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #3: comm syz.4.7551: mark_inode_dirty error [ 483.785346][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 483.785386][ C0] EXT4-fs (loop4): initial error at time 1771415997: ext4_do_update_inode:5569: inode 3 [ 483.785419][ C0] EXT4-fs (loop4): last error at time 1771415997: ext4_do_update_inode:5569: inode 3 [ 483.822895][T25841] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 483.824383][T25841] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.7551: corrupted inode contents [ 483.869731][T25841] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 483.870009][T25841] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.7551: mark_inode_dirty error [ 483.910093][T25841] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 483.910458][T25841] Quota error (device loop4): write_blk: dquota write failed [ 483.938383][T25841] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 483.960361][T25841] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.7551: Failed to acquire dquot type 0 [ 483.998284][T25841] loop4: lost filesystem error report for type 5 error -117 [ 484.006403][T25841] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.7551: corrupted inode contents [ 484.046611][T25841] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.051359][T25841] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.7551: mark_inode_dirty error [ 484.077592][T25841] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.078408][T25841] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.7551: corrupted inode contents [ 484.100442][T25841] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.102873][T25841] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.7551: mark_inode_dirty error [ 484.135090][T25841] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.135326][T25841] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.7551: corrupted inode contents [ 484.157439][T25841] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.157598][T25841] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 484.175760][T25841] loop4: lost filesystem error report for type 5 error -117 [ 484.175989][T25841] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.7551: corrupted inode contents [ 484.196257][T25841] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.7551: mark_inode_dirty error [ 484.210735][T25841] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 484.219991][T25883] netlink: 4776 bytes leftover after parsing attributes in process `syz.5.7564'. [ 484.232061][T25841] loop4: lost filesystem error report for type 5 error -117 [ 484.235830][T25883] futex_wake_op: syz.5.7564 tries to shift op by 32; fix this program [ 484.252395][T25841] EXT4-fs (loop4): 1 truncate cleaned up [ 484.269769][T25841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.283830][T25841] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.319290][T25841] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #3: comm syz.4.7551: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 484.319290][T25841] [ 484.388304][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.464534][T25904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7574'. [ 484.542047][T25913] ip6tnl0: Caught tx_queue_len zero misconfig [ 484.647322][T25919] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 484.688376][T25921] loop4: detected capacity change from 0 to 512 [ 484.703497][T25919] loop1: detected capacity change from 0 to 512 [ 484.729398][T25921] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 484.749484][T25919] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.7580: corrupted inode contents [ 484.763822][T25921] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.7581: iget: bad i_size value: 12154757448730 [ 484.791531][T25919] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.7580: mark_inode_dirty error [ 484.802858][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 484.802885][ C1] EXT4-fs (loop1): initial error at time 1771415998: ext4_do_update_inode:5569: inode 3 [ 484.802910][ C1] EXT4-fs (loop1): last error at time 1771415998: ext4_do_update_inode:5569: inode 3 [ 484.841189][T25921] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7581: couldn't read orphan inode 13 (err -117) [ 484.853819][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 484.853840][ C0] EXT4-fs (loop4): initial error at time 1771415998: ext4_orphan_get:1391: inode 13 [ 484.853868][ C0] EXT4-fs (loop4): last error at time 1771415998: ext4_orphan_get:1391: inode 13 [ 484.890067][T25919] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.7580: corrupted inode contents [ 484.901946][T25921] loop4: lost filesystem error report for type 5 error -117 [ 484.902643][T25921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.925748][T25921] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 484.936830][T25921] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 484.951586][T25919] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.7580: mark_inode_dirty error [ 484.963472][T25910] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7576'. [ 485.028871][T25919] Quota error (device loop1): write_blk: dquota write failed [ 485.036387][T25919] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 