last executing test programs: 2m40.18026012s ago: executing program 1 (id=2): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x141ac2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x44834) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x3430, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xd, 0xd}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x33fc, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0xa89, 0x20000000, 0xce2, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x7}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x3394, 0x2, [@m_pedit={0x1ea4, 0x1d, 0x0, 0x0, {{0xa}, {0x1e08, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x1, 0xe, 0x30000006, 0x7, 0x6}, 0x3, 0x1, [{0x7, 0x4, 0x1, 0x3, 0x0, 0x75bc}, {0x78, 0x10001, 0x2e9, 0x3, 0x1, 0x4}, {0x6, 0x81, 0x4000000, 0xd, 0x7ff, 0x2}, {0x10, 0x8, 0x4, 0x4, 0x80000001, 0x7c}, {0x80, 0xff, 0x5, 0x40000000, 0x1, 0x4}, {0x1, 0x80, 0x81, 0x6, 0x418a, 0x7}, {0x92, 0x800, 0x3, 0x8, 0x3}]}, [{0x531f, 0x7, 0x8, 0x7fff, 0x3, 0x5}, {0x11, 0x5, 0xffffe778, 0x4, 0x5, 0x3}, {0x10001, 0x0, 0x37e, 0x400, 0x5, 0x8}, {0x7fffffff, 0x8, 0x4, 0x6c6, 0x5, 0xa99}, {0x5de, 0x5, 0x1000, 0x0, 0x7, 0x7f12}, {0x20000000, 0x5, 0xfffffff8, 0x7, 0x6, 0x4}, {0x200, 0x101, 0x8, 0x1, 0x6}, {0x1ff, 0x6, 0x8, 0x3, 0x8a6, 0x9e}, {0x8001, 0x80000001, 0x80, 0xffff, 0xc19, 0xf6b}, {0x8, 0x60f4cb25, 0x7, 0x8, 0x8001, 0x2}, {0xdd0, 0x6, 0x1, 0x0, 0xb21, 0xa}, {0x2, 0xa, 0x7d78, 0x80, 0x1, 0x7b}, {0x37a, 0x4, 0x3ff, 0x5, 0x8001, 0x2}, {0x9, 0x3, 0x8, 0x6, 0x7fffffff, 0x94bc}, {0x4a, 0x1, 0x5, 0x4e, 0x4}, {0x2, 0xedc, 0x0, 0x4, 0x3, 0x1}, {0x7fff, 0x5, 0x0, 0x7fff, 0xac, 0x81}, {0xfffffff8, 0xffffffff, 0xee0a, 0x0, 0x1, 0x6}, {0x9, 0x2, 0x2, 0x7, 0x97b4}, {0x8, 0x1, 0x400, 0xc, 0x2, 0x9}, {0x7, 0xffff0000, 0x0, 0x2, 0x2}, {0x7ff, 0x1, 0x7fffffff, 0xf, 0x6, 0x20000000}, {0x9, 0x3, 0x86a, 0x1, 0x4, 0x10000000}, {0x3, 0x800, 0x1, 0xd6, 0x8000, 0x5}, {0x0, 0xfffffe00, 0x400, 0x9, 0x8000, 0x200}, {0x7, 0x3, 0x2, 0x6, 0x1000, 0x6}, {0x1, 0xfffeffff, 0x7, 0xc, 0x8, 0xfffffff7}, {0x2, 0x6, 0x5d, 0x2, 0x4f, 0x2800}, {0x5, 0xfffff001, 0x2, 0x2, 0x6, 0x4}, {0xb5, 0x8, 0x0, 0x0, 0x7f, 0x7fff}, {0xfffffffa, 0x5, 0x0, 0xd, 0x1, 0x8}, {0x5, 0x1000, 0xfffffff8, 0x7, 0x2, 0xff}, {0x5eb, 0x7fffffff, 0x2d9bc61c, 0x2, 0x40, 0xffffffc0}, {0xff, 0x8001, 0x1, 0x0, 0x0, 0x100}, {0xfffffffc, 0xd4, 0xbd28, 0x10, 0x2}, {0x6, 0x7ff, 0x0, 0x3, 0xffff, 0x7}, {0xaa, 0x2, 0x6, 0x0, 0xffffffff}, {0x4, 0x2, 0x3, 0xa, 0x5, 0x7}, {0x4, 0x4, 0x3, 0x1, 0x40, 0xfffffff7}, {0x7cec, 0x1, 0x6, 0x9a, 0x6, 0x3c}, {0x2, 0x2, 0x7, 0x73ab, 0xfffffffb, 0x7ff}, {0x5, 0x36, 0x9, 0x2, 0x7, 0x6}, {0x93d, 0x0, 0x7, 0x7, 0x4, 0x9}, {0x5, 0xa, 0x0, 0x3, 0x2, 0x4f90bca8}, {0xff, 0x7, 0x1, 0x2, 0xa8, 0xfffffff8}, {0x401, 0x9, 0x85, 0x1, 0x3, 0x40}, {0x4f, 0x7, 0x3, 0x3, 0x9}, {0x1ff, 0x0, 0x1, 0xe, 0x9, 0xfff}, {0x89ef, 0x7fff, 0x47, 0xa35, 0xa3a, 0xf0}, {0x6, 0x4, 0x0, 0x3, 0x40, 0x2}, {0x50, 0x25a, 0xa, 0x6, 0x80000000, 0x7}, {0xe4, 0x200, 0x2, 0x7, 0x7, 0x4}, {0x6, 0x10000, 0x1, 0x8, 0x8, 0xfffff799}, {0x401, 0x6, 0xfffffff7, 0x0, 0x1, 0x2}, {0xfffffff8, 0x8, 0x800, 0x7, 0x1, 0x6}, {0xe9, 0xffffffff, 0xc, 0x9, 0x7, 0x3c096eaa}, {0x7, 0xfffffffd, 0x1, 0x9, 0x5}, {0x0, 0x67, 0x4, 0x5, 0x1, 0x1241}, {0x1, 0xc48c, 0x6, 0x3, 0xfffffffd, 0x1}, {0x9, 0x48, 0xd, 0x9, 0x8, 0x4}, {0x7, 0xd, 0x3, 0x4, 0x7, 0x81}, {0x0, 0xfff, 0x4, 0x8, 0x2, 0x71}, {0x2d3e, 0x0, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffffc, 0xfffffffb, 0x400, 0x9, 0x80000001, 0x94}, {0x0, 0x63, 0x5, 0x200, 0x1, 0x100}, {0x1, 0x4, 0x4, 0x8, 0x1, 0x8}, {0x4, 0x7, 0x440, 0x7, 0x5, 0x7}, {0x4, 0x0, 0x179d, 0x9d, 0x8000, 0x7}, {0x67ba, 0x80000001, 0xc, 0x2, 0x8800000, 0x9}, {0x0, 0x7, 0x40, 0xb1e8, 0x1, 0x7fff}, {0x8, 0x10000, 0x5, 0x80000000, 0x738, 0x6}, {0x3, 0x8, 0x0, 0x4, 0xe7a, 0xed}, {0x1, 0x81, 0x1, 0x6, 0x9, 0x9}, {0x4, 0x81, 0x1000, 0xcc20, 0x4}, {0x4, 0x5, 0x7f, 0x1, 0x1a, 0x5}, {0x0, 0x2f1d698d, 0x5, 0x8, 0x4, 0x9}, {0x0, 0xf8, 0xf1b, 0x3, 0x6, 0x7}, {0x9, 0x7, 0xa, 0x2, 0x5, 0x82}, {0x3, 0x3ff, 0xffffffff, 0x3, 0x3, 0x800}, {0x1, 0x6, 0x10001, 0x3, 0x7, 0xfffffc00}, {0x10001, 0xc, 0x3, 0x4, 0x8, 0x80}, {0x4, 0x5, 0x100, 0x532, 0xfffffeff, 0x9}, {0x3ff, 0x9, 0xffff, 0x5, 0xfffff3f6, 0x7ff}, {0x9, 0x9a, 0x1000, 0x7ff, 0x401, 0x4b6}, {0x7, 0x8, 0x5, 0x10000, 0x80000000, 0x6}, {0xb, 0x5, 0x5, 0x6, 0x6d000, 0x200}, {0x4, 0x6, 0x62, 0x80000000, 0xf, 0x9}, {0x8, 0x80, 0x401, 0x7ff, 0x8, 0x7}, {0xfffffffd, 0x8, 0x9, 0x2, 0x7, 0xd7f}, {0x8c, 0x4, 0xe5, 0x1, 0x3, 0x664fa6f2}, {0x50702f82, 0x3, 0x7, 0x8, 0xf6, 0x1}, {0x7, 0x0, 0x5, 0x1, 0x4, 0x8}, {0x0, 0xe, 0xf, 0x2, 0x0, 0x7}, {0xdaa, 0xfffffff8, 0x1, 0x1, 0x0, 0x5}, {0x3, 0x8, 0x8, 0x3, 0x7f, 0x5}, {0x0, 0xfff, 0x0, 0x3, 0x10001, 0x3}, {0x6, 0x2, 0x6, 0x7, 0x6, 0x9}, {0x7, 0xfff, 0x1ff, 0xfffffffa, 0xff, 0x6}, {0xff, 0x0, 0x98, 0x24, 0x3, 0x4}, {0x10000, 0x1, 0x2, 0x9, 0x1, 0x2}, {0x200, 0x6, 0x1, 0x10, 0x6bca9a4a, 0x1}, {0x200, 0x7, 0x2, 0x80000001, 0x8, 0x80}, {0x10, 0x101, 0x5, 0x2, 0x5, 0x59}, {0x4, 0x42874d2, 0xfffffff8, 0x0, 0x9, 0x6}, {0x4, 0x3a, 0x0, 0x1, 0x3, 0x7}, {0x0, 0xfffffffd, 0x2, 0x40000000, 0x1000, 0x8e}, {0x4, 0x1, 0x6, 0x5, 0x0, 0xc0}, {0x3, 0x2, 0x5, 0x8, 0x7, 0xd442}, {0xfffffc01, 0x7, 0x6, 0xfd, 0xc}, {0x97, 0x2, 0x4, 0x5, 0x3, 0x68}, {0x7, 0x3, 0xffff, 0xd1, 0x5, 0x3e}, {0x8dac, 0xaa, 0x5, 0x1000, 0x1, 0x4}, {0x7f, 0xffffff81, 0x400, 0x2, 0x6, 0xac}, {0x5, 0x9e4, 0x2, 0x1, 0x3, 0x80000001}, {0x80000000, 0x10001, 0x4, 0xfffffe01, 0xb6, 0x8}, {0x5, 0x3, 0x2, 0x7e8, 0x1000}, {0x9, 0x400, 0x4a9, 0x3, 0x3, 0x8}, {0x7, 0x5628, 0x100, 0x8, 0x2, 0x9}, {0x28ae2a7f, 0x8, 0x7, 0x100, 0x74a, 0x9}, {0xbffc, 0x4, 0x2, 0x4, 0x5, 0x3}, {0x92b3, 0x3, 0x8, 0x4, 0x2, 0x7}, {0x2, 0xe27, 0x1, 0xecf, 0x8, 0xb509}, {0x7fff, 0x100, 0x7, 0x8001, 0x10001, 0xbd6}, {0x435, 0x1, 0x5, 0x3, 0xd34a, 0x6}, {0xd71, 0x8, 0x8, 0x1, 0x4, 0xfffffffd}, {0xe, 0x0, 0x10001, 0x4, 0x1000, 0x4}, {0x7, 0x80000001, 0x3, 0x1, 0xe182, 0x3}, {0x5, 0x81, 0xdd, 0x3, 0xffff, 0x1a6d}], [{0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4fa85ab702f5cf90, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {}, {0x4}, {0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3}, {0xf}, {0x3}, {0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0xb8539e8b32b49d34}, {0x2, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3, 0xbd741a05053b6259}, {}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x5, 0x8000, 0x8, 0x1, 0x3ff}, 0xc, 0xd, [{0x25b, 0x3de52576, 0x7, 0x4, 0xfe9c, 0x1}, {0xfffffffc, 0x6, 0x3, 0x9, 0xfffffff8, 0x1}, {0x7, 0x40000000, 0x9e, 0x3, 0x2}, {0x0, 0xc0000, 0x4, 0x4, 0x80000000, 0xfd1f}, {0xc5, 0x5, 0x953, 0x14000, 0x8c, 0x8000}, {0x9, 0x1000, 0xc, 0x8, 0xffffffff, 0x2}, {0xff, 0x2, 0x2, 0x8, 0x9, 0x100}, {0x0, 0x9, 0x5, 0x9, 0x0, 0x7}]}, [{0x7, 0x3ff, 0x2, 0xe521, 0x2, 0x2}, {0xf, 0xb90c, 0x2, 0xf40154a, 0xf0, 0x2f6f}, {0x1fe, 0x1, 0x4, 0x100, 0x6, 0xfff}, {0x80000000, 0x1, 0x19d, 0x8, 0x7, 0xfff}, {0x1726, 0x2, 0x5000000, 0x3, 0x8, 0xffff8000}, {0x401, 0x3ff, 0x0, 0x0, 0xf, 0xffffffff}, {0x5, 0x4, 0x2, 0x7, 0x8, 0xffffffa4}, {0xcdac, 0x7f, 0x434, 0x0, 0x1, 0x8}, {0x8, 0x8, 0x715, 0x8000, 0xf1, 0x5}, {0x9, 0xfc, 0x200, 0x5, 0x854, 0xcd}, {0x8, 0x10, 0x86, 0x6, 0x5, 0x5}, {0x2, 0x30, 0x9, 0x6, 0x13e, 0x3ff}, {0x4, 0x800, 0x8, 0x0, 0x8, 0xd7ff}, {0xa, 0x3, 0x3c5, 0xfffffffa, 0xc, 0x9}, {0x4, 0x39ea28e9, 0xfffffff9, 0xc17, 0x114a, 0x4}, {0x6, 0x3, 0x40, 0x5, 0x6, 0x29}, {0xf, 0x1078, 0x7, 0x2, 0x4, 0x1ff}, {0xef, 0x101, 0x4, 0x6, 0xa87, 0xc}, {0x9, 0x5, 0x0, 0x2, 0x310000, 0xb}, {0xffffff81, 0x1, 0x6, 0x4, 0x8}, {0xffffe50f, 0xb, 0x7, 0x9, 0x10000, 0x3}, {0x9, 0x95, 0x40, 0x8000, 0xcce0, 0xa7}, {0x7ff, 0x63f, 0x4, 0x400, 0xdee, 0xffffffff}, {0x6, 0x4, 0x9, 0x4, 0x7, 0x1000}, {0x2, 0x0, 0x8, 0x80c3, 0x9, 0x80}, {0x0, 0xffffffff, 0x2, 0x4, 0xee92, 0x8}, {0x80000001, 0x1, 0xffff, 0x22f6, 0x8, 0x9}, {0x47, 0xfffffff4, 0x10000, 0x1, 0x6, 0x9}, {0x1, 0x18, 0x84f4, 0x2, 0x9, 0x7}, {0xfffff800, 0x34, 0x5, 0x7, 0x8001, 0x5}, {0x1, 0x8000, 0xd84, 0x1, 0x5, 0x30000}, {0x9, 0x5, 0x4, 0x1, 0xb4d0, 0x8}, {0xd4e, 0xb, 0x2, 0x3, 0x8, 0x2}, {0x1, 0x9, 0xb9, 0x0, 0x10000, 0x9}, {0xbed8, 0x1000, 0x3, 0x80876d3, 0x8, 0x1}, {0x5, 0x3, 0x21, 0xae0, 0xc000000, 0x2465}, {0x1, 0x13f4, 0x9, 0xd96c, 0xf636, 0x2}, {0x2, 0x9, 0x10000, 0xff, 0x4, 0x8}, {0x1, 0x5, 0x5, 0x401, 0x9, 0x1}, {0x200, 0x6c2, 0x3, 0x8, 0xfff, 0xc63}, {0x10, 0x5, 0x3, 0x29d, 0x7, 0x7}, {0x5, 0x2, 0xfffffffd, 0x2, 0x5, 0x3}, {0xb4b1, 0x9, 0xfff, 0x4, 0x7, 0x2}, {0x8, 0x80000000, 0x9, 0x6, 0x200, 0x200}, {0x4, 0x0, 0x9, 0xffffffff, 0x0, 0x9}, {0xa, 0x8, 0xa872, 0x8, 0x10001, 0x9}, {0xfffffffa, 0x8001, 0xe, 0x1, 0x5, 0x9}, {0xffffffff, 0x64b, 0x80000000, 0x4, 0x4}, {0x91, 0x5, 0x0, 0x8000, 0x7, 0x8001}, {0x4, 0x7, 0x434a, 0x9, 0x1, 0x3}, {0x8, 0xe, 0x0, 0x9, 0x9, 0x59a}, {0x7, 0x1f, 0x3, 0x7ff, 0x9, 0xffffffff}, {0x1, 0x50e, 0x7fff, 0x1, 0x9}, {0x800, 0x40, 0x53, 0x6, 0x4, 0x4}, {0x5, 0x1, 0x4, 0x5, 0x10, 0x6}, {0x9, 0x2, 0x8, 0x2, 0xee, 0x6}, {0x2, 0x5, 0x0, 0x5f73, 0xb49, 0x400}, {0xd, 0x7fff, 0x6, 0x3, 0x3, 0x8}, {0x3, 0x8, 0x4f42, 0x4, 0x8, 0x1}, {0x7, 0x6, 0x2, 0xf47, 0xfffffffb, 0xfffffc00}, {0x8, 0x2, 0x8, 0x8, 0x3, 0x6}, {0x2, 0x5, 0x5, 0x7, 0x1, 0x5}, {0x1, 0xfffff0ae, 0xccc9, 0x0, 0x5, 0x400}, {0x8, 0x9, 0x200, 0x2, 0x5, 0x9}, {0x9b8b, 0x200, 0x4, 0x1, 0xac, 0xff}, {0x4, 0x7fff, 0x9, 0x5, 0x3}, {0x9, 0x2, 0x7, 0x7, 0xffffffff, 0x7}, {0x5, 0x0, 0x2, 0xf, 0x43e, 0xffffff17}, {0x6, 0x40000000, 0x0, 0x8, 0x8, 0x6f01}, {0x1, 0xf, 0x40a1, 0x80000, 0x6}, {0xc4, 0x5, 0x0, 0x4, 0x100, 0xa}, {0x10001, 0x1, 0x9, 0x1, 0x0, 0x5adbf339}, {0x65, 0x7, 0x22, 0x1, 0x9, 0x6}, {0xfef, 0x6, 0x3, 0x8, 0x6d9ee79, 0x4}, {0x1, 0x80000000, 0x5, 0x0, 0xb86, 0x4}, {0xa7fc2ae8, 0xa6c, 0x7f, 0x7f, 0x42, 0x2}, {0xf, 0xa1fc, 0x2, 0x6, 0x6, 0x7ff}, {0x100, 0x0, 0x4, 0xfea8, 0xb83, 0xa}, {0x1, 0x1, 0x9, 0x1800, 0x0, 0x46e}, {0x9, 0x43d8aae6, 0x400, 0x7f, 0x51, 0x1}, {0x400, 0x7, 0x0, 0x7fffffff, 0x1, 0x2}, {0x3, 0x1, 0x80, 0xfffffff8, 0x80000001, 0x6}, {0x2, 0x604, 0x9653, 0x7, 0x0, 0x5}, {0x3ab6, 0x169, 0x218, 0xf, 0x4, 0x9}, {0x9, 0x4, 0x0, 0x5, 0x222, 0x3}, {0x80, 0x9, 0x3ff, 0x3ff, 0x101, 0x8}, {0x0, 0x6, 0x1, 0x0, 0x10, 0x8}, {0x7, 0x9260, 0x7, 0x4, 0x8000, 0x7}, {0x5, 0x7, 0x4, 0x1, 0x3, 0xa}, {0x7f, 0x51, 0x0, 0x3, 0x2, 0x1}, {0x10001, 0xcc5, 0x3, 0x101, 0xa, 0x5}, {0x4, 0xd2, 0x4b0, 0x7, 0x5, 0x8}, {0x9, 0x296e, 0x3, 0x50d4, 0x10000000, 0x1}, {0xfffffffb, 0x2, 0x5, 0x6, 0xe}, {0x5, 0x0, 0x1, 0xa, 0x8001, 0x570f}, {0x6, 0x1d2e, 0x5, 0x7, 0x2, 0x401}, {0x5, 0x10, 0x81, 0x7, 0xc2, 0xffff}, {0x5, 0x3ff0, 0xfffffff4, 0x4, 0x6, 0xe1}, {0x3, 0x10, 0x5, 0x4, 0x8e3f}, {0xc7, 0x5, 0x0, 0x5, 0x200, 0x6}, {0x9, 0x4, 0x9, 0x3, 0xb, 0x40}, {0xfffffff9, 0x3, 0x1000, 0x8, 0xd636, 0x3}, {0x10001, 0xb, 0x8001, 0x3, 0x80000000, 0x401}, {0x9, 0x6, 0x7fffffff, 0x7, 0x401, 0x6}, {0x9, 0x0, 0x0, 0x4, 0x0, 0xffffff33}, {0x7, 0x6, 0x9, 0xd38, 0xffff, 0x1000}, {0x9, 0x6, 0x1, 0x1, 0x4, 0x146}, {0x0, 0x6, 0x1, 0xb5d, 0x9, 0xfb}, {0xcae, 0x9, 0x8, 0x1, 0x730, 0x2}, {0x10, 0x8, 0xf3, 0x7, 0x4, 0x908}, {0x4, 0x2, 0x200, 0x1, 0x8, 0x7}, {0x1ff, 0x6, 0x7, 0x5, 0x0, 0x8}, {0x7fff, 0x3, 0x8, 0x5, 0x1, 0x9}, {0xed7f, 0xfffffd54, 0x9, 0x6, 0xf5de, 0x8}, {0x9, 0xb, 0x7, 0x5, 0x5, 0x61ba}, {0x8, 0x7, 0x1c5d, 0x7, 0x2, 0x4baa}, {0x4, 0xe, 0x7, 0x401, 0xd38, 0x200}, {0xe10, 0xfffffffd, 0x86f1, 0x4, 0x2, 0x401}, {0xff, 0x4, 0xfffffffd, 0x4, 0x8, 0x80000001}, {0x8, 0x1, 0x8, 0x9, 0x5, 0x9}, {0x9, 0xfffffff9, 0x5, 0x4, 0x5, 0x811}, {0x4, 0x7f, 0x6, 0xb4b, 0x800, 0x8001}, {0x8, 0x9, 0x3b27, 0x3, 0x8000000, 0x8000}, {0x401, 0x1, 0x2, 0xa, 0x4000000, 0x9}, {0x4, 0x7, 0x7fff, 0xfffffffc, 0x5, 0xff}, {0x401, 0x4, 0x80000000, 0x6, 0x3, 0x9}, {0xd, 0x9c88, 0xfffffffb, 0x6, 0x1, 0x3}, {0x101, 0x7, 0xfffffffb, 0xb, 0x6}], [{0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x3}, {}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x4}, {0x7}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x5}, {0x5}, {0x4}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0xbb004e980cf4c9c8}, {0x2, 0x53c41bdd44816904}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x7, 0x1}, {0x4, 0x1}, {}, {0x4, 0x2}, {0x3}, {0x2}, {0x2}, {0x5}, {0x3}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x5c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x74, 0x6, "acd74f10ef0ba5d635fabeb54ddc66e1d4fe003f0e738172feec894945a8878f7d2db40eb42cebd14810e431bcc677061ae54b69ba63dd5b118d575942fe35a7bfeb83a465f267ba0ed5dbefdf6d590297209889f7ae264655f1e0b17d485d9fdff1d7379cb42dd64108954c9a003de0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x14ec, 0xc, 0x0, 0x0, {{0xb}, {0x14ac, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xeaff, 0x7, 0x6, 0x130, 0x9, 0x6, 0x4, 0x200, 0x7, 0x2, 0x8, 0x5ce, 0xa, 0x69, 0xc22, 0x80000001, 0x4, 0x80, 0x4, 0x4, 0x3e, 0x9, 0x7, 0xd, 0xa0f, 0x7, 0x0, 0x6, 0x1, 0x9c, 0x4, 0x1000, 0x7, 0x508eab88, 0x3, 0x2, 0x8, 0xfffffff8, 0x0, 0x6, 0x0, 0x7503, 0x6c, 0x800, 0x8, 0x7, 0x4, 0x5, 0x4, 0x8, 0x3, 0xe, 0x0, 0x8, 0x40000, 0xff, 0x4, 0x800, 0x7ff, 0x1ff, 0xfffffff7, 0xa, 0x5ed, 0x6, 0xfffff800, 0xfffffffc, 0x3, 0xe, 0xfffffffc, 0x10, 0x8000, 0x9, 0x5, 0x8, 0x40, 0x8, 0x80, 0x4, 0x8f, 0x2, 0x5, 0x9, 0x10000, 0xffff8001, 0xffffffc0, 0x7, 0x1, 0x53, 0x200, 0x7, 0x1ff, 0x7aa, 0x7, 0x4, 0x7, 0x1, 0xaccd, 0x422, 0x5, 0x2, 0x4, 0x4, 0x7, 0x6, 0x8001, 0x3, 0x200, 0x7fffffff, 0x2, 0x6aa, 0x1, 0xfffff206, 0xfffffffb, 0x4, 0x9, 0x0, 0x3, 0x6, 0x0, 0xffffff01, 0x88d8, 0xe, 0x4, 0x9, 0xe, 0x6, 0xfff, 0x95, 0x9, 0x0, 0x8, 0xcfef, 0x2, 0x1, 0x591ee00d, 0x1, 0x0, 0xb590, 0x0, 0x3, 0x5, 0x9, 0x913, 0x6, 0xffff, 0xe, 0x8, 0x4, 0x0, 0x8, 0x7fffffff, 0x8000, 0x80000001, 0x10000, 0x5, 0x8, 0x7401a0a2, 0x6, 0x5, 0x200, 0x19, 0x2, 0x5, 0x0, 0x7ff, 0xec, 0x9b0a, 0x8, 0x3, 0x7, 0x5, 0x1, 0xa, 0x8, 0xcff, 0x8f1b, 0x400, 0xeb2, 0xfffffffb, 0xa, 0x3, 0x10001, 0x6, 0x8, 0x4, 0x1, 0xfffffffe, 0x5, 0x1, 0x10, 0x5, 0x7, 0x8, 0x3ff, 0xd, 0x2, 0x6, 0x81, 0x1, 0x4000, 0x9, 0x6, 0x9, 0x1, 0x7, 0x8c, 0x296, 0x9, 0x800, 0xf, 0x8001, 0xa9, 0x8, 0xe0000000, 0x400, 0x800, 0xa, 0x7, 0x9, 0xee, 0x8, 0x6, 0x9, 0x7, 0x2, 0x7f, 0xfffff801, 0x8, 0x4, 0x5, 0x8000, 0x6, 0x5, 0xb, 0x2, 0x1, 0xfffffff7, 0x3, 0x1, 0x0, 0x8bb, 0x4, 0x9, 0x1000, 0x7ff, 0x2, 0x6, 0x8, 0x2, 0x2, 0x1, 0x4, 0x7, 0x5, 0x41, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb7c7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x7fff, 0x5, 0x6793, 0xfffffffd, 0x7, 0x2, 0x0, 0x1, 0x7fff, 0x1547, 0x4, 0xfffffc01, 0x5, 0x56, 0x9b, 0xff, 0x4, 0x6, 0x1000, 0x8, 0x8, 0x0, 0x6, 0xff, 0x3, 0x5, 0x4, 0x1ff, 0x8, 0x0, 0x6, 0x1, 0xa9, 0x10, 0xb, 0x1, 0x63a, 0x9, 0xb, 0x8, 0xffffffff, 0xa860, 0x8, 0x2, 0x1, 0x8, 0x1, 0x80, 0x8, 0x6e5, 0x7e, 0x6, 0x2, 0x0, 0x4, 0x96, 0x692300, 0x4116, 0x75d6, 0x2, 0xfffffff8, 0x4, 0x9, 0x20000000, 0x3, 0xa, 0x0, 0x6, 0x0, 0x0, 0x32, 0x5, 0x9, 0x3, 0x6, 0x9, 0x0, 0x4, 0x5, 0x401, 0x0, 0x1, 0xfffffe01, 0x3, 0xb0, 0x1, 0x1, 0xba, 0x9, 0x6, 0x12, 0x1, 0x1, 0x9, 0x8, 0x5, 0xffff2c2d, 0xff, 0x6, 0x68, 0x2, 0x10000, 0x6, 0x8530, 0x2, 0xe62c, 0x7, 0x8, 0x9, 0xffffe1e7, 0x10000, 0x3, 0xff, 0x55, 0x9, 0x8, 0x9, 0x7, 0x239, 0x6, 0xc6, 0x8001, 0x2, 0x4, 0x0, 0x7, 0x2, 0x8, 0x5, 0x9, 0x0, 0x5, 0xc62, 0x5, 0x251, 0x9, 0x8, 0x4, 0xfffffe01, 0x1, 0xe8b, 0x5, 0x1, 0x1, 0xffffbd9f, 0x1, 0xfff, 0x2d, 0x7, 0x3, 0x4, 0x8, 0xffffffff, 0x2, 0xe72, 0x401, 0x0, 0x5, 0xb, 0x3, 0xd4c, 0x5, 0x5, 0x4, 0xc22, 0x4, 0x1, 0x8001, 0x9, 0x3, 0xff, 0x413, 0x5, 0xf, 0x365, 0x0, 0x3, 0x10000, 0x7, 0x8, 0x7, 0x100, 0x0, 0x9, 0xc, 0x10001, 0x9, 0x58, 0xffff0001, 0x9, 0x5, 0x0, 0x5, 0x41, 0x80, 0x200000, 0xfffffffa, 0x9, 0x3, 0x3, 0x30a, 0xb, 0x0, 0x68, 0x8, 0x7a16, 0x1, 0x86, 0x7ff, 0xaf3, 0x715, 0xb, 0xffffffff, 0x401, 0x2, 0x7f, 0x734, 0x0, 0x7f, 0x100, 0x9253, 0x4, 0xcd, 0x5, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x9, 0x5, 0x9, 0x2, 0x5, 0x3, 0x6, 0x2, 0x5, 0xa, 0x7, 0x712, 0x7f, 0x0, 0x7, 0x7fff, 0x4e2, 0xb, 0x9, 0x1, 0x5, 0x7, 0x983, 0x2, 0xcf8, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x10000000, 0x3, 0xffffff80, 0x7, 0x1, 0xb48, 0x7, 0x8, 0x0, 0xc0d, 0x9, 0x6, 0x5, 0x4f6, 0x3, 0xfffffffc, 0x3, 0x6, 0x4, 0x6, 0xfffffffc, 0xfffffe01, 0x5, 0x2, 0xfb7d, 0x6, 0x7, 0x8, 0x550, 0x7, 0x4, 0x5, 0x24, 0x7fff, 0x8, 0x4, 0x86, 0x9, 0x522d, 0x1, 0x1, 0x6, 0x9, 0x9, 0x9, 0x5, 0x10000, 0x8, 0x7, 0x4, 0x0, 0x800, 0x1ff, 0x7, 0x7fffffff, 0xec, 0x5, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x66, 0x5, 0x5, 0x5, 0xa, 0x9, 0x6, 0x6, 0x7, 0x40, 0x9, 0x1, 0xb8, 0x400, 0x0, 0x7, 0x411a, 0x10000, 0x2cca, 0x1, 0x3ff, 0x8, 0x10001, 0x0, 0x9, 0x8001, 0x3, 0x4, 0xfffffffe, 0x7, 0xc, 0x6, 0x2, 0x1, 0xfcc, 0xeb8, 0xfffffd80, 0x0, 0x8000, 0x40, 0x2, 0x9, 0x51, 0x6, 0x4, 0x1, 0x180, 0xf, 0xc, 0xb7, 0x6, 0x3, 0xff, 0x1, 0x6, 0xf85, 0x10, 0x6c, 0x2, 0x9, 0x0, 0x5, 0x6, 0xb, 0xfff, 0xa5bf, 0xfffffff9, 0x400, 0x0, 0x7, 0x101, 0xf087, 0x1, 0xa5, 0x10001, 0xfffffffb, 0xd, 0x7ff, 0x7fff, 0x6, 0x8, 0x6, 0x3ff, 0x1, 0x3, 0xffff8001, 0xfff, 0x0, 0x9c, 0x2, 0x4, 0x8, 0x5, 0x1, 0xfffffffe, 0x7f, 0x5, 0x3, 0x0, 0x1000, 0x10000, 0xf50e, 0x11, 0xffffff7f, 0x6, 0xbc, 0x3, 0x0, 0x3, 0x2, 0x4, 0xe, 0x2, 0x8, 0x5, 0x9, 0x80, 0x80000000, 0x0, 0x5, 0xc, 0x7fff, 0x0, 0x7, 0x5, 0x401, 0x0, 0x4, 0x633, 0x3, 0x1, 0x1, 0x4, 0x80000000, 0x6, 0x0, 0x7ff, 0x5, 0x99, 0x8000, 0x681, 0x10000, 0xae, 0x823, 0x6, 0x7, 0x6cf3, 0x1, 0xce, 0x2, 0xabb, 0x77329510, 0x7, 0x3, 0x9, 0x81, 0x1c00000, 0x2, 0x4, 0x6, 0xe17, 0xb, 0xffffffff, 0x26d, 0x4, 0xd83, 0x1, 0x6, 0x2, 0x7, 0x12, 0x0, 0x7fffffff, 0x2, 0x3, 0x8, 0x4, 0x6, 0x7, 0x7f, 0x1, 0x1ff, 0x1000, 0x40, 0x400, 0x6, 0x6, 0x4, 0x2, 0x4, 0x4, 0x7fffffff, 0x3]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0xb7d, 0xc, 0x9, 0xffff175f, 0x3ff, 0x9, 0x200, 0xc, 0x7, 0xb, 0x6021, 0x8a5, 0x9, 0x55, 0xfffffffd, 0x0, 0xffff, 0x1000, 0x87, 0x3, 0xf, 0x2, 0x8001, 0x8, 0xb322, 0x7ff, 0x0, 0x5, 0x5, 0x8, 0x8, 0x2, 0x3, 0x10000, 0x0, 0x1, 0x5, 0xbd, 0x6, 0x2, 0x5032187f, 0x7f, 0x800, 0x7, 0x5, 0xb, 0x10000, 0x3, 0x5, 0x80, 0x2, 0x80000000, 0x0, 0xe3, 0x6, 0xef, 0x101, 0x2a4, 0x3, 0x1000, 0x4, 0x2, 0x7f3, 0x0, 0x7, 0x7, 0x59, 0x3, 0x3, 0x0, 0x7fffffff, 0x7, 0x5, 0x4, 0x7, 0x4, 0xffffffff, 0x6, 0x3, 0x0, 0x9, 0x5, 0x5, 0x9, 0x3, 0xd, 0x400, 0xf, 0x6730, 0x76e2a975, 0x5, 0x2, 0x9, 0x1, 0x9, 0x24, 0x7f, 0x1ff, 0x3, 0x5, 0x2, 0x5, 0x10, 0x6, 0x86, 0x5, 0x7, 0x6, 0xffff6823, 0x10, 0xb, 0x8, 0x3, 0x10, 0x7, 0x7, 0x5, 0x7, 0x5, 0x401, 0x100, 0x4, 0x3, 0x10, 0xb34, 0x9, 0x101, 0x8, 0xfffffffb, 0x0, 0x200, 0x80000000, 0xffffffff, 0x7c5, 0x2, 0x9, 0x81, 0x8, 0x5, 0x401, 0x4, 0x0, 0x2d6, 0x6, 0x3, 0x8, 0x8, 0x4, 0x2, 0xab0, 0x679, 0x7, 0x3, 0x100, 0x0, 0x4, 0x4f3c, 0x6, 0xffff, 0x3, 0xff, 0xfffffffc, 0x9, 0x200, 0x2, 0x1000, 0x3, 0xc, 0x6, 0x2, 0x1, 0x1, 0x5, 0x9, 0x1, 0x1, 0x7, 0x0, 0x2, 0x8, 0x3, 0x2000, 0xd9ad, 0x376, 0x9, 0x7, 0x6, 0xffff8001, 0x8, 0x7bd, 0x7, 0x2, 0x7, 0x4, 0x7, 0x10001, 0x1, 0x8, 0x1, 0x6, 0x2, 0x8, 0x81, 0x7fff, 0x6c, 0x4, 0x9, 0xfffffffb, 0x1, 0x1ff, 0x6, 0x0, 0x6, 0x40, 0x10000000, 0x97ce, 0x7fffffff, 0x5, 0x9, 0xfffffff1, 0x8, 0xbf2, 0x2, 0x3c1, 0xfffffc01, 0x7, 0xec5, 0xffffff00, 0x40, 0x8, 0xb, 0x7, 0x5, 0x100, 0x3, 0x81, 0xd2d, 0x9, 0x9, 0x7, 0x0, 0x8, 0xfffffffc, 0xffff, 0x5, 0x0, 0x6, 0x0, 0x8, 0x8, 0x8, 0x1, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x0, 0x4, 0x4, {0x5, 0x0, 0x5, 0x6, 0x1, 0x8}, {0xca, 0x0, 0x5, 0x401, 0x8, 0x5}, 0x6dca, 0xb2, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x2, 0x80000001, 0x7ff, 0x1, 0x6, 0x400, 0x324, 0x919, 0x5, 0x1, 0x3, 0x6, 0xffffffff, 0x7ff, 0xfffffffe, 0x7, 0xfffffffe, 0x3e, 0x2, 0x1, 0x401, 0x400, 0x3a5, 0xce2, 0x5, 0x200, 0x0, 0xffffffff, 0xc, 0x2c000000, 0x7fff, 0x318f2a47, 0x5, 0x9, 0x10c9657f, 0xb5, 0x8, 0x5c000000, 0x8, 0x7f, 0x2, 0x400, 0x10e, 0x2, 0xb54, 0x1, 0x40, 0x62, 0x2, 0x10, 0xff, 0x101, 0x40, 0x3, 0x8, 0x4, 0xc, 0x4, 0x2548, 0x3, 0x6, 0x4, 0x9, 0xc, 0x4952cce6, 0x7480, 0x1, 0x400, 0x7, 0x5, 0x6, 0xb, 0x8, 0x1ff, 0x38b, 0x8, 0x0, 0xbaa3, 0x4, 0x4, 0x5, 0x8, 0x8, 0x0, 0x40, 0x1, 0xfff, 0x1ff, 0x9, 0x1, 0x8001, 0x20000000, 0x521, 0xb8c9, 0x5, 0x266, 0x8, 0x4, 0x7, 0x8, 0x7bff, 0x4, 0x9, 0xc2, 0x6, 0x0, 0x3, 0x80, 0x3, 0x6, 0x1ff, 0x5, 0xff, 0x4, 0x7fff, 0x7, 0xeab8, 0x3, 0xc, 0x9, 0x9, 0x6, 0x20000000, 0xca23, 0x26, 0xfff, 0x3, 0x80, 0x100, 0x0, 0x2, 0xad, 0x1, 0x4, 0x6, 0x7, 0x4, 0xffffffff, 0x6, 0x7, 0x8, 0x7, 0x9, 0x40, 0x4a, 0x7, 0x1, 0x7, 0x2f, 0x2, 0xd00, 0x7, 0x1, 0xcf, 