last executing test programs: 3m8.671264968s ago: executing program 1 (id=56): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xa}, 0x10, 0x5, 0x43a1bd77, 0x7, 0xaa4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 3m8.462155102s ago: executing program 1 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) keyctl$clear(0x7, r1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20400040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$eJzs3UFrHG0dAPD/THbft2nzuql6qAXbYitJ0W6SxrbBQ1UQPRXUeq8x2YaQTbYkm7YJRVP8AIKICl705EXwAwjSjyBCQe+iooi2evBQHdnd2Zimu0lKN7uY/f3gycwzOzv/559lnp1nZtgJYGhdiojJiMiyLLsaEaV8eZqX2GmVxnovXzxZaJQksuzu35JI8mXtbb2fT8/kbzsVEV/7csQ3kzfjbmxtr8xXq5X1vD5VX01eZdn2teXV+aXKUmVtdnbm5tytuRtz0z3Jczwibn/xTz/47s++dPtXn370+3t/mfxWK8GWvXn0Uiv1YvN/0VaIiPXjCDYghWaGLTcG3BYAAA7WON7/cER8IiKuRilGmkdzAAAAwEmSfW4sXiWt638AAADAyZRGxFgkaTm/33cs0rRcbt3D+9E4nVZrG/VPZaXd8wXjUUzvL1cr0/m9A+NRTBr1mfwe23b9+r76bEScjYjvl0ab9fJCrbo40DMfAAAAMDzO7Bv//7PUGv8DAAAAJ8z4oBsAAAAAHDvjfwAAADj5jP8BAADgRPvKnTuNkrWff734cGtzpfbw2mJlY6W8urlQXqitPygv1WpLzd/sWz1se9Va7cFnYm3z8VS9slGf2tjavrda21yr31t+7RHYAAAAQB+dvfjsd0lE7Hx2NI2ILNnzWjEiG9m7cqH/7QOOT/o2K//x+NoB9N/IoBsADIxDehhexUE3ABi4w/qBrjfv/Lr3bQEAAI7HxMd2r/83CzA83mtNkmTQDQH6zvV/GF6u/8PwKh50BGBQACdeeoRd/d2v/2fZWzUKAADoubFmSdJyPg4YizQtlyM+aD4WoJjcX65WpiPiQxHx21Lx/UZ9pvnOxOkBAAAAAAAAAAAAAAAAAAAAAAAAADiiLEsi62J0dx0AAADg/1lE+uckf/7XROnK2P7zA+8l/ypF/pzwRz+++8PH8/X6+kxj+d93l9d/lC+/3u+zFwAAAEAn7XF6exwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL308sWThXbpZ9y/fiEixjvFL8Sp5vRUFCPi9D+SKOx5XxIRIz2Iv/M0Is51ip80mhXjeSv2x08jYnTA8c/0ID4Ms2eN/ufznfa/NC41p533v0Je3lX3/i/d7f9GuvR/H3TaYPrmovPPfzHVNf7TiPOFzv1PO37SJf7lI+b4ja9vb3d7LftpxETH75/ktVhTSeHB1MbW9rXl1fmlylJlbXZ25ubcrbkbc9NT95erlfxvxxjf+/gv/3NQ/qe7xB8/JP8rR8z/388fv/hIa7a476Vi/CTLJi93/vzPdYnf/u77ZP5xN+oT7fmd1vxeF37+mwsXD8h/sUv+h33+k0fM/+pXv/OHI64KAPTBxtb2yny1Wlk3Y+bYZkajj0Hn46B12gexfWjPt/NQ77qdrDSI/XSAnRIAAHAs/nfQP+iWAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gUgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONB/AwAA//8Wqcqf") 3m8.331375731s ago: executing program 1 (id=62): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)={0x28, 0x11, 0x1, 0x400000, 0x0, "", [@nested={0x18, 0x2, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x4}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 3m8.278078585s ago: executing program 1 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000001900)='./file0\x00', 0x4) r0 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000175000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x7888d000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x8d0, 0xf0, 0x0, 0xffffffff, 0x0, 0x0, 0x800, 0x800, 0xffffffff, 0x800, 0x800, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@private=0xa010100, @gre_key=0x407, @gre_key=0xffff}}}, {{@uncond, 0x0, 0x318, 0x360, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x8, 0x5], 0x2, 0x2, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private0, @local, @empty, @private0={0xfc, 0x0, '\x00', 0x1}], 0xd}}, @common=@rt={{0x138}, {0x6, [0x5, 0x101], 0x80000000, 0x20, 0x1, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2, @private0, @mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, @private2, @ipv4={'\x00', '\xff\xff', @empty}, @private2, @empty, @private2], 0xc}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @port=0x4e21, @icmp_id=0x66}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff, 0xff000000, 0xffffffff], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'veth0_vlan\x00', 'batadv0\x00', {0xff}, {0xff}, 0x2c, 0x10, 0x2, 0x58}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"71cb"}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x270, 0x2b8, 0x0, {}, [@common=@srh1={{0x90}, {0x9, 0x5, 0x9, 0x6, 0x96, @loopback, @mcast2, @empty, [0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0xffffffff, 0x0, 0xffffff00], 0x1000, 0x200}}, @common=@rt={{0x138}, {0x400, [0x7, 0xc], 0x6, 0x10, 0x3, [@local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00', @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @local], 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv6=@mcast1, @ipv4=@local, @icmp_id=0x65, @gre_key=0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x930) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 3m8.035537871s ago: executing program 1 (id=64): keyctl$set_reqkey_keyring(0xe, 0x4) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xff6, &(0x7f0000000cc0)=""/4086, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x4a8e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m7.76433332s ago: executing program 1 (id=67): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000010000ed0000000000000000850000006e00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118c00000000008510000002000000850000008a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r6 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0x4}) getdents64(r1, 0x0, 0xffffffffffffff53) write$P9_RFLUSH(r1, 0x0, 0x0) io_setup(0x9, &(0x7f0000004180)=0x0) r8 = socket$unix(0x1, 0x2, 0x0) io_submit(r7, 0x1, &(0x7f0000005400)=[&(0x7f00000042c0)={0x0, 0x0, 0x0, 0x2, 0x1, r8, &(0x7f00000041c0), 0x0, 0x6351}]) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@empty, @loopback}, &(0x7f00000000c0)=0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x19, &(0x7f0000000280)=0x6, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x3) 3m7.698244165s ago: executing program 32 (id=67): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000010000ed0000000000000000850000006e00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118c00000000008510000002000000850000008a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r6 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0x4}) getdents64(r1, 0x0, 0xffffffffffffff53) write$P9_RFLUSH(r1, 0x0, 0x0) io_setup(0x9, &(0x7f0000004180)=0x0) r8 = socket$unix(0x1, 0x2, 0x0) io_submit(r7, 0x1, &(0x7f0000005400)=[&(0x7f00000042c0)={0x0, 0x0, 0x0, 0x2, 0x1, r8, &(0x7f00000041c0), 0x0, 0x6351}]) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@empty, @loopback}, &(0x7f00000000c0)=0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x19, &(0x7f0000000280)=0x6, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x3) 2m39.14563358s ago: executing program 2 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 2m38.823487442s ago: executing program 2 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m38.742731328s ago: executing program 2 (id=327): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000006c0)={r0, &(0x7f0000000400)='l2tp\x00', 0x0, &(0x7f0000000440)={@_ha_fsid={[0x80000001, 0x6]}, {0x7f, 0x7, 0x1}}, 0xf, &(0x7f0000000480), &(0x7f00000004c0)=0x4}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbe05}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0xffff, 0xb}, {0x9, 0x3}, {0x9, 0x1}}}, 0x24}}, 0x0) r3 = socket(0x28, 0x5, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x521, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa6}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x5) 2m38.607766707s ago: executing program 2 (id=328): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) (async) rename(&(0x7f0000000440)='./bus\x00', &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) syz_clone3(&(0x7f0000000240)={0x1e6102400, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2m38.315423337s ago: executing program 2 (id=333): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6003000000462f00fc000000000000000000000000000000ff0200000200000000000001042081000000892f"], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{r2, &(0x7f0000000100)='](\x00', 0x80000, &(0x7f0000000140)={@align=0x2, {0x7fb, 0x0, 0x2, 0x4}}, 0x7, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000002c0)=0x3}, 0x1, &(0x7f0000000680)=[{0x3, 0x9, &(0x7f0000000340)='\x00', &(0x7f0000000580)="6de57e487228f659b33fd8e3573e7f519c497385832cff1370f1591e85ed4acc9ef7bde87f528cca542367f7de4f5e9b551a52f13a34652f79dc65f67820da778e63bc23c0b72a4226f9c10d25171b695a80b27240d7356bc008cc89ac8301b5b515f5e6b90d9f734733bbbed9d7b6fc5d52260917d210e869d86e1452e468a6a84eaaf90e7009eb389e402d6eb9bdb630902d0c2dae3752a200c790a8e607ef5eca0c512b799d44d96ab786737fe63c4343074814dad3798e657ff805436e639065bcecc0", 0xc5, 0x18}]}) bind$tipc(r3, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0x1}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x18, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x406cc10}, 0x8000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89b0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2m37.919285444s ago: executing program 2 (id=341): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3f, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) unshare(0x24020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r3, 0x0, 0x0, 0x40102, 0x6, 0x3b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x14, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = dup2(r4, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$TUNSETOWNER(r6, 0x400454cc, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6b4493479d552e7c}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r7, @ANYBLOB="01002abd7000ffdbdf250400000008000600010000000400038090a38b80140006000000000000000000000000000000000006000400eb000000140002006772657461703000000000000000000014000600fc02000000000000000000000000000014000600fc0100000000000000000000000000001400020076657468305f6d616376746170000000080001000100000005000800010000000800010000000000050008000a0000000800060009000000080005000000008028000180140003000a010102000000000000000000000000070006006468000008000b00736970000c0002800800080007000000"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x4004005) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r8, &(0x7f0000000880)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x48}}], 0x1, 0x45) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10011, &(0x7f0000000180), 0xc, 0x5fc, &(0x7f00000004c0)="$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") 2m37.909248775s ago: executing program 33 (id=341): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3f, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) unshare(0x24020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r3, 0x0, 0x0, 0x40102, 0x6, 0x3b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x14, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = dup2(r4, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$TUNSETOWNER(r6, 0x400454cc, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6b4493479d552e7c}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r7, @ANYBLOB="01002abd7000ffdbdf250400000008000600010000000400038090a38b80140006000000000000000000000000000000000006000400eb000000140002006772657461703000000000000000000014000600fc02000000000000000000000000000014000600fc0100000000000000000000000000001400020076657468305f6d616376746170000000080001000100000005000800010000000800010000000000050008000a0000000800060009000000080005000000008028000180140003000a010102000000000000000000000000070006006468000008000b00736970000c0002800800080007000000"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x4004005) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r8, &(0x7f0000000880)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x48}}], 0x1, 0x45) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10011, &(0x7f0000000180), 0xc, 0x5fc, &(0x7f00000004c0)="$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") 8.571580318s ago: executing program 5 (id=1573): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000009, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x101000c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfd, 0x64e, &(0x7f0000019200)="$eJzs3c9v2+Ydx/EPZdlWPCAYtqEIgjR5mqyAg2WKJDcOhOwwjaJkdpIokPRgAwOKrLELI3K6JRmw+NL6sh9A9w/sMvSyw667D9h5/8WOA4rtNmCHcSApWbJ+O5XtrXm/DIePyC/5fB8+Dh9QEkkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZdrVQKFpquK3tHTOZXfW95pTl6daWdTct3J1Zr2TFv8rldC2dde1b/cVvxf/c1o301Q3l4klOR1976+uPvpnN9NafktDr0Fk3+OLV0dPHnc7e8wUncsEea7TlysyxYt1puYHnNit1x7iBZ8qbm4X7W7XA1NyGE+wGodM0tu9kQs836/ZdUyyXN4yT3/W2W/VqpeFI6cyH3y0VCpvm/dVu999/Px/YW26j4bbqyYrx4jjmofnsx2mIk+3GbsxKcv+gs1ecJ6g0K6hUKJWKxVKpuPmg/OBhoZAdmVEYopGIhf/R4v/MYg7cwAJk4vH/b5bUUE4tbWtHZuyPrap8eWpOWN7VG//fve9MrXdw/O+N8tf6i68rGf9vpq9uThr/J+RiZJIVxi2xJsx/vZ8XeqUjPdVjddTRnp4vZru3FpfhOf5kpLqUlVwF8uSqqYrqcmS6c4zK2tSmCvpAW6opkFFNrhpyFGhXgUI5aiZ94stRRaE8+TJal627MiqqrLI2ZOQor1152lZLdVVV0b+iKNrXQbzfp/0lSN0gFecJKk0JmjT+/+ST9O+U8f9N1zt+zRMDXLrIrkr69Kyr3TqfbAAAAAAAwHmwknffreSz+7clRaq5Dadw2WkBAAAAAIAFis/8dSOeLMelt2VNOP+PLj43AAAAAACwGFZyjZ0laW25O2tfB/pPtKd5vgSwdM7pAQAAAACABUg+/7+5IkXJvdduyTq5EwoXAQAAAAAA8BXx64F77Gd799iNeh/rZyQF7VXrz/9Ylb9sHbd3vm0dVuIllcNuzMg3AMLadetq90a9yWRFUvLKdpat/oMBrOQ3l774Yn/Wvf4tfyiBlaXe2xcjCfxJ0kACm9nutvSZ3klj3unW++Qoo2RJWstazW04edtrPCqqUrmaCZ2d8OfPDn4h+Sft3D/o7OU//LjzJMnlOJ51fBjn8cmpdDLjd0Y/l5fJ/RaSay7GtfiKar0qf9NqrllJvYVe+5dUOcwMVjStA/p1/lK305jba+l07ajXA0n7c3H7i/mky/qtT+4OYfWzKA63fFxHTMgil2RxJ425s34nnfTy62bxnSWplB/tA38wi9JgFrP3hfXPkX0xI4t4X2zEWfwl3tCELDbOlsVIjwDAZdnvj0LJTcxH77E/PO6+zlFu9uj+/dO1vPxdlF5wuCRlu59NTK0lp/iIvp7GrCg5sGavjzmiF7rjSk4TjuiFLzG6xXX9sf8MpG7aI1n8O4qiR8Wk3t8Ojaqfxyt8PrHeoFFainfh/ZeHP01ugB/7aO+jvWel0sZm4b1C4UFJy0kzuhPGHgDAGLOfsTMzwnrv5Kz6yd/fTUunRrxvnHylIK8P9bE6eqJ7vUcI3Bq/1bWBryHcGz1rjWOvSEOxv1/WvaGzuk97bz6kY+nAdksnsb0LH4bPAPuxG+fcCwAAXKzbM8bhecb/e73z7vXrY8+7T4/lw08InhRbvOA9AQDAm8Pxv7DWwl9Zvu+2PyiWy8VKuOUY37N/aHy3WneM2wod396qtOqOafte6Nlew7R9rbpVJzDBdrvt+aGpeb5pe4G7kzz53XQf/R44zUordO2g3XAqgWNsrxVW7NBU3cA27e0fNNxgy/GTlYO2Y7s1166Ertcygbft207emMBxBgLdqtMK3ZobF1um7bvNir9rfuQ1tpuOqTqB7bvt0Es32KvLbdU8v5lsNq9o3PcFAAB447x4dfT0caez93xK4VizY7qFlXEbvOw2AgCA0xilAQAAAAAAAAAAAAAAAAAAAAD43zfP9X9nKiyPu1hQOpnzs6tzbcfSohM7SyHz+qv/dUrMlZM5vd0/GHM8s4ooiqLFtlRpIbv4fXhFmv+y0QUUvref7tGJMfHCsYtWT/oiu/j/DnHh2R8mLIr7c/rqq6f34cq0Bp4uZCU9X/kSXXA5xyMAF+e/AQAA///XGkSc") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781209183f250000000000000400330000e0000001ac1414aa04186371af368e17"], 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x154b8, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r0, 0x400, 0x0) setxattr$security_capability(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) 8.411352068s ago: executing program 3 (id=1576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x181084a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 8.040150043s ago: executing program 5 (id=1579): chroot(&(0x7f0000000100)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) wait4(0x0, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@netfilter={0xa, 0x0, 0xfffffffa}}, 0x20) chmod(0x0, 0x15) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e0000000000000000001c000280180003801000018004000300080001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.982849507s ago: executing program 5 (id=1580): chroot(&(0x7f0000000100)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) wait4(0x0, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@netfilter={0xa, 0x0, 0xfffffffa}}, 0x20) chmod(0x0, 0x15) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e0000000000000000001c000280180003801000018004000300080001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.93053621s ago: executing program 5 (id=1581): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, 0x0, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.772535331s ago: executing program 3 (id=1582): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x1514, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x14e4, 0x2, [@TCA_BASIC_POLICE={0x1080, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xdb, 0x5, 0x3, 0x0, 0x7, 0xb, 0x9e2e, 0x4, 0x3, 0x5e0a, 0x4a9e, 0x4, 0x3, 0x2, 0x800, 0x24, 0x6, 0x1, 0x8, 0x8, 0x2, 0x4, 0x8, 0x98000000, 0xf, 0x5, 0x80000000, 0x2, 0x5, 0xa, 0x9, 0x2, 0xb9, 0xffff, 0x101, 0x5ee4, 0x400, 0xb, 0x2, 0x6, 0x4, 0x6, 0xc681, 0x3, 0xfa6, 0xf, 0x5, 0xfffffffc, 0x4, 0x800, 0x7, 0x9, 0x5, 0x4, 0x9, 0x629, 0x344, 0x6, 0x7, 0x0, 0xd, 0x3, 0x6, 0xb2a0, 0x2, 0x7, 0x101, 0x1ff, 0x800, 0x1, 0x1, 0x3, 0x4, 0x8, 0xfa44, 0xc47, 0x3, 0x26, 0x6cf109c7, 0x101, 0x40, 0x9, 0x200, 0x9, 0x3, 0x4, 0xfffffffd, 0x5, 0xb431, 0x3, 0x800, 0x8, 0x8, 0x7, 0x314, 0xa, 0xa8b, 0xffff, 0x1, 0xa987, 0x5, 0x6, 0x5, 0xfff, 0x7, 0xa, 0x4, 0x5, 0x4, 0x2, 0x100, 0x3, 0xffff, 0x6, 0x3, 0x0, 0xffffffff, 0x2, 0x10, 0x200, 0x6, 0x8, 0x62, 0x3, 0x5, 0x3e6b, 0x37b, 0x2, 0x6, 0x80, 0xac9c, 0x40, 0x5, 0x6, 0xe3, 0x5, 0x172, 0x800, 0x2, 0x3c, 0x8, 0x8, 0x7, 0xe, 0x0, 0x2, 0x38e5, 0x2, 0x5, 0x1340000, 0x1, 0x3, 0x5, 0x8a, 0x3, 0x1ff, 0x4, 0x9783, 0x8, 0xc61, 0x2, 0x2, 0xf420, 0x1f1, 0x2, 0x9, 0x1ff, 0x3, 0x9, 0x3, 0x2, 0x8001, 0x4, 0xff, 0xf8f, 0x0, 0xa, 0x7, 0x9, 0x1000, 0x1, 0xf7, 0x80000001, 0x0, 0x5, 0x0, 0xb05, 0xe, 0x737, 0x7, 0xf99, 0x10001, 0x1, 0x1, 0x1ff, 0x6, 0x1, 0x3, 0x0, 0x8, 0x10000, 0x4, 0x848, 0x9, 0xe9, 0x8, 0x8001, 0x4, 0x0, 0x8, 0xc, 0x8, 0xd3, 0x1ff, 0xde76, 0x9, 0x2, 0x2, 0x6, 0x80000000, 0xb, 0x6, 0x401, 0x23, 0x50000000, 0xffffffff, 0x5, 0x7, 0x9, 0x100, 0x100, 0x7fffffff, 0x0, 0x7, 0x6, 0x9, 0x2, 0x0, 0x7fff, 0x40c00, 0x6, 0x10001, 0x9, 0x0, 0x0, 0x8e3, 0xffff, 0xd53, 0x9a0d, 0x8, 0x101, 0xffffffff, 0x1000, 0x4, 0x9, 0x7fffffff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x4, 0x1, 0x80000, 0xffffffde, 0x2, 0x4, 0x401, 0x7, 0x14c, 0x3, 0xfffffffb, 0x5, 0x9, 0x6, 0x84b, 0x10001, 0x0, 0xb8, 0x4, 0x78, 0xb, 0x6, 0x6, 0x1, 0x7, 0x8, 0x3, 0x2, 0x7, 0x8, 0x7, 0x8000, 0x1, 0x49, 0x1ff, 0xffffffff, 0x1744d884, 0xff, 0x400, 0xffff, 0xa3, 0x1, 0xa3, 0x3, 0x3f6e, 0xa, 0x1, 0x8, 0x7f, 0x9, 0x1, 0x36, 0x4, 0x4, 0x580, 0xe, 0x9, 0x2c, 0x2aae, 0x155e, 0x9, 0x8, 0x81, 0x200, 0x8, 0x200, 0x10000, 0x9, 0x5, 0x5, 0x100, 0x3, 0x0, 0x7ff, 0x99, 0x1, 0x1, 0xbf1, 0x5, 0xffffffe9, 0x8, 0x85d3, 0x2, 0x8, 0x0, 0x6, 0x0, 0x8, 0xffffff80, 0xfffffff7, 0x2, 0xfffffffb, 0x8000, 0x5, 0x2df71002, 0x9, 0x3, 0x1, 0x7, 0x1, 0x200, 0x3, 0x6, 0x3, 0x1, 0x200, 0x8, 0x4, 0x1, 0xa67, 0x1, 0x1, 0x142, 0x64, 0x1, 0x5, 0x9, 0x8, 0x1, 0x5bd8, 0x4, 0x4, 0x7, 0x6, 0x9, 0x8, 0xfffffffa, 0xfffffc01, 0xfffffe04, 0x100, 0x6, 0x75, 0xd, 0x1000, 0x1, 0x2, 0x7, 0x4, 0x0, 0x7a, 0x8, 0x6, 0x9, 0xffffffff, 0x8, 0x80000000, 0x3, 0x6, 0x3, 0xff, 0x0, 0x0, 0x6, 0x3, 0x40, 0x0, 0x8, 0x40, 0x0, 0xffff, 0x401, 0x5, 