485.073045][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.082070][T25919] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.7580: Failed to acquire dquot type 0 [ 485.082126][T25919] loop1: lost filesystem error report for type 5 error -117 [ 485.133102][T25930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7582'. [ 485.156203][T25919] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7580: corrupted inode contents [ 485.205885][T25919] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.7580: mark_inode_dirty error [ 485.234353][T25919] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7580: corrupted inode contents [ 485.259742][T25936] loop5: detected capacity change from 0 to 512 [ 485.274595][T25919] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.7580: mark_inode_dirty error [ 485.314675][T25936] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7585: invalid indirect mapped block 4294967295 (level 1) [ 485.338647][T25919] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7580: corrupted inode contents [ 485.359998][T25936] EXT4-fs (loop5): Remounting filesystem read-only [ 485.366811][T25919] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 485.375424][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 485.375443][ C1] EXT4-fs (loop5): initial error at time 1771415998: ext4_free_branches:1023: inode 11 [ 485.375480][ C1] EXT4-fs (loop5): last error at time 1771415998: ext4_free_branches:1023: inode 11 [ 485.403212][T25936] EXT4-fs (loop5): 2 truncates cleaned up [ 485.409531][T25936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.456921][T25919] loop1: lost filesystem error report for type 5 error -117 [ 485.458082][T25919] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.7580: corrupted inode contents [ 485.527098][T25919] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.7580: mark_inode_dirty error [ 485.531778][T22406] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.548545][T25919] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 485.559333][T25953] loop4: detected capacity change from 0 to 1024 [ 485.565928][T25919] loop1: lost filesystem error report for type 5 error -117 [ 485.566379][T25919] EXT4-fs (loop1): 1 truncate cleaned up [ 485.586771][T25919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.620084][T25919] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.643813][T25953] erspan0: left promiscuous mode [ 485.665345][T25364] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.699378][T25953] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.706654][T25953] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.732700][T25953] wg1: left promiscuous mode [ 485.751334][T25970] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 485.801075][T25953] ip6erspan0: left promiscuous mode [ 485.809602][T25953] wireguard0: left promiscuous mode [ 485.825768][ T5567] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.866732][ T5567] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.881856][T25974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6146 sclass=netlink_route_socket pid=25974 comm=syz.2.7602 [ 485.897986][ T5567] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.911174][ T5567] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.921655][T25981] SET target dimension over the limit! [ 485.991920][T25978] loop4: detected capacity change from 0 to 512 [ 486.054188][T25978] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 486.186134][T25978] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 486.270098][T25978] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7601: bg 0: block 248: padding at end of block bitmap is not set [ 486.330041][T25978] loop4: lost filesystem error report for type 5 error -117 [ 486.332113][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 486.347124][ C1] EXT4-fs (loop4): last error at time 1771415999: ext4_validate_block_bitmap:441 [ 486.366144][T25978] Quota error (device loop4): write_blk: dquota write failed [ 486.381644][T25978] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.7601: Failed to acquire dquot type 1 [ 486.429143][T25978] loop4: lost filesystem error report for type 5 error -117 [ 486.457273][T25978] EXT4-fs (loop4): 1 truncate cleaned up [ 486.532183][T25999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.559114][T25978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 486.612141][T25978] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.7601: deleted inode referenced: 12 [ 486.649047][T26000] batadv_slave_1: entered promiscuous mode [ 486.669877][T21761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 486.872238][T25999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.238904][T25999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.322862][T25998] batadv_slave_1: left promiscuous mode [ 487.378555][T25999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.397330][T26023] siw: device registration error -23 [ 487.497956][ T5162] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.510185][ T5162] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.531923][ T5162] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.556147][T26037] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 487.557146][ T5162] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.648814][T26048] __nla_validate_parse: 6 callbacks suppressed [ 487.648831][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7632'. [ 