0x10, 0x5, 0x6, 0x40, 0x7fffffff, 0xb, 0xeda8, 0x12fcf74b, 0x8, 0x1, 0x7, 0x1, 0x2, 0x2, 0x800, 0x9, 0x1, 0x2, 0xf24, 0x4, 0x7ff, 0xfff00000, 0x3, 0x1, 0x3, 0x101, 0x7b0, 0x8000, 0x7ff, 0x1, 0x8, 0x1b, 0x6c0d, 0x6, 0x8, 0x93, 0x8, 0x0, 0x0, 0x3, 0x735a9095, 0x7, 0x2, 0x8, 0x7f, 0xd8d, 0x5, 0x3, 0x9, 0x8, 0xfffffff4, 0x2, 0x401, 0x1, 0x4, 0x1, 0xa13, 0x95f9, 0x2, 0x9, 0x3, 0x9, 0x7, 0xaf8, 0xffffffff, 0xffff8000, 0x4, 0x891, 0x2, 0x1, 0x4, 0x7ff, 0x4, 0x3, 0x10001, 0x2, 0xffff8000, 0x719, 0x9, 0x100, 0x8, 0x5, 0xe, 0xfffffc00, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x5, 0x77dd, 0xb0, 0x2, 0x300, 0x7, 0x1, 0x80000001, 0x8, 0xb0, 0x0, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf48c}]]}, {0x18, 0x6, "0814d6fe1e6a45bb85e152f6608c1bb70bed6943"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x3430}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000009000000000000020000000900020073797a300000000008000440000000000900010073797a300000b7740800034000000004140000001100010000000000000000000000000a"], 0x64}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) listen(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x808011, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYBLOB="1982715f049a64c709c11c0339a37dab5521c27cf1bf05234733c6a45454e349d787abc1642dff6c12ee1b0900"/62, @ANYRES32=r5, @ANYRESOCT, @ANYBLOB="e34fef60310d8cf8b38314a774f0fa06a4f1e0a0d12f3e17794e0670c41c48144163ab7c06110af0ccfe0a945c94e8c446b483c1261b2d1c60bb4c50ee09185715da09b32c95c220be58f921de50529f5ef243c442050f3b0c826e2829f13898c1d3a76cdfa7f74798240321a2c203e6b890db4dcbe78c9cf00677c16a9f051ffd869e950f5bc3e5b41fc465cf1e57ddc678583b3f7a123595c246ffe8da4f82090167708b60b99adb182cf5c389b47bb77748350d2b98d429d4f0af73bf4976000000000000000000", @ANYRES16, @ANYRES32], 0x0, 0x32b, &(0x7f0000000680)="$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") prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) preadv(r8, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0xedcd, 0x7, {{0x9, 0x4, 0x3, 0x32, 0x24, 0x67, 0x0, 0x68, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@ssrr={0x89, 0xf, 0xe7, [@loopback, @rand_addr=0x64010100, @broadcast]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2300000004000000040000000a00000000000000", @ANYRES32=r10, @ANYBLOB="0300"/20, @ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="02000000030000000100"/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x110, r10, 0x0) 2m39.736957146s ago: executing program 1 (id=6): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x80) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 2m39.595612444s ago: executing program 1 (id=8): r0 = socket$inet(0xa, 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x83ed, 0x0, 0x40204, 0x136}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_clone3(&(0x7f0000000440)={0x200040000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r7 = epoll_create(0x7) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @dev}, &(0x7f0000000100)=0xc) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x90000000}) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2020005, 0x8, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0x5, 0xffffffffffffffff, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) mknodat(r8, &(0x7f0000000040)='./file0\x00', 0x2, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x1a0, 0x2e8, 0x98, 0x1a0, 0x250, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @private=0xa010101, 0x0, 0xff, 'macvlan0\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x53}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 2m39.393954136s ago: executing program 1 (id=11): socket$kcm(0x21, 0x2, 0x2) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = dup(r1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000000c0)=ANY=[], 0xa) sendfile(r4, r4, 0x0, 0x6) fsetxattr$trusted_overlay_upper(r2, 0x0, 0x0, 0x0, 0x2) write$cgroup_subtree(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x3}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r8, 0x80000001, 0x4) syz_open_procfs(r8, &(0x7f00000000c0)='loginuid\x00') set_mempolicy(0x8006, 0x0, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m38.619250361s ago: executing program 1 (id=17): r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m37.423784591s ago: executing program 1 (id=36): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000040)) 2m37.420280381s ago: executing program 32 (id=36): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000040)) 1m4.675635505s ago: executing program 5 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003499b8f276dc75584a8d87d907005858367d61f49e1639a48f", 0x20, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0c81) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/46, 0x2e) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) 1m3.858240542s ago: executing program 5 (id=1268): syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) 1m2.981640734s ago: executing program 5 (id=1282): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x138) 1m2.921440217s ago: executing program 5 (id=1283): r0 = socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m2.648053503s ago: executing program 5 (id=1287): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x42031, 0xffffffffffffffff, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0xffffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200000}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x3}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0xffffffffffffffc9, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x18, 0x0, 0xc8, r4}}, 0x1e}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000000)={0x9, 0x3, 0x8, 0x4, 0x8, "8e12c6d7c93989cad6a0f05e62d33868c30ac3", 0x7, 0x1}) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0xd79f6255) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, &(0x7f0000000400)={{0x1, 0x3, 0x4, 0x0, 0x8000, 0x9cf}, 0x3a59, [0x101, 0x7, 0xfffffffe, 0xfffffffd, 0x1, 0x8, 0x61, 0x8000, 0x80000001, 0x2, 0xb2, 0x7, 0x4, 0x89, 0xa8c, 0x0, 0x1, 0xc27, 0x3, 0x8, 0x80000001, 0x1, 0xfffffb0b, 0x978a, 0x4, 0x101, 0x6, 0x4, 0x200, 0x9, 0x7076330d, 0xe01, 0xfffffe00, 0x9560, 0x7, 0xfffff801, 0x1, 0x8001, 0xfd, 0x994, 0x4f5, 0x1, 0x5, 0x80, 0x200, 0x0, 0x40, 0x7f, 0x1ff, 0x4, 0xfffffc00, 0x0, 0x0, 0x9, 0x7d, 0x5, 0x0, 0x48be, 0x800, 0x9, 0x7, 0x40, 0x7, 0x71, 0xac7, 0x5, 0x4, 0xb2a, 0x3, 0x5d, 0x6, 0x2d57, 0x813, 0x0, 0xfffffffc, 0x1, 0xe2, 0x100, 0x0, 0x7, 0x5, 0xb1, 0x5, 0x6, 0x2, 0x14e, 0x100, 0x4, 0x27, 0xc, 0x2, 0x7, 0x9, 0x4, 0x51, 0x2, 0x9, 0x1, 0x80000001, 0x2985, 0x9, 0xcc9, 0x0, 0x7ff, 0xffff, 0x5, 0x6fc, 0x2, 0x401, 0x0, 0x9, 0x7fffffff, 0x9d4b, 0xd9e8, 0x7f, 0x3, 0x10001, 0x8, 0x78, 0x1, 0x5, 0x1ff, 0x46ffbc56, 0x6, 0x6, 0xc2, 0x10, 0x10, 0x5, 0x5, 0x4f951265, 0x7, 0x2, 0x3a63, 0xe8, 0xfc7, 0x19aa, 0x7ff, 0xc3, 0x60da, 0x7ff, 0xac4, 0x6, 0x400, 0x3, 0x6, 0x5, 0xac, 0x8, 0x1000, 0x6, 0x6, 0x1, 0x0, 0x7, 0x2, 0x9, 0xffffffff, 0x80, 0xf862, 0xde82, 0x1, 0x0, 0x0, 0x5, 0x0, 0xfffffff9, 0x1, 0x9, 0xda0, 0x5d, 0x8000, 0x9, 0x3b, 0x3, 0x10, 0x81, 0xffff8000, 0x6, 0x80000001, 0x2, 0x3, 0x5, 0x2, 0x101, 0xfffffffa, 0x8, 0xe4c5, 0x3, 0x7, 0x0, 0xf, 0x0, 0x0, 0x5, 0xbad1, 0x3, 0xffff, 0x1, 0x7, 0x1, 0x0, 0x4, 0xfff, 0x2, 0x8, 0x1, 0x10000, 0x1, 0x6, 0xe, 0x1, 0x7, 0xfffffffd, 0x3, 0x6, 0x2, 0xe, 0x0, 0x5, 0x2, 0x5, 0x6, 0x1, 0xfffffffa, 0x987e, 0x6, 0x3df2, 0x8, 0x8, 0x5, 0x9, 0x1, 0x7, 0x7f, 0x7fff, 0x0, 0x7, 0xffffff84, 0x1, 0x5, 0x3, 0x100, 0x1, 0x6ff918ea, 0x4, 0x1, 0x2, 0x0, 0x200, 0x100, 0x400, 0xff, 0x10, 0x6, 0x4, 0x80, 0x70b6, 0x2, 0x5, 0x80000001, 0x5, 0x53ca0c6e, 0xb, 0x4, 0x2, 0x9b3, 0x4, 0x8, 0xb3, 0x4, 0x10001, 0x7, 0x5, 0x10, 0xe, 0x4, 0x200, 0x5, 0x9, 0xcc2d, 0xfffffbff, 0x80000001, 0x200, 0x4, 0x2, 0x81, 0x81, 0x0, 0x1, 0x0, 0x4, 0x8, 0x5, 0x81, 0x9, 0x0, 0x100, 0x0, 0x1, 0x5, 0x2, 0x5, 0x10, 0x12ad13d1, 0x2, 0x80, 0x40, 0xffff, 0xfffffff7, 0x2, 0xe, 0xbde, 0x7fffffff, 0x4, 0x4, 0x1, 0x47f8, 0x6, 0xa, 0xfffffffd, 0x1, 0x6, 0x51, 0x422a, 0x7, 0xa8, 0xfffffff8, 0x5, 0x0, 0x8, 0x1000, 0x7, 0x1000, 0x9, 0x7, 0x1000, 0x0, 0x7fffffff, 0x7, 0xffffffc0, 0xfffff875, 0x2, 0x6, 0x9, 0x8, 0x3, 0x800, 0x63, 0x6, 0x3, 0x800, 0x4, 0x3, 0x7f, 0x8001, 0xbc5b, 0x0, 0x8b, 0x80, 0x7, 0x26, 0x7fffffff, 0xfffffff7, 0x99, 0xf, 0x1, 0x20, 0x8, 0x5fb2, 0x1800, 0x1, 0x6fb, 0x3, 0xff, 0x4, 0xd, 0x0, 0xfffffffd, 0x4, 0xe3b2, 0x8, 0x9, 0x3, 0x2, 0x0, 0x2, 0x4, 0x2f83, 0x1, 0x5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x7, 0x5, 0xb, 0x2, 0xffff, 0x98, 0x5, 0x8, 0x2, 0x10000, 0xbcd3, 0xfff, 0x3, 0xff, 0x7, 0x6, 0xffffeb4e, 0x9b49, 0xe979, 0x8, 0x7, 0x4, 0x8, 0xffff, 0x80000000, 0x1, 0x3a0, 0x8001, 0x5b, 0x3, 0x4, 0x0, 0x80000001, 0x9, 0x1a, 0x8, 0x7fffffff, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x40ce, 0x80, 0x8, 0x0, 0x400, 0x2, 0x6, 0x0, 0x6, 0xc, 0x4, 0x8, 0xfffffffe, 0x3e3c, 0x400, 0x3, 0xfffffff5, 0x5, 0xb, 0x9, 0x22, 0x3c, 0x4, 0x9, 0x2, 0xffffff7f, 0x5b, 0x400, 0x8, 0x1, 0xfffffff8, 0x2, 0x7, 0x1000, 0x12, 0x10000, 0x2, 0x8, 0x1, 0x600000, 0x1, 0x0, 0x7, 0x0, 0x6, 0x2, 0x9, 0x3, 0x1c1, 0x3, 0x40, 0x4, 0x1, 0x6, 0x9, 0x8, 0x6, 0x7, 0x2, 0x7, 0x10ba, 0x9, 0xa4f, 0x4, 0x4, 0x8, 0x4, 0x7, 0x8, 0x6ff5, 0x6, 0x6, 0x6, 0x0, 0x7f, 0x1, 0x8, 0x6d, 0x5, 0x7, 0x10000, 0xfff, 0x5, 0x8, 0x8, 0x7, 0x2, 0x380, 0x101, 0x7, 0x6, 0x1ff, 0x22d, 0x73b8f60e, 0x4, 0x5, 0x7, 0x1ff, 0x1, 0x10000, 0x81, 0x8, 0x2, 0x1, 0x200, 0x7, 0xfffff001, 0x3, 0xfffffbff, 0xfff, 0x1, 0x2, 0x7fffffff, 0x9, 0x97, 0x8, 0x100, 0x4, 0xac, 0xab94, 0x6, 0x0, 0x2, 0x8000, 0x5875, 0x2, 0x5, 0xa, 0xfffffeff, 0x1ff, 0x7ba, 0x7, 0x5, 0x400, 0x10001, 0x8, 0x3, 0x10, 0x3, 0x7fffffff, 0x0, 0x9, 0x4, 0x0, 0x5, 0x6, 0x8, 0x9, 0x3, 0xc1, 0xcd8, 0xfffffffd, 0xc, 0xa08, 0x2, 0x6, 0x7, 0x9, 0x8, 0x7ff, 0x9, 0x2a6, 0x7328, 0xc, 0x1000, 0x2, 0x0, 0x7, 0x5, 0x2, 0xd583, 0x1400, 0x8, 0x80, 0x8, 0x6, 0x2, 0x1, 0x3, 0x6, 0x291, 0xc, 0x8, 0x5, 0x6, 0xff, 0x1000, 0x0, 0x9, 0x7, 0xff, 0x9, 0xd, 0x9, 0x80000000, 0x9, 0x4, 0x0, 0x401, 0xff, 0x6, 0x3, 0x5, 0x5, 0xfffffc01, 0x1, 0x6d, 0xff, 0x0, 0x9, 0xffffffff, 0x6, 0x5, 0xfffff800, 0x2, 0xb, 0x4, 0x0, 0x7, 0x2, 0xffff7fff, 0xffffffff, 0x0, 0x3, 0x7fff, 0x4, 0x4, 0x8, 0xb7, 0x1, 0x5, 0x7, 0x1, 0xf, 0xffff, 0x2, 0xfa5, 0x2, 0x62f0, 0x8, 0x7, 0x9, 0x2, 0x7, 0x9, 0x4, 0xdb, 0x0, 0x5, 0x5, 0x2, 0x7, 0xfff, 0x200, 0x7fffffff, 0x5, 0x0, 0x6, 0x80, 0x7, 0x7fffffff, 0x8001, 0xffffffff, 0x14b0, 0xdc, 0x8, 0x3, 0x80, 0x1, 0x0, 0x9, 0xc7, 0x52, 0x0, 0x3ff0, 0x4, 0x5, 0xfff, 0x69a00, 0x401, 0x2, 0x8, 0x6, 0x1, 0xfffffff5, 0x50, 0xbb, 0x7e96, 0x3, 0x5, 0x2, 0x7, 0xa, 0x4, 0x1, 0x1, 0x3, 0x8, 0xe9ed, 0x10, 0x3ff, 0x2, 0x81, 0x0, 0x10001, 0x9, 0x5, 0x9, 0x9, 0x6312bed4, 0x9, 0x401, 0x7fffffff, 0x7, 0xd39, 0x5, 0xe000000, 0x24b, 0x0, 0x6, 0xfffffffb, 0xfffffffe, 0x4, 0xfffffff8, 0xfff, 0x7, 0x9, 0x3, 0x0, 0x2, 0x8, 0x8843, 0x81, 0x6, 0xdef, 0x100, 0x4, 0x9cd, 0x6, 0x27, 0x6, 0x8d, 0x5, 0x1, 0x240, 0x0, 0x4, 0x3, 0xa9, 0xfffffc00, 0x3, 0x4, 0xfffffffc, 0x1ff, 0x7fff, 0x7fffffff, 0x6, 0x5, 0x401, 0x4, 0x1, 0x656, 0x3e2a, 0x401, 0x7, 0x2, 0x8, 0x3e, 0x9, 0xff, 0x7, 0x40, 0x101, 0x7, 0x1, 0xd2, 0x9, 0x0, 0x5, 0x98c, 0x6, 0x0, 0x800, 0x5, 0x7, 0xffffffff, 0x0, 0xfffffff9, 0x8001, 0x9, 0x8, 0x80000000, 0x3, 0x0, 0xfffffffb, 0x81, 0x7, 0x7, 0x9, 0x7f, 0x2, 0x80, 0x2, 0x8001, 0x3, 0x10000, 0x4, 0x1, 0x1, 0x7, 0x1, 0xffff, 0x8, 0xffffffff, 0x6, 0x0, 0x401, 0x1, 0xfffffffa, 0x7fffffff, 0x4, 0x1, 0x8, 0x8, 0x101, 0xfffffff2, 0x101, 0x0, 0x2, 0x0, 0xb, 0x1, 0x4c067591, 0x1, 0x0, 0xffff, 0x6, 0x0, 0x5, 0x3, 0x7, 0x5, 0x7, 0x2, 0x7f, 0x7826, 0x80000000, 0x79, 0x80, 0x0, 0x7, 0x5f64, 0x0, 0x0, 0xd10, 0x4bdb, 0x1ff, 0x400, 0x9, 0xffffffff, 0x88, 0x2, 0x4, 0x0, 0x8, 0x8, 0x2, 0x0, 0x4, 0xef, 0x1, 0x6, 0x6, 0xffffffff, 0x2, 0xce9, 0x7, 0x6, 0x9, 0x4, 0x4f7, 0x9, 0x1, 0x80000001, 0x60b, 0x3, 0xdc0, 0x5c47, 0x3, 0x1, 0x8b2663da, 0x8, 0x2, 0x6, 0x6, 0x10001, 0xa, 0xe094, 0x7, 0x7ff, 0x5, 0x3, 0x0, 0x9, 0x7f, 0x6, 0xcd, 0x5, 0x8, 0x0, 0x4, 0x6, 0x7befd195, 0x8, 0xfffffff9, 0x3ff, 0x46, 0x8, 0x3, 0x7, 0x5, 0xd1, 0x3, 0x5, 0x80000001, 0x8, 0x3, 0x4, 0x7, 0x44, 0x6, 0x0, 0x4, 0x0, 0xa1, 0xc, 0x40, 0x10000, 0xf, 0x5, 0x1, 0x2232, 0x0, 0x9ec, 0x8, 0x3, 0x5, 0x4, 0x2, 0x8, 0x1, 0x0, 0x5, 0x0, 0x5, 0xfffffff7, 0xe4, 0x0, 0x73, 0x7fff, 0x4, 0x9, 0x3, 0x1, 0x8, 0x7, 0x6, 0x5, 0xd, 0xd, 0x8, 0x7, 0xe, 0x7, 0x2, 0x3, 0x6, 0x8, 0x2, 0x10, 0x1caf6d33, 0x9, 0x1000, 0x101]}) 1m1.83318996s ago: executing program 5 (id=1294): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x80, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x1, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0xa6) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1, 0x131, 0x0) 1m1.83297451s ago: executing program 33 (id=1294): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x80, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x1, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0xa6) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1, 0x131, 0x0) 25.543980838s ago: executing program 4 (id=1734): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)={0x2c}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (rerun: 64) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 25.318607712s ago: executing program 4 (id=1741): sendmsg(0xffffffffffffffff, 0x0, 0x44004) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x148, 0x230, 0x148, 0x300, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xc3b, 0xc3, 0x8, 0x1}}, @common=@hbh={{0x48}, {0x0, 0x5, 0x0, [0x0, 0x9, 0x1, 0xf, 0x647, 0x6, 0x7, 0x0, 0x45, 0x0, 0x8, 0xf, 0x6, 0x5, 0x5, 0x3], 0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @empty, [0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") ftruncate(0xffffffffffffffff, 0x5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 25.003039s ago: executing program 4 (id=1746): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 24.99797121s ago: executing program 4 (id=1747): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x3a9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r3, 0x3532, 0x32c9, 0x45, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000}, 0x94) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000002100)='fd/3\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x40086610, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 24.715297597s ago: executing program 4 (id=1753): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300"], 0x0, 0xe800) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x17, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) getrusage(0x1, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f0000001240)=[{&(0x7f0000000a40), 0x17b}, {&(0x7f0000001740)="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", 0x17b}, {&(0x7f0000000500)="2a6dfe6b588f0649b7c62468b77834dbabbd4b954da4", 0x16}, {&(0x7f0000001640)="acf5964b4d2aba2c68c363b6bc49a8c7becac3bbb7dfcc8b79d6d4f52be12eeb2b79d208ff301d18aa1e5b70729f3b4aa941103981c5f58d8d4971d20b6aa6c7bc3d371b296f014d7bec9aed7f966e46d306d93dabbef889580d6d6e78ba9c72b644dfe391899db31310e59eb3e734ccda545701b2fc7dbb748af3f4f2f22510c8965985c95e73ec6c46ac80a4a74288351133b2890706681f10d66dec0d89e27fdd35fe7ddfe33b4a8d99acecc1586f6d1d257e22e1bf7e390d6d4dbe967e616ccaba4ce0491838ad8469dbfe3c4280330a5c7fc0192c113affde67d5805e2181281f44c32efa30", 0xe8}, {&(0x7f0000000d00)="35b67d93a84d33eb70ff581e3a9d9d0da6dc5d9e513fd7f0d6a7e1a170a9fd02e1e8ab7be3d54f2942d30bb052ff1db99d44bbba505f4ec35bbda360e6b433a93f22eaa64d7024893d4a99395bd583c81e435a0b3c52004bf44246828d6b76a7bdae3a6cfbb9fb", 0x67}, {&(0x7f0000000d80)="3737510ba7998eb0a92eb479b9ac482e6adde06f82a7ed40961de2f2044db9ddc090c9ad2b99c28af1c0147e8302afcf6fdcf929bec6a1a7739a151623ff9e7b9f32748cb18596b18766bb9ec5d09bce07fd8016aeef37d95a4474f8c7a9299958fe", 0x62}, {0x0}, {&(0x7f0000000c00)="41c7c229ebe174b727f00ec3f1d02a27c4bab19ef5ff046bb5aaec1fa8b6d8b49c4ca80426f1d27aaa0a3a5f74b020a430b1cc1f485e8c9013fdfe42f6f11c3e2686e59c5a7738096c5826f4443b74e6640b8b42e5b049f8dd9b7ef8aca94c0a7f7553c48bca6b78498c8f52bea41749243422a96cabd158f601376639e11bd9acdcca6296ab8f4212d1c47c37329f2aa90197826b918c914e4d11f8a79eaaddf1", 0xa1}, {&(0x7f0000001040)="02e5570de9bd58f3ae924514eb95d3085d5b4ffc3ad1b8cdf7f7086f87dfad4ff604ecaacc625a44eea266710d093ac57e807436b57559bc78129208b4f028c7e81351dfef9e381d85c5d7f74e505af08f656fc416ece1fe515b610553eae1493e", 0x61}], 0x9) 24.175784758s ago: executing program 4 (id=1757): sendmsg(0xffffffffffffffff, 0x0, 0x44004) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x148, 0x230, 0x148, 0x300, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xc3b, 0xc3, 0x8, 0x1}}, @common=@hbh={{0x48}, {0x0, 0x5, 0x0, [0x0, 0x9, 0x1, 0xf, 0x647, 0x6, 0x7, 0x0, 0x45, 0x0, 0x8, 0xf, 0x6, 0x5, 0x5, 0x3], 0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @empty, [0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 24.175625698s ago: executing program 34 (id=1757): sendmsg(0xffffffffffffffff, 0x0, 0x44004) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x148, 0x230, 0x148, 0x300, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xc3b, 0xc3, 0x8, 0x1}}, @common=@hbh={{0x48}, {0x0, 0x5, 0x0, [0x0, 0x9, 0x1, 0xf, 0x647, 0x6, 0x7, 0x0, 0x45, 0x0, 0x8, 0xf, 0x6, 0x5, 0x5, 0x3], 0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @empty, [0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 3.23372783s ago: executing program 3 (id=2027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0xe3f011479e942200) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, 0x0, 0x0, 0xa) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x17, 0x7}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000201010100000000797068af60fb20d300000000020000060400198028a526601e138c1661a815464ceaf9abffe0c3e3450a5d9b7203bb6c623d38bb399bcefa078263bb7432ede4c7cecbc82bb47bbcb1d1dccba4c0c2d673b588780c2831c17e296631f8b035c4"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 2.815406795s ago: executing program 3 (id=2032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0xcc, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000cb7f1fb192a99ab699bc313ae43ac367d6085529927919e990a03cb891de1bcbb2aded59dac0e3d0a2cf985e7300f56ccf72ab1ce42c376e582dc09207833de5d9fe747f11dcaa72e3ce310a7aed8486f6438f008f54dcc702faee98c2b268dd4b6f1f2fc871ad9d2c9c0275fcc94add17e967f6bcb93be64e68a7fb0fe086851e989c0782fac8"], 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x80000014) getdents64(r1, &(0x7f0000002540)=""/4096, 0xfffffffffffffe18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x21, 0x5, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1000000000000000f30100000b00000027b916659b05ffc301c8fb2791a58d0d50c0310b4a1fe1c4db168ebf05a86a9fe33a473e1510aff2b2fca132788da5cee398ec4e1afa4f3ae9f25da157c9f84ac714458e62dbce17af77e7bd5a01eebf9f2a58d53f5c1aab99c1f823f7530231c5bebaaba4241d46b9cc509c0736c7ff088ded840696cfa17af1fec1951556f8428dc494a6311d5d51d2d9c02208e85891d927d7bddd125773238b831be03feab72417e4952804d845efd58f3002c9e8cca400248b364311cebba833e7e911840d8ef04b081fc80e0cec4a1ac40dcae469bee2a410477a1f4e4f4b1de6a881dc3300491e27de323d67fab8a50e08d81ff0fef325a400dd7ed13ecc0846f5a0cde257430f408a40220c8eaf113feb69766bcff12d24d69cc08f7c8065c9000000000000000000"], 0x20}, 0xfc40) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r4, &(0x7f0000003540)=[{{&(0x7f0000000100)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000800)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f8100"/58, 0x3a}, {&(0x7f0000000b40)="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", 0x337}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) sendmmsg$inet(r4, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x25, &(0x7f0000000440)="436ed9d0", 0x4) sigaltstack(&(0x7f0000000100)={0x0, 0x2}, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e24, 0x5, @remote, 0xcee}}}, &(0x7f0000000240)=0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f00000007c0)=0xfffffffffffffdf7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000240)={r10}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f00000004c0)={r7, 0x7, 0x3, 0x4, 0x8, 0x0, 0x4, 0x2, {r10, @in={{0x2, 0x4e22, @multicast1}}, 0x1, 0xa8a8, 0x4, 0x1, 0xa4d}}, &(0x7f0000000040)=0xb0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x6, 0x0) 2.756038588s ago: executing program 3 (id=2033): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") setfsgid(0xee00) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x3a9}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r3, 0x3532, 0x32c9, 0x45, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000}, 0x94) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000002100)='fd/3\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0x40086610, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 2.715936571s ago: executing program 0 (id=2034): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}]}, 0x38}}, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 2.659843424s ago: executing program 7 (id=2035): socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) socket(0x10, 0x803, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, 0x0, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0xf7, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) (fail_nth: 5) 2.548211221s ago: executing program 6 (id=2036): syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) 2.414688258s ago: executing program 2 (id=2037): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0xfffffffffffffc8c, 0x0, 0x1, 0x0, 0x0, 0x2004c000}, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x5, 0x0, 0x0, 0xf, 0x1, 0x17}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x2a, 0x0, 0x9, 0xfff}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd0600ffdbdf25040000001400060062726964e765000400ac1414bb00"/42], 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000007240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, 0xe, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x892a6be94dafc693}, 0x10) r6 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x6, 0x201}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 2.369946351s ago: executing program 3 (id=2038): r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x18852, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x947, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r2, 0x0, 0x0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000340)='.