0xfffffffb, 0x4, 0x7, 0x7, 0x8, 0x9, 0x6, 0x0, 0x4, 0xffffff53, 0x8, 0x7, 0x8, 0x9, 0x1, 0x4, 0xf, 0x3, 0x6, 0xff, 0x6, 0x3, 0x3, 0x9, 0x2, 0xffffffff, 0x6176, 0x9, 0x7, 0x7, 0x8, 0x881, 0x9, 0xc, 0x2, 0x400, 0x101, 0x8, 0x8, 0x8000, 0x9, 0x2, 0x5, 0xba000000, 0x25f00000, 0x1ff, 0xca, 0x3, 0x1ff, 0xc0, 0x4, 0x505, 0x1, 0x2, 0x2d, 0x3, 0xd, 0x1901, 0x400000, 0x3f2, 0x0, 0xb7, 0x5, 0x6, 0x81, 0xfffffffe, 0x10, 0x2, 0x5, 0x1, 0x8, 0x80000000, 0x0, 0x10000, 0xe, 0xa0e9, 0x2, 0x2, 0xff, 0x800, 0x80, 0x2, 0x101, 0x3, 0x100, 0xb, 0xa85]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x1, 0x0, 0x40, 0xb, {0xd2, 0x2, 0x9, 0x28af, 0x4, 0x4a3}, {0x4, 0x0, 0x2, 0x6, 0x1000, 0x4e06}, 0xfffffffe, 0x7, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xfffffff5, 0x9, 0x5, 0x10000, 0x2, 0x0, 0x8c, 0x9, 0x4, 0x7, 0x800, 0x80, 0x8, 0x2, 0x2, 0xf42a, 0x5, 0x147, 0x2, 0xffff, 0x2, 0x9, 0x80000000, 0x8, 0xe83b, 0xa81, 0xd, 0x7, 0x6, 0xfffffffe, 0x1, 0x3, 0x40, 0xffffffff, 0x8, 0x4, 0x573, 0x4, 0xf151, 0x5c60, 0x6, 0x4b, 0x5, 0xe, 0x2, 0xfffffbc7, 0x1, 0x9, 0x6, 0x7, 0x7f, 0xccd, 0x2, 0x9, 0x1, 0x6, 0x13bf, 0xfffffff7, 0x1e8, 0x7fff, 0xfa90, 0xf77d, 0x100, 0x2, 0x9, 0x6, 0xfffffffa, 0x101, 0x80000001, 0x6, 0x0, 0xff, 0x9, 0x7, 0xa65, 0x3, 0x7, 0x7, 0x0, 0x119, 0x4, 0x10, 0x3, 0xfffffffa, 0xfffffef8, 0x34, 0x7e0a, 0x5, 0x2, 0xaf9c, 0x1, 0x3, 0x4, 0xfff, 0x3, 0x0, 0x9, 0x2, 0x3, 0xbb, 0xfffff801, 0x8001, 0x0, 0x3, 0x7ff, 0x7, 0xbf, 0x3, 0x7fffffff, 0x3, 0x8, 0x38, 0xb, 0x8001, 0xe, 0x1, 0x8, 0x465f, 0x6, 0x10001, 0x2, 0x9, 0x80, 0x400, 0xb, 0x5, 0xcdf, 0x0, 0x1, 0x1, 0x6, 0x0, 0x4, 0xfffffff7, 0x2, 0x3, 0x9, 0x5, 0xfffffff9, 0x7, 0x5f, 0x6, 0x7, 0x0, 0xfffffffd, 0x3, 0x101, 0x2, 0x1ff, 0x9, 0x4, 0x1ff, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5, 0x9, 0x8, 0x9, 0xb, 0x6028, 0x7, 0x4, 0x7, 0x80000000, 0x42, 0x5, 0x5, 0x8, 0xc0, 0x2, 0xc, 0x2, 0x5, 0x3, 0x1, 0x3bc, 0x3c4, 0x0, 0x18, 0xfffff800, 0x2, 0x190, 0x3, 0x6, 0x1, 0xfff, 0xfff, 0x5, 0x1, 0xfffffffb, 0x4, 0x7fff8000, 0x9, 0x60, 0x2, 0x5, 0x5, 0x0, 0x80, 0x7d, 0x6920, 0xec6, 0x0, 0x1, 0x7f, 0x1, 0x3, 0x9, 0x6, 0x8, 0x5, 0xffff, 0x7, 0x100, 0x6, 0x80000, 0x2, 0x1, 0x42, 0x6, 0x1, 0x4, 0xfffffff8, 0x400, 0x7, 0x80000000, 0x80000000, 0x7f, 0x3, 0x80000000, 0x4, 0x7, 0x6, 0x0, 0x5, 0x101, 0x6, 0x82bde831, 0x26f, 0x5, 0xffff, 0x4fb, 0x9, 0x0, 0x0, 0x1, 0xfffffff8, 0x3, 0x7, 0x1, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x10000, 0x6, 0x200, 0x8, 0x5, 0x3, 0x26, 0x8, 0x8001, 0x9, 0x80000001, 0x1, 0x1, 0x9, 0x7fffffff, 0x1, 0x9, 0x7fffffff, 0x9, 0x2, 0x5ce, 0x101, 0x7, 0x10001, 0x6, 0xfffffffd, 0x0, 0xa, 0x7, 0x6, 0x9, 0x7, 0x8, 0x2, 0x8, 0x1abe, 0x3, 0x5, 0x3ff, 0x1, 0x401, 0x6, 0x4, 0x4, 0x1, 0x3, 0x1, 0x6dc, 0x0, 0x1, 0xdc5, 0xfffffff7, 0x4, 0x74, 0x7, 0x6, 0x7, 0x7, 0x7, 0x0, 0x0, 0x8, 0x1, 0x1, 0x80000001, 0x400000, 0x8, 0x8, 0x5, 0xffffff00, 0x18, 0x9, 0x8, 0xffff8000, 0x0, 0x10, 0x7fff, 0x6677, 0xd4e8, 0x60000000, 0x4, 0x1, 0x7, 0x6, 0x6, 0x5, 0x0, 0x0, 0x4, 0x6, 0x2fd, 0x10, 0x8, 0x4, 0x1, 0x3, 0xfffff670, 0x1, 0x5, 0x0, 0x2, 0x6100, 0x6, 0x800, 0x1d, 0x1, 0x100, 0x7ed, 0x7, 0x9, 0x4, 0xf, 0x5, 0x80000001, 0x0, 0x3, 0x7fffffff, 0x74, 0xfffffffa, 0x0, 0x6, 0x33a, 0x40, 0x1, 0xc14, 0xf, 0x9, 0x1, 0x7f, 0xecf7, 0x8, 0x7fff, 0x4ebf, 0x7ff, 0x8, 0x6, 0x1, 0xffff7fff, 0x401, 0xfff, 0x1, 0x2, 0xd, 0x1ff, 0x40, 0x8, 0x3, 0x8, 0x1000, 0x9, 0xc79, 0x283, 0x7, 0x3, 0xffff, 0x5, 0xa, 0x6, 0x4, 0x3, 0xb, 0x10, 0xfffffff7, 0x7fff, 0x10000, 0x9, 0x5, 0x9, 0x9, 0x3ff, 0x6, 0xf897, 0x7980, 0xffff, 0x0, 0x6, 0x9, 0xf9, 0x7fffffff, 0x7fff, 0xe149, 0xfa8a, 0x1, 0x29, 0x2, 0x80, 0x3, 0x8, 0x66, 0x6, 0x1, 0x401, 0x6, 0x0, 0x2, 0x63c, 0x0, 0x80000001, 0x7, 0x0, 0x4, 0x2, 0xb, 0x5, 0x7, 0x5, 0x10001, 0x634e, 0x3, 0x5, 0x80000001, 0xd, 0x7ff, 0x3, 0x53df26bd, 0x3, 0x2, 0xf27, 0x7fff, 0x5, 0x7, 0x8, 0x2, 0xfffffffb, 0x1, 0x9660, 0x3, 0x6, 0x4f, 0xe5, 0x8, 0x7, 0x7, 0x81, 0x2, 0xe6, 0x5, 0x6, 0x73d, 0x5, 0x1, 0x977, 0x4af580, 0x3a, 0x101, 0x8, 0xd71d, 0xe, 0x7fff, 0x2, 0x0, 0x40, 0x5, 0x6]}]}, @TCA_BASIC_POLICE={0x460, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0x2, 0x2, 0x200, 0x1, 0x9, 0x19bb, 0xffe, 0xffff0000, 0x8, 0x5, 0x1, 0xb, 0x7, 0x816e, 0x6bc6, 0x8, 0x10, 0x4, 0xb35, 0x8, 0xc, 0x6, 0x1, 0x7, 0x4, 0x5, 0x7f, 0x200, 0x9, 0x9, 0x6, 0x4, 0x7, 0xffffff46, 0x8, 0xc, 0x90, 0x7, 0x5, 0xfffffff3, 0x6, 0xa, 0x1, 0x40, 0x4, 0x1, 0x0, 0x7, 0x1, 0x6, 0x7, 0x2, 0xa, 0x7, 0x8, 0x1, 0x0, 0x401, 0x4, 0x6, 0x4, 0x40, 0x10001, 0x2, 0xffff0000, 0x1, 0x0, 0x9, 0x5, 0x6, 0x5, 0xf, 0xfff, 0x800, 0xf, 0x2, 0xc0000, 0x5, 0x7, 0x3, 0x8000, 0x1, 0x146, 0x2, 0xeaf, 0x16, 0x6, 0x8, 0x0, 0x8, 0x4, 0xff, 0x9, 0x795322b2, 0x0, 0x5, 0x2, 0x1, 0x4, 0x5, 0x9, 0x9, 0x2, 0x8, 0x4, 0x9, 0x1f31e2cf, 0x10002, 0xfffffffd, 0x0, 0x1, 0x800, 0x9, 0x1, 0x4, 0x8, 0x6, 0xea00, 0x1, 0x8001, 0xfffffffa, 0x0, 0x9, 0x3ff, 0x7, 0xa4, 0x5, 0x9, 0x98, 0x5, 0x80000, 0x5, 0x3, 0x2, 0x3c, 0x400, 0x0, 0x6, 0x2, 0x3, 0x461, 0x7, 0x2, 0x6e6, 0x2, 0x774, 0x39ec, 0x4, 0xfffffff5, 0x4, 0x98d, 0xb225, 0x10001, 0x7f, 0x500, 0x7, 0xfff, 0xfffffff9, 0x7, 0x3, 0x4, 0x8, 0x8, 0xa10dc80b, 0x10000, 0xf, 0x3, 0x6, 0xfff, 0x4, 0x3, 0x800, 0x5, 0x4, 0x101, 0x855f, 0x5, 0x9, 0x8, 0x4, 0x2, 0x5, 0x0, 0x6, 0x1ff, 0x1000, 0x5, 0x2, 0x5, 0x7, 0x65d4, 0x7, 0x4, 0x9, 0x5, 0x5ed7, 0xcdfc, 0xcd4e, 0x97, 0x57271486, 0x6, 0x3ff, 0x9b67, 0x0, 0x40000, 0x8001, 0xe3, 0x4, 0x3ff, 0x7a84, 0x3ff, 0x8, 0x8, 0x1, 0x4, 0xd, 0x8, 0x9, 0x17435008, 0x10000, 0x8, 0x401, 0x5, 0x5, 0xfffffffd, 0x4, 0x80, 0x9, 0xb, 0x4, 0x8001, 0x0, 0x10001, 0x7, 0xfffffff1, 0xfffffff9, 0x0, 0x400, 0x6, 0x7, 0x7, 0xfffffff8, 0x1000, 0xb, 0x2, 0x4, 0x0, 0x81, 0x3, 0x6, 0x2, 0x4, 0x0, 0xbb0]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x7, 0x4, 0x1b274486, {0x3, 0xc14fb362c0180c34, 0x0, 0x80, 0x400, 0x400}, {0x0, 0x2, 0x6, 0x5, 0x7, 0x1}, 0x1, 0x0, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}]}}]}, 0x1514}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a0010005d"], 0x1c}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00002005000000050000000900000001fd2ad5fc407bf2969bb8d3816110c49149e1d9be95afee951114b4661e1b1eaac172d913c888f98fe82b5edce01c8f8634e985d4197d493742b4b316bb3651c836d98688e6e411b9c8200fbe67b8bfe56588f56489f6a9cf70b28beef50742e873e37bcde2bde6df1b634d012ca8b753ad7d0f6e88ca8b439410b9bd0b7257ffdd63a9e09fbeb0ed93644e2a1c697d4dc9c2f1e98b4efa05c1d7be660dc29193bc5192b90c9c006119783b835217cf012d0f996b26219b0fdac2"], 0x48) socket(0x18, 0xa, 0x9) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r10, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r12, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000001d40)=ANY=[@ANYBLOB="aaaa02aaaaaa00000000000008004512005800650000002f9078ac1414aa000000000c21880b0000000100000800050086dd080088be000000011a02f180010000000000000a080022eb000000022005230602000000000004000006000b0800655800000002"], 0x0) 7.727458514s ago: executing program 5 (id=1583): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x20, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 7.572197834s ago: executing program 0 (id=1584): connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socket(0x23, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@grpjquota}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@dax_inode}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 7.521365797s ago: executing program 3 (id=1585): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 6.776199438s ago: executing program 3 (id=1591): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0xe5, 0x5, 0xd, 0x0, 0x3, 0x10, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x3e, 0x1, 0x3, 0x3, 0x8001, 0x8, 0x9, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000cc0)={0x40000000, &(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f00000003c0), {0x1f}, &(0x7f00000004c0)=""/74, 0x4a, &(0x7f0000000400)=""/62, 0x0}, 0x58) perf_event_open(0x0, r1, 0x2, r0, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000040000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000"]}, 0x108) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090400000000070000fe65ecf48cd42b8f362d921aa554c7f9259f2502"], 0x20}, 0x1, 0x7}, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="be2357af9349caec", 0x8}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000008009800000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) 6.44162647s ago: executing program 0 (id=1595): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3) ioctl$FIBMAP(r0, 0x2201, &(0x7f0000000040)=0x85) 6.362693635s ago: executing program 0 (id=1598): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r1 = socket$packet(0x11, 0xa, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40054) r2 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xe4}, 0x1, 0x0, 0x0, 0x8400}, 0x4008048) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffd) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 5.730305997s ago: executing program 6 (id=1602): openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mount$tmpfs(0x0, 0x0, 0x0, 0x181084a, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) 5.570403868s ago: executing program 6 (id=1603): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000009, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x101000c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfd, 0x64e, &(0x7f0000019200)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781209183f250000000000000400330000e0000001ac1414aa04186371af368e17"], 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x154b8, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r0, 0x400, 0x0) setxattr$security_capability(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) 5.432065927s ago: executing program 5 (id=1605): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r0, &(0x7f0000000180)={0x1f, 0x37, 0x1, {0x2, 0x8000000000000001, 0xc9, r1, 0x1, '\x00'}}, 0x1f) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x10808, &(0x7f0000000c00), 0x1, 0xb88, &(0x7f0000002380)="$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") (async) r6 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) r7 = socket(0x2, 0x80805, 0x0) (async) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x4}, 0x1000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r5], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) (async) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[], 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000040)) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) ftruncate(r6, 0x2007ffc) (async) sendfile(r6, r6, 0x0, 0x800000009) 5.24129554s ago: executing program 6 (id=1610): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069118a0000000000851000000200000085000d0005000000950000000f0000009500a50500000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000014060000000000449c34dcf74b", 0x24}, {&(0x7f0000000240)="a1260000000000000a05b02164db6cf2317819fbd3efa2803ddb86f4b161ea1a090fc7cf737247e986a7", 0x2a}], 0x2) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = memfd_create(&(0x7f0000000380)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[a\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1151, 0xe) fcntl$addseals(r4, 0x409, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private2}]}}]}, 0x50}}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) futex(0x0, 0x85, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x31000000) fstatfs(r3, &(0x7f0000000140)=""/83) 5.005745846s ago: executing program 4 (id=1614): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0xc627, 0x81, @local, 0x6ae9}, @in={0x2, 0x4e20, @private=0xa010101}], 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e23, 0xffffa1c7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x8, 0x80, @mcast1, 0x81}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x6}, @in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf6}, @in={0x2, 0x4e20, @local}], 0xd0) 4.874927545s ago: executing program 4 (id=1615): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 4.588804883s ago: executing program 3 (id=1616): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0xf5ff, 0x0, 0x0, 0x0) 4.383398927s ago: executing program 6 (id=1617): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000000), 0x0, 0x4d8, &(0x7f0000000bc0)="$eJzs3M9vVNUeAPDvnU4L5cdrH4/3niBKFY0ooaUFlQULMZq40MTEDS5rWxAp1LTVCCFSXeDSkLg3Jm5M/Atc6caoKxO2uDckxLABNSZj7sy902lnpkzLdMbSzyeZuefce+fe8+WeM5xzT+cGsGkNpW9JxI6IuBERpYEGOwxVFndvX574/fbliSRKpTd+S9KPxZ3blyfyXZNsuT3PLCxdX2vu4qVz49PTU7NZfmT+/LsjcxcvHT57fvzM1JmpC2PHjx87Ovr8c2PPNi98b+txpmW6s/fDmX17Xnnz2msTp6699ePXSR7/kjjeb/2gKxtqsK4nTzzZrrP8Q+wsv/eX35NivrbQvQLRkrRCFrOmdCMGoieqFy8G4uWPu1o4YF2VSqXSlqZbB7M9Mkm2rF0HbGBJy625V7uHB0r2H30SsTCRjoFrx/Obwa2TlQFQGvfd7FXZUqyOXnur49v2S0dbpxb++Dx9xeJ9iL51Oh0AQHx7srLM+36L/b9CsXa/F8r3gyt3hP4dEbsi4j8RsTsi/hsR/4uI/0fEQzWfaTTvs9zySZL6/mfh5poCa9GtQxEnsrmtpf2/6tzFYE+W21mOvzc5fXZ66khE/CsiDkbvljQ/2ujg32WLl65/mq2p69cN1fT/0ld6/rwvmJXjZnHZDbrJ8fnxdsSeuvVRxN5io/iT6kxAeh33RMTe/Ws7x9lnvtrXbNu9419BcW3lqVX6IuKpyvVfiGXx55KV5ydHtsb01JGRvFbU++nnq6/n6St5ojJVdn/xt0F6/bc1rP/V+AeT2vnaudWf4+ovnzQdU7ZY/5e0m7T+9yVLm9IH4/Pzs6MRfcmr5Xxf+RsrXR/1+40t7p/Gf/BA4/a/Kxb/JR6OiLQSPxIRj0bE/qzsj0XE4xFxYIX4f3jxiXfWHv/6SuOfvPf1f/vp6vVvmsjntus29Zz7/pvylvySDa4QfxINrv+xcupgtqaV778VSzp7P7UZAAAANp5CROyIpDBcTRcKw8OVv5ffHdsK0zNz84dOz7x3YbLyG4HB6C3kd7oGqvdDY2E0G9bn90fHluWPZveNP+vpL+eHJ2amJ7sdPGxy25u0/9SvPd0uHbDu2jCPBmxQa23/pVLpSpuLAnTYlyPdLgHQLfr/sHk1aP/9y/LNnxEAbGjFBpmagf1fi78TBh40zfr/1ztcDqDzjP9h89L+YfNq1v5PHO5wQYBOyn4JX4yWfi2/Ton0+6fpPj0Rcc/jbOlomUulrfVPOehEoq+NB9yx/CkJA6s7ThRWedKkto5tXcUzGuoS0cW6upbEn9nDNlv/1LalzbP1c6VNaba/eWtqPdHlLyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA2+TsAAP//B6nYVQ==") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setresuid(0x0, 0xee00, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = socket(0x21, 0x2, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000c80)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@can_newroute={0x34, 0x18, 0x1, 0x30bd29, 0x25dfdbfc, {0x1d, 0x1, 0x1}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x7, 0x2, 0x0, 0x0, "918a76e1efa19e91"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x5, 0xfffffffffffffffe, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$x25(r0, &(0x7f0000000040), 0x12) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r3, 0x84, 0xd, 0xfffffffffffffffe, &(0x7f00000001c0)=0xa68a82ff4a24a702) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1411, 0x300, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x60}}, 0x20000000) r5 = fcntl$getown(r1, 0x9) fcntl$lock(r4, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x1, 0xfffffffffffffffb, r5}) 3.623838198s ago: executing program 6 (id=1618): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, 0x0, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.636826974s ago: executing program 4 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.564008629s ago: executing program 4 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000140)={0x7fc, 0x800, 0x2, 0x9, 0x6, 0x75037dd5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4004e1e}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, r0, 0x3, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000400)) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.563649629s ago: executing program 3 (id=1621): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1a) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x130, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_PAYLOAD={0xe3, 0xa, "1f40f8b62a601e11f8675875e2883a2d3cf6bf13ecbe3e05768fc7b2f309973eff7cb89e58b4728ece62ccbdd37e5eb0c55e38630f5a90590c06a0a1275e5def659ac85a15dc1219e6efbf01b8637ced5ebf2d11ccbd7548f6b83347627329ec28ab30e2cc612a701f237132b78ec45d39257742cb04f43412bd67adef9e108ce59138ff7a463f37f8882894ff211acc4ad7ac23a37b8e973ee8a0fdb656d2b15eb1f6f96c05d75b29d714689b08ac1802ac2f7d34c090b68f66398efda7624e51eb71946b5ce22c61c535107a91edc22a94f793e378d870afee9c0de0d83d"}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x90}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xd41}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40010}, 0x4c084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011500000000000000001c000000000000000000000014"], 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000098affe24d57b7bf4977a26de00ff000016748c7a45981be50000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x560d, 0x0) syz_io_uring_setup(0x56b7, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x4}, &(0x7f0000000640), &(0x7f0000000080), &(0x7f0000000000)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x404c045}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x10) r7 = syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0xc386, 0x3010, 0x2, 0x200004}, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000000)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003b0007010000000000000009027c0000040000001400018006000600803500000500510000000000"], 0x2c}}, 0x0) fsopen(&(0x7f0000000600)='hostfs\x00', 0x0) r9 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000080)={0xe000201b}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r7, &(0x7f00000000c0)={0x20000010}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000140000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r10}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r2, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)=r3}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="009945d0b8256a18"], &(0x7f0000000280)='GPL\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x40f00, 0x2d, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000001ac0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001b00)={0x4, 0x0, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001c00)=[r2, r2, r0, r2, 0x1, r2, r2, r10, r11], &(0x7f0000001c40)=[{0x1, 0x5, 0x3, 0x8}, {0x5, 0x1, 0x5, 0xa}, {0x1, 0x1, 0x2, 0x43e74c243ddaf4b4}, {0x3, 0x4, 0x5, 0xb}], 0x10, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r3}, 0xc) 2.563347689s ago: executing program 6 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x401, 0x9, 0xfffffff9, 0x20b, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r4, 0x100) r5 = dup(r4) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x2000}, 