487.703413][T26048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7632'. [ 487.743940][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7632'. [ 487.769244][T26048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7632'. [ 487.796921][ T5162] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.819810][ T5162] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.854055][ T5162] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.881207][ T5162] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.894716][T26053] loop5: detected capacity change from 0 to 256 [ 487.914157][T26053] FAT-fs (loop5): Directory bread(block 64) failed [ 487.920821][T26053] FAT-fs (loop5): Directory bread(block 65) failed [ 487.927455][T26053] FAT-fs (loop5): Directory bread(block 66) failed [ 487.933984][T26053] FAT-fs (loop5): Directory bread(block 67) failed [ 487.940629][T26053] FAT-fs (loop5): Directory bread(block 68) failed [ 487.947269][T26053] FAT-fs (loop5): Directory bread(block 69) failed [ 487.953869][T26053] FAT-fs (loop5): Directory bread(block 70) failed [ 487.960410][T26053] FAT-fs (loop5): Directory bread(block 71) failed [ 487.967114][T26053] FAT-fs (loop5): Directory bread(block 72) failed [ 487.973655][T26053] FAT-fs (loop5): Directory bread(block 73) failed [ 488.193917][T26069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7641'. [ 488.272888][T26062] lo: Caught tx_queue_len zero misconfig [ 488.446498][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7647'. [ 488.528624][T26089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7651'. [ 488.543491][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7649'. [ 488.627282][T26102] tipc: Enabling of bearer rejected, failed to enable media [ 488.794292][T26115] tipc: Enabling of bearer rejected, failed to enable media [ 489.066306][T26122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.548843][T26129] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7667'. [ 489.820128][T26131] loop1: detected capacity change from 0 to 8192 [ 489.828905][T26153] FAULT_INJECTION: forcing a failure. [ 489.828905][T26153] name failslab, interval 1, probability 0, space 0, times 0 [ 489.844882][T26153] CPU: 0 UID: 0 PID: 26153 Comm: syz.4.7678 Tainted: G W syzkaller #0 PREEMPT(full) [ 489.844986][T26153] Tainted: [W]=WARN [ 489.844994][T26153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.845010][T26153] Call Trace: [ 489.845080][T26153] [ 489.845090][T26153] __dump_stack+0x1d/0x30 [ 489.845123][T26153] dump_stack_lvl+0x95/0xd0 [ 489.845153][T26153] dump_stack+0x15/0x1b [ 489.845188][T26153] should_fail_ex+0x263/0x280 [ 489.845287][T26153] should_failslab+0x8c/0xb0 [ 489.845320][T26153] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 489.845343][T26153] ? sidtab_sid2str_get+0xa0/0x130 [ 489.845404][T26153] kmemdup_noprof+0x2b/0x70 [ 489.845511][T26153] sidtab_sid2str_get+0xa0/0x130 [ 489.845554][T26153] security_sid_to_context_core+0x1eb/0x2e0 [ 489.845666][T26153] security_sid_to_context+0x27/0x40 [ 489.845810][T26153] selinux_lsm_getattr+0x1c2/0x230 [ 489.845838][T26153] selinux_getselfattr+0x4d/0xd0 [ 489.845867][T26153] security_getselfattr+0x24d/0x500 [ 489.845902][T26153] __x64_sys_lsm_get_self_attr+0x51/0x60 [ 489.845946][T26153] x64_sys_call+0x1b6f/0x3020 [ 489.846028][T26153] do_syscall_64+0x12c/0x370 [ 489.846068][T26153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.846096][T26153] RIP: 0033:0x7f650a35c629 [ 489.846115][T26153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.846188][T26153] RSP: 002b:00007f6508daf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 489.846273][T26153] RAX: ffffffffffffffda RBX: 00007f650a5d5fa0 RCX: 00007f650a35c629 [ 489.846363][T26153] RDX: 0000200000000540 RSI: 0000000000000000 RDI: 0000000000000064 [ 489.846379][T26153] RBP: 00007f6508daf090 R08: 0000000000000000 R09: 0000000000000000 [ 489.846394][T26153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.846406][T26153] R13: 00007f650a5d6038 R14: 00007f650a5d5fa0 R15: 00007ffcca131c88 [ 489.846427][T26153] [ 490.271479][T26171] tipc: Started in network mode [ 490.276777][T26171] tipc: Node identity ac14140f, cluster identity 4711 [ 490.283780][T26171] tipc: New replicast peer: 255.255.255.255 [ 490.286342][T26172] netlink: 'syz.4.7682': attribute type 39 has an invalid length. [ 490.291038][T26171] tipc: Enabled bearer , priority 10 [ 490.406872][T26184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7689'. [ 490.453446][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 490.453501][ T28] audit: type=1326 audit(1771416003.499:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.0.7690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d5855c629 code=0x0 [ 490.873830][T26204] netlink: 'syz.2.7698': attribute type 1 has an invalid length. [ 490.940306][T26207] loop1: detected capacity change from 0 to 128 [ 491.732666][ T5419] tipc: Node number set to 2886997007 [ 492.262269][ T28] audit: type=1400 audit(1771416004.706:6054): avc: denied { unmount } for pid=25364 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 492.294304][ T28] audit: type=1326 audit(1771416005.052:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.2.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 492.321426][T26225] siw: device registration error -23 [ 492.331201][ T28] audit: type=1326 audit(1771416005.052:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.2.