\x02\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x17, &(0x7f0000000200)=r5, 0x21) r6 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000e40)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.203654871s ago: executing program 2 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 2.173438723s ago: executing program 2 (id=2040): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000080}, 0x20000000) 2.150675614s ago: executing program 2 (id=2041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x182) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x7}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50) r5 = inotify_init() poll(&(0x7f0000000000)=[{r5, 0x100}], 0x1, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="40000000fa123f80a01cb4ab75968bf1d6ee5afccb1bb00ad906ca1e9968f9ed31948753024a7a12114990e876b59bcf12dfdbe85ea0db4b50aad6c44a8049eb406b678fb79a82041d914ae2b6b2347bdbcc4cab436e92042517da960182515143a4109435c54ae3be08fa79f92b77ba90d19570dcb6b9010c4d42746f", @ANYRES16=r7, @ANYBLOB="20002cbd7000ffdbdf25770000000c009900ff010000120000000800ef00040000000500ee00040000000500ee00b00000000800ef0000000000", @ANYRES64=r4, @ANYRESHEX=r5, @ANYBLOB="e2090f89019a859b7e68312cd7549291490c6193076689482f41cad21899513a4a12486a3db820c8f55f4da599af76cfd5a93bf7afe4aae8b8f3d5efffeef4547ac219e9ddefc85142949ef5f0f77f3820d9ee35a498d9a21c77d2b01797e3587787b2ac2ceb0841ed2a5a7da2e4afefbc020cbde1545ca8491b88764a16d89554d0685651b5caac3db321c30880ad2d92c419996eefd23166f629c8ce4f627f0ef4dc629f938ed8a40963cacfac1ba1891d592f9d76a5ef7f3be03c8246cb9d90674b9a600b5eaac3c3b3dd53", @ANYRESDEC=r4, @ANYRES32=r2, @ANYRES8=r3, @ANYBLOB="ec09120b7cae4f4d2cecd54f93ca837e7f65269dfc6d62798bf69e3bea9d62c3391ad485d8b5323e81b46a09a46051c14ce9ae17b9cf90371421ba3532469b37ec1dba6347eb8bf122f97b2618cf7f5b18cb14ce412dc4c33d5f12155e3f329ac19d87d406650b", @ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4, 0x3f}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) fallocate(r1, 0x0, 0x1, 0x2000402) 1.791925455s ago: executing program 0 (id=2042): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.776136976s ago: executing program 0 (id=2043): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000001759087dcae3cb19000000000000000000000000000000000000000500ffffffffffffff000000ffff00000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ac09000000000000fcffff00000000000000000000000040fbffffffffffffff00000000000000000000000000000000000000000000000200000000000000000008"], 0xb8}}, 0x2c000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x120, 0x120, 0x1f0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff0000ff, 0xff000000], 'erspan0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2f, 0x5, 0x7, 0x26}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@errors_remount}]}, 0x0, 0x782, &(0x7f0000000700)="$eJzs3E1rXNUbAPDn3mSSvuT/TwQX6kKEFloonSTNpl0ZN+KmUCi4rSGZhJCbTMlMahMLbVwLtdkoCKJ7l26FUj+AOyko+AlEazbiZuTOTKZ5mUmTNsnU9PeDm3vOmXPPc555OcwNc28Ar6x38j9JxEBEXIuIwWZ7GhF99dKJiHuNfutP7kzmWxK12vU/kvywWK8NtsZKmvvTUT8k3oiIR4WIC5/ujFtZXpmbyLLSYrM+XJ2/OVxZXrk4Oz8xU5opLYyOXRm5PDZ2eWTswHI9++GVkw9+en9t7efvq/ff7r2YxHg972jmdmCBNmk8J4UY39a+cBjBuiipPbtP71FMBACAXeXf83ua+0IMRo9vaQAAAHDs1PprAAAAwLGXRLdnAAAAAByujd8BbFzbe1jXwXby+3sRMdQufm/9GuKIE1GIiFPryZYrE5LGYfBC7q1GxMPxNu+/pPn+e34j2+rJC47HwXuYrz/j7daftLX+RJv1p3fj3gkvKF//Cm3X36fxezqsf9faDXhyZ9MPX79Z6Bh/NeKt3nbxk1b8pEP8j9qOuLqj5f7aZw86xa99G3Gubf7JlljD1fx12Lg/RM/m+0MMT89mu360Hv1z/vFu+Z/aET9J6lGT3fO/uVvQTT5Z/2uu01qSxz9/phG/p9GUNd5x6bbnv3/LcXnfz5vzSCPiQXOf19e2xTgz/8uPOyMn9zbiT3V4/tu//h+08v9mj/n/9l3/7T12BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLo0IgYiSYutcpoWixGnI+L1OJVm5Ur1wnR5aWEqfyxiKArp9GxWGomIwUY9yeuj9fLT+qVt9bGIeO3Xk42gs1mpOFnOprqdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2nI2Igkla9d9fefUcwIwAAAOBQDO1sSjb9TwAAAAA4Btqc/wMAAADHzPOe//uJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAP165ezbfa+pM7k3l96tby0lz51sWpUmWuOL80WZwsL94szpTLM1mpOFmef9Z4aUSMXoml28PVUqU6XFleuTFfXlqo3pidn5gp3SgVjiQrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9mugviVpMSLSejlNi8WI/0XEUBSS6dmsNBIR/4+Ix4OF/rw+2u1JAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcOAqyytzE1lWWlT4LxYiiXgJpvEqFTp9ZCL2M87deNlfuG6vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdENleWVuIstKi5VuzwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBuqtVqtSQi8u3c4NmB7Y/3JX8P1vcR8fFX17+4PVGtLo7m7X+22qtfNtsvbTrw7lFmAQAAAMfeu/vpvHGevnEeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsFeV5ZW5iSwrLe690B8Ru/Xpi4gtLbHa7SwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDn8W8AAAD//wI3u6g=") socket(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r5, &(0x7f0000000300)=""/212, 0xd4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r9 = socket$pppoe(0x18, 0x1, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x28) ioctl$PPPIOCSMRU(r9, 0x40047452, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006d00010021bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="12", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8814}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) 1.723603669s ago: executing program 7 (id=2044): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffffeff5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000140)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x6, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ac7b51f, 0x24}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) unshare(0x6020480) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0xefc, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1}}, 0x41, 0x2b}, 0x90) 1.551783369s ago: executing program 6 (id=2045): syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x1, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24000840) 1.35213167s ago: executing program 6 (id=2046): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = socket(0x1, 0x803, 0x0) mmap(&(0x7f0000485000/0x4000)=nil, 0x4000, 0xb, 0x40010, r0, 0x17310000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x37, 0x0, &(0x7f00000001c0)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd8704bf758b90a70576ee309456368339dd61b017e08fb3ed8a83b3", 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x109801) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000500)=ANY=[@ANYBLOB="d6070010215ab5000500000000000000ff"]) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000300)={0x3, 0x2, 0xf, 0x8}) 1.35127673s ago: executing program 3 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0xf3c, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x8e9, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x40000005, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3d, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x62c, &(0x7f0000000180)="$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") 943.024705ms ago: executing program 2 (id=2048): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000fd130eee2e03000000000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00030700000026bd7000fbdbdf2505001a"], 0x38}}, 0x20000000) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r8, 0x8800000) r9 = open(&(0x7f0000000340)='./file0\x00', 0x4e37e, 0x53) close(r9) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r10, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) io_uring_setup(0x1b7b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) recvfrom$inet(r10, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r9, r8, 0x0, 0x578410ed) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 853.0917ms ago: executing program 0 (id=2049): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000001240)=[{&(0x7f0000000a40)}, {&(0x7f0000001740)="9b5937bbf46a0a752f10243253d99fbb3227121bb4836b8073322d1ac20976026ad7649ec309fb239ebb9c2cd94e3c0a9d3ae6ba455d59f9121db45c1e3f9819cdbc953deaafd98b8131db4b498bc0addfc7e4ee821a6bcee9b07b6b4c5e8997f930a6f3fd18d2eb7de5346e9a72baa07d1096a2cf190170c4afda7fa59bd94e11bb77019f82de797869753f2b1bebfed1fdbd0f1edc487e9bf6bb46a696fd31f957a4b9069df7026a6d091626387f9b551cdb820d568a83df198b9c4ec3", 0xbe}], 0x2) 742.329796ms ago: executing program 6 (id=2050): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 688.547949ms ago: executing program 0 (id=2051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 613.817954ms ago: executing program 0 (id=2052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x182) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x7}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50) r5 = inotify_init() poll(&(0x7f0000000000)=[{r5, 0x100}], 0x1, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="40000000fa123f80a01cb4ab75968bf1d6ee5afccb1bb00ad906ca1e9968f9ed31948753024a7a12114990e876b59bcf12dfdbe85ea0db4b50aad6c44a8049eb406b678fb79a82041d914ae2b6b2347bdbcc4cab436e92042517da960182515143a4109435c54ae3be08fa79f92b77ba90d19570dcb6b9010c4d42746f", @ANYRES16=r7, @ANYBLOB="20002cbd7000ffdbdf25770000000c009900ff010000120000000800ef00040000000500ee00040000000500ee00b00000000800ef0000000000", @ANYRES64=r4, @ANYRESHEX=r5, @ANYBLOB="e2090f89019a859b7e68312cd7549291490c6193076689482f41cad21899513a4a12486a3db820c8f55f4da599af76cfd5a93bf7afe4aae8b8f3d5efffeef4547ac219e9ddefc85142949ef5f0f77f3820d9ee35a498d9a21c77d2b01797e3587787b2ac2ceb0841ed2a5a7da2e4afefbc020cbde1545ca8491b88764a16d89554d0685651b5caac3db321c30880ad2d92c419996eefd23166f629c8ce4f627f0ef4dc629f938ed8a40963cacfac1ba1891d592f9d76a5ef7f3be03c8246cb9d90674b9a600b5eaac3c3b3dd53", @ANYRESDEC=r4, @ANYRES32=r2, @ANYRES8=r3, @ANYBLOB="ec09120b7cae4f4d2cecd54f93ca837e7f65269dfc6d62798bf69e3bea9d62c3391ad485d8b5323e81b46a09a46051c14ce9ae17b9cf90371421ba3532469b37ec1dba6347eb8bf122f97b2618cf7f5b18cb14ce412dc4c33d5f12155e3f329ac19d87d406650b", @ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4, 0x3f}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(r1, 0x0, 0x1, 0x2000402) 479.788642ms ago: executing program 3 (id=2053): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x102004, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x8001, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x1, @perf_bp={&(0x7f0000000280), 0x8}, 0x120, 0x10000, 0x3, 0x0, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 395.221686ms ago: executing program 6 (id=2054): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x14, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) 337.79162ms ago: executing program 6 (id=2055): syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) 296.405662ms ago: executing program 7 (id=2056): syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x1, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0xa691a4c7c8bfed69, 0x2, 0xfffffffd, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24000840) 203.419237ms ago: executing program 7 (id=2057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003499b8f276dc75584a8d87d907005858367d61f49e1639a48f", 0x20, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0c81) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/46, 0x2e) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) 156.81336ms ago: executing program 7 (id=2058): socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x28, 0xd27, 0x1003ffd, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {0x10}, {0xe, 0xb}}, [@filter_kind_options=@f_fw={{0x4}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) 90.581734ms ago: executing program 7 (id=2059): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") setfsgid(0xee00) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x3a9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x3532, 0x32c9, 0x45, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000}, 0x94) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000002100)='fd/3\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0x40086610, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 0s ago: executing program 2 (id=2060): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) kernel console output (not intermixed with test programs): : Directory bread(block 199922) failed [ 150.520723][ T8476] FAT-fs (loop6): Directory bread(block 199923) failed [ 150.597337][ T8476] FAT-fs (loop6): FAT read failed (blocknr 128) [ 150.706649][ T8489] loop6: detected capacity change from 0 to 128 [ 150.779866][ T8490] bond1: entered allmulticast mode [ 150.956753][ T8493] loop4: detected capacity change from 0 to 128 [ 150.978873][ T8493] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.991614][ T8493] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.011981][ T8493] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1449'. [ 151.038601][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.122347][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 151.122368][ T28] audit: type=1400 audit(1770874060.163:1429): avc: denied { append } for pid=8500 comm="syz.3.1451" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 151.167739][ T28] audit: type=1400 audit(1770874060.163:1430): avc: denied { connect } for pid=8500 comm="syz.3.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.188055][ T28] audit: type=1400 audit(1770874060.163:1431): avc: denied { write } for pid=8500 comm="syz.3.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.230523][ T8501] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 151.443744][ T8511] lo speed is unknown, defaulting to 1000 [ 151.595276][ T8520] loop3: detected capacity change from 0 to 512 [ 151.613830][ T8520] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 151.669266][ T8526] loop6: detected capacity change from 0 to 512 [ 151.676927][ T8526] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 151.690240][ T8526] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1459: bad orphan inode 16 [ 151.705163][ T8526] loop6: lost filesystem error report for type 5 error -117 [ 151.705333][ T8526] ext4_test_bit(bit=15, block=4) = 0 [ 151.723391][ T8526] EXT4-fs (loop6): 1 orphan inode deleted [ 151.742348][ T8526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.770242][ T28] audit: type=1400 audit(1770874060.836:1432): avc: denied { ioctl } for pid=8525 comm="syz.6.1459" path="socket:[23058]" dev="sockfs" ino=23058 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.796335][ T8526] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.1459: reserved inode found cleared - inode=9 [ 151.809890][ T8528] lo speed is unknown, defaulting to 1000 [ 151.987242][ T7893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.019271][ T8527] uprobe: syz.4.1460:8527 failed to unregister, leaking uprobe [ 152.034378][ T8545] loop2: detected capacity change from 0 to 512 [ 152.049907][ T8548] FAULT_INJECTION: forcing a failure. [ 152.049907][ T8548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.064123][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.6.1465 Tainted: G W syzkaller #0 PREEMPT(full) [ 152.064201][ T8548] Tainted: [W]=WARN [ 152.064210][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 152.064297][ T8548] Call Trace: [ 152.064306][ T8548] [ 152.064316][ T8548] __dump_stack+0x1d/0x30 [ 152.064342][ T8548] dump_stack_lvl+0x95/0xd0 [ 152.064370][ T8548] dump_stack+0x15/0x1b [ 152.064392][ T8548] should_fail_ex+0x263/0x280 [ 152.064485][ T8548] should_fail+0xb/0x20 [ 152.064519][ T8548] should_fail_usercopy+0x1a/0x20 [ 152.064625][ T8548] _copy_from_user+0x1c/0xb0 [ 152.064669][ T8548] ___sys_sendmsg+0xc1/0x1e0 [ 152.064714][ T8548] __x64_sys_sendmsg+0xd4/0x160 [ 152.064747][ T8548] x64_sys_call+0x194c/0x3020 [ 152.064826][ T8548] do_syscall_64+0x12c/0x370 [ 152.064861][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.064883][ T8548] RIP: 0033:0x7f9bffd5bf79 [ 152.064898][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.064996][ T8548] RSP: 002b:00007f9bfe7b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.065023][ T8548] RAX: ffffffffffffffda RBX: 00007f9bfffd5fa0 RCX: 00007f9bffd5bf79 [ 152.065042][ T8548] RDX: 000000002000c004 RSI: 0000200000000000 RDI: 0000000000000003 [ 152.065064][ T8548] RBP: 00007f9bfe7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.065107][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.065147][ T8548] R13: 00007f9bfffd6038 R14: 00007f9bfffd5fa0 R15: 00007fffb31c0498 [ 152.065174][ T8548] [ 152.268609][ T8545] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.279857][ T8545] EXT4-fs (loop2): 1 truncate cleaned up [ 152.285954][ T8545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.370389][ T28] audit: type=1326 audit(1770874061.439:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8558 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 152.442180][ T28] audit: type=1326 audit(1770874061.439:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8558 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 152.471621][ T8569] loop4: detected capacity change from 0 to 512 [ 152.482664][ T28] audit: type=1400 audit(1770874061.479:1435): avc: denied { create } for pid=8558 comm="syz.6.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 152.529892][ T8569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.552674][ T8569] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.564616][ T8569] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 152.582065][ T28] audit: type=1400 audit(1770874061.479:1436): avc: denied { write } for pid=8558 comm="syz.6.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 152.604353][ T28] audit: type=1400 audit(1770874061.479:1437): avc: denied { getopt } for pid=8558 comm="syz.6.