0x44040) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9) r7 = socket$inet6(0xa, 0x3, 0xff) socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001040)={0x0, r7}, 0x8) 1.415594006s ago: executing program 0 (id=1623): chroot(&(0x7f0000000100)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) wait4(0x0, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@netfilter={0xa, 0x0, 0xfffffffa}}, 0x20) chmod(0x0, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01030003000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e0000000000000000001c000280180003801000018004000300080001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 127.578422ms ago: executing program 0 (id=1624): openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x181084a, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) 125.069482ms ago: executing program 4 (id=1625): r0 = socket$inet(0xa, 0x4, 0x200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0xff03, 0x3f0, 0x308, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty, 0x2}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x640100fd, @rand_addr=0x64010101, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) 81.077815ms ago: executing program 0 (id=1626): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002540)=ANY=[@ANYBLOB="7c000000010101020000000000000000020000045c0002800600034000030000140001802a000100ac1414bb08000200ac14141f14000180080001000a010100080002000a0101010c00028005000100210000001400018008000100e0000001080002007f00000106000340000400000c00198008000200", @ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8050) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffff7ff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x404c004) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x81, 0xfffc, 0x0, 0x3, 0x6, 0xd, 0x487, 0x80000001, 0x0}, &(0x7f0000000a00)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000a40)=@sack_info={r4, 0x7, 0xccf}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400b59527bd7000000000000a800400", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x10, 0x20, 0x8, 0x0, {{0xd, 0x4, 0x1, 0x27, 0x34, 0x65, 0x0, 0xa, 0x2f, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x4a, [@broadcast, @loopback, @private=0xa010101, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x1f}]}]}}}}}) signalfd4(r0, &(0x7f0000000980)={[0x7]}, 0x8, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000003000000040000000400000040200000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000fc8a01feacbcde80f00"/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 0s ago: executing program 4 (id=1627): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) flock(r2, 0xc) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xa) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000019240)={0x0, "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"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000191c0)=0x5a006ce7) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000019480)=ANY=[@ANYBLOB="34000701103d0fbf6785c3a2067f758c8326b2b96605d2743a0553b5c1fb562c1e62476b45efe9868857869793e682396368775bb1d88e9ddd3fb3c2df79479a4d8ed84e78119071652b0180fa394ba04bc5812845ba97469c9475c465f9ebd4438852eb0e62c07dbfdbb959f216171a00080b28ec297b82b9e8e6", @ANYRES16=r5, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000019080)={0x1, 0x80, 0x0, 0x0, 0x94, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xc}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7fffffff) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000019100)={'raw\x00', 0x0, [0x2, 0xc0, 0xf, 0x7, 0xfe]}, &(0x7f0000019180)=0x54) r10 = openat(r0, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) ioctl$F2FS_IOC_GET_FEATURES(r10, 0x8004f50c, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r12) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="030025bd700000dcdf2501"], 0x24}}, 0x4000080) syz_genetlink_get_family_id$nfc(&(0x7f0000019200), r11) kernel console output (not intermixed with test programs): ): ext4_orphan_get:1402: comm syz.5.653: couldn't read orphan inode 15 (err -117) [ 119.626260][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 119.626281][ C1] EXT4-fs (loop5): initial error at time 1775425748: ext4_orphan_get:1397: inode 15 [ 119.626311][ C1] EXT4-fs (loop5): last error at time 1775425748: ext4_orphan_get:1397: inode 15 [ 119.664263][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 119.676401][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 119.687279][ T6034] loop5: lost filesystem error report for type 5 error -117 [ 119.687942][ T6034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.817173][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.653'. [ 120.290148][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.302436][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.310737][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.353894][ T6044] netlink: 14 bytes leftover after parsing attributes in process `syz.6.654'. [ 120.363222][ T6044] hsr_slave_0: left promiscuous mode [ 120.369004][ T6044] hsr_slave_1: left promiscuous mode [ 120.785454][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.826096][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.145013][ T6076] loop3: detected capacity change from 0 to 164 [ 121.216865][ T6076] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 121.312479][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.537316][ T6091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.890556][ T6103] loop6: detected capacity change from 0 to 512 [ 121.899414][ T6103] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.916603][ T6103] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 121.925659][ T6103] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 121.935282][ T6103] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 121.944036][ T6103] System zones: 0-2, 18-18, 34-35 [ 121.950025][ T6103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.998797][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.533918][ T6108] loop6: detected capacity change from 0 to 164 [ 122.624885][ T6108] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 123.006904][ T6114] loop3: detected capacity change from 0 to 512 [ 123.026306][ T6124] loop0: detected capacity change from 0 to 256 [ 123.045153][ T6114] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 123.058899][ T6125] xt_hashlimit: size too large, truncated to 1048576 [ 123.101145][ T6114] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 123.121790][ T6114] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.679: Corrupt directory, running e2fsck is recommended [ 123.149346][ T6114] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 123.159696][ T6130] bridge0: entered promiscuous mode [ 123.162245][ T6114] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.679: corrupted in-inode xattr: e_name out of bounds [ 123.179755][ T6114] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.182224][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 123.198655][ C1] EXT4-fs (loop3): initial error at time 1775425751: ext4_iget_extra_inode:5040: inode 15 [ 123.209506][ C1] EXT4-fs (loop3): last error at time 1775425751: ext4_iget_extra_inode:5040: inode 15 [ 123.220684][ T6114] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.679: couldn't read orphan inode 15 (err -117) [ 123.234717][ T6114] loop3: lost filesystem error report for type 5 error -117 [ 123.241412][ T6114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.268511][ T6114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.638453][ T6136] __nla_validate_parse: 5 callbacks suppressed [ 123.638540][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 123.656741][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 123.688382][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.5.692'. [ 123.731448][ T6156] loop3: detected capacity change from 0 to 2048 [ 123.789419][ T6156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.811406][ T6156] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.693'. [ 123.958625][ T6167] netlink: 72 bytes leftover after parsing attributes in process `syz.0.695'. [ 123.977137][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 123.996429][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'. [ 124.436392][ T3498] net_ratelimit: 10 callbacks suppressed [ 124.436412][ T3498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.482268][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.496411][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.762316][ T6192] loop6: detected capacity change from 0 to 512 [ 124.770907][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'. [ 124.808822][ T6208] IPVS: set_ctl: invalid protocol: 78 10.1.1.0:52769 [ 125.036782][ T6216] FAULT_INJECTION: forcing a failure. [ 125.036782][ T6216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.050642][ T6216] CPU: 0 UID: 0 PID: 6216 Comm: syz.6.710 Not tainted syzkaller #0 PREEMPT(full) [ 125.050674][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.050697][ T6216] Call Trace: [ 125.050705][ T6216] [ 125.050721][ T6216] __dump_stack+0x1d/0x30 [ 125.050751][ T6216] dump_stack_lvl+0x95/0xd0 [ 125.050782][ T6216] dump_stack+0x15/0x1b [ 125.050810][ T6216] should_fail_ex+0x263/0x280 [ 125.050838][ T6216] should_fail+0xb/0x20 [ 125.050934][ T6216] should_fail_usercopy+0x1a/0x20 [ 125.050963][ T6216] _copy_to_user+0x20/0xa0 [ 125.051131][ T6216] simple_read_from_buffer+0xb5/0x130 [ 125.051162][ T6216] proc_fail_nth_read+0x10e/0x150 [ 125.051237][ T6216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.051276][ T6216] vfs_read+0x1ab/0x7f0 [ 125.051374][ T6216] ? __rcu_read_unlock+0x4e/0x70 [ 125.051455][ T6216] ? __fget_files+0x184/0x1c0 [ 125.051479][ T6216] ? mutex_lock+0x57/0x90 [ 125.051535][ T6216] ksys_read+0xdc/0x1a0 [ 125.051567][ T6216] __x64_sys_read+0x40/0x50 [ 125.051583][ T6216] x64_sys_call+0x2886/0x3020 [ 125.051613][ T6216] do_syscall_64+0x12c/0x370 [ 125.051646][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.051681][ T6216] RIP: 0033:0x7fd637e3d04e [ 125.051696][ T6216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 125.051732][ T6216] RSP: 002b:00007fd6368d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.051753][ T6216] RAX: ffffffffffffffda RBX: 00007fd6368d76c0 RCX: 00007fd637e3d04e [ 125.051772][ T6216] RDX: 000000000000000f RSI: 00007fd6368d70a0 RDI: 0000000000000004 [ 125.051788][ T6216] RBP: 00007fd6368d7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.051822][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.051834][ T6216] R13: 00007fd6380f6038 R14: 00007fd6380f5fa0 R15: 00007ffebd8c9258 [ 125.051852][ T6216] [ 125.299976][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 125.315518][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 125.346724][ T6220] ipt_REJECT: ECHOREPLY no longer supported. [ 125.394560][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 125.394572][ T28] audit: type=1400 audit(1775425753.823:840): avc: denied { bind } for pid=6219 comm="syz.5.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.485700][ T6222] loop6: detected capacity change from 0 to 164 [ 125.749192][ T3670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 125.789495][ T3670] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.795259][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.822305][ T6231] loop3: detected capacity change from 0 to 1024 [ 125.863881][ T6222] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 125.872664][ T6231] EXT4-fs: Ignoring removed bh option [ 125.898215][ T6231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.971821][ T6250] xt_hashlimit: size too large, truncated to 1048576 [ 125.981844][ T28] audit: type=1400 audit(1775425754.413:841): avc: denied { setattr } for pid=6227 comm="syz.3.713" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.017917][ T28] audit: type=1400 audit(1775425754.413:842): avc: denied { rename } for pid=6227 comm="syz.3.713" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.079007][ T28] audit: type=1400 audit(1775425754.413:843): avc: denied { unlink } for pid=6227 comm="syz.3.713" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.103098][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.243287][ T6262] loop5: detected capacity change from 0 to 128 [ 126.322293][ T28] audit: type=1400 audit(1775425754.723:844): avc: denied { mounton } for pid=6261 comm="syz.5.721" path="/111/file0/file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 126.396929][ T28] audit: type=1400 audit(1775425754.723:845): avc: denied { getopt } for pid=6261 comm="syz.5.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.426087][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.440804][ T28] audit: type=1400 audit(1775425754.723:846): avc: denied { unmount } for pid=6261 comm="syz.5.721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 126.502689][ T6270] bond2 (unregistering): Released all slaves [ 126.773669][ T6281] loop6: detected capacity change from 0 to 512 [ 126.825368][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.859376][ T6292] FAULT_INJECTION: forcing a failure. [ 126.859376][ T6292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.878885][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.5.731 Not tainted syzkaller #0 PREEMPT(full) [ 126.878914][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 126.878927][ T6292] Call Trace: [ 126.878933][ T6292] [ 126.878940][ T6292] __dump_stack+0x1d/0x30 [ 126.879053][ T6292] dump_stack_lvl+0x95/0xd0 [ 126.879159][ T6292] dump_stack+0x15/0x1b [ 126.879187][ T6292] should_fail_ex+0x263/0x280 [ 126.879220][ T6292] should_fail+0xb/0x20 [ 126.879394][ T6292] should_fail_usercopy+0x1a/0x20 [ 126.879429][ T6292] _copy_from_user+0x1c/0xb0 [ 126.879467][ T6292] rfkill_fop_write+0xab/0x4a0 [ 126.879505][ T6292] ? __pfx_rfkill_fop_write+0x10/0x10 [ 126.879572][ T6292] vfs_write+0x269/0x9f0 [ 126.879593][ T6292] ? __rcu_read_unlock+0x4e/0x70 [ 126.879612][ T6292] ? __fget_files+0x184/0x1c0 [ 126.879638][ T6292] ksys_write+0xdc/0x1a0 [ 126.879658][ T6292] __x64_sys_write+0x40/0x50 [ 126.879694][ T6292] x64_sys_call+0x27e1/0x3020 [ 126.879729][ T6292] do_syscall_64+0x12c/0x370 [ 126.879819][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.879841][ T6292] RIP: 0033:0x7ff5d148c819 [ 126.879932][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.879953][ T6292] RSP: 002b:00007ff5cfee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.879976][ T6292] RAX: ffffffffffffffda RBX: 00007ff5d1705fa0 RCX: 00007ff5d148c819 [ 126.880016][ T6292] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 126.880028][ T6292] RBP: 00007ff5cfee7090 R08: 0000000000000000 R09: 0000000000000000 [ 126.880041][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.880053][ T6292] R13: 00007ff5d1706038 R14: 00007ff5d1705fa0 R15: 00007ffe3469dbe8 [ 126.880072][ T6292] [ 127.209078][ T6314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=6314 comm=syz.4.740 [ 127.297155][ T6315] netlink: 'syz.4.740': attribute type 1 has an invalid length. [ 127.352166][ T28] audit: type=1400 audit(1775425755.773:847): avc: denied { create } for pid=6308 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 127.521761][ T6316] loop6: detected capacity change from 0 to 512 [ 127.614133][ T6316] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 127.623484][ T6316] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 127.639651][ T6316] EXT4-fs (loop6): 1 truncate cleaned up [ 127.654524][ T6316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.805774][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.871316][ T3395] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.907665][ T6329] loop5: detected capacity change from 0 to 1024 [ 127.938766][ T6329] EXT4-fs: Ignoring removed bh option [ 128.044782][ T6329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.346347][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.354502][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.402819][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.478063][ T6341] netlink: 'syz.5.743': attribute type 1 has an invalid length. [ 129.170457][ T6344] __nla_validate_parse: 7 callbacks suppressed [ 129.170556][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 129.187680][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.744'. [ 129.415025][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.532631][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.691766][ T6348] loop0: detected capacity change from 0 to 512 [ 129.940585][ T6368] loop6: detected capacity change from 0 to 128 [ 129.962516][ T6368] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.975205][ T6368] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.056780][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 130.119265][ T3395] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.146030][ T3395] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.160317][ T6379] loop5: detected capacity change from 0 to 1024 [ 130.181645][ T6379] EXT4-fs: Ignoring removed bh option [ 130.188544][ T6379] /dev/loop5: Can't open blockdev [ 130.258268][ T6385] fido_id[6385]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.324417][ T28] audit: type=1400 audit(1775425758.753:848): avc: denied { read } for pid=6390 comm="syz.5.