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 492.354844][ T28] audit: type=1326 audit(1771416005.052:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.2.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 492.378669][ T28] audit: type=1326 audit(1771416005.052:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.2.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 492.402903][ T28] audit: type=1326 audit(1771416005.052:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.2.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 492.428466][ T28] audit: type=1326 audit(1771416005.052:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.2.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 492.452395][ T28] audit: type=1326 audit(1771416005.052:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.2.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 492.477294][ T28] audit: type=1326 audit(1771416005.062:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.2.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a25ec629 code=0x7ffc0000 [ 492.719273][T26239] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 492.732894][ T5162] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.742093][ T5162] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.751614][ T5162] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.760613][ T5162] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 493.113196][T26271] loop5: detected capacity change from 0 to 512 [ 493.122778][T26271] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 493.135657][T26271] FAT-fs (loop5): FAT read failed (blocknr 1568) [ 493.251224][T26297] __nla_validate_parse: 1 callbacks suppressed [ 493.251241][T26297] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7729'. [ 493.458478][T26301] loop4: detected capacity change from 0 to 8192 [ 493.587005][T26304] tmpfs: Unknown parameter 'nrAblocÅKkks' [ 493.598065][T26304] loop1: detected capacity change from 0 to 512 [ 493.605974][T26304] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.620851][T26304] EXT4-fs (loop1): orphan cleanup on readonly fs [ 493.629020][T26304] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7731: bg 0: block 248: padding at end of block bitmap is not set [ 493.643503][T26304] loop1: lost filesystem error report for type 5 error -117 [ 493.648788][T26304] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.7731: Failed to acquire dquot type 1 [ 493.661908][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 493.668754][T26304] loop1: lost filesystem error report for type 5 error -117 [ 493.674110][ C0] EXT4-fs (loop1): last error at time 1771416006: ext4_validate_block_bitmap:441 [ 493.692653][T26304] EXT4-fs (loop1): 1 truncate cleaned up [ 493.699880][T26304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 493.728821][T26302] ================================================================== [ 493.737044][T26302] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 493.744213][T26302] [ 493.746539][T26302] write to 0xffff88810b4275dc of 2 bytes by task 26301 on cpu 1: [ 493.754275][T26302] fat16_ent_put+0x28/0x60 [ 493.758743][T26302] fat_alloc_clusters+0x57b/0xc50 [ 493.763781][T26302] fat_get_block+0x258/0x5e0 [ 493.768375][T26302] __block_write_begin_int+0x400/0xf90 [ 493.773839][T26302] cont_write_begin+0x5fe/0x970 [ 493.778709][T26302] fat_write_begin+0x4f/0xe0 [ 493.783314][T26302] generic_perform_write+0x183/0x490 [ 493.788626][T26302] __generic_file_write_iter+0x9e/0x120 [ 493.794200][T26302] generic_file_write_iter+0x8d/0x310 [ 493.799592][T26302] vfs_write+0x5a6/0x9f0 [ 493.803859][T26302] ksys_write+0xdc/0x1a0 [ 493.808125][T26302] __x64_sys_write+0x40/0x50 [ 493.812751][T26302] x64_sys_call+0x27e1/0x3020 [ 493.817445][T26302] do_syscall_64+0x12c/0x370 [ 493.822080][T26302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.828030][T26302] [ 493.830364][T26302] read to 0xffff88810b427400 of 512 bytes by task 26302 on cpu 0: [ 493.838167][T26302] fat_mirror_bhs+0x1df/0x320 [ 493.842869][T26302] fat_alloc_clusters+0xb48/0xc50 [ 493.847918][T26302] fat_get_block+0x258/0x5e0 [ 493.852510][T26302] __block_write_begin_int+0x400/0xf90 [ 493.857980][T26302] cont_write_begin+0x5fe/0x970 [ 493.862845][T26302] fat_write_begin+0x4f/0xe0 [ 493.867455][T26302] generic_perform_write+0x183/0x490 [ 493.872753][T26302] __generic_file_write_iter+0x9e/0x120 [ 493.878321][T26302] generic_file_write_iter+0x8d/0x310 [ 493.883704][T26302] do_iter_readv_writev+0x4fd/0x5a0 [ 493.888936][T26302] vfs_writev+0x2e1/0x900 [ 493.893300][T26302] __se_sys_pwritev2+0xfc/0x1c0 [ 493.898147][T26302] __x64_sys_pwritev2+0x67/0x80 [ 493.903032][T26302] x64_sys_call+0xe07/0x3020 [ 493.907633][T26302] do_syscall_64+0x12c/0x370 [ 493.912246][T26302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.918168][T26302] [ 493.920506][T26302] Reported by Kernel Concurrency Sanitizer on: [ 493.926676][T26302] CPU: 0 UID: 0 PID: 26302 Comm: syz.4.7730 Tainted: G W syzkaller #0 PREEMPT(full) [ 493.937614][T26302] Tainted: [W]=WARN [ 493.941426][T26302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.951483][T26302] ================================================================== [ 494.003282][T25364] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.