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 152.606495][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.626509][ T28] audit: type=1400 audit(1770874061.489:1438): avc: denied { wake_alarm } for pid=8558 comm="syz.6.1467" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.674178][ T8575] loop6: detected capacity change from 0 to 8192 [ 152.703180][ T8577] syz.4.1472 (8577): /proc/8576/oom_adj is deprecated, please use /proc/8576/oom_score_adj instead. [ 152.715203][ T3303] loop6: p1 p2 p4 [ 152.719135][ T3303] loop6: p1 size 262144 extends beyond EOD, truncated [ 152.729536][ T3303] loop6: p2 start 4293394690 is beyond EOD, truncated [ 152.744269][ T3303] loop6: p4 size 100663296 extends beyond EOD, truncated [ 152.771778][ T8575] loop6: p1 p2 p4 [ 152.775723][ T8575] loop6: p1 size 262144 extends beyond EOD, truncated [ 152.798646][ T8586] EXT4-fs: Ignoring removed orlov option [ 152.801798][ T8575] loop6: p2 start 4293394690 is beyond EOD, truncated [ 152.815274][ T8586] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 152.828502][ T8588] EXT4-fs: Ignoring removed orlov option [ 152.835757][ T8588] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 152.850030][ T8586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.883249][ T8588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 152.894311][ T8575] loop6: p4 size 100663296 extends beyond EOD, truncated [ 152.918511][ T8588] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1474: corrupted in-inode xattr: e_value size too large [ 152.964756][ T8595] netlink: 'syz.0.1476': attribute type 10 has an invalid length. [ 152.975640][ T8595] __nla_validate_parse: 1 callbacks suppressed [ 152.975668][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1476'. [ 152.995626][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 152.999275][ T8588] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.006898][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 153.017143][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.037899][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 153.049210][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 153.059175][ T8588] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1474: couldn't read orphan inode 15 (err -117) [ 153.059214][ T8588] loop3: lost filesystem error report for type 5 error -117 [ 153.059928][ T8588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.104525][ T8595] team0: Port device geneve1 added [ 153.110397][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.119216][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.146340][ T5669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.174118][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.204387][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.293474][ T8616] tmpfs: Unsupported parameter 'huge' [ 153.340365][ T8613] rock: directory entry would overflow storage [ 153.361823][ T8613] rock: sig=0x4f50, size=4, remaining=3 [ 153.372076][ T8613] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 153.471382][ T8625] rock: directory entry would overflow storage [ 153.582671][ T8627] netlink: 'syz.4.1477': attribute type 3 has an invalid length. [ 153.590652][ T8625] rock: sig=0x4f50, size=4, remaining=3 [ 153.626346][ T8627] EXT4-fs: Ignoring removed nobh option [ 153.633115][ T8627] EXT4-fs: Invalid want_extra_isize 0 [ 153.638002][ T8625] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 153.673472][ T8627] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 153.686476][ T8627] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.704168][ T8627] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 153.717754][ T8627] EXT4-fs (loop4): orphan cleanup on readonly fs [ 153.731109][ T8627] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.1477: Inode bitmap for bg 0 marked uninitialized [ 153.747603][ T8634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.750224][ T8627] loop4: lost filesystem error report for type 5 error -117 [ 153.770682][ T8627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.799753][ T8634] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.819351][ T8632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1485'. [ 153.831233][ T8627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.872260][ T5669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.910547][ T8642] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 153.924859][ T8642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.989073][ T8652] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1490'. [ 154.000175][ T8652] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1490'. [ 154.016360][ T8647] rock: directory entry would overflow storage [ 154.022632][ T8647] rock: sig=0x4f50, size=4, remaining=3 [ 154.028281][ T8647] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 154.102120][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.143419][ T8660] vhci_hcd vhci_hcd.0: invalid port number 133 [ 154.157785][ T8660] vhci_hcd vhci_hcd.0: default hub control req: 1f05 v01ff i0085 l0 [ 154.314836][ T8667] tmpfs: Unsupported parameter 'huge' [ 154.322380][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'. [ 154.332286][ T8667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1496'. [ 154.383622][ T8673] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 154.413032][ T8673] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.652167][ T8715] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.688302][ T8720] tmpfs: Unsupported parameter 'huge' [ 154.703237][ T8715] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 154.730085][ T8715] EXT4-fs (loop2): 1 truncate cleaned up [ 154.757166][ T8715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.878824][ T8727] loop0: p1 p2 p4 [ 154.882995][ T8727] loop0: p1 size 262144 extends beyond EOD, truncated [ 154.892034][ T8727] loop0: p2 start 4293394690 is beyond EOD, truncated [ 154.901651][ T8727] loop0: p4 size 100663296 extends beyond EOD, truncated [ 155.029338][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 155.032717][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 155.134145][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.157938][ T8745] set_capacity_and_notify: 10 callbacks suppressed [ 155.157954][ T8745] loop0: detected capacity change from 0 to 164 [ 155.174565][ T8745] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.187363][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 155.215758][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.234941][ T8745] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1518'. [ 155.273374][ T8756] tmpfs: Unsupported parameter 'huge' [ 155.315148][ T8754] syzkaller0: entered promiscuous mode [ 155.320680][ T8754] syzkaller0: entered allmulticast mode [ 155.437745][ T8772] lo speed is unknown, defaulting to 1000 [ 155.753539][ T8795] loop4: detected capacity change from 0 to 512 [ 155.799616][ T8795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.827087][ T8805] loop0: detected capacity change from 0 to 512 [ 155.834460][ T8803] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1537'. [ 155.847704][ T8795] EXT4-fs error (device loop4): __ext4_iget:5426: inode #3: block 127754: comm syz.4.1530: invalid block [ 155.877402][ T8795] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.892444][ T8795] EXT4-fs error (device loop4): ext4_quota_enable:7192: comm syz.4.1530: Bad quota inode: 3, type: 0 [ 155.913670][ T8795] loop4: lost filesystem error report for type 5 error -117 [ 155.913966][ T8795] EXT4-fs warning (device loop4): ext4_enable_quotas:7233: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 155.936373][ T8805] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.948819][ T8795] EXT4-fs (loop4): mount failed [ 155.963260][ T8805] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1535: bad orphan inode 16 [ 155.974082][ T8805] loop0: lost filesystem error report for type 5 error -117 [ 155.974445][ T8805] ext4_test_bit(bit=15, block=4) = 0 [ 155.987203][ T8805] EXT4-fs (loop0): 1 orphan inode deleted [ 155.993673][ T8805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.082453][ T8819] bond1: option arp_interval: invalid value (18446744073709551615) [ 156.091222][ T8819] bond1: option arp_interval: allowed values 0 - 2147483647 [ 156.110388][ T8819] bond1 (unregistering): Released all slaves [ 156.135507][ T8825] FAULT_INJECTION: forcing a failure. [ 156.135507][ T8825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.148981][ T8825] CPU: 1 UID: 0 PID: 8825 Comm: syz.6.1544 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.149077][ T8825] Tainted: [W]=WARN [ 156.149086][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 156.149102][ T8825] Call Trace: [ 156.149109][ T8825] [ 156.149119][ T8825] __dump_stack+0x1d/0x30 [ 156.149148][ T8825] dump_stack_lvl+0x95/0xd0 [ 156.149193][ T8825] dump_stack+0x15/0x1b [ 156.149219][ T8825] should_fail_ex+0x263/0x280 [ 156.149254][ T8825] should_fail+0xb/0x20 [ 156.149299][ T8825] should_fail_usercopy+0x1a/0x20 [ 156.149331][ T8825] _copy_to_user+0x20/0xa0 [ 156.149369][ T8825] simple_read_from_buffer+0xb5/0x130 [ 156.149402][ T8825] proc_fail_nth_read+0x10e/0x150 [ 156.149424][ T8825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.149455][ T8825] vfs_read+0x1ab/0x7f0 [ 156.149486][ T8825] ? __rcu_read_unlock+0x4e/0x70 [ 156.149546][ T8825] ? __fget_files+0x184/0x1c0 [ 156.149582][ T8825] ? mutex_lock+0x57/0x90 [ 156.149607][ T8825] ksys_read+0xdc/0x1a0 [ 156.149697][ T8825] __x64_sys_read+0x40/0x50 [ 156.149725][ T8825] x64_sys_call+0x2886/0x3020 [ 156.149766][ T8825] do_syscall_64+0x12c/0x370 [ 156.149819][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.149870][ T8825] RIP: 0033:0x7f9bffd1c84e [ 156.149887][ T8825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.149905][ T8825] RSP: 002b:00007f9bfe7b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.149925][ T8825] RAX: ffffffffffffffda RBX: 00007f9bfe7b76c0 RCX: 00007f9bffd1c84e [ 156.149940][ T8825] RDX: 000000000000000f RSI: 00007f9bfe7b70a0 RDI: 0000000000000005 [ 156.149954][ T8825] RBP: 00007f9bfe7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.149978][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.149992][ T8825] R13: 00007f9bfffd6038 R14: 00007f9bfffd5fa0 R15: 00007fffb31c0498 [ 156.150012][ T8825] [ 156.172699][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 156.172840][ T28] audit: type=1400 audit(1770874065.236:1489): avc: denied { ioctl } for pid=8823 comm="syz.0.1541" path="socket:[24119]" dev="sockfs" ino=24119 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 156.446181][ T8829] loop2: detected capacity change from 0 to 512 [ 156.458410][ T8829] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 156.476159][ T8833] netlink: 'syz.0.1545': attribute type 1 has an invalid length. [ 156.499206][ T8833] netlink: 11978 bytes leftover after parsing attributes in process `syz.0.1545'. [ 156.547083][ T8838] loop4: detected capacity change from 0 to 164 [ 156.596832][ T8838] rock: directory entry would overflow storage [ 156.603298][ T8838] rock: sig=0x4f50, size=4, remaining=3 [ 156.610998][ T8838] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 156.771427][ T28] audit: type=1400 audit(1770874065.838:1490): avc: denied { read } for pid=8840 comm="syz.2.1550" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.264128][ T28] audit: type=1400 audit(1770874066.350:1491): avc: denied { sys_module } for pid=8853 comm="syz.4.1554" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 157.318196][ T28] audit: type=1400 audit(1770874066.411:1492): avc: denied { ioctl } for pid=8853 comm="syz.4.1554" path="socket:[23516]" dev="sockfs" ino=23516 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.368444][ T28] audit: type=1400 audit(1770874066.411:1493): avc: denied { connect } for pid=8853 comm="syz.4.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.895631][ T8887] loop2: detected capacity change from 0 to 128 [ 157.933058][ T8887] syz.2.1561: attempt to access beyond end of device [ 157.933058][ T8887] loop2: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 157.953038][ T8887] syz.2.1561: attempt to access beyond end of device [ 157.953038][ T8887] loop2: rw=0, sector=97, nr_sectors = 32 limit=128 [ 157.971880][ T8887] syz.2.1561: attempt to access beyond end of device [ 157.971880][ T8887] loop2: rw=0, sector=145, nr_sectors = 88 limit=128 [ 158.301138][ T8889] batadv_slave_1: entered promiscuous mode [ 158.322524][ T8889] pimreg: entered allmulticast mode [ 158.333671][ T8889] pimreg: left allmulticast mode [ 159.941844][ T8889] batadv_slave_1: left promiscuous mode [ 159.961992][ T8894] loop3: detected capacity change from 0 to 128 [ 159.973210][ T8892] loop0: detected capacity change from 0 to 1024 [ 159.987089][ T8892] EXT4-fs: Ignoring removed bh option [ 160.004942][ T8894] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.021742][ T8892] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 160.032696][ T8901] loop2: detected capacity change from 0 to 512 [ 160.045324][ T8901] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 160.071598][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1567'. [ 160.080041][ T8901] EXT4-fs (loop2): 1 truncate cleaned up [ 160.187713][ T8909] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1563'. [ 160.252103][ T8912] loop2: detected capacity change from 0 to 164 [ 160.289940][ T8912] rock: directory entry would overflow storage [ 160.296489][ T8912] rock: sig=0x4f50, size=4, remaining=3 [ 160.308777][ T8912] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 160.377646][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1566'. [ 160.400557][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1566'. [ 160.434086][ T8908] geneve2: entered promiscuous mode [ 160.444993][ T8908] geneve2: entered allmulticast mode [ 160.533455][ T8920] netlink: 'syz.0.1572': attribute type 6 has an invalid length. [ 160.543581][ T8920] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1572'. [ 160.583340][ T8928] loop2: detected capacity change from 0 to 512 [ 160.596165][ T8928] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.606823][ T8928] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 160.637531][ T8930] vhci_hcd vhci_hcd.3: invalid port number 9 [ 160.650191][ T8930] vhci_hcd vhci_hcd.3: default hub control req: a60f v8017 i0009 l0 [ 160.673518][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1577'. [ 160.701010][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1577'. [ 160.728733][ T8932] xt_hashlimit: size too large, truncated to 1048576 [ 160.779136][ T28] audit: type=1326 audit(1770874069.875:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.1578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x0 [ 160.812352][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 160.844594][ T28] audit: type=1400 audit(1770874069.905:1495): avc: denied { setattr } for pid=8931 comm="syz.0.1577" name="RAWv6" dev="sockfs" ino=24620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.898558][ T8943] loop4: detected capacity change from 0 to 2048 [ 161.021432][ T8953] loop6: detected capacity change from 0 to 512 [ 161.021821][ T8953] EXT4-fs: Ignoring removed oldalloc option [ 161.024906][ T8954] loop0: detected capacity change from 0 to 128 [ 161.048444][ T8953] EXT4-fs (loop6): 1 truncate cleaned up [ 161.063294][ T8954] EXT4-fs mount: 6 callbacks suppressed [ 161.063309][ T8954] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.087279][ T8954] ext4 filesystem being mounted at /310/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.093586][ T8953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.176262][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.187191][ T7893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.217956][ T8954] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1584'. [ 161.237912][ T28] audit: type=1400 audit(1770874070.337:1496): avc: denied { bind } for pid=8961 comm="syz.6.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.257782][ T28] audit: type=1400 audit(1770874070.357:1497): avc: denied { read } for pid=8961 comm="syz.6.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.306690][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.337157][ T8971] loop4: detected capacity change from 0 to 1024 [ 161.346357][ T8971] EXT4-fs: Ignoring removed orlov option [ 161.361582][ T8971] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 161.389323][ T8971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.405035][ T8979] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 161.409763][ T8980] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 161.424790][ T8979] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1590'. [ 161.457205][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.136250][ T8989] loop6: detected capacity change from 0 to 128 [ 162.145618][ T8989] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 162.153748][ T8989] FAT-fs (loop6): Filesystem has been set read-only [ 163.200758][ T3530] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.754829][ T28] audit: type=1326 audit(1770874072.866:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 163.779083][ T28] audit: type=1326 audit(1770874072.866:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 163.802622][ T28] audit: type=1326 audit(1770874072.866:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 163.826279][ T28] audit: type=1326 audit(1770874072.866:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 163.850273][ T28] audit: type=1326 audit(1770874072.866:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 163.873873][ T28] audit: type=1326 audit(1770874072.917:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 163.898027][ T28] audit: type=1326 audit(1770874072.917:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb2e348bce2 code=0x7ffc0000 [ 163.922099][ T28] audit: type=1326 audit(1770874072.917:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb2e348bd77 code=0x7ffc0000 [ 164.352469][ T8973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.381961][ T7893] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 164.516347][ T9016] loop0: detected capacity change from 0 to 512 [ 164.523143][ T9016] EXT4-fs: inline encryption not supported [ 164.542673][ T9016] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.590648][ T9016] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.1598: inode #13: comm syz.0.1598: iget: illegal inode # [ 164.606396][ T9016] loop0: lost filesystem error report for type 5 error -117 [ 164.609768][ T9016] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1598: couldn't read orphan inode 13 (err -117) [ 164.629584][ T9016] loop0: lost filesystem error report for type 5 error -117 [ 164.630428][ T9016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.673537][ T9027] lo speed is unknown, defaulting to 1000 [ 164.938513][ T9049] loop6: detected capacity change from 0 to 512 [ 164.958996][ T9049] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 165.015189][ T9052] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 165.316408][ T9052] loop2: detected capacity change from 0 to 256 [ 165.329927][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.386315][ T9067] loop0: detected capacity change from 0 to 128 [ 165.396495][ T9067] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.410289][ T9067] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.460018][ T9071] __nla_validate_parse: 4 callbacks suppressed [ 165.460042][ T9071] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1617'. [ 165.519538][ T9072] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1615'. [ 165.545516][ T9072] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks [ 165.589690][ T9072] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 165.622706][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1618'. [ 165.688328][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.828582][ T9052] xt_TCPMSS: Only works on TCP SYN packets [ 166.215148][ T9100] loop6: detected capacity change from 0 to 128 [ 166.221898][ T9100] vfat: Unexpected value for 'dos1xfloppy' [ 166.227958][ T28] kauditd_printk_skb: 560 callbacks suppressed [ 166.227971][ T28] audit: type=1400 audit(1770874075.346:2066): avc: denied { bind } for pid=9095 comm="syz.2.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 166.275860][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1628'. [ 166.293976][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1628'. [ 166.303607][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1628'. [ 166.312730][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1628'. [ 166.392876][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1630'. [ 166.402364][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1630'. [ 166.436175][ T9096] syzkaller0: entered promiscuous mode [ 166.441862][ T9096] syzkaller0: entered allmulticast mode [ 166.699329][ T28] audit: type=1400 audit(1770874075.807:2067): avc: denied { create } for pid=9130 comm="syz.4.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.723836][ T28] audit: type=1400 audit(1770874075.827:2068): avc: denied { ioctl } for pid=9130 comm="syz.4.1638" path="socket:[25647]" dev="sockfs" ino=25647 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.783301][ T28] audit: type=1400 audit(1770874075.908:2069): avc: denied { ioctl } for pid=9137 comm="syz.4.1639" path="socket:[25722]" dev="sockfs" ino=25722 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.164259][ T9151] loop3: detected capacity change from 0 to 8192 [ 167.174052][ T9151] vfat: Unknown parameter '18446744073709551615ÿÿ' [ 167.279111][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 167.316636][ T9160] loop3: detected capacity change from 0 to 128 [ 167.393316][ T9160] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.409963][ T9160] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.577861][ T9175] veth1_to_team: entered promiscuous mode [ 167.583656][ T9175] veth1_to_team: entered allmulticast mode [ 167.606611][ T28] audit: type=1400 audit(1770874076.721:2070): avc: denied { lock } for pid=9176 comm="syz.0.1652" path="socket:[25004]" dev="sockfs" ino=25004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.632050][ T5669] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.943387][ T28] audit: type=1400 audit(1770874077.052:2071): avc: denied { write } for pid=9192 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.034418][ T9199] loop3: detected capacity change from 0 to 128 [ 168.042959][ T9199] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 168.051044][ T9199] FAT-fs (loop3): Filesystem has been set read-only [ 168.068971][ T5669] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 168.131239][ T9204] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 168.140116][ T28] audit: type=1400 audit(1770874077.273:2072): avc: denied { relabelto } for pid=9203 comm="syz.3.1661" name="186" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 168.188066][ T28] audit: type=1400 audit(1770874077.303:2073): avc: denied { associate } for pid=9203 comm="syz.3.1661" name="186" dev="tmpfs" ino=993 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 168.693912][ T9221] lo speed is unknown, defaulting to 1000 [ 168.902827][ T9234] loop4: detected capacity change from 0 to 128 [ 168.911925][ T9234] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 168.920012][ T9234] FAT-fs (loop4): Filesystem has been set read-only [ 168.940086][ T3309] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 168.970780][ T9207] syz.6.1662 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 168.993496][ T9207] CPU: 1 UID: 0 PID: 9207 Comm: syz.6.1662 Tainted: G W syzkaller #0 PREEMPT(full) [ 168.993551][ T9207] Tainted: [W]=WARN [ 168.993561][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 168.993657][ T9207] Call Trace: [ 168.993664][ T9207] [ 168.993673][ T9207] __dump_stack+0x1d/0x30 [ 168.993707][ T9207] dump_stack_lvl+0x95/0xd0 [ 168.993737][ T9207] dump_stack+0x15/0x1b [ 168.993770][ T9207] dump_header+0x80/0x240 [ 168.993802][ T9207] oom_kill_process+0x295/0x350 [ 168.993878][ T9207] out_of_memory+0x97d/0xb80 [ 168.993920][ T9207] try_charge_memcg+0x62e/0xa10 [ 168.993963][ T9207] obj_cgroup_charge_pages+0x23/0xc0 [ 168.994040][ T9207] __memcg_kmem_charge_page+0x9e/0x170 [ 168.994070][ T9207] __alloc_frozen_pages_noprof+0x18a/0x350 [ 168.994102][ T9207] alloc_pages_mpol+0xb3/0x260 [ 168.994133][ T9207] alloc_pages_noprof+0x8f/0x130 [ 168.994231][ T9207] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 168.994291][ T9207] __kvmalloc_node_noprof+0x3c3/0x620 [ 168.994416][ T9207] ? ip_set_alloc+0x24/0x30 [ 168.994459][ T9207] ? ip_set_alloc+0x24/0x30 [ 168.994537][ T9207] ? __kmalloc_cache_noprof+0x18a/0x400 [ 168.994582][ T9207] ip_set_alloc+0x24/0x30 [ 168.994681][ T9207] hash_netiface_create+0x282/0x740 [ 168.994719][ T9207] ? __pfx_hash_netiface_create+0x10/0x10 [ 168.994803][ T9207] ip_set_create+0x3cf/0x970 [ 168.994839][ T9207] ? __nla_parse+0x40/0x60 [ 168.994946][ T9207] nfnetlink_rcv_msg+0x509/0x5d0 [ 168.995065][ T9207] netlink_rcv_skb+0x123/0x220 [ 168.995087][ T9207] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 168.995129][ T9207] nfnetlink_rcv+0x167/0x1720 [ 168.995269][ T9207] ? __kfree_skb+0x109/0x150 [ 168.995312][ T9207] ? nlmon_xmit+0x4f/0x60 [ 168.995358][ T9207] ? consume_skb+0x49/0x140 [ 168.995402][ T9207] ? nlmon_xmit+0x4f/0x60 [ 168.995538][ T9207] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 168.995690][ T9207] ? __dev_queue_xmit+0x139a/0x1f20 [ 168.995718][ T9207] ? __dev_queue_xmit+0x148/0x1f20 [ 168.995743][ T9207] ? ref_tracker_free+0x37d/0x3e0 [ 168.995777][ T9207] ? __netlink_deliver_tap+0x4dc/0x500 [ 168.995828][ T9207] netlink_unicast+0x5c0/0x690 [ 168.995876][ T9207] netlink_sendmsg+0x5c8/0x6f0 [ 168.995909][ T9207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.995962][ T9207] ____sys_sendmsg+0x5af/0x600 [ 168.995987][ T9207] ___sys_sendmsg+0x195/0x1e0 [ 168.996030][ T9207] __x64_sys_sendmsg+0xd4/0x160 [ 168.996065][ T9207] x64_sys_call+0x194c/0x3020 [ 168.996162][ T9207] do_syscall_64+0x12c/0x370 [ 168.996196][ T9207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.996259][ T9207] RIP: 0033:0x7f9bffd5bf79 [ 168.996280][ T9207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.996304][ T9207] RSP: 002b:00007f9bfe7b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.996331][ T9207] RAX: ffffffffffffffda RBX: 00007f9bfffd5fa0 RCX: 00007f9bffd5bf79 [ 168.996356][ T9207] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 168.996369][ T9207] RBP: 00007f9bffdf27e0 R08: 0000000000000000 R09: 0000000000000000 [ 168.996448][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.996466][ T9207] R13: 00007f9bfffd6038 R14: 00007f9bfffd5fa0 R15: 00007fffb31c0498 [ 168.996493][ T9207] [ 168.996648][ T9207] memory: usage 307200kB, limit 307200kB, failcnt 282 [ 169.092566][ T28] audit: type=1400 audit(1770874078.196:2074): avc: denied { remove_name } for pid=5669 comm="syz-executor" name="binderfs" dev="tmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 169.275420][ T9207] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 169.308154][ T28] audit: type=1400 audit(1770874078.196:2075): avc: denied { rmdir } for pid=5669 comm="syz-executor" name="186" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 169.327600][ T9207] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 169.400463][ T9207] Memory cgroup stats for /syz6: [ 169.400778][ T9207] cache 0 [ 169.409825][ T9207] rss 0 [ 169.412734][ T9207] shmem 0 [ 169.415688][ T9207] mapped_file 0 [ 169.420215][ T9207] dirty 0 [ 169.423273][ T9207] writeback 0 [ 169.426585][ T9207] workingset_refault_anon 62 [ 169.431303][ T9207] workingset_refault_file 0 [ 169.435936][ T9207] swap 200704 [ 169.439274][ T9207] swapcached 8192 [ 169.442924][ T9207] pgpgin 17967 [ 169.446344][ T9207] pgpgout 17964 [ 169.450610][ T9207] pgfault 22477 [ 169.456437][ T9207] pgmajfault 29 [ 169.459991][ T9207] inactive_anon 0 [ 169.463645][ T9207] active_anon 8192 [ 169.472611][ T9207] inactive_file 0 [ 169.476433][ T9207] active_file 4096 [ 169.480989][ T9207] unevictable 0 [ 169.484494][ T9207] hierarchical_memory_limit 314572800 [ 169.489942][ T9207] hierarchical_memsw_limit 9223372036854771712 [ 169.496168][ T9207] total_cache 0 [ 169.499701][ T9207] total_rss 0 [ 169.503002][ T9207] total_shmem 0 [ 169.506536][ T9207] total_mapped_file 0 [ 169.511247][ T9207] total_dirty 0 [ 169.514764][ T9207] total_writeback 0 [ 169.519171][ T9207] total_workingset_refault_anon 62 [ 169.524409][ T9207] total_workingset_refault_file 0 [ 169.529576][ T9207] total_swap 200704 [ 169.533438][ T9207] total_swapcached 8192 [ 169.538522][ T9207] total_pgpgin 17967 [ 169.542478][ T9207] total_pgpgout 17964 [ 169.546957][ T9207] total_pgfault 22477 [ 169.551180][ T9207] total_pgmajfault 29 [ 169.555226][ T9207] total_inactive_anon 0 [ 169.559545][ T9207] total_active_anon 8192 [ 169.563869][ T9207] total_inactive_file 0 [ 169.568903][ T9207] total_active_file 4096 [ 169.573205][ T9207] total_unevictable 0 [ 169.577388][ T9207] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1662,pid=9206,uid=0 [ 169.592238][ T9207] Memory cgroup out of memory: Killed process 9206 (syz.6.1662) total-vm:159692kB, anon-rss:1200kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 169.675855][ T9207] syz.6.1662 (9207) used greatest stack depth: 6968 bytes left [ 169.774139][ T9251] loop3: detected capacity change from 0 to 164 [ 169.807938][ T9251] rock: directory entry would overflow storage [ 169.814191][ T9251] rock: sig=0x4f50, size=4, remaining=3 [ 169.824261][ T9251] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 169.914452][ T9260] syzkaller0: entered promiscuous mode [ 169.920157][ T9260] syzkaller0: entered allmulticast mode [ 169.970943][ T9265] loop2: detected capacity change from 0 to 512 [ 170.016922][ T9265] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 170.522092][ T9309] loop4: detected capacity change from 0 to 512 [ 170.544509][ T9309] EXT4-fs: Ignoring removed bh option [ 170.555327][ T9309] EXT4-fs: inline encryption not supported [ 170.595275][ T9309] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.655015][ T9309] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 170.687471][ T9309] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1697: bg 0: block 248: padding at end of block bitmap is not set [ 170.704446][ T9318] FAULT_INJECTION: forcing a failure. [ 170.704446][ T9318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.717904][ T9318] CPU: 1 UID: 0 PID: 9318 Comm: syz.6.1699 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.717935][ T9318] Tainted: [W]=WARN [ 170.717941][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 170.717954][ T9318] Call Trace: [ 170.717961][ T9318] [ 170.718008][ T9318] __dump_stack+0x1d/0x30 [ 170.718040][ T9318] dump_stack_lvl+0x95/0xd0 [ 170.718137][ T9318] dump_stack+0x15/0x1b [ 170.718157][ T9318] should_fail_ex+0x263/0x280 [ 170.718237][ T9318] should_fail_alloc_page+0xf2/0x100 [ 170.718267][ T9318] __alloc_frozen_pages_noprof+0x108/0x350 [ 170.718293][ T9318] alloc_pages_mpol+0xb3/0x260 [ 170.718312][ T9318] ? avc_has_perm+0x101/0x190 [ 170.718374][ T9318] vma_alloc_folio_noprof+0x1a9/0x300 [ 170.718404][ T9318] handle_mm_fault+0x111f/0x3030 [ 170.718445][ T9318] ? mt_find+0x291/0x3b0 [ 170.718477][ T9318] do_user_addr_fault+0x3fd/0x1050 [ 170.718512][ T9318] exc_page_fault+0x62/0xa0 [ 170.718622][ T9318] asm_exc_page_fault+0x26/0x30 [ 170.718646][ T9318] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 170.718675][ T9318] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 170.718694][ T9318] RSP: 0018:ffffc90006397d88 EFLAGS: 00050216 [ 170.718781][ T9318] RAX: 0000000000000065 RBX: 0000000000000020 RCX: 0000000000000020 [ 170.718798][ T9318] RDX: 0000000000000000 RSI: ffff88811a118b60 RDI: 0000200000001940 [ 170.718814][ T9318] RBP: 0000000000000027 R08: 00000000000003f4 R09: 0000000000000000 [ 170.718829][ T9318] R10: 000188811a118b60 R11: 000188811a118b7f R12: 0000200000001960 [ 170.718848][ T9318] R13: 00007ffffffff000 R14: 0000200000001940 R15: ffff88811a118b60 [ 170.718896][ T9318] _copy_to_user+0x7c/0xa0 [ 170.718956][ T9318] lsm_fill_user_ctx+0x13a/0x1e0 [ 170.718987][ T9318] selinux_getselfattr+0x86/0xd0 [ 170.719118][ T9318] security_getselfattr+0x24d/0x500 [ 170.719152][ T9318] __x64_sys_lsm_get_self_attr+0x51/0x60 [ 170.719186][ T9318] x64_sys_call+0x1b6f/0x3020 [ 170.719219][ T9318] do_syscall_64+0x12c/0x370 [ 170.719298][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.719319][ T9318] RIP: 0033:0x7f9bffd5bf79 [ 170.719338][ T9318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.719378][ T9318] RSP: 002b:00007f9bfe7b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 170.719411][ T9318] RAX: ffffffffffffffda RBX: 00007f9bfffd5fa0 RCX: 00007f9bffd5bf79 [ 170.719435][ T9318] RDX: 0000200000000480 RSI: 0000200000001940 RDI: 0000000000000066 [ 170.719453][ T9318] RBP: 00007f9bfe7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.719488][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.719502][ T9318] R13: 00007f9bfffd6038 R14: 00007f9bfffd5fa0 R15: 00007fffb31c0498 [ 170.719527][ T9318] [ 171.030665][ T9309] loop4: lost filesystem error report for type 5 error -117 [ 171.073037][ T9309] EXT4-fs error (device loop4): ext4_acquire_dquot:6998: comm syz.4.1697: Failed to acquire dquot type 1 [ 171.118060][ T9324] FAULT_INJECTION: forcing a failure. [ 171.118060][ T9324] name failslab, interval 1, probability 0, space 0, times 0 [ 171.140781][ T9322] loop2: detected capacity change from 0 to 256 [ 171.147848][ T9309] loop4: lost filesystem error report for type 5 error -117 [ 171.148465][ T9309] EXT4-fs (loop4): 1 truncate cleaned up [ 171.171351][ T9326] FAULT_INJECTION: forcing a failure. [ 171.171351][ T9326] name failslab, interval 1, probability 0, space 0, times 0 [ 171.201861][ T9324] CPU: 1 UID: 0 PID: 9324 Comm: syz.6.1702 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.201896][ T9324] Tainted: [W]=WARN [ 171.201902][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 171.201966][ T9324] Call Trace: [ 171.201975][ T9324] [ 171.201986][ T9324] __dump_stack+0x1d/0x30 [ 171.202018][ T9324] dump_stack_lvl+0x95/0xd0 [ 171.202095][ T9324] dump_stack+0x15/0x1b [ 171.202119][ T9324] should_fail_ex+0x263/0x280 [ 171.202156][ T9324] should_failslab+0x8c/0xb0 [ 171.202265][ T9324] kmem_cache_alloc_noprof+0x66/0x400 [ 171.202304][ T9324] ? skb_clone+0x151/0x1f0 [ 171.202331][ T9324] skb_clone+0x151/0x1f0 [ 171.202401][ T9324] __netlink_deliver_tap+0x2c9/0x500 [ 171.202441][ T9324] netlink_unicast+0x66b/0x690 [ 171.202485][ T9324] netlink_sendmsg+0x5c8/0x6f0 [ 171.202552][ T9324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.202653][ T9324] ____sys_sendmsg+0x5af/0x600 [ 171.202686][ T9324] ___sys_sendmsg+0x195/0x1e0 [ 171.202729][ T9324] __x64_sys_sendmsg+0xd4/0x160 [ 171.202861][ T9324] x64_sys_call+0x194c/0x3020 [ 171.202957][ T9324] do_syscall_64+0x12c/0x370 [ 171.203000][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.203027][ T9324] RIP: 0033:0x7f9bffd5bf79 [ 171.203042][ T9324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.203151][ T9324] RSP: 002b:00007f9bfe7b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.203216][ T9324] RAX: ffffffffffffffda RBX: 00007f9bfffd5fa0 RCX: 00007f9bffd5bf79 [ 171.203230][ T9324] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000008 [ 171.203301][ T9324] RBP: 00007f9bfe7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.203314][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.203341][ T9324] R13: 00007f9bfffd6038 R14: 00007f9bfffd5fa0 R15: 00007fffb31c0498 [ 171.203415][ T9324] [ 171.222997][ T9309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 171.246328][ T9322] FAT-fs (loop2): Directory bread(block 64) failed [ 171.376228][ T9326] CPU: 0 UID: 0 PID: 9326 Comm: syz.3.1703 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.376338][ T9326] Tainted: [W]=WARN [ 171.376359][ T9326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 171.376402][ T9326] Call Trace: [ 171.376453][ T9326] [ 171.376483][ T9326] __dump_stack+0x1d/0x30 [ 171.376572][ T9326] dump_stack_lvl+0x95/0xd0 [ 171.376624][ T9326] dump_stack+0x15/0x1b [ 171.376697][ T9326] should_fail_ex+0x263/0x280 [ 171.376794][ T9326] ? alloc_mnt_ns+0x75/0x250 [ 171.376894][ T9326] should_failslab+0x8c/0xb0 [ 171.376985][ T9326] __kmalloc_cache_noprof+0x5f/0x400 [ 171.377160][ T9326] alloc_mnt_ns+0x75/0x250 [ 171.377337][ T9326] copy_mnt_ns+0xd9/0x6e0 [ 171.377447][ T9326] ? kmem_cache_alloc_noprof+0x1e2/0x400 [ 171.377579][ T9326] ? create_new_namespaces+0x3c/0x440 [ 171.377733][ T9326] create_new_namespaces+0x83/0x440 [ 171.377831][ T9326] unshare_nsproxy_namespaces+0xe6/0x120 [ 171.377924][ T9326] ksys_unshare+0x3cd/0x6d0 [ 171.378016][ T9326] ? ksys_write+0x194/0x1a0 [ 171.378112][ T9326] __x64_sys_unshare+0x1f/0x30 [ 171.378188][ T9326] x64_sys_call+0x1cef/0x3020 [ 171.378310][ T9326] do_syscall_64+0x12c/0x370 [ 171.378420][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.378492][ T9326] RIP: 0033:0x7fc71dc3bf79 [ 171.378544][ T9326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.378689][ T9326] RSP: 002b:00007fc71c68f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 171.378753][ T9326] RAX: ffffffffffffffda RBX: 00007fc71deb5fa0 RCX: 00007fc71dc3bf79 [ 171.378803][ T9326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 171.378906][ T9326] RBP: 00007fc71c68f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.378948][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.379007][ T9326] R13: 00007fc71deb6038 R14: 00007fc71deb5fa0 R15: 00007ffe3c7ec7e8 [ 171.379070][ T9326] [ 171.446190][ T9329] __nla_validate_parse: 3 callbacks suppressed [ 171.446241][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'. [ 171.638433][ T9322] FAT-fs (loop2): Directory bread(block 65) failed [ 171.666213][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 171.674071][ T9322] FAT-fs (loop2): Directory bread(block 66) failed [ 171.685349][ T36] __quota_error: 2 callbacks suppressed [ 171.685369][ T36] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 171.710740][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7034: comm kworker/u8:2: Failed to release dquot type 1 [ 171.725304][ T9322] FAT-fs (loop2): Directory bread(block 67) failed [ 171.741805][ T36] loop4: lost filesystem error report for type 5 error -117 [ 171.749974][ T6665] Bluetooth: hci0: sending frame failed (-49) [ 171.756913][ T9322] FAT-fs (loop2): Directory bread(block 68) failed [ 171.773790][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 171.780054][ T3530] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 171.791157][ T9322] FAT-fs (loop2): Directory bread(block 69) failed [ 171.818274][ T9322] FAT-fs (loop2): Directory bread(block 70) failed [ 171.849267][ T9322] FAT-fs (loop2): Directory bread(block 71) failed [ 171.919665][ T9322] FAT-fs (loop2): Directory bread(block 72) failed [ 171.926235][ T9322] FAT-fs (loop2): Directory bread(block 73) failed [ 172.040828][ T9348] FAULT_INJECTION: forcing a failure. [ 172.040828][ T9348] name failslab, interval 1, probability 0, space 0, times 0 [ 172.086067][ T9334] loop3: detected capacity change from 0 to 128 [ 172.107024][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.115797][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.216362][ T9347] SELinux: Context ›Y7»ôj [ 172.216362][ T9347] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 172.216362][ T9347] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 172.273743][ T9348] CPU: 1 UID: 0 PID: 9348 Comm: syz.4.1711 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.273776][ T9348] Tainted: [W]=WARN [ 172.273845][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 172.273858][ T9348] Call Trace: [ 172.273866][ T9348] [ 172.273876][ T9348] __dump_stack+0x1d/0x30 [ 172.273909][ T9348] dump_stack_lvl+0x95/0xd0 [ 172.273947][ T9348] dump_stack+0x15/0x1b [ 172.273966][ T9348] should_fail_ex+0x263/0x280 [ 172.274046][ T9348] ? getname_long+0x32/0x100 [ 172.274108][ T9348] should_failslab+0x8c/0xb0 [ 172.274145][ T9348] __kmalloc_cache_noprof+0x5f/0x400 [ 172.274180][ T9348] ? should_fail_usercopy+0x1a/0x20 [ 172.274215][ T9348] getname_long+0x32/0x100 [ 172.274311][ T9348] do_getname+0x12e/0x1c0 [ 172.274341][ T9348] user_path_at+0x28/0x100 [ 172.274372][ T9348] __se_sys_quotactl+0xaf/0x660 [ 172.274470][ T9348] ? fput+0x8f/0xc0 [ 172.274493][ T9348] __x64_sys_quotactl+0x55/0x70 [ 172.274521][ T9348] x64_sys_call+0x1a2a/0x3020 [ 172.274602][ T9348] do_syscall_64+0x12c/0x370 [ 172.274634][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.274663][ T9348] RIP: 0033:0x7fedca50bf79 [ 172.274682][ T9348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.274714][ T9348] RSP: 002b:00007fedc8f5f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 172.274732][ T9348] RAX: ffffffffffffffda RBX: 00007fedca785fa0 RCX: 00007fedca50bf79 [ 172.274768][ T9348] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffff80000201 [ 172.274786][ T9348] RBP: 00007fedc8f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.274803][ T9348] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 172.274819][ T9348] R13: 00007fedca786038 R14: 00007fedca785fa0 R15: 00007ffd400ebc18 [ 172.274839][ T9348] [ 172.608137][ T9347] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 172.617719][ T9347] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ&†åœZw8 lX&ôD;tæd ‹Bå°IøÝ›~ø¬©L [ 172.680646][ T9347] uSÄ‹ÊkxIŒR¾¤I$4"©l«ÑXö7f9áÙ¬ÜÊb–«BÑÄ|72Ÿ*©—‚k‘Œ‘NMø§žªÝñ is not valid (left unmapped). [ 172.735888][ T9334] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.773024][ T9334] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.793786][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1714'. [ 172.882245][ T5669] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.082714][ T28] audit: type=1400 audit(1770874082.230:2076): avc: denied { append } for pid=9374 comm="syz.2.1719" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 173.137826][ T9377] loop6: detected capacity change from 0 to 512 [ 173.177754][ T9377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.222863][ T9377] netlink: 15 bytes leftover after parsing attributes in process `syz.6.1720'. [ 173.301543][ T7893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.308460][ T9375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.323885][ T9375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.429608][ T9388] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 173.645109][ T9397] loop4: detected capacity change from 0 to 8192 [ 173.658169][ T9399] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1729'. [ 173.668312][ T28] audit: type=1400 audit(1770874082.811:2077): avc: denied { bind } for pid=9398 comm="syz.6.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 173.694734][ T9388] loop3: detected capacity change from 0 to 256 [ 173.713917][ T9397] loop4: p1 p3 p4 [ 173.717780][ T9397] loop4: p1 start 16777216 is beyond EOD, truncated [ 173.726387][ T9397] loop4: p4 start 16777223 is beyond EOD, truncated [ 173.795805][ T28] audit: type=1400 audit(1770874082.942:2078): avc: denied { write } for pid=9402 comm="syz.3.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.833635][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 173.898019][ T9413] xfrm1: entered allmulticast mode [ 173.916896][ T28] audit: type=1400 audit(1770874083.062:2079): avc: denied { accept } for pid=9412 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.091874][ T9424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1740'. [ 174.120919][ T9429] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 174.236811][ T9443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9443 comm=syz.2.1742 [ 174.267737][ T9443] sit0: entered promiscuous mode [ 174.273275][ T9443] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 174.281066][ T9443] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1742'. [ 174.334712][ T9429] loop4: detected capacity change from 0 to 256 [ 174.439205][ T9454] loop4: detected capacity change from 0 to 128 [ 174.448725][ T9454] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.464899][ T9454] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.523112][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1749'. [ 174.544946][ T9462] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1747'. [ 174.674991][ T9469] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 174.780691][ T9459] syz_tun (unregistering): left allmulticast mode [ 174.810640][ T9469] loop2: detected capacity change from 0 to 256 [ 175.046253][ T50] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.092438][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1755'. [ 175.103410][ T50] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.160324][ T50] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.165913][ T9459] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.236835][ T50] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.302412][ T9484] vlan2: entered promiscuous mode [ 175.318796][ T9484] syz_tun: entered promiscuous mode [ 175.420050][ T50] bridge_slave_1: left allmulticast mode [ 175.425770][ T50] bridge_slave_1: left promiscuous mode [ 175.463939][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.480981][ T50] bridge_slave_0: left allmulticast mode [ 175.486957][ T50] bridge_slave_0: left promiscuous mode [ 175.494175][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.878615][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.888925][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.898894][ T50] bond0 (unregistering): Released all slaves [ 175.907602][ T50] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 175.915726][ T50] vcan1: left promiscuous mode [ 175.922051][ T50] bond1 (unregistering): Released all slaves [ 175.951139][ T9485] lo speed is unknown, defaulting to 1000 [ 175.975873][ T50] tipc: Left network mode [ 176.032391][ T9529] loop0: detected capacity change from 0 to 1024 [ 176.039656][ T50] IPVS: stopping backup sync thread 7138 ... [ 176.068485][ T9529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.080749][ T50] hsr_slave_0: left promiscuous mode [ 176.091027][ T50] hsr_slave_1: left promiscuous mode [ 176.100460][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.115417][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.124483][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.136664][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.151045][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.185659][ T50] veth1_macvtap: left promiscuous mode [ 176.191382][ T50] veth0_macvtap: left promiscuous mode [ 176.240868][ T9541] loop0: detected capacity change from 0 to 1024 [ 176.257221][ T9541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.280724][ T9541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=9541 comm=syz.0.1768 [ 176.303881][ T28] audit: type=1326 audit(1770874085.450:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.6.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7fc00000 [ 176.334104][ T50] veth1_vlan: left promiscuous mode [ 176.339942][ T50] veth0_vlan: left promiscuous mode [ 176.365592][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.437524][ T9552] loop6: detected capacity change from 0 to 512 [ 176.453966][ T9552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.476190][ T9552] EXT4-fs error (device loop6): __ext4_iget:5426: inode #3: block 127754: comm syz.6.1769: invalid block [ 176.488174][ T9552] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 176.502718][ T9552] EXT4-fs error (device loop6): ext4_quota_enable:7192: comm syz.6.1769: Bad quota inode: 3, type: 0 [ 176.524137][ T9552] loop6: lost filesystem error report for type 5 error -117 [ 176.524276][ T9552] EXT4-fs warning (device loop6): ext4_enable_quotas:7233: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 176.563236][ T9552] EXT4-fs (loop6): mount failed [ 176.571283][ T50] team0 (unregistering): Port device team_slave_1 removed [ 176.590757][ T50] team0 (unregistering): Port device team_slave_0 removed [ 176.674276][ T9485] chnl_net:caif_netlink_parms(): no params data found [ 176.778387][ T9568] loop3: detected capacity change from 0 to 1024 [ 176.785750][ T9568] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.798120][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.805888][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.813617][ T9485] bridge_slave_0: entered allmulticast mode [ 176.820268][ T9485] bridge_slave_0: entered promiscuous mode [ 176.829049][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.836684][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.844038][ T9485] bridge_slave_1: entered allmulticast mode [ 176.851314][ T9485] bridge_slave_1: entered promiscuous mode [ 176.866037][ T9568] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 176.892239][ T9568] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1772: lblock 2 mapped to illegal pblock 2 (length 1) [ 176.897809][ T9485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.916830][ T9485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.934147][ T9568] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 176.934331][ T9568] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 176.949935][ T9485] team0: Port device team_slave_0 added [ 176.958617][ T9485] team0: Port device team_slave_1 added [ 176.958966][ T9568] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1772: lblock 0 mapped to illegal pblock 48 (length 1) [ 176.979265][ T9568] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 176.979430][ T9568] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 176.998603][ T9568] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.1772: Failed to acquire dquot type 0 [ 177.011753][ T9568] loop3: lost filesystem error report for type 5 error -117 [ 177.015956][ T50] IPVS: stop unused estimator thread 0... [ 177.021291][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.033498][ T9568] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 177.043639][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.069936][ T9568] loop3: lost filesystem error report for type 5 error -117 [ 177.070040][ T9485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.088218][ T9568] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1772: mark_inode_dirty error [ 177.099767][ T9568] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.099947][ T9568] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 177.119682][ T9568] EXT4-fs (loop3): 1 orphan inode deleted [ 177.126250][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.133353][ T1704] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 177.134278][ T9568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.153397][ T1704] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 177.159717][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.161379][ T1704] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 177.168881][ T9485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.194993][ T1704] EXT4-fs error (device loop3): ext4_release_dquot:7034: comm kworker/u8:6: Failed to release dquot type 0 [ 177.225809][ T28] audit: type=1400 audit(1770874086.383:2081): avc: denied { create } for pid=9567 comm="syz.3.1772" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 177.250764][ T28] audit: type=1400 audit(1770874086.383:2082): avc: denied { connect } for pid=9567 comm="syz.3.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.281407][ T9485] hsr_slave_0: entered promiscuous mode [ 177.287658][ T9485] hsr_slave_1: entered promiscuous mode [ 177.301613][ T5669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.331935][ T50] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 177.364299][ T50] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 177.364496][ T50] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 177.392417][ T50] EXT4-fs error (device loop3): ext4_release_dquot:7034: comm kworker/u8:3: Failed to release dquot type 0 [ 177.418772][ T50] loop3: lost filesystem error report for type 5 error -117 [ 177.419459][ T5669] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 177.461268][ T5669] loop3: lost filesystem error report for type 5 error -117 [ 177.461602][ T5669] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 177.478928][ T5669] loop3: lost filesystem error report for type 5 error -117 [ 177.479049][ T5669] EXT4-fs error (device loop3): ext4_quota_off:7282: inode #3: comm syz-executor: mark_inode_dirty error [ 177.499171][ T5669] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 177.499746][ T9606] siw: device registration error -23 [ 177.545697][ T9485] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 177.563794][ T9485] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 177.575960][ T9485] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 177.589766][ T9613] loop3: detected capacity change from 0 to 512 [ 177.598557][ T9485] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 177.632849][ T9613] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 177.656167][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.663344][ T9485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.670736][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.677829][ T9485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.710332][ T9485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.730842][ T1704] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.751902][ T1704] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.822029][ T9485] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.846636][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.853833][ T1637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.867231][ T1704] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.874392][ T1704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.897879][ T9485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.908560][ T9485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.945447][ T9643] __nla_validate_parse: 2 callbacks suppressed [ 177.945461][ T9643] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1780'. [ 178.058768][ T9485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.109867][ T6665] Bluetooth: hci0: command 0x1003 tx timeout [ 178.116001][ T3530] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.233408][ T28] audit: type=1400 audit(1770874087.396:2083): avc: denied { lock } for pid=9667 comm="syz.2.1786" path="socket:[26867]" dev="sockfs" ino=26867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.295488][ T9670] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1785'. [ 178.306035][ T9485] veth0_vlan: entered promiscuous mode [ 178.314766][ T9485] veth1_vlan: entered promiscuous mode [ 178.331135][ T9485] veth0_macvtap: entered promiscuous mode [ 178.354081][ T9485] veth1_macvtap: entered promiscuous mode [ 178.367548][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.387724][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.403248][ T3459] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.423638][ T3459] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.432970][ T3459] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.456333][ T3459] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.522849][ T28] audit: type=1326 audit(1770874087.687:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.6.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 178.549828][ T28] audit: type=1326 audit(1770874087.687:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.6.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 178.575468][ T28] audit: type=1326 audit(1770874087.687:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.6.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 178.678269][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'. [ 178.687573][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'. [ 178.763073][ T9700] loop3: detected capacity change from 0 to 512 [ 178.770396][ T9700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.784083][ T9700] EXT4-fs (loop3): 1 truncate cleaned up [ 178.791416][ T9700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.854180][ T5669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.954195][ T9706] FAULT_INJECTION: forcing a failure. [ 178.954195][ T9706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.976237][ T9706] CPU: 0 UID: 0 PID: 9706 Comm: syz.3.1795 Tainted: G W syzkaller #0 PREEMPT(full) [ 178.976333][ T9706] Tainted: [W]=WARN [ 178.976342][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.976376][ T9706] Call Trace: [ 178.976384][ T9706] [ 178.976458][ T9706] __dump_stack+0x1d/0x30 [ 178.976490][ T9706] dump_stack_lvl+0x95/0xd0 [ 178.976519][ T9706] dump_stack+0x15/0x1b [ 178.976607][ T9706] should_fail_ex+0x263/0x280 [ 178.976642][ T9706] should_fail+0xb/0x20 [ 178.976689][ T9706] should_fail_usercopy+0x1a/0x20 [ 178.976728][ T9706] _copy_from_user+0x1c/0xb0 [ 178.976797][ T9706] __sys_connect+0xd0/0x2a0 [ 178.976846][ T9706] __x64_sys_connect+0x3f/0x50 [ 178.976901][ T9706] x64_sys_call+0x2df0/0x3020 [ 178.976939][ T9706] do_syscall_64+0x12c/0x370 [ 178.976981][ T9706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.977079][ T9706] RIP: 0033:0x7fc71dc3bf79 [ 178.977134][ T9706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.977158][ T9706] RSP: 002b:00007fc71c68f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 178.977184][ T9706] RAX: ffffffffffffffda RBX: 00007fc71deb5fa0 RCX: 00007fc71dc3bf79 [ 178.977203][ T9706] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 178.977219][ T9706] RBP: 00007fc71c68f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.977234][ T9706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.977268][ T9706] R13: 00007fc71deb6038 R14: 00007fc71deb5fa0 R15: 00007ffe3c7ec7e8 [ 178.977295][ T9706] [ 179.220722][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 179.304603][ T1637] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.335831][ T9716] serio: Serial port ttyS3 [ 179.665825][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1807'. [ 180.269782][ T9740] loop6: detected capacity change from 0 to 512 [ 180.280152][ T9740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.293289][ T9740] FAULT_INJECTION: forcing a failure. [ 180.293289][ T9740] name failslab, interval 1, probability 0, space 0, times 0 [ 180.306140][ T9740] CPU: 1 UID: 0 PID: 9740 Comm: syz.6.1809 Tainted: G W syzkaller #0 PREEMPT(full) [ 180.306216][ T9740] Tainted: [W]=WARN [ 180.306226][ T9740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.306242][ T9740] Call Trace: [ 180.306251][ T9740] [ 180.306261][ T9740] __dump_stack+0x1d/0x30 [ 180.306302][ T9740] dump_stack_lvl+0x95/0xd0 [ 180.306328][ T9740] dump_stack+0x15/0x1b [ 180.306381][ T9740] should_fail_ex+0x263/0x280 [ 180.306419][ T9740] ? getname_long+0x32/0x100 [ 180.306444][ T9740] should_failslab+0x8c/0xb0 [ 180.306473][ T9740] __kmalloc_cache_noprof+0x5f/0x400 [ 180.306581][ T9740] ? should_fail_usercopy+0x1a/0x20 [ 180.306623][ T9740] getname_long+0x32/0x100 [ 180.306648][ T9740] do_getname+0x12e/0x1c0 [ 180.306690][ T9740] __se_sys_mkdirat+0x21/0xf0 [ 180.306806][ T9740] __x64_sys_mkdirat+0x43/0x50 [ 180.306873][ T9740] x64_sys_call+0x2c4e/0x3020 [ 180.306929][ T9740] do_syscall_64+0x12c/0x370 [ 180.306973][ T9740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.307003][ T9740] RIP: 0033:0x7f9bffd5ae57 [ 180.307149][ T9740] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.307173][ T9740] RSP: 002b:00007f9bfe7b6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 180.307240][ T9740] RAX: ffffffffffffffda RBX: 00007f9bfe7b6ee0 RCX: 00007f9bffd5ae57 [ 180.307259][ T9740] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c [ 180.307277][ T9740] RBP: 0000200000000080 R08: 0000200000000140 R09: 0000000000000000 [ 180.307294][ T9740] R10: 0000200000000080 R11: 0000000000000246 R12: 00002000000005c0 [ 180.307311][ T9740] R13: 00007f9bfe7b6ea0 R14: 0000000000000000 R15: 0000000000000000 [ 180.307377][ T9740] [ 180.510311][ T7893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.582263][ T9749] loop7: detected capacity change from 0 to 512 [ 180.650620][ T9749] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 181.152898][ T9774] loop6: detected capacity change from 0 to 8192 [ 181.211057][ T3303] loop6: p1 p3 p4 [ 181.215404][ T3303] loop6: p1 size 477167616 extends beyond EOD, truncated [ 181.242540][ T3303] loop6: p3 start 4294901760 is beyond EOD, truncated [ 181.264896][ T3303] loop6: p4 size 32768 extends beyond EOD, truncated [ 181.298487][ T9774] loop6: p1 p3 p4 [ 181.302853][ T6665] Bluetooth: hci0: command 0x1003 tx timeout [ 181.309032][ T3530] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.319308][ T9774] loop6: p1 size 477167616 extends beyond EOD, truncated [ 181.350557][ T9774] loop6: p3 start 4294901760 is beyond EOD, truncated [ 181.391672][ T9774] loop6: p4 size 32768 extends beyond EOD, truncated [ 181.619386][ T9786] lo speed is unknown, defaulting to 1000 [ 181.788185][ T9799] loop7: detected capacity change from 0 to 512 [ 181.803647][ T9799] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 182.091010][ T9815] loop3: detected capacity change from 0 to 2048 [ 182.137942][ T9815] loop3: p1 p2 [ 182.152533][ T28] kauditd_printk_skb: 532 callbacks suppressed [ 182.152567][ T28] audit: type=1400 audit(1770874091.327:2619): avc: denied { map } for pid=9814 comm="syz.3.1834" path="/dev/loop3p2" dev="devtmpfs" ino=1827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.407362][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 182.418058][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 182.585007][ T9806] syz.6.1832 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 182.607320][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 182.631151][ T9806] CPU: 1 UID: 0 PID: 9806 Comm: syz.6.1832 Tainted: G W syzkaller #0 PREEMPT(full) [ 182.631194][ T9806] Tainted: [W]=WARN [ 182.631203][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 182.631220][ T9806] Call Trace: [ 182.631229][ T9806] [ 182.631238][ T9806] __dump_stack+0x1d/0x30 [ 182.631270][ T9806] dump_stack_lvl+0x95/0xd0 [ 182.631349][ T9806] dump_stack+0x15/0x1b [ 182.631377][ T9806] dump_header+0x80/0x240 [ 182.631404][ T9806] oom_kill_process+0x295/0x350 [ 182.631453][ T9806] out_of_memory+0x97d/0xb80 [ 182.631503][ T9806] try_charge_memcg+0x62e/0xa10 [ 182.631547][ T9806] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 182.631581][ T9806] __read_swap_cache_async+0x17b/0x2d0 [ 182.631729][ T9806] swap_cluster_readahead+0x262/0x3c0 [ 182.631765][ T9806] swapin_readahead+0xde/0x840 [ 182.631793][ T9806] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 182.631836][ T9806] ? lruvec_stat_mod_folio+0xd2/0x110 [ 182.631878][ T9806] ? __rcu_read_unlock+0x4e/0x70 [ 182.631993][ T9806] ? swap_cache_get_folio+0x26f/0x280 [ 182.632022][ T9806] do_swap_page+0x59b/0x2a50 [ 182.632057][ T9806] ? __rcu_read_lock+0x36/0x50 [ 182.632098][ T9806] ? __pfx_default_wake_function+0x10/0x10 [ 182.632179][ T9806] handle_mm_fault+0xb40/0x3030 [ 182.632288][ T9806] ? vma_start_read+0x1c7/0x2c0 [ 182.632336][ T9806] do_user_addr_fault+0x62f/0x1050 [ 182.632418][ T9806] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 182.632550][ T9806] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 182.632579][ T9806] ? irqentry_exit+0x3c/0x520 [ 182.632610][ T9806] exc_page_fault+0x62/0xa0 [ 182.632640][ T9806] asm_exc_page_fault+0x26/0x30 [ 182.632664][ T9806] RIP: 0033:0x7f9bffc299d0 [ 182.632704][ T9806] Code: c4 4c 0f 42 e0 83 3d fa e3 3a 00 00 0f 8e d9 fd ff ff e8 f3 87 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d be bc ed 00 e8 03 00 00 48 8d 1d bf c5 3a 00 e8 ca 30 13 00 [ 182.632729][ T9806] RSP: 002b:00007fffb31c0600 EFLAGS: 00010212 [ 182.632750][ T9806] RAX: 000000000002ca48 RBX: 00007f9bfffd7da0 RCX: 000000000002c6f0 [ 182.632767][ T9806] RDX: 0000000000000358 RSI: 00007fffb31c05e0 RDI: 0000000000000001 [ 182.632788][ T9806] RBP: 00007f9bfffd7da0 R08: 00000000330c0ec3 R09: 7fffffffffffffff [ 182.632804][ T9806] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000002cb13 [ 182.632819][ T9806] R13: 00007f9bfffd609c R14: 000000000002c86f R15: 00007fffb31c0700 [ 182.632922][ T9806] [ 182.632930][ T9806] memory: usage 307200kB, limit 307200kB, failcnt 501 [ 182.877316][ T9806] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 182.885267][ T9806] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 182.892744][ T9806] Memory cgroup stats for /syz6: [ 182.892971][ T9806] cache 0 [ 182.901235][ T9806] rss 4096 [ 182.904344][ T9806] shmem 0 [ 182.904651][ T28] audit: type=1400 audit(1770874092.080:2620): avc: denied { create } for pid=9828 comm="syz.2.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 182.917896][ T9806] mapped_file 0 [ 182.936897][ T9806] dirty 0 [ 182.939956][ T9806] writeback 4096 [ 182.946889][ T9806] workingset_refault_anon 147 [ 182.951752][ T9806] workingset_refault_file 0 [ 182.956334][ T9806] swap 200704 [ 182.959675][ T9806] swapcached 8192 [ 182.963636][ T9806] pgpgin 21880 [ 182.967130][ T9806] pgpgout 21877 [ 182.970774][ T9806] pgfault 28060 [ 182.982741][ T9806] pgmajfault 93 [ 182.986886][ T9806] inactive_anon 8192 [ 183.016017][ T9806] active_anon 0 [ 183.022715][ T9806] inactive_file 4096 [ 183.029550][ T9806] active_file 0 [ 183.033231][ T9806] unevictable 0 [ 183.036868][ T9806] hierarchical_memory_limit 314572800 [ 183.042296][ T9806] hierarchical_memsw_limit 9223372036854771712 [ 183.048909][ T9806] total_cache 0 [ 183.052532][ T9806] total_rss 4096 [ 183.056871][ T9806] total_shmem 0 [ 183.060497][ T9806] total_mapped_file 0 [ 183.064555][ T9806] total_dirty 0 [ 183.068314][ T9806] total_writeback 4096 [ 183.072550][ T9806] total_workingset_refault_anon 147 [ 183.078054][ T9806] total_workingset_refault_file 0 [ 183.083913][ T9806] total_swap 200704 [ 183.087998][ T9806] total_swapcached 8192 [ 183.092295][ T9806] total_pgpgin 21965 [ 183.096584][ T9806] total_pgpgout 21962 [ 183.100673][ T9806] total_pgfault 28133 [ 183.104713][ T9806] total_pgmajfault 93 [ 183.120380][ T9806] total_inactive_anon 8192 [ 183.125247][ T9806] total_active_anon 0 [ 183.129326][ T9806] total_inactive_file 4096 [ 183.133920][ T9806] total_active_file 0 [ 183.162021][ T9806] total_unevictable 0 [ 183.167435][ T9838] loop7: detected capacity change from 0 to 512 [ 183.173790][ T9806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1832,pid=9806,uid=0 [ 183.190528][ T9838] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 183.199738][ T9806] Memory cgroup out of memory: Killed process 9806 (syz.6.1832) total-vm:159692kB, anon-rss:1220kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 183.339617][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1843'. [ 183.364967][ T28] audit: type=1326 audit(1770874092.541:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0663febf79 code=0x7fc00000 [ 183.389410][ T9841] loop7: detected capacity change from 0 to 1764 [ 183.397128][ T9841] iso9660: Bad value for 'mode' [ 183.505666][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1849'. [ 183.759286][ T28] audit: type=1326 audit(1770874092.912:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 183.809590][ T9878] GPL: port 1(erspan0) entered blocking state [ 183.815797][ T9878] GPL: port 1(erspan0) entered disabled state [ 183.822490][ T9878] erspan0: entered allmulticast mode [ 183.828675][ T9878] erspan0: entered promiscuous mode [ 183.846898][ T28] audit: type=1326 audit(1770874092.912:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 183.871221][ T9878] netlink: 'syz.2.1858': attribute type 10 has an invalid length. [ 183.879227][ T9878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1858'. [ 183.917615][ T28] audit: type=1326 audit(1770874092.912:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 183.967935][ T9881] loop7: detected capacity change from 0 to 128 [ 183.979756][ T28] audit: type=1326 audit(1770874092.912:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 184.042232][ T28] audit: type=1326 audit(1770874092.912:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 184.050894][ T9881] syz.7.1848: attempt to access beyond end of device [ 184.050894][ T9881] loop7: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 184.136689][ T9881] syz.7.1848: attempt to access beyond end of device [ 184.136689][ T9881] loop7: rw=0, sector=97, nr_sectors = 32 limit=128 [ 184.147908][ T28] audit: type=1326 audit(1770874092.912:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 184.165473][ T9881] syz.7.1848: attempt to access beyond end of device [ 184.165473][ T9881] loop7: rw=0, sector=145, nr_sectors = 88 limit=128 [ 184.191145][ T28] audit: type=1326 audit(1770874092.912:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 184.466776][ T9916] loop2: detected capacity change from 0 to 512 [ 184.491511][ T9916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.598152][ T9918] loop6: detected capacity change from 0 to 512 [ 184.629580][ T9916] EXT4-fs error (device loop2): __ext4_iget:5426: inode #3: block 127754: comm syz.2.1868: invalid block [ 184.642722][ T9918] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 184.673297][ T9916] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 184.673533][ T9916] EXT4-fs error (device loop2): ext4_quota_enable:7192: comm syz.2.1868: Bad quota inode: 3, type: 0 [ 184.720081][ T9916] loop2: lost filesystem error report for type 5 error -117 [ 184.720223][ T9916] EXT4-fs warning (device loop2): ext4_enable_quotas:7233: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 184.754017][ T9927] loop6: detected capacity change from 0 to 164 [ 184.784122][ T9916] EXT4-fs (loop2): mount failed [ 185.017166][ T9939] lo speed is unknown, defaulting to 1000 [ 185.075208][ T9941] tipc: Started in network mode [ 185.082547][ T9941] tipc: Node identity 528e88bc87b1, cluster identity 4711 [ 185.094259][ T9941] tipc: Enabled bearer , priority 0 [ 185.120152][ T9941] syzkaller0: entered promiscuous mode [ 185.135567][ T9941] syzkaller0: entered allmulticast mode [ 185.159321][ T9941] tipc: Resetting bearer [ 185.176511][ T9940] tipc: Resetting bearer [ 185.187511][ T9940] tipc: Disabling bearer [ 185.205685][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 185.283463][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1881'. [ 185.342896][ T9933] loop6: detected capacity change from 0 to 128 [ 185.360494][ T9933] syz.6.1875: attempt to access beyond end of device [ 185.360494][ T9933] loop6: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 185.384017][ T9933] syz.6.1875: attempt to access beyond end of device [ 185.384017][ T9933] loop6: rw=0, sector=97, nr_sectors = 32 limit=128 [ 185.437755][ T9957] syzkaller0: entered promiscuous mode [ 185.443633][ T9957] syzkaller0: entered allmulticast mode [ 185.449355][ T9933] syz.6.1875: attempt to access beyond end of device [ 185.449355][ T9933] loop6: rw=0, sector=145, nr_sectors = 88 limit=128 [ 185.553596][ T9870] syz.0.1855 (9870) used greatest stack depth: 6904 bytes left [ 185.604795][ T9964] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 185.649039][ T9964] EXT4-fs warning (device loop0): ext4_enable_quotas:7233: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 185.665415][ T9964] EXT4-fs (loop0): mount failed [ 185.754667][ T9970] lo speed is unknown, defaulting to 1000 [ 185.941651][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 185.977267][ T9983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.014756][ T9983] EXT4-fs error (device loop2): __ext4_iget:5426: inode #3: block 127754: comm syz.2.1892: invalid block [ 186.026382][ T9983] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 186.026609][ T9983] EXT4-fs error (device loop2): ext4_quota_enable:7192: comm syz.2.1892: Bad quota inode: 3, type: 0 [ 186.048972][ T9983] loop2: lost filesystem error report for type 5 error -117 [ 186.049152][ T9983] EXT4-fs warning (device loop2): ext4_enable_quotas:7233: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 186.071712][ T9983] EXT4-fs (loop2): mount failed [ 186.718635][ T9994] syz.6.1898 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 186.730906][ T9994] CPU: 1 UID: 0 PID: 9994 Comm: syz.6.1898 Tainted: G W syzkaller #0 PREEMPT(full) [ 186.731018][ T9994] Tainted: [W]=WARN [ 186.731024][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 186.731100][ T9994] Call Trace: [ 186.731113][ T9994] [ 186.731127][ T9994] __dump_stack+0x1d/0x30 [ 186.731225][ T9994] dump_stack_lvl+0x95/0xd0 [ 186.731245][ T9994] dump_stack+0x15/0x1b [ 186.731263][ T9994] dump_header+0x80/0x240 [ 186.731283][ T9994] oom_kill_process+0x295/0x350 [ 186.731329][ T9994] out_of_memory+0x97d/0xb80 [ 186.731397][ T9994] try_charge_memcg+0x62e/0xa10 [ 186.731473][ T9994] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 186.731497][ T9994] __read_swap_cache_async+0x17b/0x2d0 [ 186.731571][ T9994] swap_cluster_readahead+0x262/0x3c0 [ 186.731606][ T9994] swapin_readahead+0xde/0x840 [ 186.731625][ T9994] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 186.731670][ T9994] ? __rcu_read_unlock+0x4e/0x70 [ 186.731700][ T9994] ? swap_cache_get_folio+0x26f/0x280 [ 186.731720][ T9994] do_swap_page+0x59b/0x2a50 [ 186.731739][ T9994] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 186.731804][ T9994] ? mas_state_walk+0xe6/0x650 [ 186.731829][ T9994] ? __rcu_read_lock+0x36/0x50 [ 186.731858][ T9994] ? __pfx_default_wake_function+0x10/0x10 [ 186.731955][ T9994] handle_mm_fault+0xb40/0x3030 [ 186.732043][ T9994] ? rcu_read_unlock_special+0x9f/0x200 [ 186.732095][ T9994] do_user_addr_fault+0x62f/0x1050 [ 186.732124][ T9994] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 186.732208][ T9994] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 186.732227][ T9994] ? irqentry_exit+0x3c/0x520 [ 186.732251][ T9994] exc_page_fault+0x62/0xa0 [ 186.732274][ T9994] asm_exc_page_fault+0x26/0x30 [ 186.732369][ T9994] RIP: 0033:0x7f9bffd1c820 [ 186.732384][ T9994] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 84 1c 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 186.732400][ T9994] RSP: 002b:00007fffb31c0578 EFLAGS: 00010246 [ 186.732508][ T9994] RAX: 0000000000000000 RBX: 0000555590cd3500 RCX: 0000000000000000 [ 186.732520][ T9994] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 0000555590cd3808 [ 186.732531][ T9994] RBP: 00007f9bfffd7da0 R08: 00007fffb31c05d0 R09: 0000000000000000 [ 186.732543][ T9994] R10: 0000000000000000 R11: 0000555590cd3808 R12: 000000000002dc27 [ 186.732554][ T9994] R13: 00007f9bfffd609c R14: 000000000002d97c R15: 00007f9bfffd6090 [ 186.732587][ T9994] [ 186.749456][ T9994] memory: usage 307200kB, limit 307200kB, failcnt 833 [ 186.749517][ T9994] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 186.854620][T10003] FAULT_INJECTION: forcing a failure. [ 186.854620][T10003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.862491][ T9994] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 186.868128][T10003] CPU: 1 UID: 0 PID: 10003 Comm: syz.2.1900 Tainted: G W syzkaller #0 PREEMPT(full) [ 186.868233][T10003] Tainted: [W]=WARN [ 186.868262][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 186.868332][T10003] Call Trace: [ 186.868360][T10003] [ 186.868390][T10003] __dump_stack+0x1d/0x30 [ 186.868481][T10003] dump_stack_lvl+0x95/0xd0 [ 186.868562][T10003] dump_stack+0x15/0x1b [ 186.868625][T10003] should_fail_ex+0x263/0x280 [ 186.868790][T10003] should_fail+0xb/0x20 [ 186.868961][T10003] should_fail_usercopy+0x1a/0x20 [ 186.869064][T10003] _copy_to_user+0x20/0xa0 [ 186.869172][T10003] simple_read_from_buffer+0xb5/0x130 [ 186.869341][T10003] proc_fail_nth_read+0x10e/0x150 [ 186.869421][T10003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.869444][T10003] vfs_read+0x1ab/0x7f0 [ 186.869509][T10003] ? __rcu_read_unlock+0x4e/0x70 [ 186.869618][T10003] ? __fget_files+0x184/0x1c0 [ 186.869738][T10003] ? mutex_lock+0x57/0x90 [ 186.869845][T10003] ksys_read+0xdc/0x1a0 [ 186.869963][T10003] __x64_sys_read+0x40/0x50 [ 186.870060][T10003] x64_sys_call+0x2886/0x3020 [ 186.870143][T10003] do_syscall_64+0x12c/0x370 [ 186.870259][T10003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.870332][T10003] RIP: 0033:0x7fb2e344c84e [ 186.870384][T10003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.870432][T10003] RSP: 002b:00007fb2e1ee6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.870497][T10003] RAX: ffffffffffffffda RBX: 00007fb2e1ee76c0 RCX: 00007fb2e344c84e [ 186.870602][T10003] RDX: 000000000000000f RSI: 00007fb2e1ee70a0 RDI: 0000000000000005 [ 186.870643][T10003] RBP: 00007fb2e1ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 186.870683][T10003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.870726][T10003] R13: 00007fb2e3706038 R14: 00007fb2e3705fa0 R15: 00007ffc4d86d7b8 [ 186.870789][T10003] [ 186.935154][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 186.942972][ T9994] Memory cgroup stats for [ 186.986402][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1901'. [ 186.992713][ T9994] /syz6: [ 187.243243][ T9994] cache 0 [ 187.249685][ T9994] rss 0 [ 187.252519][ T9994] shmem 0 [ 187.258217][ T9994] mapped_file 0 [ 187.261779][ T9994] dirty 0 [ 187.266532][ T9994] writeback 4096 [ 187.272831][ T9994] workingset_refault_anon 204 [ 187.277980][ T9994] workingset_refault_file 0 [ 187.284760][ T9994] swap 200704 [ 187.288225][ T9994] swapcached 8192 [ 187.292009][ T9994] pgpgin 25794 [ 187.295532][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 187.298335][ T3530] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.301756][ T9994] pgpgout 25791 [ 187.312540][ T9994] pgfault 32585 [ 187.316103][ T9994] pgmajfault 110 [ 187.319699][ T9994] inactive_anon 8192 [ 187.323871][ T9994] active_anon 0 [ 187.327367][ T9994] inactive_file 4096 [ 187.331301][ T9994] active_file 0 [ 187.335227][ T9994] unevictable 0 [ 187.338758][ T9994] hierarchical_memory_limit 314572800 [ 187.344224][ T9994] hierarchical_memsw_limit 9223372036854771712 [ 187.350750][ T9994] total_cache 0 [ 187.382981][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'. [ 187.395262][T10012] set_capacity_and_notify: 2 callbacks suppressed [ 187.395280][T10012] loop3: detected capacity change from 0 to 512 [ 187.408604][ T9994] total_rss 0 [ 187.411996][ T9994] total_shmem 0 [ 187.415696][ T9994] total_mapped_file 0 [ 187.419959][ T9994] total_dirty 0 [ 187.433102][T10012] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 187.444540][ T9994] total_writeback 4096 [ 187.448658][ T9994] total_workingset_refault_anon 204 [ 187.453064][ T6665] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 187.460779][ T9994] total_workingset_refault_file 0 [ 187.509428][ T9994] total_swap 200704 [ 187.513381][ T9994] total_swapcached 8192 [ 187.517615][ T9994] total_pgpgin 25879 [ 187.521538][ T9994] total_pgpgout 25876 [ 187.525717][ T9994] total_pgfault 32658 [ 187.529787][ T9994] total_pgmajfault 110 [ 187.533974][ T9994] total_inactive_anon 8192 [ 187.538539][ T9994] total_active_anon 0 [ 187.542542][ T9994] total_inactive_file 4096 [ 187.547010][ T9994] total_active_file 0 [ 187.551154][ T9994] total_unevictable 0 [ 187.555195][ T9994] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1898,pid=9994,uid=0 [ 187.570027][ T9994] Memory cgroup out of memory: Killed process 9994 (syz.6.1898) total-vm:159692kB, anon-rss:1348kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 187.592498][T10017] loop7: detected capacity change from 0 to 512 [ 187.635528][T10017] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 187.652639][T10017] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 187.660764][T10017] System zones: 0-1, 15-15, 18-18, 34-34 [ 187.673404][T10017] EXT4-fs (loop7): orphan cleanup on readonly fs [ 187.680896][T10018] loop0: detected capacity change from 0 to 128 [ 187.687328][T10017] __quota_error: 26 callbacks suppressed [ 187.687344][T10017] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 187.739229][T10018] syz.0.1902: attempt to access beyond end of device [ 187.739229][T10018] loop0: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 187.752592][T10017] EXT4-fs warning (device loop7): ext4_enable_quotas:7233: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 187.767510][T10017] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 187.778047][T10017] EXT4-fs (loop7): 1 truncate cleaned up [ 187.793124][T10017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.822909][T10018] syz.0.1902: attempt to access beyond end of device [ 187.822909][T10018] loop0: rw=0, sector=97, nr_sectors = 32 limit=128 [ 187.836425][T10018] syz.0.1902: attempt to access beyond end of device [ 187.836425][T10018] loop0: rw=0, sector=145, nr_sectors = 88 limit=128 [ 187.863210][ T28] audit: type=1400 audit(1770874097.053:2654): avc: denied { read } for pid=10016 comm="syz.7.1906" path="socket:[28678]" dev="sockfs" ino=28678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.890417][T10037] loop3: detected capacity change from 0 to 512 [ 187.908561][T10017] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 187.948828][ T28] audit: type=1400 audit(1770874097.133:2655): avc: denied { create } for pid=10016 comm="syz.7.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 187.949891][T10037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.003781][ T9485] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.029350][T10048] loop6: detected capacity change from 0 to 512 [ 188.038234][T10037] EXT4-fs error (device loop3): __ext4_iget:5426: inode #3: block 127754: comm syz.3.1909: invalid block [ 188.059043][T10048] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 188.081713][T10037] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 188.085276][T10037] EXT4-fs error (device loop3): ext4_quota_enable:7192: comm syz.3.1909: Bad quota inode: 3, type: 0 [ 188.121773][T10037] loop3: lost filesystem error report for type 5 error -117 [ 188.122058][T10037] EXT4-fs warning (device loop3): ext4_enable_quotas:7233: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 188.176091][T10056] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 188.231098][T10037] EXT4-fs (loop3): mount failed [ 188.285183][T10063] loop2: detected capacity change from 0 to 128 [ 188.324099][T10063] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.336986][T10063] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.381497][T10069] loop7: detected capacity change from 0 to 8 [ 188.418754][T10063] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.1916: Directory block failed checksum [ 188.446553][T10070] netlink: 'syz.0.1917': attribute type 4 has an invalid length. [ 188.527058][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.735480][T10083] macvtap1: entered promiscuous mode [ 188.755057][T10083] batadv0: entered promiscuous mode [ 188.785838][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 188.798959][T10083] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 188.807850][T10083] batadv0: left promiscuous mode [ 188.810177][T10102] 9pnet_fd: p9_fd_create_tcp (10102): problem connecting socket to 127.0.0.1 [ 188.821848][ T28] audit: type=1400 audit(1770874097.996:2656): avc: denied { mounton } for pid=10101 comm="syz.6.1924" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 189.024558][T10121] loop6: detected capacity change from 0 to 512 [ 189.091292][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 189.100769][T10121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.165797][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 189.344832][ T7893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.462458][ T28] audit: type=1400 audit(1770874098.657:2657): avc: denied { remount } for pid=10145 comm="syz.0.1935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 189.498942][T10150] loop6: detected capacity change from 0 to 512 [ 189.529283][T10150] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 189.572369][T10137] loop2: detected capacity change from 0 to 512 [ 189.588585][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 189.728320][T10137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.808032][T10137] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.865526][T10177] lo speed is unknown, defaulting to 1000 [ 189.958559][ T28] audit: type=1326 audit(1770874099.148:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 190.061426][ T28] audit: type=1326 audit(1770874099.148:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 190.110830][ T28] audit: type=1326 audit(1770874099.148:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e348bf79 code=0x7ffc0000 [ 190.181711][ T28] audit: type=1326 audit(1770874099.148:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2e344c84e code=0x7ffc0000 [ 190.233866][ T28] audit: type=1326 audit(1770874099.148:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb2e348d297 code=0x7ffc0000 [ 190.309428][T10172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.363777][T10172] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.403167][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.435720][T10195] lo speed is unknown, defaulting to 1000 [ 190.734592][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.770773][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 190.781276][T10216] FAT-fs (loop0): bogus sectors per cluster 0 [ 190.817728][T10216] FAT-fs (loop0): Can't find a valid FAT filesystem [ 190.861318][T10218] hub 8-0:1.0: USB hub found [ 190.866231][T10218] hub 8-0:1.0: 8 ports detected [ 191.427796][T10227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.484941][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.664685][T10243] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.727964][T10245] xt_hashlimit: size too large, truncated to 1048576 [ 191.744556][T10243] ip6t_srh: unknown srh invflags 4000 [ 191.817526][T10250] macvlan2: entered allmulticast mode [ 191.823813][T10254] FAULT_INJECTION: forcing a failure. [ 191.823813][T10254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.853101][T10254] CPU: 1 UID: 0 PID: 10254 Comm: syz.6.1957 Tainted: G W syzkaller #0 PREEMPT(full) [ 191.853141][T10254] Tainted: [W]=WARN [ 191.853223][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.853240][T10254] Call Trace: [ 191.853249][T10254] [ 191.853256][T10254] __dump_stack+0x1d/0x30 [ 191.853281][T10254] dump_stack_lvl+0x95/0xd0 [ 191.853332][T10254] dump_stack+0x15/0x1b [ 191.853355][T10254] should_fail_ex+0x263/0x280 [ 191.853384][T10254] should_fail+0xb/0x20 [ 191.853486][T10254] should_fail_usercopy+0x1a/0x20 [ 191.853523][T10254] _copy_to_user+0x20/0xa0 [ 191.853560][T10254] simple_read_from_buffer+0xb5/0x130 [ 191.853644][T10254] proc_fail_nth_read+0x10e/0x150 [ 191.853688][T10254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.853711][T10254] vfs_read+0x1ab/0x7f0 [ 191.853736][T10254] ? __rcu_read_unlock+0x4e/0x70 [ 191.853833][T10254] ? __fget_files+0x184/0x1c0 [ 191.853874][T10254] ? mutex_lock+0x57/0x90 [ 191.853908][T10254] ksys_read+0xdc/0x1a0 [ 191.853934][T10254] __x64_sys_read+0x40/0x50 [ 191.853994][T10254] x64_sys_call+0x2886/0x3020 [ 191.854040][T10254] do_syscall_64+0x12c/0x370 [ 191.854155][T10254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.854176][T10254] RIP: 0033:0x7f9bffd1c84e [ 191.854191][T10254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.854209][T10254] RSP: 002b:00007f9bfe795fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.854302][T10254] RAX: ffffffffffffffda RBX: 00007f9bfe7966c0 RCX: 00007f9bffd1c84e [ 191.854316][T10254] RDX: 000000000000000f RSI: 00007f9bfe7960a0 RDI: 0000000000000004 [ 191.854328][T10254] RBP: 00007f9bfe796090 R08: 0000000000000000 R09: 0000000000000000 [ 191.854340][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.854351][T10254] R13: 00007f9bfffd6128 R14: 00007f9bfffd6090 R15: 00007fffb31c0498 [ 191.854381][T10254] [ 191.871931][T10250] vlan1: entered allmulticast mode [ 192.130927][T10250] veth0_vlan: entered allmulticast mode [ 192.179264][T10256] netlink: 758 bytes leftover after parsing attributes in process `syz.0.1963'. [ 192.326307][T10264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.352576][T10266] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 192.400816][ T5669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.583830][T10285] xt_hashlimit: size too large, truncated to 1048576 [ 192.643458][T10292] set_capacity_and_notify: 6 callbacks suppressed [ 192.643532][T10292] loop6: detected capacity change from 0 to 128 [ 192.663438][T10291] loop3: detected capacity change from 0 to 128 [ 192.695461][T10292] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.710437][T10291] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 192.718494][T10291] FAT-fs (loop3): Filesystem has been set read-only [ 192.736203][T10292] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.746929][ T5669] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 192.824502][T10300] loop3: detected capacity change from 0 to 512 [ 192.873577][T10300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.893613][T10292] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1977'. [ 192.952073][ T5669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.975436][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 192.991141][ T7893] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.039409][T10313] netlink: 'syz.0.1986': attribute type 1 has an invalid length. [ 193.157167][T10314] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1986'. [ 193.323217][T10325] FAULT_INJECTION: forcing a failure. [ 193.323217][T10325] name failslab, interval 1, probability 0, space 0, times 0 [ 193.375424][T10325] CPU: 1 UID: 0 PID: 10325 Comm: syz.6.1989 Tainted: G W syzkaller #0 PREEMPT(full) [ 193.375466][T10325] Tainted: [W]=WARN [ 193.375475][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 193.375492][T10325] Call Trace: [ 193.375500][T10325] [ 193.375509][T10325] __dump_stack+0x1d/0x30 [ 193.375540][T10325] dump_stack_lvl+0x95/0xd0 [ 193.375563][T10325] dump_stack+0x15/0x1b [ 193.375583][T10325] should_fail_ex+0x263/0x280 [ 193.375611][T10325] ? do_remap_pfn_range+0xa58/0xb80 [ 193.375637][T10325] should_failslab+0x8c/0xb0 [ 193.375673][T10325] __kmalloc_cache_noprof+0x5f/0x400 [ 193.375707][T10325] do_remap_pfn_range+0xa58/0xb80 [ 193.375734][T10325] ? unlink_file_vma_batch_add+0x154/0x1d0 [ 193.375766][T10325] ? mas_wr_walk_descend+0x36e/0x470 [ 193.375799][T10325] ? mas_wr_store_type+0x895/0xcd0 [ 193.375833][T10325] ? mas_prealloc_calc+0x253/0x2a0 [ 193.375874][T10325] remap_pfn_range+0x17e/0x1c0 [ 193.375908][T10325] sel_mmap_handle_status+0x19b/0x1d0 [ 193.375937][T10325] mmap_region+0x15e5/0x1d20 [ 193.375999][T10325] do_mmap+0x9b2/0xbd0 [ 193.376021][T10325] vm_mmap_pgoff+0x183/0x2d0 [ 193.376055][T10325] ksys_mmap_pgoff+0x267/0x310 [ 193.376083][T10325] x64_sys_call+0x14df/0x3020 [ 193.376117][T10325] do_syscall_64+0x12c/0x370 [ 193.376162][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.376190][T10325] RIP: 0033:0x7f9bffd5bf79 [ 193.376206][T10325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.376230][T10325] RSP: 002b:00007f9bfe7b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 193.376257][T10325] RAX: ffffffffffffffda RBX: 00007f9bfffd5fa0 RCX: 00007f9bffd5bf79 [ 193.376275][T10325] RDX: 0000000003000000 RSI: 0000000000001000 RDI: 0000200000ffb000 [ 193.376294][T10325] RBP: 00007f9bfe7b7090 R08: 0000000000000003 R09: 0000000000000000 [ 193.376322][T10325] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 193.376339][T10325] R13: 00007f9bfffd6038 R14: 00007f9bfffd5fa0 R15: 00007fffb31c0498 [ 193.376361][T10325] [ 193.640571][T10334] loop2: detected capacity change from 0 to 128 [ 193.661205][T10334] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 193.669387][T10334] FAT-fs (loop2): Filesystem has been set read-only [ 193.713524][ T3312] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 193.721752][T10327] loop7: detected capacity change from 0 to 8192 [ 193.754231][T10338] loop2: detected capacity change from 0 to 512 [ 193.932239][T10338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.060979][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.242997][T10358] lo speed is unknown, defaulting to 1000 [ 194.593602][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 194.593718][ T28] audit: type=1400 audit(1770874103.800:2750): avc: denied { listen } for pid=10366 comm="syz.0.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.742007][T10376] loop6: detected capacity change from 0 to 512 [ 194.805218][ T28] audit: type=1326 audit(1770874104.010:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 194.855265][ T28] audit: type=1326 audit(1770874104.020:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 194.898470][T10386] 9p: Bad value for 'rfdno' [ 194.911764][T10389] loop3: detected capacity change from 0 to 128 [ 194.940936][ T28] audit: type=1326 audit(1770874104.020:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 194.975862][T10389] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.004423][ T28] audit: type=1326 audit(1770874104.020:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 195.028651][ T28] audit: type=1326 audit(1770874104.020:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.6.2006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x0 [ 195.037649][T10389] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.052149][ T28] audit: type=1326 audit(1770874104.070:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 195.085808][ T28] audit: type=1326 audit(1770874104.070:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 195.109571][ T28] audit: type=1326 audit(1770874104.131:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bffd5bf79 code=0x7ffc0000 [ 195.165638][T10389] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2011'. [ 195.177162][ T28] audit: type=1326 audit(1770874104.131:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9bffd5bce2 code=0x7ffc0000 [ 195.226214][ T5669] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.428612][T10412] lo speed is unknown, defaulting to 1000 [ 196.427979][T10441] lo speed is unknown, defaulting to 1000 [ 196.504521][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 196.694054][T10457] loop3: detected capacity change from 0 to 128 [ 196.746775][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 196.754944][T10457] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.785093][T10457] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.857188][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'. [ 196.870941][T10457] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2033'. [ 196.957222][T10459] xt_hashlimit: size too large, truncated to 1048576 [ 197.004531][T10427] syz.2.2023 (10427) used greatest stack depth: 6280 bytes left [ 197.058384][ T5669] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.079566][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'. [ 197.693137][T10489] loop0: detected capacity change from 0 to 2048 [ 197.729172][T10489] EXT4-fs error (device loop0): __ext4_fill_super:5565: inode #2: comm syz.0.2043: inode has both inline data and extents flags [ 197.784512][T10489] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 197.794686][T10489] EXT4-fs (loop0): Remounting filesystem read-only [ 197.860520][T10489] EXT4-fs (loop0): get root inode failed [ 197.904524][T10489] EXT4-fs (loop0): mount failed [ 198.080500][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 198.101045][T10501] loop6: detected capacity change from 0 to 1024 [ 198.127736][T10501] EXT4-fs: inline encryption not supported [ 198.179732][T10503] syzkaller0: entered promiscuous mode [ 198.204162][T10503] syzkaller0: entered allmulticast mode [ 198.221563][T10501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.239735][T10503] loop3: detected capacity change from 0 to 1024 [ 198.263317][T10503] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 198.326124][T10503] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 198.361794][T10501] program syz.6.2046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.374451][T10503] EXT4-fs error (device loop3): ext4_get_journal_inode:5861: inode #32: comm syz.3.2047: iget: special inode unallocated [ 198.424579][T10503] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 198.434443][T10503] EXT4-fs (loop3): Remounting filesystem read-only [ 198.465825][T10503] EXT4-fs (loop3): no journal found [ 198.507720][T10503] EXT4-fs (loop3): can't get journal size [ 198.524726][T10503] EXT4-fs (loop3): filesystem is read-only [ 198.559002][T10503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 198.578825][T10510] loop2: detected capacity change from 0 to 512 [ 198.609502][T10512] SELinux: Context ›Y7»ôj [ 198.609502][T10512] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 198.609502][T10512] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNà is not valid (left unmapped). [ 198.657705][T10510] EXT4-fs (loop2): 1 truncate cleaned up [ 198.680241][T10510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.725454][T10510] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.2048: invalid fast symlink length 39 [ 198.765721][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 198.783120][ T7893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.908638][ T5669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.912914][T10520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10520 comm=syz.6.2050 [ 198.959755][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 199.236409][T10536] loop7: detected capacity change from 0 to 128 [ 199.245293][T10536] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 199.253332][T10536] FAT-fs (loop7): Filesystem has been set read-only [ 199.270608][ T9485] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 199.351507][T10540] loop7: detected capacity change from 0 to 128 [ 199.390044][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.457246][T10518] ================================================================== [ 199.465471][T10518] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 199.473322][T10518] [ 199.475646][T10518] write to 0xffffea00056a9618 of 8 bytes by task 10522 on cpu 1: [ 199.483361][T10518] __filemap_remove_folio+0x201/0x300 [ 199.488762][T10518] filemap_remove_folio+0x6d/0x1d0 [ 199.493879][T10518] truncate_inode_folio+0x42/0x50 [ 199.498926][T10518] shmem_undo_range+0x26d/0xb10 [ 199.503809][T10518] shmem_fallocate+0x881/0x920 [ 199.508579][T10518] vfs_fallocate+0x3b6/0x450 [ 199.513202][T10518] __x64_sys_fallocate+0x7a/0xd0 [ 199.518171][T10518] x64_sys_call+0x298e/0x3020 [ 199.522866][T10518] do_syscall_64+0x12c/0x370 [ 199.527475][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.533370][T10518] [ 199.535699][T10518] read to 0xffffea00056a9618 of 8 bytes by task 10518 on cpu 0: [ 199.543325][T10518] folio_mapping+0xa1/0xe0 [ 199.547754][T10518] evict_folios+0xde9/0x35b0 [ 199.552352][T10518] try_to_shrink_lruvec+0x5f6/0x960 [ 199.557567][T10518] shrink_lruvec+0x24e/0x1bc0 [ 199.562248][T10518] shrink_node+0x68e/0x2000 [ 199.566761][T10518] do_try_to_free_pages+0x404/0xcc0 [ 199.571984][T10518] try_to_free_mem_cgroup_pages+0x222/0x470 [ 199.577883][T10518] try_charge_memcg+0x37e/0xa10 [ 199.582756][T10518] obj_cgroup_charge_pages+0x23/0xc0 [ 199.588055][T10518] __memcg_kmem_charge_page+0x9e/0x170 [ 199.593520][T10518] __alloc_frozen_pages_noprof+0x18a/0x350 [ 199.599359][T10518] alloc_pages_mpol+0xb3/0x260 [ 199.604123][T10518] alloc_pages_noprof+0x8f/0x130 [ 199.609063][T10518] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 199.615016][T10518] __kvmalloc_node_noprof+0x3c3/0x620 [ 199.620452][T10518] ip_set_alloc+0x24/0x30 [ 199.624800][T10518] hash_netiface_create+0x282/0x740 [ 199.630011][T10518] ip_set_create+0x3cf/0x970 [ 199.634602][T10518] nfnetlink_rcv_msg+0x509/0x5d0 [ 199.639547][T10518] netlink_rcv_skb+0x123/0x220 [ 199.644317][T10518] nfnetlink_rcv+0x167/0x1720 [ 199.649006][T10518] netlink_unicast+0x5c0/0x690 [ 199.653785][T10518] netlink_sendmsg+0x5c8/0x6f0 [ 199.658556][T10518] ____sys_sendmsg+0x5af/0x600 [ 199.663321][T10518] ___sys_sendmsg+0x195/0x1e0 [ 199.668013][T10518] __x64_sys_sendmsg+0xd4/0x160 [ 199.672867][T10518] x64_sys_call+0x194c/0x3020 [ 199.677569][T10518] do_syscall_64+0x12c/0x370 [ 199.682175][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.688069][T10518] [ 199.690413][T10518] value changed: 0xffff888135e9b070 -> 0x0000000000000000 [ 199.697541][T10518] [ 199.699869][T10518] Reported by Kernel Concurrency Sanitizer on: [ 199.706019][T10518] CPU: 0 UID: 0 PID: 10518 Comm: syz.0.2052 Tainted: G W syzkaller #0 PREEMPT(full) [ 199.716959][T10518] Tainted: [W]=WARN [ 199.720781][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 199.730839][T10518] ================================================================== [ 199.741782][T10540] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.773329][T10540] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.861270][T10540] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2059'. [ 199.925642][ T9485] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.024670][ T6665] Bluetooth: hci0: command 0x1003 tx timeout [ 201.024769][ T3530] Bluetooth: hci0: Opcode 0x1003 failed: -110