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 130.503702][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.627165][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.761'. [ 130.730234][ T4749] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.870925][ T6402] bridge0: port 3(batadv1) entered blocking state [ 130.898699][ T6402] bridge0: port 3(batadv1) entered disabled state [ 130.924158][ T6399] loop5: detected capacity change from 0 to 512 [ 131.027314][ T6402] batadv1: entered allmulticast mode [ 131.034639][ T6402] batadv1: entered promiscuous mode [ 131.258065][ T6419] loop5: detected capacity change from 0 to 512 [ 131.355465][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.770'. [ 131.373804][ T5592] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 131.383247][ T5592] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 131.395846][ T3395] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 131.401187][ T3498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.424639][ T6422] loop3: detected capacity change from 0 to 1024 [ 131.431534][ T6422] EXT4-fs: Ignoring removed bh option [ 131.437661][ T3395] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.525149][ T6422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.576042][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.838037][ T6438] fido_id[6438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.111695][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.154674][ T28] audit: type=1400 audit(1775425760.583:849): avc: denied { compute_member } for pid=6455 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 132.196496][ T6456] loop3: detected capacity change from 0 to 4096 [ 132.226592][ T6456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.264574][ T28] audit: type=1400 audit(1775425760.693:850): avc: denied { getopt } for pid=6455 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.363906][ T28] audit: type=1400 audit(1775425760.783:851): avc: denied { firmware_load } for pid=6455 comm="syz.3.779" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 132.432504][ T6469] FAULT_INJECTION: forcing a failure. [ 132.432504][ T6469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.452264][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.6.784 Not tainted syzkaller #0 PREEMPT(full) [ 132.452299][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.452316][ T6469] Call Trace: [ 132.452325][ T6469] [ 132.452373][ T6469] __dump_stack+0x1d/0x30 [ 132.452409][ T6469] dump_stack_lvl+0x95/0xd0 [ 132.452439][ T6469] dump_stack+0x15/0x1b [ 132.452468][ T6469] should_fail_ex+0x263/0x280 [ 132.452524][ T6469] should_fail+0xb/0x20 [ 132.452551][ T6469] should_fail_usercopy+0x1a/0x20 [ 132.452582][ T6469] _copy_from_user+0x1c/0xb0 [ 132.452618][ T6469] __copy_msghdr+0x244/0x300 [ 132.452719][ T6469] ___sys_sendmsg+0x10c/0x1e0 [ 132.452752][ T6469] __x64_sys_sendmsg+0xd4/0x160 [ 132.452775][ T6469] x64_sys_call+0x194c/0x3020 [ 132.452882][ T6469] do_syscall_64+0x12c/0x370 [ 132.452986][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.453009][ T6469] RIP: 0033:0x7fd637e7c819 [ 132.453024][ T6469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.453043][ T6469] RSP: 002b:00007fd6368d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.453063][ T6469] RAX: ffffffffffffffda RBX: 00007fd6380f5fa0 RCX: 00007fd637e7c819 [ 132.453087][ T6469] RDX: 0000000004008804 RSI: 0000200000000100 RDI: 0000000000000003 [ 132.453101][ T6469] RBP: 00007fd6368d7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.453113][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.453125][ T6469] R13: 00007fd6380f6038 R14: 00007fd6380f5fa0 R15: 00007ffebd8c9258 [ 132.453191][ T6469] [ 132.624662][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.652128][ T28] audit: type=1400 audit(1775425761.063:852): avc: denied { connect } for pid=6470 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.692456][ T6467] bridge0: port 3(batadv1) entered blocking state [ 132.702764][ T6467] bridge0: port 3(batadv1) entered disabled state [ 132.709762][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.724977][ T6467] batadv1: entered allmulticast mode [ 132.730997][ T6467] batadv1: entered promiscuous mode [ 132.737059][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 132.744878][ T28] audit: type=1400 audit(1775425761.063:853): avc: denied { read } for pid=6470 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.813460][ T6479] loop5: detected capacity change from 0 to 512 [ 132.836582][ T6479] EXT4-fs: Ignoring removed bh option [ 132.870599][ T6479] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 132.888492][ T6488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6488 comm=syz.3.789 [ 132.912146][ T6488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=6488 comm=syz.3.789 [ 132.943245][ T6479] EXT4-fs (loop5): 1 truncate cleaned up [ 132.949604][ T6479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.965209][ T6488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6488 comm=syz.3.789 [ 132.994867][ T6479] EXT4-fs error (device loop5): ext4_nfs_get_inode:1567: inode #11: comm syz.5.788: iget: bad extended attribute block 100663296 [ 133.387737][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.793'. [ 133.459964][ T1868] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 133.469342][ T1868] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 134.035072][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.241568][ T6516] bridge0: port 4(batadv2) entered blocking state [ 134.250305][ T6519] loop3: detected capacity change from 0 to 164 [ 134.257219][ T6516] bridge0: port 4(batadv2) entered disabled state [ 134.274089][ T28] audit: type=1400 audit(1775425762.693:854): avc: denied { ioctl } for pid=6517 comm="syz.3.799" path="socket:[14068]" dev="sockfs" ino=14068 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.307990][ T6516] batadv2: entered allmulticast mode [ 134.322139][ T6516] batadv2: entered promiscuous mode [ 134.334805][ T28] audit: type=1400 audit(1775425762.693:855): avc: denied { bind } for pid=6517 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.412210][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 134.459419][ T6523] loop6: detected capacity change from 0 to 8192 [ 134.522471][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 134.573900][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.582016][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.617567][ T3670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.628375][ T6529] fido_id[6529]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.815592][ T1868] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 134.824891][ T1868] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 135.127690][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.6.804'. [ 135.907661][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 136.176380][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'. [ 136.216208][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.224358][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.365438][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.813'. [ 136.395171][ T6560] bridge0: port 2(batadv4) entered blocking state [ 136.401705][ T6560] bridge0: port 2(batadv4) entered disabled state [ 136.408946][ T6560] batadv4: entered allmulticast mode [ 136.419266][ T6560] batadv4: entered promiscuous mode [ 136.592945][ T6574] xt_connbytes: Forcing CT accounting to be enabled [ 136.628166][ T6574] loop3: detected capacity change from 0 to 512 [ 136.734067][ T6574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.748133][ T6574] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.833395][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.902152][ T5768] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 136.911567][ T5768] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 137.037943][ T6592] loop3: detected capacity change from 0 to 128 [ 137.119353][ T6590] loop6: detected capacity change from 0 to 512 [ 137.141391][ T6590] FAT-fs (loop6): Directory bread(block 199916) failed [ 137.151658][ T6590] FAT-fs (loop6): Directory bread(block 199917) failed [ 137.161247][ T6590] FAT-fs (loop6): Directory bread(block 199918) failed [ 137.178292][ T6590] FAT-fs (loop6): Directory bread(block 199919) failed [ 137.180031][ T6598] bridge0: port 3(batadv2) entered blocking state [ 137.195631][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.821'. [ 137.204101][ T6590] FAT-fs (loop6): Directory bread(block 199920) failed [ 137.206258][ T6598] bridge0: port 3(batadv2) entered disabled state [ 137.218596][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.821'. [ 137.225143][ T6590] FAT-fs (loop6): Directory bread(block 199921) failed [ 137.227724][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.229835][ T6598] batadv2: entered allmulticast mode [ 137.251656][ T6590] FAT-fs (loop6): Directory bread(block 199922) failed [ 137.261527][ T6598] batadv2: entered promiscuous mode [ 137.281917][ T6590] FAT-fs (loop6): Directory bread(block 199923) failed [ 137.318617][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 137.435084][ T28] audit: type=1400 audit(1775425765.803:856): avc: denied { bind } for pid=6589 comm="syz.6.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.440295][ T6590] FAT-fs (loop6): Directory bread(block 199916) failed [ 137.455320][ T28] audit: type=1400 audit(1775425765.803:857): avc: denied { listen } for pid=6589 comm="syz.6.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.481195][ T28] audit: type=1400 audit(1775425765.853:858): avc: denied { shutdown } for pid=6589 comm="syz.6.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.497022][ T6590] FAT-fs (loop6): Directory bread(block 199917) failed [ 137.665271][ T3670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.682674][ T5748] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 137.692015][ T5748] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 137.735415][ T6619] loop5: detected capacity change from 0 to 1024 [ 137.761038][ T6619] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 137.761038][ T6619] [ 137.971029][ T6617] loop0: detected capacity change from 0 to 512 [ 138.062759][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 138.085583][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 138.197567][ T6631] loop3: detected capacity change from 0 to 1024 [ 138.236032][ T6631] EXT4-fs: Ignoring removed bh option [ 138.262279][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.285466][ T6631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.470732][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.528510][ T6647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.536998][ T6648] loop0: detected capacity change from 0 to 128 [ 138.656423][ T6647] bridge0: port 5(batadv3) entered blocking state [ 138.682274][ T6647] bridge0: port 5(batadv3) entered disabled state [ 138.703470][ T6647] batadv3: entered allmulticast mode [ 138.724230][ T6647] batadv3: entered promiscuous mode [ 138.890851][ T6658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6658 comm=syz.6.842 [ 139.152836][ T5592] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 139.162123][ T5592] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 139.313070][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.332210][ T6664] loop3: detected capacity change from 0 to 512 [ 139.589751][ T6681] loop0: detected capacity change from 0 to 1024 [ 139.729412][ T6684] __nla_validate_parse: 4 callbacks suppressed [ 139.729574][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.850'. [ 140.414594][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.569400][ T6681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.592645][ T6681] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.203218][ T6697] loop6: detected capacity change from 0 to 164 [ 141.264895][ T6697] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 141.472760][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.559008][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.607290][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 141.669958][ T6714] syzkaller0: entered promiscuous mode [ 141.686734][ T6714] syzkaller0: entered allmulticast mode [ 141.692525][ T28] audit: type=1400 audit(1775425770.113:859): avc: denied { write } for pid=6716 comm="syz.5.862" path="socket:[15123]" dev="sockfs" ino=15123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.758327][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 141.792361][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.969191][ T6725] loop5: detected capacity change from 0 to 512 [ 142.066737][ T6737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.088635][ T6737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.114482][ T6737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.139485][ T6736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.154233][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 142.162533][ T6736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.244307][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 142.455221][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 142.487578][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 142.716079][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.818672][ T954] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.874379][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 142.941430][ T6769] loop5: detected capacity change from 0 to 512 [ 142.963787][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'. [ 143.023624][ T28] audit: type=1400 audit(1775425771.453:860): avc: denied { bind } for pid=6793 comm="syz.6.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.055937][ T28] audit: type=1400 audit(1775425771.453:861): avc: denied { name_bind } for pid=6793 comm="syz.6.890" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 143.077448][ T28] audit: type=1400 audit(1775425771.453:862): avc: denied { node_bind } for pid=6793 comm="syz.6.890" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 143.204179][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.891'. [ 143.362032][ T6800] netlink: 'syz.6.892': attribute type 21 has an invalid length. [ 143.500563][ T6806] loop5: detected capacity change from 0 to 128 [ 143.793108][ T6804] loop3: detected capacity change from 0 to 164 [ 144.044093][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.117272][ T6804] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 144.246762][ T4904] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.264530][ T4904] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.352588][ T6824] bridge0: port 6(batadv5) entered blocking state [ 144.359204][ T6824] bridge0: port 6(batadv5) entered disabled state [ 144.365868][ T6824] batadv5: entered allmulticast mode [ 144.371885][ T6824] batadv5: entered promiscuous mode [ 144.755444][ T6831] __nla_validate_parse: 3 callbacks suppressed [ 144.755472][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 144.771733][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 144.832115][ T3791] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.865322][ T954] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 144.874723][ T954] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 144.886748][ T6756] delete_channel: no stack [ 145.033291][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.910'. [ 145.147512][ T6850] loop6: detected capacity change from 0 to 1024 [ 145.156318][ T6854] loop5: detected capacity change from 0 to 164 [ 145.169030][ T6850] EXT4-fs: Ignoring removed bh option [ 145.191887][ T6854] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 145.219874][ T6850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.267285][ T6856] bridge0: port 7(batadv6) entered blocking state [ 145.274052][ T6856] bridge0: port 7(batadv6) entered disabled state [ 145.280674][ T6856] batadv6: entered allmulticast mode [ 145.288133][ T6856] batadv6: entered promiscuous mode [ 145.295895][ T6856] netlink: 80 bytes leftover after parsing attributes in process `syz.4.915'. [ 145.305220][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 145.314139][ T6866] netem: change failed [ 145.354594][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.429065][ T6877] loop6: detected capacity change from 0 to 128 [ 145.526464][ T6874] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 145.544283][ T6874] tipc: Enabling not permitted [ 145.551448][ T28] audit: type=1400 audit(1775425773.973:863): avc: denied { getopt } for pid=6890 comm="syz.6.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.562121][ T6874] tipc: Enabling of bearer rejected, failed to enable media [ 145.577066][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.927'. [ 145.588203][ T6891] netlink: 184 bytes leftover after parsing attributes in process `syz.6.927'. [ 145.597601][ T6891] netlink: 184 bytes leftover after parsing attributes in process `syz.6.927'. [ 145.621524][ T28] audit: type=1400 audit(1775425774.043:864): avc: denied { read } for pid=6886 comm="syz.5.926" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.670769][ T6874] ref_ctr_offset mismatch. inode: 0x345 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 145.693302][ T28] audit: type=1400 audit(1775425774.043:865): avc: denied { open } for pid=6886 comm="syz.5.926" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.756859][ T28] audit: type=1400 audit(1775425774.083:866): avc: denied { ioctl } for pid=6890 comm="syz.6.927" path="socket:[15678]" dev="sockfs" ino=15678 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 145.787419][ T954] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 145.796673][ T954] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 145.968345][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.928'. [ 145.978350][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.928'. [ 146.465231][ T6917] loop5: detected capacity change from 0 to 128 [ 146.488130][ T6899] loop0: detected capacity change from 0 to 512 [ 146.544250][ T6919] loop3: detected capacity change from 0 to 164 [ 146.620875][ T6919] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 146.805696][ T6935] EXT4-fs: Ignoring removed bh option [ 146.875535][ T6935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.908978][ T5768] net_ratelimit: 5 callbacks suppressed [ 146.908994][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.983876][ T6953] set_capacity_and_notify: 1 callbacks suppressed [ 146.983893][ T6953] loop0: detected capacity change from 0 to 512 [ 147.129665][ T6953] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 147.137889][ T6953] System zones: 0-2, 18-18, 34-34 [ 147.149995][ T6953] EXT4-fs (loop0): 1 orphan inode deleted [ 147.156734][ T6953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.169618][ T6953] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.386533][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.413481][ T6960] bridge0: port 8(batadv7) entered blocking state [ 147.431472][ T6960] bridge0: port 8(batadv7) entered disabled state [ 147.456054][ T6960] batadv7: entered allmulticast mode [ 147.480412][ T6960] batadv7: entered promiscuous mode [ 147.873609][ T5752] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 147.875955][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.884466][ T5752] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:13: Failed to release dquot type 1 [ 147.904902][ T3670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.922482][ T5752] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 147.931758][ T5752] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 147.944890][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.071371][ T6968] netlink: 'syz.5.951': attribute type 58 has an invalid length. [ 148.102773][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.162274][ T28] audit: type=1400 audit(1775425776.563:867): avc: denied { write } for pid=6970 comm="syz.5.952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.736251][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.904783][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.913152][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.923425][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.797831][ T7025] bridge0: port 9(batadv8) entered blocking state [ 149.804429][ T7025] bridge0: port 9(batadv8) entered disabled state [ 149.813781][ T7028] __nla_validate_parse: 14 callbacks suppressed [ 149.813807][ T7028] netlink: 80 bytes leftover after parsing attributes in process `syz.4.972'. [ 149.832309][ T7025] batadv8: entered allmulticast mode [ 149.844046][ T7025] batadv8: entered promiscuous mode [ 150.178965][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.217630][ T7040] netlink: 748 bytes leftover after parsing attributes in process `syz.4.976'. [ 150.282189][ T5592] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 150.291571][ T5592] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 150.371893][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.982'. [ 150.495722][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.983'. [ 150.515600][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.983'. [ 150.666129][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.984'. [ 150.807762][ T7076] loop6: detected capacity change from 0 to 128 [ 150.994295][ T7084] netlink: 'syz.3.991': attribute type 5 has an invalid length. [ 151.012183][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 151.040410][ T7084] ip6erspan0: entered promiscuous mode [ 151.068692][ T28] audit: type=1400 audit(1775425779.493:868): avc: denied { read } for pid=7083 comm="syz.3.991" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 151.121621][ T28] audit: type=1400 audit(1775425779.493:869): avc: denied { open } for pid=7083 comm="syz.3.991" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 151.148159][ T28] audit: type=1400 audit(1775425779.523:870): avc: denied { ioctl } for pid=7083 comm="syz.3.991" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 151.233218][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.443398][ T7109] loop6: detected capacity change from 0 to 128 [ 151.468945][ T7109] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.499495][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1000'. [ 151.507914][ T7109] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.666596][ T28] audit: type=1400 audit(1775425780.093:871): avc: denied { listen } for pid=7106 comm="syz.6.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.695052][ T28] audit: type=1400 audit(1775425780.093:872): avc: denied { rename } for pid=7106 comm="syz.6.998" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 151.754525][ T4749] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.777360][ T7120] loop5: detected capacity change from 0 to 256 [ 151.806655][ T7120] FAT-fs (loop5): Directory bread(block 64) failed [ 151.813519][ T7120] FAT-fs (loop5): Directory bread(block 65) failed [ 151.820187][ T7120] FAT-fs (loop5): Directory bread(block 66) failed [ 151.826785][ T7120] FAT-fs (loop5): Directory bread(block 67) failed [ 151.833609][ T7120] FAT-fs (loop5): Directory bread(block 68) failed [ 151.840221][ T7120] FAT-fs (loop5): Directory bread(block 69) failed [ 151.847043][ T7120] FAT-fs (loop5): Directory bread(block 70) failed [ 151.853746][ T7120] FAT-fs (loop5): Directory bread(block 71) failed [ 151.860540][ T7120] FAT-fs (loop5): Directory bread(block 72) failed [ 151.867191][ T7120] FAT-fs (loop5): Directory bread(block 73) failed [ 151.889284][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1001'. [ 151.898473][ T7120] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1001'. [ 151.952584][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.225772][ T7122] bridge0: port 5(batadv3) entered blocking state [ 152.278626][ T7122] bridge0: port 5(batadv3) entered disabled state [ 152.457813][ T7122] batadv3: entered allmulticast mode [ 152.466688][ T7122] batadv3: entered promiscuous mode [ 152.591811][ T7130] xt_hashlimit: size too large, truncated to 1048576 [ 152.674945][ T7138] netlink: 'syz.0.1007': attribute type 21 has an invalid length. [ 152.690809][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.702371][ T5592] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 152.711712][ T5592] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 153.359738][ T7164] syzkaller0: entered promiscuous mode [ 153.382596][ T7164] syzkaller0: entered allmulticast mode [ 153.516626][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.664105][ T7172] bridge0: port 6(batadv4) entered blocking state [ 153.692286][ T7172] bridge0: port 6(batadv4) entered disabled state [ 153.715266][ T7172] batadv4: entered allmulticast mode [ 153.719821][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.729449][ T7172] batadv4: entered promiscuous mode [ 153.743666][ T7182] loop0: detected capacity change from 0 to 1024 [ 153.810714][ T7182] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 153.842298][ T7182] System zones: 0-1, 3-36 [ 153.855092][ T7182] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1024: bad orphan inode 134217728 [ 153.868222][ T7192] loop3: detected capacity change from 0 to 128 [ 153.897263][ T7182] loop0: lost filesystem error report for type 5 error -117 [ 153.897714][ T7182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.988140][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.095391][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.172250][ T5592] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 154.181620][ T5592] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 154.298066][ T7225] loop0: detected capacity change from 0 to 512 [ 154.308982][ T28] audit: type=1326 audit(1775425782.733:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.333254][ T28] audit: type=1326 audit(1775425782.733:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.381952][ T28] audit: type=1326 audit(1775425782.733:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.405736][ T28] audit: type=1326 audit(1775425782.733:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.429814][ T28] audit: type=1326 audit(1775425782.733:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.454618][ T28] audit: type=1326 audit(1775425782.733:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.481375][ T28] audit: type=1326 audit(1775425782.733:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.527600][ T28] audit: type=1326 audit(1775425782.733:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.551491][ T28] audit: type=1326 audit(1775425782.733:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.595327][ T7231] bridge0: port 4(batadv2) entered blocking state [ 154.602156][ T7231] bridge0: port 4(batadv2) entered disabled state [ 154.608805][ T7231] batadv2: entered allmulticast mode [ 154.615149][ T7231] batadv2: entered promiscuous mode [ 154.620451][ T28] audit: type=1326 audit(1775425782.733:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d148c819 code=0x7ffc0000 [ 154.745235][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.781352][ T7245] netlink: 'syz.0.1043': attribute type 8 has an invalid length. [ 154.789340][ T7247] loop3: detected capacity change from 0 to 1024 [ 154.804361][ T7247] EXT4-fs: Invalid want_extra_isize 226 [ 154.982353][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.851427][ T7257] loop3: detected capacity change from 0 to 512 [ 155.935029][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.947412][ T5748] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 155.956718][ T5748] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 156.410525][ T7262] loop5: detected capacity change from 0 to 512 [ 156.641438][ T7257] EXT4-fs (loop3): 1 orphan inode deleted [ 156.656232][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.672287][ T7257] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.693706][ T5752] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:13: Failed to release dquot type 1 [ 156.741096][ T7262] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.980380][ T7272] __nla_validate_parse: 42 callbacks suppressed [ 156.980741][ T7272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1051'. [ 157.072225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.080442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.307681][ T7276] bridge0: port 5(batadv3) entered blocking state [ 157.342188][ T7276] bridge0: port 5(batadv3) entered disabled state [ 157.359545][ T7282] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1053'. [ 157.378946][ T7276] batadv3: entered allmulticast mode [ 157.402733][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'. [ 157.412647][ T7276] batadv3: entered promiscuous mode [ 157.513497][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.518572][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.530628][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.538751][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.677308][ T3396] IPVS: starting estimator thread 0... [ 157.782142][ T7300] IPVS: using max 1824 ests per chain, 91200 per kthread [ 157.803682][ T5592] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 157.813175][ T5592] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 157.865591][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1064'. [ 157.973426][ T7319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.131993][ T7324] loop3: detected capacity change from 0 to 512 [ 158.185353][ T7324] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.313099][ T7281] delete_channel: no stack [ 158.448137][ T7321] loop5: detected capacity change from 0 to 512 [ 158.540357][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1077'. [ 158.576917][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1077'. [ 158.589183][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.607439][ T7344] syzkaller0: entered promiscuous mode [ 158.613367][ T7344] syzkaller0: entered allmulticast mode [ 158.708246][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1082'. [ 158.763607][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1085'. [ 158.804116][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.820824][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.937653][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 159.039770][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.058978][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.326643][ T7385] loop0: detected capacity change from 0 to 512 [ 159.404660][ T7392] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 159.456968][ T7393] loop0: detected capacity change from 0 to 1024 [ 159.467982][ T7393] EXT4-fs: Ignoring removed bh option [ 159.473946][ T7393] ext4: Unknown parameter 'uid' [ 159.536184][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1103'. [ 159.636056][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.762595][ T7415] loop5: detected capacity change from 0 to 1024 [ 159.807238][ T7415] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.828454][ T7415] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 159.884024][ T7415] EXT4-fs (loop5): invalid journal inode [ 159.899866][ T7415] EXT4-fs (loop5): can't get journal size [ 159.908560][ T7421] loop0: detected capacity change from 0 to 1024 [ 159.912334][ T7415] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.1110: blocks 3-3 from inode overlap system zone [ 159.934341][ T7415] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 159.934747][ T7415] EXT4-fs (loop5): failed to initialize system zone (-117) [ 159.943899][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 159.943921][ C1] EXT4-fs (loop5): initial error at time 1775425788: ext4_protect_reserved_inode:182: inode 2 [ 159.943948][ C1] EXT4-fs (loop5): last error at time 1775425788: ext4_protect_reserved_inode:182: inode 2 [ 159.992454][ T7421] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 159.992454][ T7421] [ 160.002222][ T7415] EXT4-fs (loop5): mount failed [ 160.666762][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.162903][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.483583][ T7457] loop5: detected capacity change from 0 to 128 [ 161.994242][ T7464] __nla_validate_parse: 7 callbacks suppressed [ 161.994261][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1126'. [ 163.022146][ T3416] net_ratelimit: 1 callbacks suppressed [ 163.022276][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.495814][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 163.719271][ T7488] pim6reg1: entered promiscuous mode [ 163.729183][ T7488] pim6reg1: entered allmulticast mode [ 163.753057][ T7488] loop5: detected capacity change from 0 to 128 [ 163.772573][ T7488] msdos: Unknown parameter 'nodotslnodots' [ 163.849360][ T7497] loop6: detected capacity change from 0 to 512 [ 163.861117][ T7499] loop5: detected capacity change from 0 to 128 [ 163.869036][ T7497] EXT4-fs: Ignoring removed nobh option [ 163.888583][ T7497] ------------[ cut here ]------------ [ 163.894164][ T7497] EA inode 11 i_nlink=1026 [ 163.894188][ T7497] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.6.1137/7497 [ 163.909396][ T7497] Modules linked in: [ 163.913387][ T7497] CPU: 1 UID: 0 PID: 7497 Comm: syz.6.1137 Not tainted syzkaller #0 PREEMPT(full) [ 163.922730][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 163.932844][ T7497] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 163.939538][ T7497] Code: 14 34 99 ff 4c 8d 2d 7d a0 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff e2 dd 03 66 66 66 66 66 66 2e [ 163.959402][ T7497] RSP: 0018:ffffc9000278b5a8 EFLAGS: 00010246 [ 163.965549][ T7497] RAX: ffff888104f2de88 RBX: ffff88810a5fdbe8 RCX: ffffffff81c02c98 [ 163.973647][ T7497] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 163.981655][ T7497] RBP: 000000000000000b R08: 000188810a5fdb9b R09: 0000000000000000 [ 163.989693][ T7497] R10: ffffc9000278b4d8 R11: 0001c9000278b4d8 R12: ffff88810a5fdb98 [ 163.997725][ T7497] R13: ffffffff871dcd00 R14: ffff88810a5fdb50 R15: 0000000000000001 [ 164.005795][ T7497] FS: 00007fd6368d76c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 164.014783][ T7497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.021407][ T7497] CR2: 0000000000000000 CR3: 000000014094e000 CR4: 00000000003506f0 [ 164.029485][ T7497] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.037501][ T7497] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 164.045550][ T7497] Call Trace: [ 164.048850][ T7497] [ 164.051812][ T7497] ext4_xattr_set_entry+0x77c/0x1010 [ 164.057259][ T7497] ext4_xattr_ibody_set+0x184/0x3c0 [ 164.062600][ T7497] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 164.068466][ T7497] __ext4_expand_extra_isize+0x246/0x280 [ 164.074209][ T7497] __ext4_mark_inode_dirty+0x29b/0x400 [ 164.079722][ T7497] ext4_evict_inode+0x865/0xe40 [ 164.084746][ T7497] ? __pfx_ext4_evict_inode+0x10/0x10 [ 164.090166][ T7497] evict+0x2af/0x510 [ 164.094246][ T7497] ? __dquot_initialize+0x146/0x7c0 [ 164.099614][ T7497] iput+0x41a/0x580 [ 164.103705][ T7497] ext4_process_orphan+0x1a9/0x1c0 [ 164.108922][ T7497] ext4_orphan_cleanup+0x6a8/0xa00 [ 164.114123][ T7497] ext4_fill_super+0x3414/0x37c0 [ 164.119107][ T7497] ? set_blocksize+0x14c/0x270 [ 164.123939][ T7497] ? setup_bdev_super+0x30e/0x370 [ 164.129005][ T7497] ? __pfx_ext4_fill_super+0x10/0x10 [ 164.134436][ T7497] get_tree_bdev_flags+0x291/0x300 [ 164.139595][ T7497] ? __pfx_ext4_fill_super+0x10/0x10 [ 164.145049][ T7497] get_tree_bdev+0x1f/0x30 [ 164.149481][ T7497] ext4_get_tree+0x1c/0x30 [ 164.153974][ T7497] vfs_get_tree+0x57/0x1d0 [ 164.158523][ T7497] do_new_mount+0x288/0x8d0 [ 164.163082][ T7497] path_mount+0x4d0/0xbc0 [ 164.167455][ T7497] __se_sys_mount+0x28c/0x2e0 [ 164.172244][ T7497] __x64_sys_mount+0x67/0x80 [ 164.176928][ T7497] x64_sys_call+0x2d61/0x3020 [ 164.181661][ T7497] do_syscall_64+0x12c/0x370 [ 164.186327][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.192288][ T7497] RIP: 0033:0x7fd637e7da8a [ 164.196777][ T7497] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.216711][ T7497] RSP: 002b:00007fd6368d6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.225196][ T7497] RAX: ffffffffffffffda RBX: 00007fd6368d6ee0 RCX: 00007fd637e7da8a [ 164.233281][ T7497] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fd6368d6ea0 [ 164.241398][ T7497] RBP: 0000200000000180 R08: 00007fd6368d6ee0 R09: 0000000000800718 [ 164.249405][ T7497] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 164.257474][ T7497] R13: 00007fd6368d6ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 164.265510][ T7497] [ 164.268564][ T7497] ---[ end trace 0000000000000000 ]--- [ 164.276629][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.286171][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.292564][ T7497] EXT4-fs (loop6): 1 orphan inode deleted [ 164.309040][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1139'. [ 164.311262][ T7497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.435002][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.508686][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'. [ 164.523843][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 165.030648][ T7529] loop5: detected capacity change from 0 to 128 [ 165.105706][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 165.105719][ T28] audit: type=1400 audit(1775425793.533:890): avc: denied { create } for pid=7532 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 165.153154][ T28] audit: type=1400 audit(1775425793.573:891): avc: denied { open } for pid=7530 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.208689][ T28] audit: type=1400 audit(1775425793.573:892): avc: denied { kernel } for pid=7530 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.262146][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1153'. [ 165.305186][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.316120][ T7543] loop3: detected capacity change from 0 to 512 [ 165.342110][ T7543] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 165.353356][ T7543] EXT4-fs (loop3): orphan cleanup on readonly fs [ 165.359990][ T7543] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1154: Block bitmap for bg 0 marked uninitialized [ 165.392508][ T7543] loop3: lost filesystem error report for type 5 error -117 [ 165.392669][ T7543] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 165.408817][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 165.408838][ C1] EXT4-fs (loop3): initial error at time 1775425793: ext4_read_block_bitmap_nowait:517 [ 165.408863][ C1] EXT4-fs (loop3): last error at time 1775425793: ext4_read_block_bitmap_nowait:517 [ 165.513644][ T7543] loop3: lost filesystem error report for type 5 error -117 [ 165.513985][ T7543] EXT4-fs (loop3): 1 orphan inode deleted [ 165.527737][ T7543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 165.571141][ T7543] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 165.598938][ T7543] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 165.703931][ T7555] loop5: detected capacity change from 0 to 512 [ 165.724532][ T28] audit: type=1400 audit(1775425794.153:893): avc: denied { write } for pid=7542 comm="syz.3.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.759752][ T7555] futex_wake_op: syz.5.1158 tries to shift op by -1; fix this program [ 165.792614][ T28] audit: type=1400 audit(1775425794.213:894): avc: denied { read } for pid=7554 comm="syz.5.1158" dev="sockfs" ino=18470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.824077][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.885714][ T28] audit: type=1400 audit(1775425794.313:895): avc: denied { tracepoint } for pid=7554 comm="syz.5.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.919525][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.959902][ T7561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=7561 comm=syz.3.1159 [ 165.973720][ T28] audit: type=1400 audit(1775425794.363:896): avc: denied { create } for pid=7563 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 166.002524][ T7565] smc: net device bond0 applied user defined pnetid SYZ2 [ 166.036068][ T7565] macsec0: entered promiscuous mode [ 166.051751][ T7572] loop3: detected capacity change from 0 to 128 [ 166.064810][ T7565] bond0: (slave macsec0): Enslaving as an active interface with an up link [ 166.196093][ T7578] ipvlan0: entered promiscuous mode [ 166.201362][ T7578] ipvlan0: entered allmulticast mode [ 166.214439][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 166.232209][ T7578] team0: entered allmulticast mode [ 166.238971][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1164'. [ 166.252205][ T7578] team_slave_0: entered allmulticast mode [ 166.258053][ T7578] team_slave_1: entered allmulticast mode [ 166.273721][ T7578] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 166.281757][ T7578] team0: Device ipvlan0 is already an upper device of the team interface [ 166.318688][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1164'. [ 166.365558][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.422732][ T7599] loop3: detected capacity change from 0 to 2048 [ 166.584347][ T7599] loop3: p1 p2 [ 166.664753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.711636][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1170'. [ 166.742271][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.761993][ T7606] loop0: detected capacity change from 0 to 128 [ 167.302185][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.385507][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.627460][ T28] audit: type=1400 audit(1775425796.053:897): avc: denied { append } for pid=7628 comm="syz.3.1180" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.730433][ T7635] loop0: detected capacity change from 0 to 128 [ 167.819429][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'. [ 167.829956][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'. [ 168.083162][ T7629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7629 comm=syz.3.1180 [ 168.112863][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.121366][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.143139][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.151583][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.315879][ T7645] netlink: 'syz.4.1186': attribute type 10 has an invalid length. [ 168.329262][ T7645] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 168.435593][ T3416] net_ratelimit: 1 callbacks suppressed [ 168.435610][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.508108][ T28] audit: type=1400 audit(1775425796.933:898): avc: denied { setopt } for pid=7653 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 168.780290][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1196'. [ 168.826379][ T7670] loop0: detected capacity change from 0 to 128 [ 168.890494][ T28] audit: type=1400 audit(1775425797.303:899): avc: denied { bind } for pid=7665 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.032327][ T7680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.420804][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1203'. [ 169.432921][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1203'. [ 169.502190][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.746789][ T7697] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 169.898545][ T7697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.544576][ T28] audit: type=1400 audit(1775425798.973:900): avc: denied { listen } for pid=7719 comm="syz.5.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.035270][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.062271][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.145291][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1215'. [ 171.235371][ T7734] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 171.250529][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.282790][ T7734] 9pnet_fd: Insufficient options for proto=fd [ 171.303768][ T28] audit: type=1400 audit(1775425799.733:901): avc: denied { create } for pid=7733 comm="syz.3.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 171.350086][ T7743] loop6: detected capacity change from 0 to 512 [ 171.391043][ T7743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.405095][ T7743] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.453334][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.581041][ T7760] netlink: 'syz.6.1225': attribute type 1 has an invalid length. [ 171.630776][ T7760] bond2: (slave gretap1): making interface the new active one [ 171.648137][ T7760] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 171.668659][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1225'. [ 171.693385][ T7764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.702891][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.772980][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.781438][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.804729][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.821310][ T7734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.024745][ T28] audit: type=1400 audit(1775425800.453:902): avc: denied { getopt } for pid=7775 comm="syz.4.1230" lport=56931 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 172.122873][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1229'. [ 172.134763][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1229'. [ 172.712151][ T7789] loop5: detected capacity change from 0 to 512 [ 172.726332][ T7789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.746235][ T7789] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.803199][ T28] audit: type=1400 audit(1775425801.233:903): avc: denied { bind } for pid=7795 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.837083][ T28] audit: type=1400 audit(1775425801.253:904): avc: denied { append } for pid=7795 comm="syz.3.1236" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 172.898100][ T7801] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1237'. [ 173.023695][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1241'. [ 173.064911][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 173.077207][ T7812] dummy0: entered promiscuous mode [ 173.082524][ T7812] macsec1: entered promiscuous mode [ 173.088036][ T7812] macsec1: entered allmulticast mode [ 173.096566][ T7812] dummy0: entered allmulticast mode [ 173.115527][ T7812] dummy0: left allmulticast mode [ 173.126134][ T7812] dummy0: left promiscuous mode [ 173.344724][ T7825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=7825 comm=syz.3.1247 [ 173.483290][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1248'. [ 173.495405][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1248'. [ 173.558675][ T7837] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 173.792449][ T3416] net_ratelimit: 511 callbacks suppressed [ 173.792466][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.865420][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.997893][ T7842] infiniband syz0: set down [ 174.015479][ T7842] infiniband syz0: added bond_slave_0 [ 174.097778][ T7842] RDS/IB: syz0: added [ 174.106078][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.117622][ T7842] smc: adding ib device syz0 with port count 1 [ 174.130885][ T7842] smc: ib device syz0 port 1 has no pnetid [ 174.161780][ T7845] loop5: detected capacity change from 0 to 8192 [ 174.500260][ T7854] netlink: 'syz.5.1253': attribute type 20 has an invalid length. [ 174.519456][ T28] audit: type=1400 audit(1775425802.943:905): avc: denied { connect } for pid=7844 comm="syz.5.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.629335][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=7856 comm=syz.6.1256 [ 174.727432][ T7865] netlink: 'syz.6.1256': attribute type 1 has an invalid length. [ 174.846845][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.899832][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 174.910081][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 174.968490][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1262'. [ 175.091376][ T7878] loop0: detected capacity change from 0 to 164 [ 175.134129][ T7878] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 175.271992][ T9] IPVS: starting estimator thread 0... [ 175.362144][ T7892] IPVS: using max 2304 ests per chain, 115200 per kthread [ 175.485155][ T7899] FAULT_INJECTION: forcing a failure. [ 175.485155][ T7899] name failslab, interval 1, probability 0, space 0, times 0 [ 175.508317][ T7899] CPU: 1 UID: 0 PID: 7899 Comm: syz.6.1270 Tainted: G W syzkaller #0 PREEMPT(full) [ 175.508424][ T7899] Tainted: [W]=WARN [ 175.508431][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.508443][ T7899] Call Trace: [ 175.508449][ T7899] [ 175.508457][ T7899] __dump_stack+0x1d/0x30 [ 175.508488][ T7899] dump_stack_lvl+0x95/0xd0 [ 175.508526][ T7899] dump_stack+0x15/0x1b [ 175.508546][ T7899] should_fail_ex+0x263/0x280 [ 175.508572][ T7899] should_failslab+0x8c/0xb0 [ 175.508667][ T7899] kmem_cache_alloc_noprof+0x66/0x400 [ 175.508692][ T7899] ? alloc_empty_file+0x76/0x200 [ 175.508724][ T7899] alloc_empty_file+0x76/0x200 [ 175.508817][ T7899] alloc_file_pseudo+0xf6/0x190 [ 175.508887][ T7899] __shmem_file_setup+0x1dd/0x210 [ 175.508924][ T7899] shmem_file_setup+0x3b/0x50 [ 175.508958][ T7899] memfd_alloc_file+0x4e/0x300 [ 175.509015][ T7899] __se_sys_memfd_create+0x2e1/0x3b0 [ 175.509058][ T7899] __x64_sys_memfd_create+0x31/0x40 [ 175.509165][ T7899] x64_sys_call+0x1f22/0x3020 [ 175.509193][ T7899] do_syscall_64+0x12c/0x370 [ 175.509239][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.509326][ T7899] RIP: 0033:0x7fd637e7c819 [ 175.509343][ T7899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.509362][ T7899] RSP: 002b:00007fd6368d6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 175.509382][ T7899] RAX: ffffffffffffffda RBX: 00000000000004a3 RCX: 00007fd637e7c819 [ 175.509397][ T7899] RDX: 00007fd6368d6ee0 RSI: 0000000000000000 RDI: 00007fd637f12e71 [ 175.509410][ T7899] RBP: 0000200000000980 R08: 00000000ffffffff R09: 0000000000000000 [ 175.509433][ T7899] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000140 [ 175.509450][ T7899] R13: 00007fd6368d6ee0 R14: 00007fd6368d6ea0 R15: 00002000000003c0 [ 175.509477][ T7899] [ 175.864597][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.319290][ T7916] netlink: 'syz.6.1273': attribute type 21 has an invalid length. [ 176.328059][ T7916] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1273'. [ 176.470974][ T7919] bridge2: entered promiscuous mode [ 176.537490][ T7919] bridge2: entered allmulticast mode [ 176.640199][ T7919] team0: Port device bridge2 added [ 176.975380][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.027071][ T7915] loop0: detected capacity change from 0 to 512 [ 177.203966][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 177.214105][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.222876][ T3498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.294568][ T7929] bond0: entered promiscuous mode [ 177.333095][ T7929] bond0: entered allmulticast mode [ 177.347511][ T7929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.434763][ T7934] macsec1: entered promiscuous mode [ 177.465790][ T7934] macsec1: entered allmulticast mode [ 178.024976][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.101234][ T1868] Bluetooth: hci0: Frame reassembly failed (-84) [ 178.519777][ T7961] netlink: 'syz.6.1286': attribute type 21 has an invalid length. [ 178.528532][ T7961] __nla_validate_parse: 1 callbacks suppressed [ 178.528662][ T7961] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1286'. [ 179.435258][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.402500][ T6775] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 180.413651][ T7927] delete_channel: no stack [ 180.420946][ T3498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.552001][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1292'. [ 181.403589][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.182146][ T7982] netlink: 'syz.0.1293': attribute type 21 has an invalid length. [ 182.191065][ T7982] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1293'. [ 182.442304][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.442024][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.450380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.461792][ T7984] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1295'. [ 183.471792][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.481775][ T7984] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1295'. [ 183.550640][ T7990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.633924][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.724974][ T7990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.206009][ T28] audit: type=1400 audit(1775425813.583:906): avc: denied { read } for pid=7986 comm="syz.5.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 184.337886][ T7999] loop0: detected capacity change from 0 to 512 [ 184.362682][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1299'. [ 184.502159][ C0] net_ratelimit: 12 callbacks suppressed [ 184.502178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.522136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.530418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.538680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.546961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.577571][ T7990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.613759][ T7999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.631015][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1299'. [ 184.656919][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.665944][ T7999] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.667090][ T7990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.688190][ T7990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.696985][ T7990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.115403][ T8017] 9p: Bad value for 'rfdno' [ 185.159129][ T8018] netlink: 'syz.3.1304': attribute type 21 has an invalid length. [ 185.167758][ T8018] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1304'. [ 185.538812][ T8013] loop5: detected capacity change from 0 to 512 [ 185.671438][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.116432][ T8027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8027 comm=syz.4.1310 [ 186.520706][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1312'. [ 187.068773][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1307'. [ 187.243978][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 187.330567][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 188.275398][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1312'. [ 188.740891][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1313'. [ 188.799014][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1313'. [ 189.168310][ T8057] bridge0: port 6(batadv4) entered blocking state [ 189.195952][ T8057] bridge0: port 6(batadv4) entered disabled state [ 189.203063][ T8057] batadv4: entered allmulticast mode [ 189.212928][ T8057] batadv4: entered promiscuous mode [ 189.277836][ T28] audit: type=1400 audit(1775425818.703:907): avc: denied { add_name } for pid=8071 comm="syz.6.1322" name="io.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 189.337106][ T28] audit: type=1400 audit(1775425818.733:908): avc: denied { create } for pid=8071 comm="syz.6.1322" name="io.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 189.513734][ T28] audit: type=1400 audit(1775425818.733:909): avc: denied { associate } for pid=8071 comm="syz.6.1322" name="io.stat" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 189.639723][ T8081] __nla_validate_parse: 5 callbacks suppressed [ 189.639785][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1324'. [ 189.685311][ T5768] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 189.694660][ T5768] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 189.895157][ T28] audit: type=1400 audit(1775425819.323:910): avc: denied { create } for pid=8087 comm="syz.3.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 190.049074][ T28] audit: type=1400 audit(1775425819.343:911): avc: denied { write } for pid=8087 comm="syz.3.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 190.374432][ T3395] net_ratelimit: 20 callbacks suppressed [ 190.374501][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.522692][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.801016][ T8092] loop3: detected capacity change from 0 to 512 [ 190.907212][ T8092] FAT-fs (loop3): Directory bread(block 199916) failed [ 190.945108][ T8092] FAT-fs (loop3): Directory bread(block 199917) failed [ 190.974259][ T8092] FAT-fs (loop3): Directory bread(block 199918) failed [ 190.981699][ T8092] FAT-fs (loop3): Directory bread(block 199919) failed [ 191.001878][ T8092] FAT-fs (loop3): Directory bread(block 199920) failed [ 191.054475][ T8092] FAT-fs (loop3): Directory bread(block 199921) failed [ 191.083617][ T8092] FAT-fs (loop3): Directory bread(block 199922) failed [ 191.091558][ T8092] FAT-fs (loop3): Directory bread(block 199923) failed [ 191.325917][ T8092] FAT-fs (loop3): Directory bread(block 199916) failed [ 191.365791][ T8092] FAT-fs (loop3): Directory bread(block 199917) failed [ 191.386582][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.818514][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1327'. [ 191.831931][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1327'. [ 192.438095][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.550010][ T8108] loop3: detected capacity change from 0 to 164 [ 192.745332][ T8116] netlink: 'syz.4.1333': attribute type 21 has an invalid length. [ 192.753219][ T8116] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1333'. [ 192.789328][ T8108] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 193.579783][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.762220][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.934209][ T8120] loop0: detected capacity change from 0 to 1024 [ 193.941251][ T8120] EXT4-fs: Ignoring removed bh option [ 193.986849][ T8120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.267422][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1339'. [ 194.585561][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.101564][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1338'. [ 195.275774][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.373595][ T8128] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1337'. [ 195.560954][ T8125] bridge0: port 6(batadv4) entered blocking state [ 195.575810][ T8125] bridge0: port 6(batadv4) entered disabled state [ 195.620282][ T8125] batadv4: entered allmulticast mode [ 195.634861][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.782449][ T8125] batadv4: entered promiscuous mode [ 195.894059][ T1868] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 195.903475][ T1868] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 195.932453][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 195.991310][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 196.001421][ T8157] loop5: detected capacity change from 0 to 512 [ 196.021266][ T8157] EXT4-fs: Ignoring removed bh option [ 196.068748][ T8157] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 196.091949][ T8159] loop6: detected capacity change from 0 to 512 [ 196.111082][ T8157] EXT4-fs (loop5): 1 truncate cleaned up [ 196.119362][ T8159] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.139925][ T28] audit: type=1400 audit(1775425825.463:912): avc: denied { accept } for pid=8158 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.163178][ T8157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.180672][ T8159] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.221405][ T8157] EXT4-fs error (device loop5): ext4_nfs_get_inode:1567: inode #11: comm syz.5.1347: iget: bad extended attribute block 100663296 [ 196.248438][ T8159] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 196.291905][ T8159] EXT4-fs (loop6): Remounting filesystem read-only [ 196.298485][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 196.298512][ C0] EXT4-fs (loop6): initial error at time 1775425825: mb_free_blocks:2049: inode 12: block 14 [ 196.298565][ C0] EXT4-fs (loop6): last error at time 1775425825: mb_free_blocks:2049: inode 12: block 14 [ 196.371846][ T8150] loop0: detected capacity change from 0 to 512 [ 196.424632][ T8159] EXT4-fs (loop6): 1 truncate cleaned up [ 196.442714][ T5592] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 196.460450][ T8159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.500067][ T5592] Quota error (device loop6): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 196.685880][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.714731][ T28] audit: type=1400 audit(1775425826.143:913): avc: denied { read } for pid=8172 comm="syz.0.1350" path="socket:[20633]" dev="sockfs" ino=20633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.762437][ T28] audit: type=1400 audit(1775425826.193:914): avc: denied { write } for pid=8172 comm="syz.0.1350" path="socket:[20633]" dev="sockfs" ino=20633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.822365][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.836246][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.846613][ T8173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.868391][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.878276][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.142245][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1351'. [ 197.152436][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1351'. [ 197.196435][ T8173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.258707][ T8181] loop5: detected capacity change from 0 to 164 [ 197.290670][ T8181] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 197.369065][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1355'. [ 197.717485][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.860467][ T8173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.322878][ T8173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.342712][ T8199] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1362'. [ 198.475556][ T5592] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.503936][ T5592] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.526025][ T5592] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.560985][ T5592] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.706270][ T28] audit: type=1400 audit(1775425828.133:915): avc: denied { mounton } for pid=8205 comm="syz.6.1364" path="/" dev="configfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.031206][ T8215] bridge0: port 7(batadv5) entered blocking state [ 199.045233][ T8215] bridge0: port 7(batadv5) entered disabled state [ 199.058718][ T8215] batadv5: entered allmulticast mode [ 199.075945][ T8215] batadv5: entered promiscuous mode [ 199.091671][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1367'. [ 199.150406][ T8220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8220 comm=syz.6.1368 [ 199.246774][ T8222] loop5: detected capacity change from 0 to 256 [ 199.253685][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.282285][ T8223] netlink: 'syz.6.1368': attribute type 1 has an invalid length. [ 199.450041][ T8230] loop0: detected capacity change from 0 to 1024 [ 199.466411][ T8230] EXT4-fs: Ignoring removed bh option [ 199.493730][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1374'. [ 199.515615][ T8230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.533581][ T8235] bond1: entered promiscuous mode [ 199.538773][ T8235] bond1: entered allmulticast mode [ 199.544072][ T8235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.560462][ T5768] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 199.569958][ T5768] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 199.584675][ T8235] macsec1: entered promiscuous mode [ 199.591537][ T8235] macsec1: entered allmulticast mode [ 199.644061][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.018093][ T8268] loop0: detected capacity change from 0 to 256 [ 200.118865][ T8272] __nla_validate_parse: 9 callbacks suppressed [ 200.118970][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1387'. [ 200.178628][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1387'. [ 200.293111][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.337188][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.351235][ T8258] bond1: entered promiscuous mode [ 200.356394][ T8258] bond1: entered allmulticast mode [ 200.361916][ T8258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.374029][ T8262] macsec1: entered promiscuous mode [ 200.379321][ T8262] macsec1: entered allmulticast mode [ 200.400676][ T8272] bond2: entered promiscuous mode [ 200.411494][ T8272] bond2: entered allmulticast mode [ 200.419042][ T8272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.420927][ T8281] loop0: detected capacity change from 0 to 1024 [ 200.476571][ T8281] EXT4-fs: Ignoring removed bh option [ 200.488216][ T8283] netlink: 'syz.6.1388': attribute type 21 has an invalid length. [ 200.496149][ T8283] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1388'. [ 200.547758][ T8274] macsec1: entered promiscuous mode [ 200.566670][ T8274] macsec1: entered allmulticast mode [ 200.626885][ T8281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.818414][ T8287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8287 comm=syz.4.1390 [ 200.912789][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 200.940462][ T8291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1392'. [ 200.990813][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.222624][ T8292] netlink: 'syz.4.1390': attribute type 1 has an invalid length. [ 201.383929][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.452305][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1393'. [ 202.564586][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.738005][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 203.608447][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 203.632183][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.749203][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.784926][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 204.649338][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1410'. [ 204.837269][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.952510][ T8350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.425375][ T8350] bridge0: port 7(batadv5) entered blocking state [ 205.431939][ T8350] bridge0: port 7(batadv5) entered disabled state [ 205.469147][ T8350] batadv5: entered allmulticast mode [ 205.482648][ T8350] batadv5: entered promiscuous mode [ 205.551895][ T8354] loop6: detected capacity change from 0 to 256 [ 206.034566][ T1868] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 206.043858][ T1868] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 206.533311][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.673843][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1417'. [ 206.788042][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.050027][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'. [ 207.534398][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.214246][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 208.529033][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'. [ 208.539599][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 208.605052][ T3498] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 208.615503][ T28] audit: type=1400 audit(1775425838.033:916): avc: denied { write } for pid=8387 comm="syz.3.1424" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 208.634976][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.672763][ T3498] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.904392][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1431'. [ 208.970313][ T8406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8406 comm=syz.5.1432 [ 209.050110][ T8409] netlink: 'syz.5.1432': attribute type 1 has an invalid length. [ 209.522892][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 209.604882][ T8417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.626064][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.634259][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.655160][ T8417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.670826][ T8418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.692079][ T8418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.704955][ T8420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1435'. [ 209.747648][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 209.773925][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 209.875270][ T8432] loop3: detected capacity change from 0 to 256 [ 209.968294][ T4904] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 209.986508][ T4904] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.027641][ T8430] bridge0: port 4(batadv3) entered blocking state [ 210.067015][ T8430] bridge0: port 4(batadv3) entered disabled state [ 210.095828][ T8430] batadv3: entered allmulticast mode [ 210.106394][ T8430] batadv3: entered promiscuous mode [ 210.206016][ T8449] loop0: detected capacity change from 0 to 512 [ 210.247417][ T8449] EXT4-fs: Ignoring removed bh option [ 210.284128][ T8449] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 210.307919][ T8449] EXT4-fs (loop0): 1 truncate cleaned up [ 210.334589][ T8449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.378019][ T8458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8458 comm=syz.5.1452 [ 210.407082][ T8449] EXT4-fs error (device loop0): ext4_nfs_get_inode:1567: inode #11: comm syz.0.1448: iget: bad extended attribute block 100663296 [ 210.492010][ T8469] loop3: detected capacity change from 0 to 256 [ 210.498703][ T8470] netlink: 'syz.5.1452': attribute type 1 has an invalid length. [ 210.532780][ T1868] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 210.542111][ T1868] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 210.965393][ T8481] netlink: 'syz.3.1459': attribute type 21 has an invalid length. [ 211.113648][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.861393][ T3395] net_ratelimit: 8 callbacks suppressed [ 211.861469][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.109514][ T8492] __nla_validate_parse: 7 callbacks suppressed [ 212.109534][ T8492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1462'. [ 212.924614][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.148053][ T3416] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 213.212275][ T3416] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.238435][ T8505] loop3: detected capacity change from 0 to 128 [ 213.367029][ T8511] loop5: detected capacity change from 0 to 256 [ 213.856419][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.058181][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.531547][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1473'. [ 214.973380][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 215.028059][ T8533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1476'. [ 215.052627][ T8530] bond1: entered promiscuous mode [ 215.068093][ T8530] bond1: entered allmulticast mode [ 215.077046][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.095791][ T8530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.374398][ T8549] 9p: Bad value for 'rfdno' [ 215.404732][ T8551] loop3: detected capacity change from 0 to 256 [ 216.088614][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.097004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.120178][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.128576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.173017][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'. [ 216.242756][ T8565] bond2: entered promiscuous mode [ 216.247996][ T8565] bond2: entered allmulticast mode [ 216.253735][ T8565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.263207][ T8567] loop3: detected capacity change from 0 to 164 [ 216.392376][ T8572] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1491'. [ 216.430774][ T8567] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 216.624809][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 216.638228][ T8590] loop3: detected capacity change from 0 to 256 [ 216.642184][ T23] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.733311][ T8595] loop5: detected capacity change from 0 to 2048 [ 216.757482][ T8595] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 216.795192][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 216.807877][ T8595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.855594][ T8597] bond3: entered promiscuous mode [ 216.860687][ T8597] bond3: entered allmulticast mode [ 216.902710][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.911418][ T8597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.933970][ T28] audit: type=1400 audit(1775425846.363:917): avc: denied { map } for pid=8594 comm="syz.5.1499" path="/272/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.987755][ T28] audit: type=1400 audit(1775425846.363:918): avc: denied { execute } for pid=8594 comm="syz.5.1499" path="/272/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 217.052078][ T28] audit: type=1400 audit(1775425846.413:919): avc: denied { setopt } for pid=8594 comm="syz.5.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.155247][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.373196][ T8618] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1506'. [ 217.596820][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.774123][ T3498] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 217.802280][ T3498] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.143982][ T8637] netlink: 'syz.0.1512': attribute type 21 has an invalid length. [ 218.152229][ T8637] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1512'. [ 218.187591][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.201020][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.046576][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.133223][ T8645] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1517'. [ 220.025651][ T8650] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1518'. [ 220.174827][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.198219][ T206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.208273][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.516404][ T8658] loop5: detected capacity change from 0 to 1024 [ 220.533899][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.509530][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.529161][ T8662] 9p: Bad value for 'rfdno' [ 221.542456][ T8658] EXT4-fs: Ignoring removed bh option [ 222.035406][ T8658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.077184][ T8602] syz.3.1500 (8602) used greatest stack depth: 4472 bytes left [ 222.198837][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 222.213769][ T8679] bond2: entered promiscuous mode [ 222.233207][ T8679] bond2: entered allmulticast mode [ 222.238717][ T8679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.279937][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.290509][ T8675] bridge0: port 8(batadv6) entered blocking state [ 222.317343][ T8675] bridge0: port 8(batadv6) entered disabled state [ 222.344945][ T8675] batadv6: entered allmulticast mode [ 222.381335][ T8675] batadv6: entered promiscuous mode [ 222.465421][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1530'. [ 222.606399][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.674241][ T8695] loop6: detected capacity change from 0 to 164 [ 222.743749][ T8695] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 222.784876][ T5763] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 222.794273][ T5763] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 223.044532][ T8704] 9p: Bad value for 'rfdno' [ 223.158398][ T8710] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1534'. [ 223.622526][ T3498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.805770][ T8714] loop3: detected capacity change from 0 to 1024 [ 223.843085][ T8714] EXT4-fs: Ignoring removed bh option [ 223.893759][ T8714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.003318][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.046804][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.545761][ T8712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1537'. [ 225.064989][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.100656][ T8734] loop6: detected capacity change from 0 to 512 [ 225.127813][ T8734] EXT4-fs: Ignoring removed bh option [ 225.154113][ T8734] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 225.163939][ T8736] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1544'. [ 225.204332][ T8734] EXT4-fs (loop6): 1 truncate cleaned up [ 225.232168][ T8734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.295093][ T8734] EXT4-fs error (device loop6): ext4_nfs_get_inode:1567: inode #11: comm syz.6.1543: iget: bad extended attribute block 100663296 [ 225.426896][ T8741] loop3: detected capacity change from 0 to 164 [ 225.458624][ T3395] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 225.480041][ T3395] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 225.519181][ T8741] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 225.538795][ T8749] fido_id[8749]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.622740][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.631765][ T3498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.640614][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.649085][ T3670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.886371][ T8760] netlink: 528 bytes leftover after parsing attributes in process `syz.3.1551'. [ 225.948081][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.104509][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.272928][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.313658][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1553'. [ 227.119809][ T8776] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1555'. [ 227.271472][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1558'. [ 227.465884][ T8790] loop3: detected capacity change from 0 to 164 [ 227.498038][ T8790] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 228.194930][ T3416] net_ratelimit: 3 callbacks suppressed [ 228.194944][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.254819][ T8799] loop3: detected capacity change from 0 to 512 [ 228.291313][ T8799] EXT4-fs: Ignoring removed bh option [ 228.372074][ T8799] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 228.403239][ T8799] EXT4-fs (loop3): 1 truncate cleaned up [ 228.409555][ T8799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.442875][ T8799] EXT4-fs error (device loop3): ext4_nfs_get_inode:1567: inode #11: comm syz.3.1563: iget: bad extended attribute block 100663296 [ 228.499585][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.508051][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.536153][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.639842][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.660220][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.694637][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.764565][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1566'. [ 228.810631][ T8808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.883732][ T8814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1569'. [ 229.030907][ T8823] loop5: detected capacity change from 0 to 164 [ 229.047632][ T8827] FAULT_INJECTION: forcing a failure. [ 229.047632][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 229.078531][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 229.090410][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.0.1574 Tainted: G W syzkaller #0 PREEMPT(full) [ 229.090495][ T8827] Tainted: [W]=WARN [ 229.090502][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 229.090525][ T8827] Call Trace: [ 229.090533][ T8827] [ 229.090542][ T8827] __dump_stack+0x1d/0x30 [ 229.090577][ T8827] dump_stack_lvl+0x95/0xd0 [ 229.090607][ T8827] dump_stack+0x15/0x1b [ 229.090693][ T8827] should_fail_ex+0x263/0x280 [ 229.090726][ T8827] should_failslab+0x8c/0xb0 [ 229.090766][ T8827] __kmalloc_noprof+0xb8/0x4e0 [ 229.090846][ T8827] ? slhc_init+0x81/0x390 [ 229.090885][ T8827] ? __pfx_ppp_ioctl+0x10/0x10 [ 229.090921][ T8827] slhc_init+0x81/0x390 [ 229.090951][ T8827] ? __pfx_ppp_ioctl+0x10/0x10 [ 229.091068][ T8827] ppp_ioctl+0xebe/0x1230 [ 229.091150][ T8827] ? __fget_files+0x184/0x1c0 [ 229.091181][ T8827] ? mutex_lock+0x57/0x90 [ 229.091205][ T8827] ? __pfx_ppp_ioctl+0x10/0x10 [ 229.091267][ T8827] __se_sys_ioctl+0xce/0x140 [ 229.091291][ T8827] __x64_sys_ioctl+0x43/0x50 [ 229.091313][ T8827] x64_sys_call+0x1563/0x3020 [ 229.091345][ T8827] do_syscall_64+0x12c/0x370 [ 229.091406][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.091431][ T8827] RIP: 0033:0x7f08123cc819 [ 229.091456][ T8827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.091477][ T8827] RSP: 002b:00007f0810e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.091500][ T8827] RAX: ffffffffffffffda RBX: 00007f0812645fa0 RCX: 00007f08123cc819 [ 229.091571][ T8827] RDX: 0000200000001000 RSI: 0000000040047451 RDI: 0000000000000005 [ 229.091589][ T8827] RBP: 00007f0810e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.091604][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.091616][ T8827] R13: 00007f0812646038 R14: 00007f0812645fa0 R15: 00007ffd6b922ed8 [ 229.091635][ T8827] [ 229.091922][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 229.155390][ T8823] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 229.309242][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 229.327290][ T1034] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.343858][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.828193][ T8845] tipc: Started in network mode [ 229.833158][ T8845] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 229.844449][ T8845] tipc: Enabled bearer , priority 10 [ 229.852211][ T8845] syzkaller0: entered promiscuous mode [ 230.051997][ T8851] netlink: 'syz.5.1583': attribute type 21 has an invalid length. [ 230.061008][ T8851] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1583'. [ 230.227012][ T8854] loop0: detected capacity change from 0 to 512 [ 230.427429][ T8854] EXT4-fs: Invalid want_extra_isize 2 [ 230.433545][ T3498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.778289][ T8862] loop6: detected capacity change from 0 to 164 [ 230.828919][ T8862] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 230.947961][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.956265][ T3416] tipc: Node number set to 4269801642 [ 231.249502][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'. [ 231.285807][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'. [ 231.311625][ T8884] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1599'. [ 231.327668][ T8867] loop3: detected capacity change from 0 to 1024 [ 231.380088][ T8884] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 231.438881][ T28] audit: type=1400 audit(1775425860.853:920): avc: denied { ioctl } for pid=8883 comm="syz.6.1599" path="socket:[22718]" dev="sockfs" ino=22718 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 231.707227][ T8867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 231.799259][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1600'. [ 231.809506][ T8867] System zones: 0-1, 3-36 [ 231.828197][ T4904] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 231.857591][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1600'. [ 231.872678][ T4904] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 231.915576][ T8867] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1591: bad orphan inode 134217728 [ 231.951538][ T8899] fido_id[8899]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 232.010674][ T8901] loop6: detected capacity change from 0 to 164 [ 232.044701][ T8867] loop3: lost filesystem error report for type 5 error -117 [ 232.052071][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 232.065923][ C0] EXT4-fs (loop3): initial error at time 1775425861: ext4_orphan_get:1423 [ 232.074476][ C0] EXT4-fs (loop3): last error at time 1775425861: ext4_orphan_get:1423 [ 232.104591][ T8903] 9p: Bad value for 'rfdno' [ 232.168126][ T8867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.194816][ T8901] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 232.482571][ T8925] 9p: Bad value for 'rfdno' [ 232.501623][ T28] audit: type=1326 audit(1775425861.923:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.6.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd637e7c819 code=0x7ffc0000 [ 232.550926][ T28] audit: type=1326 audit(1775425861.923:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.6.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd637e7c819 code=0x7ffc0000 [ 232.601747][ T28] audit: type=1326 audit(1775425861.923:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.6.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd637e7c819 code=0x7ffc0000 [ 232.651092][ T28] audit: type=1326 audit(1775425861.923:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.6.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd637e7c819 code=0x7ffc0000 [ 232.702940][ T28] audit: type=1326 audit(1775425861.923:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.6.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd637e3d04e code=0x7ffc0000 [ 232.753363][ T28] audit: type=1326 audit(1775425861.923:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.6.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd637e7c819 code=0x7ffc0000 [ 232.812073][ T28] audit: type=1326 audit(1775425861.923:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.6.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd637e7c819 code=0x7ffc0000 [ 232.835674][ T28] audit: type=1326 audit(1775425861.923:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.6.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd637e7c819 code=0x7ffc0000 [ 232.862099][ T28] audit: type=1326 audit(1775425861.923:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.6.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd637e7c819 code=0x7ffc0000 [ 232.945933][ T8932] netlink: 'syz.4.1615': attribute type 21 has an invalid length. [ 233.045946][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.175139][ T8934] loop6: detected capacity change from 0 to 512 [ 233.259094][ T8934] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 233.462575][ T3395] net_ratelimit: 5 callbacks suppressed [ 233.462590][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.837132][ T3498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.998257][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.245737][ T8951] __nla_validate_parse: 1 callbacks suppressed [ 235.245861][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1620'. [ 236.071858][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.104188][ T8949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8949 comm=syz.3.1621 [ 237.174188][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.297574][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.452235][ T8958] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 237.637509][ T8961] ================================================================== [ 237.645642][ T8961] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 237.654790][ T8961] [ 237.657136][ T8961] write to 0xffffc9000165b9e8 of 1 bytes by task 8956 on cpu 1: [ 237.664781][ T8961] rwsem_down_write_slowpath+0x3c9/0xa90 [ 237.670436][ T8961] down_write+0xab/0xc0 [ 237.674614][ T8961] kernfs_activate+0x50/0x220 [ 237.679321][ T8961] kernfs_add_one+0x212/0x280 [ 237.684030][ T8961] __kernfs_create_file+0x145/0x180 [ 237.689249][ T8961] sysfs_add_file_mode_ns+0x132/0x1b0 [ 237.694643][ T8961] internal_create_group+0x441/0x9e0 [ 237.699970][ T8961] sysfs_create_groups+0x3f/0xf0 [ 237.704931][ T8961] ib_setup_port_attrs+0xe89/0x1400 [ 237.710152][ T8961] add_one_compat_dev+0x297/0x390 [ 237.715215][ T8961] rdma_dev_init_net+0x1b9/0x240 [ 237.720170][ T8961] ops_init+0x22a/0x2e0 [ 237.724351][ T8961] setup_net+0x9f/0x230 [ 237.728532][ T8961] copy_net_ns+0x310/0x450 [ 237.732974][ T8961] create_new_namespaces+0x20e/0x440 [ 237.738297][ T8961] unshare_nsproxy_namespaces+0xe6/0x120 [ 237.743962][ T8961] ksys_unshare+0x3f2/0x6f0 [ 237.748486][ T8961] __x64_sys_unshare+0x1f/0x30 [ 237.753290][ T8961] x64_sys_call+0x1cef/0x3020 [ 237.757991][ T8961] do_syscall_64+0x12c/0x370 [ 237.762606][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.768523][ T8961] [ 237.770861][ T8961] read to 0xffffc9000165b9e8 of 1 bytes by task 8961 on cpu 0: [ 237.778431][ T8961] rwsem_down_write_slowpath+0x43d/0xa90 [ 237.784090][ T8961] down_write+0xab/0xc0 [ 237.788261][ T8961] kernfs_activate+0x50/0x220 [ 237.792970][ T8961] kernfs_add_one+0x212/0x280 [ 237.797680][ T8961] __kernfs_create_file+0x145/0x180 [ 237.802909][ T8961] sysfs_add_file_mode_ns+0x132/0x1b0 [ 237.808303][ T8961] internal_create_group+0x441/0x9e0 [ 237.813620][ T8961] sysfs_create_groups+0x3f/0xf0 [ 237.818587][ T8961] device_add_attrs+0xf4/0x3f0 [ 237.823371][ T8961] device_add+0x37a/0x770 [ 237.827720][ T8961] wakeup_source_sysfs_add+0x15a/0x1d0 [ 237.833205][ T8961] wakeup_source_register+0xfd/0x240 [ 237.838503][ T8961] ep_insert+0x82f/0xe00 [ 237.842768][ T8961] do_epoll_ctl+0x686/0x8a0 [ 237.847301][ T8961] __x64_sys_epoll_ctl+0xcb/0x100 [ 237.852387][ T8961] x64_sys_call+0x2a8b/0x3020 [ 237.857090][ T8961] do_syscall_64+0x12c/0x370 [ 237.861711][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.867726][ T8961] [ 237.870070][ T8961] value changed: 0x00 -> 0x01 [ 237.874847][ T8961] [ 237.877181][ T8961] Reported by Kernel Concurrency Sanitizer on: [ 237.883393][ T8961] CPU: 0 UID: 0 PID: 8961 Comm: syz.3.1621 Tainted: G W syzkaller #0 PREEMPT(full) [ 237.894268][ T8961] Tainted: [W]=WARN [ 237.898084][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 237.908155][ T8961] ================================================================== [ 238.029169][ T8967] loop0: detected capacity change from 0 to 512 [ 238.344680][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.386253][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.182536][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.424546][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.464689][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.623885][ T3670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.504988][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.222360][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.544798][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.585235][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.624657][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.262324][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.664753][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog