last executing test programs: 58.71393514s ago: executing program 4 (id=674): unshare(0x2a020400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x200e00, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150020000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 58.616878713s ago: executing program 4 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000c00000008"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x2}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xc00, 0xe, 0x0, &(0x7f0000000140)="e02742e86d2a85ff9782769d7f9f", 0x0, 0xe9cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = fcntl$dupfd(r2, 0x0, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="a3b2003c996d9551e636e9bba254faae5487871da14b3b1aa71fd1f9657f29d9cbdc8dc0b877bfc527c882f207924d46ed139635e46738651be17fc6ba64c94aede460eeacf032fa1140d6ab5a9d6b52fd64b263b6142f48872f003e3d1dcc124acd8c567288a70e", @ANYRESHEX=r2, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) 58.493120951s ago: executing program 4 (id=677): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x1, 0x103, 0x9, 0x0, 0x0, 0xffa4}, 0x20) 58.412022177s ago: executing program 4 (id=678): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x62002, 0x80) openat(r4, &(0x7f0000000200)='./file0\x00', 0x40, 0x93) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0xfffd, @multicast1}}]}, 0x50}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e24, @multicast2}}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xf, r6, 0x20000000002, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800020426bd7000fbdbdf250a10a80efc01fe04003000000800170048b19441680a5985c04659b23b8f65b53fe8fbde2778f7f54f8b60a5fd61d25712ac74ea3a344af8c7bdda85f685d95c64c62e51c995cee61390cb6bf61b163f5634001755ca855dcdfa3ccc821f80b27a96e23069416f7afb3d73aeb3"], 0x24}}, 0x4001) ptrace$cont(0x9, r6, 0x7ff, 0x3) 58.352256086s ago: executing program 4 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x4300}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xd}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) 57.251546192s ago: executing program 4 (id=692): ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000160001002bbd700001dcdf25fe8000000000000000000000000000bbfe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000a1000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000004000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000002000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000020002060100000000000000070000004f0700007aedbca61fa1d5d5bb811727168dcfd4ba7581c02a9cab34d7b61fc90571eb631547e41e96e3245b5d2f36e7997a29ff91de"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000600010000000000000000000000ff0f00001800000073b4ffffffff00000000020000000000200200000000000000ffffffe513e9b7eaa81e0900000000000200010300000000"], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000200000000000000000000000000000000000000000000000000000000000a00000087a40bb3bd37e3541af2a53f02cbdf2d67073961df213535c5caccfc9184b3250c071559353aca071af18001e7c87a796a814304bf110cca5146f0f1d3f8477ef12f3f8864793bcc34d8c0a30399920db29f0b68636aad7e19a6f5475e96085f8c3b252f31e5bb8f6690d7e7107524f7e7e505fd3c7d84613a5838ee28ccc4b53a00"/203, @ANYRES64=r1], 0xb8}}, 0x8810) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2000c000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38020000190000060000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000ffffffffffffffff00000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002000000000000000000030000000000ac000700ffffffff000000000000000000000000ac1e01010000000000000000000000004e2200814e2100000a0000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x20000000, 0x2, 0xbd94}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x18b}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x15}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0x12, 0x14, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000440)=ANY=[@ANYBLOB="040100001800110728bd7000fddbdf2500000000cf751db73252cf2000000001fe8000000000000099000000000008bb4e2300004e2200000a0020303a0000001c36394d29154e4f867c1a130445ee3dc739d33a89b77bc18d08d54d712cf4c35af5a6ab503d204627c04d2aafcb414b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff00000000000004d36c0000007f00000100000000000000000000000071faffffffffffff8172000000000000f7ffffffffffffff0c00000000000000000000000000008009000000000000000000000000000000080000000000000005000000000000000100000000000000ffffffffffffffff06000000000000000600000003000000050000002abd7000043500000a000007050000000000000005000000000000000c0015005d07350000000000"], 0x104}, 0x1, 0x0, 0x0, 0x3fb4c4e46942352c}, 0x0) 57.201709463s ago: executing program 32 (id=692): ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000160001002bbd700001dcdf25fe8000000000000000000000000000bbfe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000a1000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000004000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000002000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000020002060100000000000000070000004f0700007aedbca61fa1d5d5bb811727168dcfd4ba7581c02a9cab34d7b61fc90571eb631547e41e96e3245b5d2f36e7997a29ff91de"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000600010000000000000000000000ff0f00001800000073b4ffffffff00000000020000000000200200000000000000ffffffe513e9b7eaa81e0900000000000200010300000000"], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000200000000000000000000000000000000000000000000000000000000000a00000087a40bb3bd37e3541af2a53f02cbdf2d67073961df213535c5caccfc9184b3250c071559353aca071af18001e7c87a796a814304bf110cca5146f0f1d3f8477ef12f3f8864793bcc34d8c0a30399920db29f0b68636aad7e19a6f5475e96085f8c3b252f31e5bb8f6690d7e7107524f7e7e505fd3c7d84613a5838ee28ccc4b53a00"/203, @ANYRES64=r1], 0xb8}}, 0x8810) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2000c000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38020000190000060000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000ffffffffffffffff00000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002000000000000000000030000000000ac000700ffffffff000000000000000000000000ac1e01010000000000000000000000004e2200814e2100000a0000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x20000000, 0x2, 0xbd94}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x18b}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x15}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0x12, 0x14, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000440)=ANY=[@ANYBLOB="040100001800110728bd7000fddbdf2500000000cf751db73252cf2000000001fe8000000000000099000000000008bb4e2300004e2200000a0020303a0000001c36394d29154e4f867c1a130445ee3dc739d33a89b77bc18d08d54d712cf4c35af5a6ab503d204627c04d2aafcb414b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff00000000000004d36c0000007f00000100000000000000000000000071faffffffffffff8172000000000000f7ffffffffffffff0c00000000000000000000000000008009000000000000000000000000000000080000000000000005000000000000000100000000000000ffffffffffffffff06000000000000000600000003000000050000002abd7000043500000a000007050000000000000005000000000000000c0015005d07350000000000"], 0x104}, 0x1, 0x0, 0x0, 0x3fb4c4e46942352c}, 0x0) 3.704012714s ago: executing program 5 (id=1172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname(r4, &(0x7f0000000240)=@ethernet={0x0, @local}, &(0x7f0000000180)=0x80) r5 = socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r6]) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x400, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3.617910618s ago: executing program 2 (id=1173): setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) pidfd_send_signal(0xffffffffffffffff, 0x14, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) r1 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}]}]}, 0x16c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@local}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'wg0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r1, 0x66ab, 0x4, 0x2, 0x0, 0x0) 3.523864592s ago: executing program 1 (id=1175): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x902, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_START_SYNC(r0, 0x402c542c, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r2, 0xfffffffffffffffe) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@getstats={0x1c, 0x5e, 0x200, 0x70b928, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480c1}, 0x24000800) 3.064843391s ago: executing program 0 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000040)=0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x84000) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x4, 0x10, 0x1, 0x0, 0x0, 0xffff, 0x20031, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6, 0x3b00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f5, 0x800, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x91}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000200)={[{@errors_remount}, {@grpquota}]}, 0x1, 0x469, &(0x7f0000000600)="$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") 2.981347506s ago: executing program 1 (id=1178): setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) pidfd_send_signal(0xffffffffffffffff, 0x14, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) r1 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}]}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@local}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'wg0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x66ab, 0x4, 0x2, 0x0, 0x0) socket(0x18, 0x80000, 0xfffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f0000000b80)=@ethtool_rxnfc={0x2e, 0x9, 0x1, {0xc, @ether_spec={@broadcast, @multicast, 0x5}, {0x0, @empty, 0x760e, 0xecc, [0x40, 0x8]}, @hdata="dd874127870cfebab634e26fe1935012d7c151ec72b84434531975f78ebbe97655bfaa16d2b803a6d039dec3e07f885109d24ede", {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 0x200, 0xffeb, [0xfff, 0xd]}, 0x9, 0x9}}}) 2.731153922s ago: executing program 5 (id=1179): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) io_setup(0x23f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) eventfd2(0xae, 0x1401) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/tcp\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r7, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000400)=0x1) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x8, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48001) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x370, &(0x7f0000000b80)="$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") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) io_cancel(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 2.529385886s ago: executing program 3 (id=1180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getresuid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000040)={{r5, r6+60000000}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) r7 = syz_io_uring_setup(0x7998, &(0x7f0000001180)={0x0, 0x3b52, 0x1, 0x3, 0x14}, &(0x7f0000000240), &(0x7f0000000600)) io_uring_enter(r7, 0x0, 0x85c1, 0xd, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0xcac4, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 2.315917589s ago: executing program 0 (id=1181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@random="147d4a33239a", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x3e8, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {}, {0xdd86, 0x88be, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0xff5, 0x2, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="c6c0e2893d47b4e1aaaaaaaa86dd600100be00140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000"], 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250f0000001c0007800c0004002e3a2d21000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x20008014}, 0x44000) 2.091654559s ago: executing program 1 (id=1182): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r1}}, './file0\x00'}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r3 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r3, r3, 0x0, 0x400) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2088000}, 0x4060804) unshare(0xa280e84fbd9d462d) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) 1.849910737s ago: executing program 5 (id=1183): rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@nouser_xattr}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x36a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000100)}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x24020400) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, {0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}, 0x3a) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0xfffffff9, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000200)='./file0\x00', 0x4) renameat2(r5, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000340)='./file1\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') readlinkat(r6, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000140)=""/78, 0x4e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r8], 0x20}}, 0x2000e844) 1.752071579s ago: executing program 2 (id=1184): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)={[{0x2d, 'hugetlb'}]}, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r2}}, './file0\x00'}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r4 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r4, r4, 0x0, 0x400) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2088000}, 0x4060804) unshare(0xa280e84fbd9d462d) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) 1.542645382s ago: executing program 5 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_emit_ethernet(0x68, &(0x7f00000004c0)={@random="147d4a33239a", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x3e8, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {}, {0xdd86, 0x88be, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0xff5, 0x2, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) 1.476315391s ago: executing program 3 (id=1186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000c7730000000000000000c375f3a80c8e1fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x7) 1.455621957s ago: executing program 3 (id=1187): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{r1, r2+60000000}, {0x0, 0x989680}}, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x10082, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x66642, 0x99) timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file1\x00', 0x0, 0x18}, 0x18) 1.409381529s ago: executing program 0 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_emit_ethernet(0x68, &(0x7f00000004c0)={@random="147d4a33239a", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x3e8, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {}, {0xdd86, 0x88be, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0xff5, 0x2, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(0x0) 1.168342676s ago: executing program 1 (id=1189): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0x1, 0x53b, &(0x7f0000000b80)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r5, @ANYRES64=r3, @ANYRES16=r2, @ANYRES16=r5, @ANYRES64=r3, @ANYRES16=r4, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES32, @ANYRES32=r1], 0x5, 0x0, &(0x7f0000000000)) 1.167226876s ago: executing program 3 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRES64], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 1.143474212s ago: executing program 2 (id=1191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x50, 0x6, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004891}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200880c0, &(0x7f0000000280)={0xa, 0x4e23, 0x8021, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_emit_ethernet(0xca, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa440800440000bc0000000000019078ac1e0001ac1414aa4428c8200000000dffff3cb10002000e000000ff0000000800000009000002780000007f0000000283075eac141444018307a8ffffffff070f97ffffffff7f0000017f000001862400000002000434100012cea621e324359214ed6988c11cbb26d50208c1ceea5f83564404a963890b2000000000ac1414400000000c019078e00000e0490000000000000000110000ac1414aaac141438830300070700ffffffff440400030000"], 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x4) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000060030180c20000000000040000000800450017e1ffffffffa00086dd000e9078bebd098ca81f"], 0x34) 1.142438732s ago: executing program 5 (id=1192): setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) pidfd_send_signal(0xffffffffffffffff, 0x14, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) r1 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}]}]}, 0x16c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@local}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'wg0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r1, 0x66ab, 0x4, 0x2, 0x0, 0x0) 979.871593ms ago: executing program 2 (id=1193): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mq_open(0x0, 0x2, 0x196, &(0x7f0000000240)={0x1, 0x24, 0xb9, 0x8000007}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) r1 = syz_pidfd_open(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000880)="$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") setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[], 0x24, 0x3) close(0xffffffffffffffff) lstat(0x0, 0x0) chown(0x0, 0x0, 0x0) dup(r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x20e50b6, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x32}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@noauto_da_alloc}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000001d80), &(0x7f0000001d40)=r2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r7, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r6}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r8, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r6}, 0x20) 899.745029ms ago: executing program 0 (id=1194): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x169a82, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xbfb28851ad939977, 0x2}}}}]}, 0x40}}, 0x4060140) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 495.924378ms ago: executing program 2 (id=1195): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setresgid(0xee00, 0xee01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x404c840) 486.925456ms ago: executing program 5 (id=1196): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff1, 0x55}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x22000030}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000010900010073797a3100000000300004802c00018008000100636d70002000028008000140000000100c000380056d3c004000000008000240000000060900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0x9) sendmmsg(r5, &(0x7f0000000180), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ea77158eff3b91d0", 0x8}], 0x1}}], 0x1, 0x119e75c40673edef) sendmmsg$inet(r6, &(0x7f0000011280)=[{{0x0, 0x0, &(0x7f0000010300)=[{&(0x7f00000102c0)="c56c", 0x2}], 0x1, &(0x7f0000010400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast2}}}], 0x38}}, {{&(0x7f0000010a00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000010f00)=[{&(0x7f0000010a40)='J\'', 0x2}, {0x0}, {0x0}], 0x3}}], 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10000, 0x101, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000cc0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000d80)="$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") r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023892) syz_emit_ethernet(0x6e, &(0x7f0000000d40)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x3, 0x0, 0x5, {0x4, 0x6, "4736c7", 0x400, 0x6c, 0xff, @mcast2, @loopback, [], "069e38553c74cf3d"}}}}}}}, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) 406.349802ms ago: executing program 2 (id=1197): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff1, 0x55}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x22000030}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000010900010073797a3100000000300004802c00018008000100636d70002000028008000140000000100c000380056d3c004000000008000240000000060900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0x9) sendmmsg(r5, &(0x7f0000000180), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ea77158eff3b91d0", 0x8}], 0x1}}], 0x1, 0x119e75c40673edef) sendmmsg$inet(r6, &(0x7f0000011280)=[{{0x0, 0x0, &(0x7f0000010300)=[{&(0x7f00000102c0)="c56c", 0x2}], 0x1, &(0x7f0000010400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast2}}}], 0x38}}, {{&(0x7f0000010a00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000010f00)=[{&(0x7f0000010a40)='J\'', 0x2}, {0x0}, {0x0}], 0x3}}], 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10000, 0x101, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000cc0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000d80)="$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") r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023892) syz_emit_ethernet(0x6e, &(0x7f0000000d40)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x3, 0x0, 0x5, {0x4, 0x6, "4736c7", 0x400, 0x6c, 0xff, @mcast2, @loopback, [], "069e38553c74cf3d"}}}}}}}, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) 405.295292ms ago: executing program 1 (id=1198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) 287.883941ms ago: executing program 1 (id=1199): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r1}}, './file0\x00'}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r3 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r3, r3, 0x0, 0x400) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2088000}, 0x4060804) unshare(0xa280e84fbd9d462d) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) 287.228111ms ago: executing program 0 (id=1200): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) close(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00F']) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "525ff14988a71b94", "5dbc7356c1905d8a68d143af7c7cd8da", "5ff35c50", "82706e5dff4dcd6f"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="4eaa000000000000711039000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000008406010000000000000300000d"], 0x0, 0x4a, 0x0, 0x8, 0x4}, 0x28) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xde5d, 0xffffffffffffffff, 0x8, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 180.193142ms ago: executing program 3 (id=1201): r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x66ab, 0x4, 0x2, 0x0, 0x0) 92.306017ms ago: executing program 3 (id=1202): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)={[{0x2d, 'hugetlb'}]}, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000700)=""/4096, 0x0, 0x1000, 0x8}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r2}}, './file0\x00'}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r4 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r4, r4, 0x0, 0x400) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2088000}, 0x4060804) unshare(0xa280e84fbd9d462d) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) 0s ago: executing program 0 (id=1203): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed12066", 0x1c}, {&(0x7f0000000100)}], 0x2}, 0x4804) kernel console output (not intermixed with test programs): ost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 127.982030][ T7487] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.785: Failed to acquire dquot type 0 [ 128.002640][ T7487] loop1: lost filesystem error report for type 5 error -117 [ 128.006938][ T7487] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.785: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.027665][ T7487] loop1: lost filesystem error report for type 5 error -117 [ 128.028189][ T7487] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 5: comm syz.1.785: lblock 5 mapped to illegal pblock 5 (length 1) [ 128.052383][ T7487] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 128.052512][ T7487] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.785: Failed to acquire dquot type 0 [ 128.073337][ T7487] loop1: lost filesystem error report for type 5 error -117 [ 128.078791][ T7487] EXT4-fs (loop1): 1 orphan inode deleted [ 128.106506][ T7487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.167490][ T7515] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.213870][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.230852][ T7536] loop0: detected capacity change from 0 to 512 [ 128.268210][ T7536] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.790: bg 0: block 248: padding at end of block bitmap is not set [ 128.290415][ T7536] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.790: Failed to acquire dquot type 1 [ 128.296812][ T7538] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.301629][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 128.301648][ C0] EXT4-fs (loop0): last error at time 1772857708: ext4_validate_block_bitmap:441 [ 128.302755][ T7536] EXT4-fs (loop0): 1 truncate cleaned up [ 128.332013][ T7536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.352231][ T7536] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.390533][ T7536] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰' [ 128.463189][ T7538] loop1: detected capacity change from 0 to 512 [ 128.478881][ T7546] SELinux: ebitmap: truncated map [ 128.489891][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.503756][ T7546] SELinux: failed to load policy [ 128.511954][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 128.523630][ T35] IPVS: starting estimator thread 0... [ 128.531857][ T7548] loop3: detected capacity change from 0 to 1024 [ 128.538671][ T7548] EXT4-fs: inline encryption not supported [ 128.569717][ T7546] tipc: Cannot configure node identity twice [ 128.584197][ T7548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.619800][ T7551] IPVS: using max 2304 ests per chain, 115200 per kthread [ 128.631800][ T7557] netlink: 'syz.5.797': attribute type 27 has an invalid length. [ 128.656042][ T7562] SET target dimension over the limit! [ 128.712247][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.719513][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.752277][ T7548] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.793: inode #3237120: comm syz.3.793: iget: illegal inode # [ 128.770996][ T3393] usb 11-1: enqueue for inactive port 0 [ 128.786899][ T3393] usb 11-1: enqueue for inactive port 0 [ 128.797380][ T7548] EXT4-fs (loop3): Remounting filesystem read-only [ 128.821385][ T7548] EXT4-fs warning (device loop3): ext4_xattr_block_set:2200: inode #19: comm syz.3.793: dec ref error=-30 [ 128.848571][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.909799][ T3393] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 128.916937][ T7583] xt_l2tp: invalid flags combination: 0 [ 128.942466][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.966726][ T7577] SET target dimension over the limit! [ 128.981835][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.118364][ T7563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.134422][ T7563] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.165436][ T7563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.199078][ T7586] lo speed is unknown, defaulting to 1000 [ 129.199209][ T4359] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.252296][ T4359] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.271936][ T4359] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.292055][ T7586] lo speed is unknown, defaulting to 1000 [ 129.298590][ T4359] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.327844][ T7586] lo speed is unknown, defaulting to 1000 [ 129.426032][ T7611] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.804: bg 0: block 248: padding at end of block bitmap is not set [ 129.458309][ T7586] infiniband syU×: set active [ 129.463222][ T3386] lo speed is unknown, defaulting to 1000 [ 129.477823][ T7611] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.804: Failed to acquire dquot type 1 [ 129.489016][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 129.489038][ C0] EXT4-fs (loop5): last error at time 1772857709: ext4_validate_block_bitmap:441 [ 129.510368][ T7586] infiniband syU×: added lo [ 129.547941][ T7625] FAULT_INJECTION: forcing a failure. [ 129.547941][ T7625] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.565917][ T7586] RDS/IB: syU×: added [ 129.574101][ T7586] smc: adding ib device syU× with port count 1 [ 129.581364][ T7611] EXT4-fs (loop5): 1 truncate cleaned up [ 129.587113][ T7586] smc: ib device syU× port 1 has no pnetid [ 129.591210][ T7629] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.597480][ T7611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.625762][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.0.807 Not tainted syzkaller #0 PREEMPT(full) [ 129.625792][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.625825][ T7625] Call Trace: [ 129.625833][ T7625] [ 129.625841][ T7625] __dump_stack+0x1d/0x30 [ 129.625864][ T7625] dump_stack_lvl+0x95/0xd0 [ 129.625884][ T7625] dump_stack+0x15/0x1b [ 129.625902][ T7625] should_fail_ex+0x263/0x280 [ 129.625969][ T7625] should_fail_alloc_page+0xf2/0x100 [ 129.625995][ T7625] __alloc_frozen_pages_noprof+0x108/0x360 [ 129.626041][ T7625] alloc_pages_mpol+0xb3/0x260 [ 129.626071][ T7625] alloc_pages_noprof+0x8f/0x130 [ 129.626151][ T7625] pgd_alloc+0x40/0x2a0 [ 129.626170][ T7625] mm_init+0x381/0x680 [ 129.626187][ T7625] copy_mm+0x100/0x370 [ 129.626207][ T7625] copy_process+0xe22/0x20d0 [ 129.626235][ T7625] kernel_clone+0x16b/0x5d0 [ 129.626302][ T7625] ? vfs_write+0x86e/0x9f0 [ 129.626332][ T7625] __x64_sys_clone+0x143/0x180 [ 129.626362][ T7625] x64_sys_call+0x1222/0x3020 [ 129.626407][ T7625] do_syscall_64+0x12c/0x370 [ 129.626431][ T7625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.626454][ T7625] RIP: 0033:0x7f51757cc799 [ 129.626470][ T7625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.626488][ T7625] RSP: 002b:00007f5174226fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 129.626513][ T7625] RAX: ffffffffffffffda RBX: 00007f5175a45fa0 RCX: 00007f51757cc799 [ 129.626568][ T7625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 129.626678][ T7625] RBP: 00007f5174227090 R08: 0000000000000000 R09: 0000000000000000 [ 129.626692][ T7625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 129.626706][ T7625] R13: 00007f5175a46038 R14: 00007f5175a45fa0 R15: 00007ffe8ee6f398 [ 129.626726][ T7625] [ 129.841701][ T3386] lo speed is unknown, defaulting to 1000 [ 129.851624][ T7611] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.877409][ T7586] lo speed is unknown, defaulting to 1000 [ 129.894722][ T7611] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰' [ 129.991670][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.001245][ T325] __quota_error: 47 callbacks suppressed [ 130.001262][ T325] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 130.024257][ T325] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 1 [ 130.038233][ T7586] lo speed is unknown, defaulting to 1000 [ 130.119274][ T7629] lo speed is unknown, defaulting to 1000 [ 130.126594][ T7670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.163652][ T7586] lo speed is unknown, defaulting to 1000 [ 130.266467][ T7586] lo speed is unknown, defaulting to 1000 [ 130.290449][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.323431][ T7586] lo speed is unknown, defaulting to 1000 [ 130.413622][ T7586] lo speed is unknown, defaulting to 1000 [ 130.566629][ T7693] SELinux: ebitmap: truncated map [ 130.577561][ T7693] SELinux: failed to load policy [ 130.589181][ T7693] tipc: Started in network mode [ 130.599572][ T7693] tipc: Node identity 73657461747472092e3a2d21, cluster identity 4711 [ 131.081162][ T7702] set_capacity_and_notify: 2 callbacks suppressed [ 131.081178][ T7702] loop1: detected capacity change from 0 to 512 [ 131.124911][ T7702] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.824: bg 0: block 248: padding at end of block bitmap is not set [ 131.161298][ T7702] Quota error (device loop1): write_blk: dquota write failed [ 131.169549][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 131.175998][ C1] EXT4-fs (loop1): last error at time 1772857711: ext4_validate_block_bitmap:441 [ 131.190212][ T7694] tipc: Cannot configure node identity twice [ 131.195598][ T7702] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 131.246444][ T7702] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.824: Failed to acquire dquot type 1 [ 131.248332][ T7709] bridge0: port 3(syz_tun) entered blocking state [ 131.264154][ T7709] bridge0: port 3(syz_tun) entered forwarding state [ 131.273394][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.281492][ T7709] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.283039][ T7702] fserror_report: 7 callbacks suppressed [ 131.283052][ T7702] loop1: lost filesystem error report for type 5 error -117 [ 131.303058][ T7709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.319790][ T7702] EXT4-fs (loop1): 1 truncate cleaned up [ 131.326224][ T7702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.359294][ T7702] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.370086][ T3386] ip6_vti0 speed is unknown, defaulting to 1000 [ 131.376863][ T3386] syz2: Port: 1 Link ACTIVE [ 131.381682][ T3488] ip6_vti0 speed is unknown, defaulting to 1000 [ 131.405389][ T7711] ip6_vti0 speed is unknown, defaulting to 1000 [ 131.415548][ T7702] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰' [ 131.495014][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.504400][ T325] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 131.513573][ T325] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 1 [ 131.518471][ T7711] lo speed is unknown, defaulting to 1000 [ 131.546821][ T325] loop1: lost filesystem error report for type 5 error -117 [ 131.571006][ T28] audit: type=1400 audit(1772857711.607:1539): avc: denied { bind } for pid=7715 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.666105][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 131.688064][ T7692] tipc: Cannot configure node identity twice [ 131.723698][ T7719] loop0: detected capacity change from 0 to 128 [ 131.788733][ T7724] loop2: detected capacity change from 0 to 512 [ 131.838806][ T7724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 131.855673][ T7728] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 131.878629][ T7729] ip6gretap0: entered promiscuous mode [ 131.885500][ T7724] ext4 filesystem being mounted at /164/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.904939][ T7729] macvtap1: entered promiscuous mode [ 131.941205][ T7724] FAULT_INJECTION: forcing a failure. [ 131.941205][ T7724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.969020][ T7729] ip6gretap0: left promiscuous mode [ 131.988969][ T7724] CPU: 0 UID: 0 PID: 7724 Comm: syz.2.830 Not tainted syzkaller #0 PREEMPT(full) [ 131.988996][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.989007][ T7724] Call Trace: [ 131.989012][ T7724] [ 131.989075][ T7724] __dump_stack+0x1d/0x30 [ 131.989100][ T7724] dump_stack_lvl+0x95/0xd0 [ 131.989124][ T7724] dump_stack+0x15/0x1b [ 131.989147][ T7724] should_fail_ex+0x263/0x280 [ 131.989233][ T7724] should_fail+0xb/0x20 [ 131.989328][ T7724] should_fail_usercopy+0x1a/0x20 [ 131.989354][ T7724] _copy_from_user+0x1c/0xb0 [ 131.989381][ T7724] vmemdup_user+0x5e/0xd0 [ 131.989442][ T7724] path_setxattrat+0x1b1/0x310 [ 131.989479][ T7724] __x64_sys_setxattr+0x6e/0x90 [ 131.989506][ T7724] x64_sys_call+0x2ee2/0x3020 [ 131.989534][ T7724] do_syscall_64+0x12c/0x370 [ 131.989630][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.989650][ T7724] RIP: 0033:0x7f533107c799 [ 131.989667][ T7724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.989750][ T7724] RSP: 002b:00007f532fad7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 131.989771][ T7724] RAX: ffffffffffffffda RBX: 00007f53312f5fa0 RCX: 00007f533107c799 [ 131.989785][ T7724] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 131.989799][ T7724] RBP: 00007f532fad7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.989813][ T7724] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000001 [ 131.989874][ T7724] R13: 00007f53312f6038 R14: 00007f53312f5fa0 R15: 00007ffc86399678 [ 131.989890][ T7724] [ 132.303790][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 132.437123][ T7747] loop1: detected capacity change from 0 to 512 [ 132.459112][ T7747] FAT-fs (loop1): IO charset utfѾ¹Éh$Û‚‰œ#wî•w9Á‹C= Yæ’³t ¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found [ 132.841198][ T28] audit: type=1400 audit(1772857712.877:1540): avc: denied { mount } for pid=7750 comm="syz.2.835" name="/" dev="hugetlbfs" ino=15501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 132.979451][ T7755] loop1: detected capacity change from 0 to 512 [ 133.008730][ T7755] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.838: bg 0: block 248: padding at end of block bitmap is not set [ 133.057996][ T7755] loop1: lost filesystem error report for type 5 error -117 [ 133.058612][ T7755] Quota error (device loop1): write_blk: dquota write failed [ 133.066012][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 133.066033][ C1] EXT4-fs (loop1): last error at time 1772857713: ext4_validate_block_bitmap:441 [ 133.094983][ T7755] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 133.105134][ T7755] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.838: Failed to acquire dquot type 1 [ 133.116601][ T7755] loop1: lost filesystem error report for type 5 error -117 [ 133.116898][ T7766] loop2: detected capacity change from 0 to 512 [ 133.143531][ T7755] EXT4-fs (loop1): 1 truncate cleaned up [ 133.286275][ T28] audit: type=1400 audit(1772857713.317:1541): avc: denied { create } for pid=7777 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=isdn_socket permissive=1 [ 133.501420][ T7755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.560497][ T7755] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.701918][ T7789] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰' [ 133.732461][ T28] audit: type=1400 audit(1772857713.757:1542): avc: denied { read } for pid=7787 comm="syz.3.846" path="socket:[14875]" dev="sockfs" ino=14875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.791994][ T7790] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 134.232316][ T7779] loop0: detected capacity change from 0 to 256 [ 134.241580][ T7766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.261490][ T7778] loop5: detected capacity change from 0 to 512 [ 134.293878][ T7779] FAT-fs (loop0): Directory bread(block 64) failed [ 134.300517][ T7779] FAT-fs (loop0): Directory bread(block 65) failed [ 134.307112][ T7779] FAT-fs (loop0): Directory bread(block 66) failed [ 134.313729][ T7779] FAT-fs (loop0): Directory bread(block 67) failed [ 134.320425][ T7779] FAT-fs (loop0): Directory bread(block 68) failed [ 134.326942][ T7779] FAT-fs (loop0): Directory bread(block 69) failed [ 134.333642][ T7779] FAT-fs (loop0): Directory bread(block 70) failed [ 134.340210][ T7779] FAT-fs (loop0): Directory bread(block 71) failed [ 134.346794][ T7779] FAT-fs (loop0): Directory bread(block 72) failed [ 134.353403][ T7779] FAT-fs (loop0): Directory bread(block 73) failed [ 134.409139][ T7779] syz_tun: left allmulticast mode [ 134.416059][ T7779] syz_tun: left promiscuous mode [ 134.423364][ T7779] bridge0: port 3(syz_tun) entered disabled state [ 134.457797][ T7779] bridge_slave_0: left allmulticast mode [ 134.464028][ T7779] bridge_slave_0: left promiscuous mode [ 134.470930][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.489345][ T7779] bridge_slave_1: left allmulticast mode [ 134.496550][ T7779] bridge_slave_1: left promiscuous mode [ 134.504009][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.521658][ T7779] bond0: (slave bond_slave_0): Releasing backup interface [ 134.542286][ T7779] bond0: (slave bond_slave_1): Releasing backup interface [ 134.568225][ T7779] team0: Port device team_slave_0 removed [ 134.586397][ T7779] team0: Port device team_slave_1 removed [ 134.596389][ T7779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.608242][ T7779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.618895][ T7779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.781530][ T7778] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 134.802566][ T7766] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.867547][ T7778] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 134.903015][ T7766] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.840: corrupted xattr block 32: bad e_name length [ 134.928293][ T7778] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.842: bad orphan inode 4 [ 134.964478][ T7778] loop5: lost filesystem error report for type 5 error -117 [ 134.967521][ T7778] EXT4-fs (loop5): 1 orphan inode deleted [ 134.974961][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 134.974978][ C1] EXT4-fs (loop5): initial error at time 1772857714: ext4_orphan_get:1417 [ 134.975021][ C1] EXT4-fs (loop5): last error at time 1772857714: ext4_orphan_get:1417 [ 135.022744][ T7778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.053819][ T7766] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 135.126128][ T28] audit: type=1400 audit(1772857715.157:1543): avc: denied { connect } for pid=7777 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 135.147478][ T28] audit: type=1400 audit(1772857715.157:1544): avc: denied { read } for pid=7777 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 135.168823][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.210302][ T4359] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 135.231385][ T4359] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:26: Failed to release dquot type 1 [ 135.236373][ T7800] bridge5: entered promiscuous mode [ 135.250267][ T7797] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.840: corrupted xattr block 32: bad e_name length [ 135.256045][ T4359] loop1: lost filesystem error report for type 5 error -117 [ 135.266962][ T7797] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 135.288646][ T7800] bridge5: entered allmulticast mode [ 135.325326][ T7797] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.840: corrupted xattr block 32: bad e_name length [ 135.339827][ T28] audit: type=1400 audit(1772857715.357:1545): avc: denied { setattr } for pid=7764 comm="syz.2.840" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.361091][ T7801] loop3: detected capacity change from 0 to 512 [ 135.396760][ T7801] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.847: iget: bad i_size value: 38620345925642 [ 135.449633][ T7801] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.449988][ T7801] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.847: couldn't read orphan inode 15 (err -117) [ 135.470922][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 135.470944][ C0] EXT4-fs (loop3): initial error at time 1772857715: ext4_orphan_get:1391: inode 15 [ 135.470994][ C0] EXT4-fs (loop3): last error at time 1772857715: ext4_orphan_get:1391: inode 15 [ 135.529917][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.567659][ T7801] loop3: lost filesystem error report for type 5 error -117 [ 135.568252][ T7801] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.598008][ T28] audit: type=1326 audit(1772857715.627:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 135.625947][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.665274][ T28] audit: type=1326 audit(1772857715.627:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 135.728236][ T7809] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.739888][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.748423][ T3393] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.764328][ T28] audit: type=1326 audit(1772857715.657:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 135.859408][ T28] audit: type=1326 audit(1772857715.657:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 135.905425][ T7809] lo speed is unknown, defaulting to 1000 [ 135.913438][ T28] audit: type=1326 audit(1772857715.657:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 135.957340][ T7820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'. [ 136.015984][ T28] audit: type=1326 audit(1772857715.667:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 136.113433][ T7821] loop1: detected capacity change from 0 to 8192 [ 136.139708][ T3567] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 136.171537][ T3567] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 136.189333][ T3567] EXT4-fs (loop3): This should not happen!! Data will be lost [ 136.189333][ T3567] [ 136.204891][ T5859] loop1: p1 < > p2 p4 < p5 > [ 136.204960][ T7824] netlink: 56 bytes leftover after parsing attributes in process `syz.2.856'. [ 136.210432][ T5859] loop1: partition table partially beyond EOD, truncated [ 136.218776][ T3567] EXT4-fs (loop3): Total free blocks count 0 [ 136.226001][ T5859] loop1: p1 start 134217728 is beyond EOD, truncated [ 136.232263][ T3567] EXT4-fs (loop3): Free/Dirty block details [ 136.238546][ T5859] loop1: p2 size 591360 extends beyond EOD, [ 136.244860][ T3567] EXT4-fs (loop3): free_blocks=0 [ 136.257596][ T5859] truncated [ 136.268035][ T5859] loop1: p5 size 591360 extends beyond EOD, truncated [ 136.276152][ T7828] FAULT_INJECTION: forcing a failure. [ 136.276152][ T7828] name failslab, interval 1, probability 0, space 0, times 0 [ 136.289298][ T7828] CPU: 0 UID: 0 PID: 7828 Comm: syz.5.858 Not tainted syzkaller #0 PREEMPT(full) [ 136.289322][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.289333][ T7828] Call Trace: [ 136.289338][ T7828] [ 136.289345][ T7828] __dump_stack+0x1d/0x30 [ 136.289408][ T7828] dump_stack_lvl+0x95/0xd0 [ 136.289428][ T7828] dump_stack+0x15/0x1b [ 136.289446][ T7828] should_fail_ex+0x263/0x280 [ 136.289466][ T7828] should_failslab+0x8c/0xb0 [ 136.289487][ T7828] kmem_cache_alloc_noprof+0x66/0x400 [ 136.289574][ T7828] ? alloc_empty_file+0x76/0x200 [ 136.289599][ T7828] alloc_empty_file+0x76/0x200 [ 136.289677][ T7828] alloc_file_pseudo+0xf6/0x190 [ 136.289705][ T7828] __shmem_file_setup+0x1dd/0x210 [ 136.289776][ T7828] shmem_file_setup+0x3b/0x50 [ 136.289797][ T7828] memfd_alloc_file+0x4e/0x300 [ 136.289829][ T7828] __se_sys_memfd_create+0x2e1/0x3b0 [ 136.289896][ T7828] __x64_sys_memfd_create+0x31/0x40 [ 136.289923][ T7828] x64_sys_call+0x1f22/0x3020 [ 136.289950][ T7828] do_syscall_64+0x12c/0x370 [ 136.290012][ T7828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.290064][ T7828] RIP: 0033:0x7f0eedc5c799 [ 136.290081][ T7828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.290100][ T7828] RSP: 002b:00007f0eec6aee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 136.290121][ T7828] RAX: ffffffffffffffda RBX: 0000000000000457 RCX: 00007f0eedc5c799 [ 136.290136][ T7828] RDX: 00007f0eec6aeee0 RSI: 0000000000000000 RDI: 00007f0eedcf2db9 [ 136.290151][ T7828] RBP: 0000200000000bc0 R08: 00000000ffffffff R09: 0000000000000000 [ 136.290277][ T7828] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000180 [ 136.290291][ T7828] R13: 00007f0eec6aeee0 R14: 00007f0eec6aeea0 R15: 0000200000000840 [ 136.290312][ T7828] [ 136.299099][ T3567] EXT4-fs (loop3): dirty_blocks=202 [ 136.356890][ T7826] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.486917][ T7831] netlink: 228 bytes leftover after parsing attributes in process `syz.0.857'. [ 136.496112][ T7821] loop1: p1 < > p2 p4 < p5 > [ 136.504469][ T7821] loop1: partition table partially beyond EOD, truncated [ 136.515956][ T7821] loop1: p1 start 134217728 is beyond EOD, truncated [ 136.530740][ T7821] loop1: p2 size 591360 extends beyond EOD, truncated [ 136.548662][ T3567] EXT4-fs (loop3): Block reservation details [ 136.558884][ T7821] loop1: p5 size 591360 extends beyond EOD, truncated [ 136.565854][ T3567] EXT4-fs (loop3): i_reserved_data_blocks=202 [ 136.604853][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 136.615538][ T7826] lo speed is unknown, defaulting to 1000 [ 136.837958][ T7843] SET target dimension over the limit! [ 137.043416][ T7867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.161513][ T7876] loop1: detected capacity change from 0 to 128 [ 137.185101][ T7876] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.218834][ T7876] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.467031][ T7860] SELinux: ebitmap: truncated map [ 137.482778][ T7860] SELinux: failed to load policy [ 137.491298][ T7903] loop2: detected capacity change from 0 to 1024 [ 137.526673][ T7929] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 137.543221][ T7903] EXT4-fs: inline encryption not supported [ 137.549765][ T7860] tipc: Cannot configure node identity twice [ 137.556861][ T7929] SELinux: failed to load policy [ 137.584799][ T7929] tipc: Cannot configure node identity twice [ 137.621835][ T7903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.785887][ T7942] loop3: detected capacity change from 0 to 512 [ 137.798742][ T7945] SET target dimension over the limit! [ 137.806884][ T7944] loop1: detected capacity change from 0 to 164 [ 138.000516][ T7942] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 138.021416][ T7944] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=164 [ 138.064077][ T7942] EXT4-fs (loop3): 1 truncate cleaned up [ 138.087817][ T7944] netlink: 27 bytes leftover after parsing attributes in process `syz.1.872'. [ 138.123280][ T7942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.153626][ T7944] batadv0: entered allmulticast mode [ 138.181621][ T7944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.256397][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.266377][ T7958] FAT-fs (loop11): unable to read boot sector [ 138.287335][ T7961] loop0: detected capacity change from 0 to 512 [ 138.302177][ T7961] EXT4-fs: dax option not supported [ 138.395469][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.578015][ T7992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.593734][ T3393] lo speed is unknown, defaulting to 1000 [ 138.603476][ T7984] SET target dimension over the limit! [ 138.637008][ T7998] loop5: detected capacity change from 0 to 512 [ 138.718779][ T7998] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.885: bg 0: block 248: padding at end of block bitmap is not set [ 138.774481][ T7998] loop5: lost filesystem error report for type 5 error -117 [ 138.774745][ T7998] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.885: Failed to acquire dquot type 1 [ 138.782081][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 138.782107][ C0] EXT4-fs (loop5): last error at time 1772857974: ext4_validate_block_bitmap:441 [ 138.865495][ T8012] FAULT_INJECTION: forcing a failure. [ 138.865495][ T8012] name failslab, interval 1, probability 0, space 0, times 0 [ 138.878213][ T7998] loop5: lost filesystem error report for type 5 error -117 [ 138.878897][ T7998] EXT4-fs (loop5): 1 truncate cleaned up [ 138.899693][ T8012] CPU: 0 UID: 0 PID: 8012 Comm: syz.0.887 Not tainted syzkaller #0 PREEMPT(full) [ 138.899720][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.899732][ T8012] Call Trace: [ 138.899738][ T8012] [ 138.899746][ T8012] __dump_stack+0x1d/0x30 [ 138.899801][ T8012] dump_stack_lvl+0x95/0xd0 [ 138.899899][ T8012] dump_stack+0x15/0x1b [ 138.899921][ T8012] should_fail_ex+0x263/0x280 [ 138.900002][ T8012] should_failslab+0x8c/0xb0 [ 138.900024][ T8012] kmem_cache_alloc_noprof+0x66/0x400 [ 138.900047][ T8012] ? radix_tree_node_alloc+0x8a/0x1f0 [ 138.900149][ T8012] radix_tree_node_alloc+0x8a/0x1f0 [ 138.900200][ T8012] idr_get_free+0x1fa/0x550 [ 138.900230][ T8012] idr_alloc_u32+0xf2/0x1a0 [ 138.900252][ T8012] tcf_idr_check_alloc+0x1ff/0x2e0 [ 138.900285][ T8012] tcf_skbedit_init+0x398/0xa00 [ 138.900335][ T8012] ? __pfx_tcf_skbedit_init+0x10/0x10 [ 138.900444][ T8012] tcf_action_init_1+0x395/0x4d0 [ 138.900480][ T8012] tcf_action_init+0x29c/0x700 [ 138.900525][ T8012] tc_ctl_action+0x29b/0x830 [ 138.900587][ T8012] ? __pfx_tc_ctl_action+0x10/0x10 [ 138.900607][ T8012] rtnetlink_rcv_msg+0x6a7/0x720 [ 138.900685][ T8012] netlink_rcv_skb+0x123/0x220 [ 138.900711][ T8012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.900772][ T8012] rtnetlink_rcv+0x1c/0x30 [ 138.900894][ T8012] netlink_unicast+0x5c0/0x690 [ 138.900955][ T8012] netlink_sendmsg+0x5c8/0x6f0 [ 138.900987][ T8012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.901011][ T8012] ____sys_sendmsg+0x563/0x5b0 [ 138.901092][ T8012] ___sys_sendmsg+0x195/0x1e0 [ 138.901126][ T8012] __x64_sys_sendmsg+0xd4/0x160 [ 138.901200][ T8012] x64_sys_call+0x194c/0x3020 [ 138.901242][ T8012] do_syscall_64+0x12c/0x370 [ 138.901265][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.901285][ T8012] RIP: 0033:0x7f51757cc799 [ 138.901299][ T8012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.901427][ T8012] RSP: 002b:00007f5174227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.901447][ T8012] RAX: ffffffffffffffda RBX: 00007f5175a45fa0 RCX: 00007f51757cc799 [ 138.901460][ T8012] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 138.901473][ T8012] RBP: 00007f5174227090 R08: 0000000000000000 R09: 0000000000000000 [ 138.901487][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.901524][ T8012] R13: 00007f5175a46038 R14: 00007f5175a45fa0 R15: 00007ffe8ee6f398 [ 138.901544][ T8012] [ 138.950117][ T7998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.171653][ T7998] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.239930][ T3696] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:18: Failed to release dquot type 1 [ 139.319143][ T8059] loop2: detected capacity change from 0 to 512 [ 139.351220][ T7998] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.391184][ T8059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.414203][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.427632][ T8059] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.451761][ T8059] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 4: comm syz.2.892: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=253816, size=1024 fake=0 [ 139.490061][ T8082] loop5: detected capacity change from 0 to 512 [ 139.497296][ T8079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.514731][ T8082] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.531908][ T8059] EXT4-fs (loop2): Remounting filesystem read-only [ 139.548957][ T8082] EXT4-fs (loop5): 1 truncate cleaned up [ 139.566263][ T8082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.600566][ T8059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.616201][ T8068] loop0: detected capacity change from 0 to 1024 [ 139.634744][ T8068] EXT4-fs: Ignoring removed orlov option [ 139.653619][ T8068] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 139.710222][ T8068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.766817][ T8068] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.895: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 139.824308][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.859973][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.907589][ T8111] FAULT_INJECTION: forcing a failure. [ 139.907589][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 139.931744][ T8111] CPU: 0 UID: 0 PID: 8111 Comm: syz.2.907 Not tainted syzkaller #0 PREEMPT(full) [ 139.931770][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.931782][ T8111] Call Trace: [ 139.931788][ T8111] [ 139.931822][ T8111] __dump_stack+0x1d/0x30 [ 139.931849][ T8111] dump_stack_lvl+0x95/0xd0 [ 139.931946][ T8111] dump_stack+0x15/0x1b [ 139.931966][ T8111] should_fail_ex+0x263/0x280 [ 139.931989][ T8111] should_failslab+0x8c/0xb0 [ 139.932050][ T8111] __kmalloc_noprof+0xb8/0x4e0 [ 139.932070][ T8111] ? security_sk_alloc+0x52/0x120 [ 139.932105][ T8111] ? should_failslab+0x8c/0xb0 [ 139.932148][ T8111] security_sk_alloc+0x52/0x120 [ 139.932230][ T8111] sk_prot_alloc+0xc2/0x180 [ 139.932254][ T8111] sk_alloc+0x35/0x3e0 [ 139.932276][ T8111] ? __pfx_genl_release+0x10/0x10 [ 139.932295][ T8111] ? __pfx_genl_release+0x10/0x10 [ 139.932380][ T8111] netlink_create+0x32a/0x450 [ 139.932411][ T8111] ? __pfx_genl_unbind+0x10/0x10 [ 139.932427][ T8111] ? __pfx_genl_bind+0x10/0x10 [ 139.932476][ T8111] __sock_create+0x2e4/0x580 [ 139.932496][ T8111] __sys_socket+0xaf/0x180 [ 139.932520][ T8111] __x64_sys_socket+0x3f/0x50 [ 139.932537][ T8111] x64_sys_call+0x11fc/0x3020 [ 139.932562][ T8111] do_syscall_64+0x12c/0x370 [ 139.932661][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.932745][ T8111] RIP: 0033:0x7f533107e007 [ 139.932761][ T8111] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.932778][ T8111] RSP: 002b:00007f532fad5f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 139.932798][ T8111] RAX: ffffffffffffffda RBX: 00007f53312f5fa0 RCX: 00007f533107e007 [ 139.932812][ T8111] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 139.932825][ T8111] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 139.932839][ T8111] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000001 [ 139.932894][ T8111] R13: 00007f53312f6038 R14: 00007f53312f5fa0 R15: 00007ffc86399678 [ 139.932910][ T8111] [ 140.033583][ T8102] tipc: Cannot configure node identity twice [ 140.052368][ T8117] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.070303][ T8107] 8021q: VLANs not supported on gre0 [ 140.135621][ T8117] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 140.179210][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.206566][ T8119] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.909: bg 0: block 248: padding at end of block bitmap is not set [ 140.220974][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.233388][ T8117] netlink: 'syz.5.908': attribute type 1 has an invalid length. [ 140.248253][ T8117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.263015][ T8119] loop2: lost filesystem error report for type 5 error -117 [ 140.263305][ T8119] __quota_error: 126 callbacks suppressed [ 140.263318][ T8119] Quota error (device loop2): write_blk: dquota write failed [ 140.270657][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 140.270696][ C1] EXT4-fs (loop2): last error at time 1772857976: ext4_validate_block_bitmap:441 [ 140.300109][ T8119] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 140.301267][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.310227][ T8119] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.909: Failed to acquire dquot type 1 [ 140.330613][ T8119] loop2: lost filesystem error report for type 5 error -117 [ 140.331991][ T8119] EXT4-fs (loop2): 1 truncate cleaned up [ 140.360079][ T8119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.372874][ T8119] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.395301][ T3571] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 140.410038][ T3571] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 1 [ 140.423051][ T8136] batadv1: entered promiscuous mode [ 140.430898][ T8119] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 140.450618][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.468959][ T8137] EXT4-fs: inline encryption not supported [ 140.491231][ T8137] EXT4-fs (loop3): orphan cleanup on readonly fs [ 140.503724][ T8137] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 140.552150][ T8137] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.571262][ T8137] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 140.585242][ T8137] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.914: bad orphan inode 14 [ 140.597655][ T8137] loop3: lost filesystem error report for type 5 error -117 [ 140.597869][ T8137] ext4_test_bit(bit=13, block=18) = 1 [ 140.605222][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 140.605258][ C1] EXT4-fs (loop3): last error at time 1772857976: ext4_orphan_get:1417 [ 140.629764][ T8137] is_bad_inode(inode)=0 [ 140.634461][ T8137] NEXT_ORPHAN(inode)=0 [ 140.676547][ T8137] max_ino=32 [ 140.682685][ T8137] i_nlink=1 [ 140.685829][ T8137] EXT4-fs (loop3): 1 truncate cleaned up [ 140.692191][ T8137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.706640][ T8139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.710589][ T28] audit: type=1400 audit(1772857976.748:1675): avc: denied { ioctl } for pid=8135 comm="syz.3.914" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 140.725392][ T8139] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.813591][ T8148] vfat: Bad value for 'utf8' [ 140.846730][ T28] audit: type=1326 audit(1772857976.868:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 140.895557][ T8145] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.931137][ T8151] EXT4-fs: inline encryption not supported [ 140.936311][ T8145] EXT4-fs (loop1): 1 truncate cleaned up [ 140.937104][ T28] audit: type=1326 audit(1772857976.868:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 140.943249][ T8145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.010376][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.033312][ T8151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.078046][ T28] audit: type=1326 audit(1772857976.878:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 141.103368][ T28] audit: type=1326 audit(1772857976.878:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 141.127218][ T28] audit: type=1326 audit(1772857976.878:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 141.278919][ T8162] syzkaller0: entered promiscuous mode [ 141.294740][ T8162] syzkaller0: entered allmulticast mode [ 141.318361][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.786045][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.818810][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'. [ 141.887225][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.941176][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 141.966916][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.5.925'. [ 141.983350][ T8176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.008795][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.926'. [ 142.106654][ T8195] FAULT_INJECTION: forcing a failure. [ 142.106654][ T8195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.165394][ T8195] CPU: 1 UID: 0 PID: 8195 Comm: syz.0.930 Not tainted syzkaller #0 PREEMPT(full) [ 142.165446][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.165475][ T8195] Call Trace: [ 142.165481][ T8195] [ 142.165488][ T8195] __dump_stack+0x1d/0x30 [ 142.165512][ T8195] dump_stack_lvl+0x95/0xd0 [ 142.165630][ T8195] dump_stack+0x15/0x1b [ 142.165649][ T8195] should_fail_ex+0x263/0x280 [ 142.165710][ T8195] should_fail+0xb/0x20 [ 142.165727][ T8195] should_fail_usercopy+0x1a/0x20 [ 142.165765][ T8195] _copy_from_iter+0xcf/0xea0 [ 142.165786][ T8195] ? __alloc_skb+0x4f6/0x690 [ 142.165806][ T8195] ? __alloc_skb+0x200/0x690 [ 142.165829][ T8195] netlink_sendmsg+0x4ae/0x6f0 [ 142.165932][ T8195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.166001][ T8195] ____sys_sendmsg+0x563/0x5b0 [ 142.166042][ T8195] ___sys_sendmsg+0x195/0x1e0 [ 142.166190][ T8195] __x64_sys_sendmsg+0xd4/0x160 [ 142.166246][ T8195] x64_sys_call+0x194c/0x3020 [ 142.166320][ T8195] do_syscall_64+0x12c/0x370 [ 142.166339][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.166359][ T8195] RIP: 0033:0x7f51757cc799 [ 142.166374][ T8195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.166463][ T8195] RSP: 002b:00007f5174227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.166483][ T8195] RAX: ffffffffffffffda RBX: 00007f5175a45fa0 RCX: 00007f51757cc799 [ 142.166496][ T8195] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 142.166507][ T8195] RBP: 00007f5174227090 R08: 0000000000000000 R09: 0000000000000000 [ 142.166549][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.166562][ T8195] R13: 00007f5175a46038 R14: 00007f5175a45fa0 R15: 00007ffe8ee6f398 [ 142.166580][ T8195] [ 142.361730][ T8191] set_capacity_and_notify: 7 callbacks suppressed [ 142.361745][ T8191] loop3: detected capacity change from 0 to 8192 [ 142.421610][ T5859] loop3: p1 < > p2 p4 < p5 > [ 142.427457][ T5859] loop3: partition table partially beyond EOD, truncated [ 142.444857][ T5859] loop3: p1 start 134217728 is beyond EOD, truncated [ 142.461664][ T5859] loop3: p2 size 591360 extends beyond EOD, truncated [ 142.486851][ T8208] loop2: detected capacity change from 0 to 512 [ 142.493646][ T5859] loop3: p5 size 591360 extends beyond EOD, truncated [ 142.497394][ T8207] ip6_vti0 speed is unknown, defaulting to 1000 [ 142.524463][ T8191] loop3: p1 < > p2 p4 < p5 > [ 142.529244][ T8191] loop3: partition table partially beyond EOD, truncated [ 142.536726][ T8191] loop3: p1 start 134217728 is beyond EOD, truncated [ 142.556586][ T8191] loop3: p2 size 591360 extends beyond EOD, truncated [ 142.584176][ T8191] loop3: p5 size 591360 extends beyond EOD, truncated [ 142.637355][ T8207] lo speed is unknown, defaulting to 1000 [ 142.708979][ T8214] capability: warning: `syz.2.937' uses deprecated v2 capabilities in a way that may be insecure [ 142.940673][ T8236] SET target dimension over the limit! [ 143.088545][ T8240] loop3: detected capacity change from 0 to 512 [ 143.097528][ T8240] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.940: iget: bad i_size value: 38620345925642 [ 143.110178][ T8240] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.110744][ T8240] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.940: couldn't read orphan inode 15 (err -117) [ 143.120164][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 143.120196][ C1] EXT4-fs (loop3): initial error at time 1772857979: ext4_orphan_get:1391: inode 15 [ 143.120227][ C1] EXT4-fs (loop3): last error at time 1772857979: ext4_orphan_get:1391: inode 15 [ 143.156947][ T8240] loop3: lost filesystem error report for type 5 error -117 [ 143.164684][ T8240] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.571409][ T8268] SELinux: ebitmap: truncated map [ 143.587952][ T8268] SELinux: failed to load policy [ 143.625442][ T8294] tipc: Cannot configure node identity twice [ 143.662807][ T8269] loop0: detected capacity change from 0 to 2048 [ 143.788591][ T3707] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:20: bg 0: block 5: invalid block bitmap [ 143.813084][ T3707] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 143.843828][ T3707] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.843828][ T3707] [ 143.870599][ T3707] EXT4-fs (loop3): Total free blocks count 0 [ 143.890195][ T3707] EXT4-fs (loop3): Free/Dirty block details [ 143.907941][ T3707] EXT4-fs (loop3): free_blocks=0 [ 143.913363][ T3707] EXT4-fs (loop3): dirty_blocks=202 [ 143.918675][ T3707] EXT4-fs (loop3): Block reservation details [ 143.925631][ T3707] EXT4-fs (loop3): i_reserved_data_blocks=202 [ 143.940546][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 144.087813][ T8338] loop3: detected capacity change from 0 to 8192 [ 144.127038][ T8338] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.142137][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.151362][ T8338] FAT-fs (loop3): Filesystem has been set read-only [ 144.158202][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.168322][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.177330][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.186616][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.195758][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.208733][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.217884][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.226936][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.252702][ T8338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.932687][ T8350] SELinux: ebitmap: truncated map [ 144.991373][ T8353] tipc: Enabled bearer , priority 0 [ 145.001305][ T8350] SELinux: failed to load policy [ 145.029369][ T8354] tipc: Cannot configure node identity twice [ 145.045921][ T8353] syzkaller0: entered promiscuous mode [ 145.067089][ T8353] syzkaller0: entered allmulticast mode [ 145.086712][ T8353] tipc: Resetting bearer [ 145.098217][ T8353] tipc: Disabling bearer [ 145.119416][ T8356] loop3: detected capacity change from 0 to 512 [ 145.145573][ T8356] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 145.171536][ T8356] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 145.179846][ T8356] EXT4-fs (loop3): orphan cleanup on readonly fs [ 145.186452][ T8356] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 145.201267][ T8356] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 145.208672][ T8356] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.957: bg 0: block 40: padding at end of block bitmap is not set [ 145.338018][ T8356] loop3: lost filesystem error report for type 5 error -117 [ 145.339547][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 145.353321][ C1] EXT4-fs (loop3): initial error at time 1772857981: ext4_validate_block_bitmap:441 [ 145.362717][ C1] EXT4-fs (loop3): last error at time 1772857981: ext4_validate_block_bitmap:441 [ 145.379648][ T8356] EXT4-fs (loop3): Remounting filesystem read-only [ 145.391357][ T8356] EXT4-fs (loop3): 1 truncate cleaned up [ 145.392223][ T8356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.421410][ T28] kauditd_printk_skb: 229 callbacks suppressed [ 145.421423][ T28] audit: type=1400 audit(1772857981.458:1909): avc: denied { listen } for pid=8361 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.447902][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.520120][ T28] audit: type=1400 audit(1772857981.558:1910): avc: denied { create } for pid=8375 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 145.546690][ T28] audit: type=1400 audit(1772857981.578:1911): avc: denied { write } for pid=8375 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 145.714794][ T8384] SET target dimension over the limit! [ 145.772978][ T8394] bridge4: entered promiscuous mode [ 145.778306][ T8394] bridge4: entered allmulticast mode [ 145.791116][ T8394] loop1: detected capacity change from 0 to 512 [ 145.970037][ T8394] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.963: iget: bad i_size value: 38620345925642 [ 145.982654][ T8394] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.983059][ T8394] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.963: couldn't read orphan inode 15 (err -117) [ 145.992201][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 145.992221][ C1] EXT4-fs (loop1): initial error at time 1772857982: ext4_orphan_get:1391: inode 15 [ 145.992245][ C1] EXT4-fs (loop1): last error at time 1772857982: ext4_orphan_get:1391: inode 15 [ 146.028973][ T8394] loop1: lost filesystem error report for type 5 error -117 [ 146.103734][ T8394] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.128834][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'. [ 146.148818][ T28] audit: type=1326 audit(1772857982.168:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 146.254152][ T8407] can0: slcan on ttyS3. [ 146.259670][ T28] audit: type=1326 audit(1772857982.168:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 146.296016][ T8408] loop2: detected capacity change from 0 to 8192 [ 146.309275][ T28] audit: type=1326 audit(1772857982.168:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 146.349668][ T8407] can0 (unregistered): slcan off ttyS3. [ 146.370347][ T8408] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.381306][ T28] audit: type=1326 audit(1772857982.168:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 146.401539][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.439624][ T8398] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 146.456273][ T28] audit: type=1326 audit(1772857982.168:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 146.457236][ T8408] FAT-fs (loop2): Filesystem has been set read-only [ 146.487102][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.540025][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.571501][ T3567] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 146.605919][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.609749][ T28] audit: type=1326 audit(1772857982.168:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 146.619794][ T3567] EXT4-fs (loop1): This should not happen!! Data will be lost [ 146.619794][ T3567] [ 146.648934][ T8451] sctp: [Deprecated]: syz.3.971 (pid 8451) Use of int in max_burst socket option. [ 146.648934][ T8451] Use struct sctp_assoc_value instead [ 146.657983][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.680711][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.693405][ T3567] EXT4-fs (loop1): Total free blocks count 0 [ 146.699480][ T3567] EXT4-fs (loop1): Free/Dirty block details [ 146.705771][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.714044][ T28] audit: type=1326 audit(1772857982.168:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff175c799 code=0x7ffc0000 [ 146.737904][ T3567] EXT4-fs (loop1): free_blocks=0 [ 146.737921][ T3567] EXT4-fs (loop1): dirty_blocks=202 [ 146.737933][ T3567] EXT4-fs (loop1): Block reservation details [ 146.737943][ T3567] EXT4-fs (loop1): i_reserved_data_blocks=202 [ 146.740159][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 146.770141][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.780406][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.791664][ T8408] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 146.915134][ T8459] Invalid ELF header magic: != ELF [ 146.932668][ T8461] syzkaller0: left promiscuous mode [ 146.940704][ T8457] loop5: detected capacity change from 0 to 512 [ 146.950774][ T8457] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.972: iget: bad i_size value: 38620345925642 [ 146.959580][ T8461] syzkaller0: left allmulticast mode [ 146.963629][ T8457] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.969431][ T8457] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.972: couldn't read orphan inode 15 (err -117) [ 146.969629][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 146.996886][ C1] EXT4-fs (loop5): initial error at time 1772857982: ext4_orphan_get:1391: inode 15 [ 147.006301][ C1] EXT4-fs (loop5): last error at time 1772857982: ext4_orphan_get:1391: inode 15 [ 147.015515][ T8457] loop5: lost filesystem error report for type 5 error -117 [ 147.016212][ T8457] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.049239][ T8466] loop3: detected capacity change from 0 to 512 [ 147.090608][ T8466] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.974: bg 0: block 248: padding at end of block bitmap is not set [ 147.110862][ T8466] loop3: lost filesystem error report for type 5 error -117 [ 147.111523][ T8466] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.974: Failed to acquire dquot type 1 [ 147.130178][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 147.130200][ C0] EXT4-fs (loop3): last error at time 1772857983: ext4_validate_block_bitmap:441 [ 147.146211][ T8466] loop3: lost filesystem error report for type 5 error -117 [ 147.171738][ T8466] EXT4-fs (loop3): 1 truncate cleaned up [ 147.192084][ T8466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.218083][ T8466] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.309706][ T3571] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 1 [ 147.321914][ T8466] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 147.349233][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.417790][ T8477] loop2: detected capacity change from 0 to 256 [ 147.747557][ T3571] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 147.804258][ T3571] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 147.896393][ T3571] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.896393][ T3571] [ 147.932663][ T3571] EXT4-fs (loop5): Total free blocks count 0 [ 147.969706][ T3571] EXT4-fs (loop5): Free/Dirty block details [ 148.006883][ T3571] EXT4-fs (loop5): free_blocks=0 [ 148.165665][ T3571] EXT4-fs (loop5): dirty_blocks=202 [ 148.183245][ T3571] EXT4-fs (loop5): Block reservation details [ 148.199785][ T3571] EXT4-fs (loop5): i_reserved_data_blocks=202 [ 148.213193][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 148.361144][ T8490] netlink: 44 bytes leftover after parsing attributes in process `syz.3.978'. [ 148.370421][ T8490] netlink: 43 bytes leftover after parsing attributes in process `syz.3.978'. [ 148.379256][ T8490] netlink: 'syz.3.978': attribute type 5 has an invalid length. [ 148.387296][ T8490] netlink: 43 bytes leftover after parsing attributes in process `syz.3.978'. [ 148.468181][ T8499] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 148.487716][ T8499] FAULT_INJECTION: forcing a failure. [ 148.487716][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 148.535227][ T8499] CPU: 0 UID: 0 PID: 8499 Comm: syz.3.983 Not tainted syzkaller #0 PREEMPT(full) [ 148.535256][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.535269][ T8499] Call Trace: [ 148.535276][ T8499] [ 148.535285][ T8499] __dump_stack+0x1d/0x30 [ 148.535313][ T8499] dump_stack_lvl+0x95/0xd0 [ 148.535400][ T8499] dump_stack+0x15/0x1b [ 148.535421][ T8499] should_fail_ex+0x263/0x280 [ 148.535472][ T8499] ? fifo_create_dflt+0xe8/0x1a0 [ 148.535493][ T8499] should_failslab+0x8c/0xb0 [ 148.535598][ T8499] __kmalloc_cache_noprof+0x5f/0x410 [ 148.535623][ T8499] ? qdisc_create_dflt+0x1c0/0x2e0 [ 148.535649][ T8499] fifo_create_dflt+0xe8/0x1a0 [ 148.535671][ T8499] tbf_change+0x76b/0xe00 [ 148.535723][ T8499] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 148.535748][ T8499] ? __list_add_valid_or_report+0x38/0xe0 [ 148.535780][ T8499] ? rtnetlink_rcv+0x1c/0x30 [ 148.535809][ T8499] ? netlink_unicast+0x5c0/0x690 [ 148.535868][ T8499] ? netlink_sendmsg+0x5c8/0x6f0 [ 148.535896][ T8499] ? hrtimer_setup+0x33/0x110 [ 148.535918][ T8499] ? read_tsc+0x9/0x20 [ 148.536056][ T8499] ? __pfx_tbf_init+0x10/0x10 [ 148.536093][ T8499] tbf_init+0x72/0x90 [ 148.536115][ T8499] qdisc_create+0x582/0x9d0 [ 148.536212][ T8499] tc_modify_qdisc+0xffc/0x14f0 [ 148.536256][ T8499] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 148.536349][ T8499] rtnetlink_rcv_msg+0x6a7/0x720 [ 148.536377][ T8499] ? avc_has_perm_noaudit+0xab/0x130 [ 148.536401][ T8499] netlink_rcv_skb+0x123/0x220 [ 148.536423][ T8499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.536457][ T8499] rtnetlink_rcv+0x1c/0x30 [ 148.536583][ T8499] netlink_unicast+0x5c0/0x690 [ 148.536612][ T8499] netlink_sendmsg+0x5c8/0x6f0 [ 148.536639][ T8499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.536677][ T8499] ____sys_sendmsg+0x563/0x5b0 [ 148.536734][ T8499] ___sys_sendmsg+0x195/0x1e0 [ 148.536828][ T8499] __x64_sys_sendmsg+0xd4/0x160 [ 148.536859][ T8499] x64_sys_call+0x194c/0x3020 [ 148.536942][ T8499] do_syscall_64+0x12c/0x370 [ 148.536960][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.536982][ T8499] RIP: 0033:0x7f4d4b7ac799 [ 148.536999][ T8499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.537016][ T8499] RSP: 002b:00007f4d4a207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.537038][ T8499] RAX: ffffffffffffffda RBX: 00007f4d4ba25fa0 RCX: 00007f4d4b7ac799 [ 148.537059][ T8499] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000004 [ 148.537074][ T8499] RBP: 00007f4d4a207090 R08: 0000000000000000 R09: 0000000000000000 [ 148.537087][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.537098][ T8499] R13: 00007f4d4ba26038 R14: 00007f4d4ba25fa0 R15: 00007ffeef7f3788 [ 148.537123][ T8499] [ 148.976613][ T8509] SET target dimension over the limit! [ 149.036824][ T8517] loop1: detected capacity change from 0 to 512 [ 149.046841][ T8512] FAULT_INJECTION: forcing a failure. [ 149.046841][ T8512] name failslab, interval 1, probability 0, space 0, times 0 [ 149.082491][ T8512] CPU: 0 UID: 0 PID: 8512 Comm: syz.5.984 Not tainted syzkaller #0 PREEMPT(full) [ 149.082596][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.082607][ T8512] Call Trace: [ 149.082614][ T8512] [ 149.082620][ T8512] __dump_stack+0x1d/0x30 [ 149.082649][ T8512] dump_stack_lvl+0x95/0xd0 [ 149.082706][ T8512] dump_stack+0x15/0x1b [ 149.082743][ T8512] should_fail_ex+0x263/0x280 [ 149.082764][ T8512] ? igmp6_group_dropped+0x224/0x5b0 [ 149.082790][ T8512] should_failslab+0x8c/0xb0 [ 149.082810][ T8512] __kmalloc_cache_noprof+0x5f/0x410 [ 149.082865][ T8512] igmp6_group_dropped+0x224/0x5b0 [ 149.082893][ T8512] __ipv6_dev_mc_dec+0x187/0x380 [ 149.082919][ T8512] __ipv6_sock_mc_drop+0xc4/0x240 [ 149.082990][ T8512] ipv6_sock_mc_close+0x115/0x140 [ 149.083014][ T8512] inet6_release+0x2e/0x60 [ 149.083041][ T8512] sock_close+0x6b/0x150 [ 149.083128][ T8512] ? __pfx_sock_close+0x10/0x10 [ 149.083160][ T8512] __fput+0x29b/0x650 [ 149.083185][ T8512] ____fput+0x1c/0x30 [ 149.083266][ T8512] task_work_run+0x130/0x1a0 [ 149.083287][ T8512] exit_to_user_mode_loop+0x1f4/0x6f0 [ 149.083310][ T8512] do_syscall_64+0x249/0x370 [ 149.083354][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.083374][ T8512] RIP: 0033:0x7f0eedc5c799 [ 149.083389][ T8512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.083405][ T8512] RSP: 002b:00007f0eec6af028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 149.083430][ T8512] RAX: 0000000000000000 RBX: 00007f0eeded5fa0 RCX: 00007f0eedc5c799 [ 149.083443][ T8512] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 149.083455][ T8512] RBP: 00007f0eec6af090 R08: 0000000000000000 R09: 0000000000000000 [ 149.083467][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.083479][ T8512] R13: 00007f0eeded6038 R14: 00007f0eeded5fa0 R15: 00007fff479cb1a8 [ 149.083500][ T8512] [ 149.085003][ T8517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.164040][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.988'. [ 149.168389][ T8517] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.243364][ T8517] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 4: comm syz.1.986: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=253816, size=1024 fake=0 [ 149.475704][ T8517] EXT4-fs (loop1): Remounting filesystem read-only [ 149.628503][ T8529] SELinux: ebitmap: truncated map [ 149.634495][ T8529] SELinux: failed to load policy [ 150.231530][ T8524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.249679][ T8529] tipc: Cannot configure node identity twice [ 150.310624][ T8586] loop3: detected capacity change from 0 to 512 [ 150.336980][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.349422][ T8586] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.993: bg 0: block 248: padding at end of block bitmap is not set [ 150.351309][ T8578] ip6_vti0 speed is unknown, defaulting to 1000 [ 150.377286][ T8591] FAULT_INJECTION: forcing a failure. [ 150.377286][ T8591] name failslab, interval 1, probability 0, space 0, times 0 [ 150.390355][ T8591] CPU: 0 UID: 0 PID: 8591 Comm: syz.5.994 Not tainted syzkaller #0 PREEMPT(full) [ 150.390457][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.390467][ T8591] Call Trace: [ 150.390473][ T8591] [ 150.390479][ T8591] __dump_stack+0x1d/0x30 [ 150.390506][ T8591] dump_stack_lvl+0x95/0xd0 [ 150.390601][ T8591] dump_stack+0x15/0x1b [ 150.390621][ T8591] should_fail_ex+0x263/0x280 [ 150.390641][ T8591] ? __pfx_cond_bools_destroy+0x10/0x10 [ 150.390664][ T8591] should_failslab+0x8c/0xb0 [ 150.390689][ T8591] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 150.390713][ T8591] ? cond_bools_copy+0x30/0x80 [ 150.390789][ T8591] ? __pfx_cond_bools_destroy+0x10/0x10 [ 150.390815][ T8591] kmemdup_noprof+0x2b/0x70 [ 150.390866][ T8591] ? __pfx_cond_bools_destroy+0x10/0x10 [ 150.390939][ T8591] cond_bools_copy+0x30/0x80 [ 150.391053][ T8591] ? __pfx_cond_bools_destroy+0x10/0x10 [ 150.391075][ T8591] hashtab_duplicate+0x11e/0x360 [ 150.391092][ T8591] ? __pfx_cond_bools_copy+0x10/0x10 [ 150.391125][ T8591] cond_policydb_dup+0xd2/0x4e0 [ 150.391152][ T8591] security_set_bools+0xa0/0x340 [ 150.391223][ T8591] sel_commit_bools_write+0x1e9/0x270 [ 150.391253][ T8591] vfs_writev+0x42b/0x900 [ 150.391330][ T8591] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 150.391362][ T8591] do_writev+0xe9/0x210 [ 150.391387][ T8591] __x64_sys_writev+0x45/0x50 [ 150.391461][ T8591] x64_sys_call+0x1c0c/0x3020 [ 150.391487][ T8591] do_syscall_64+0x12c/0x370 [ 150.391508][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.391562][ T8591] RIP: 0033:0x7f0eedc5c799 [ 150.391575][ T8591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.391591][ T8591] RSP: 002b:00007f0eec6af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 150.391612][ T8591] RAX: ffffffffffffffda RBX: 00007f0eeded5fa0 RCX: 00007f0eedc5c799 [ 150.391658][ T8591] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 150.391670][ T8591] RBP: 00007f0eec6af090 R08: 0000000000000000 R09: 0000000000000000 [ 150.391682][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.391695][ T8591] R13: 00007f0eeded6038 R14: 00007f0eeded5fa0 R15: 00007fff479cb1a8 [ 150.391715][ T8591] [ 150.392794][ T8586] loop3: lost filesystem error report for type 5 error -117 [ 150.507592][ T8598] loop1: detected capacity change from 0 to 512 [ 150.529649][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 150.559341][ T8578] lo speed is unknown, defaulting to 1000 [ 150.583472][ T8586] __quota_error: 18 callbacks suppressed [ 150.583488][ T8586] Quota error (device loop3): write_blk: dquota write failed [ 150.588242][ T8598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.591833][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 150.591852][ C1] EXT4-fs (loop3): last error at time 1772857986: ext4_validate_block_bitmap:441 [ 150.688478][ T8586] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 150.691382][ T8598] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.995: corrupted inode contents [ 150.716316][ T8598] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.716490][ T8598] EXT4-fs (loop1): Remounting filesystem read-only [ 150.725645][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 150.725674][ C0] EXT4-fs (loop1): initial error at time 1772857986: ext4_do_update_inode:5569: inode 15 [ 150.725707][ C0] EXT4-fs (loop1): last error at time 1772857986: ext4_do_update_inode:5569: inode 15 [ 150.774412][ T8594] loop2: detected capacity change from 0 to 128 [ 150.782108][ T8598] EXT4-fs (loop1): 1 orphan inode deleted [ 150.788749][ T8598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.793021][ T8586] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.993: Failed to acquire dquot type 1 [ 150.826333][ T8586] loop3: lost filesystem error report for type 5 error -117 [ 150.830340][ T8586] EXT4-fs (loop3): 1 truncate cleaned up [ 150.844100][ T8586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.856778][ T8586] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.899822][ T8586] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 150.923104][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.971184][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.345453][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 151.395192][ T8624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.861285][ T8640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.212553][ T8651] loop1: detected capacity change from 0 to 512 [ 152.223717][ T8651] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 152.240239][ T8651] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 152.251370][ T8651] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1014: bad orphan inode 4 [ 152.261653][ T8651] loop1: lost filesystem error report for type 5 error -117 [ 152.261945][ T8651] EXT4-fs (loop1): 1 orphan inode deleted [ 152.274974][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 152.274995][ C0] EXT4-fs (loop1): initial error at time 1772857988: ext4_orphan_get:1417 [ 152.275016][ C0] EXT4-fs (loop1): last error at time 1772857988: ext4_orphan_get:1417 [ 152.298970][ T8651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.312307][ T8653] SELinux: ebitmap: truncated map [ 152.319299][ T8653] SELinux: failed to load policy [ 152.325134][ T8653] tipc: Cannot configure node identity twice [ 152.448361][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 152.471040][ T8656] loop0: detected capacity change from 0 to 128 [ 152.725245][ T8666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.030814][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.450574][ T8680] loop5: detected capacity change from 0 to 512 [ 153.753267][ T8680] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1021: iget: bad i_size value: 38620345925642 [ 153.766003][ T8680] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.766380][ T8680] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1021: couldn't read orphan inode 15 (err -117) [ 153.775518][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 153.775557][ C0] EXT4-fs (loop5): initial error at time 1772857989: ext4_orphan_get:1391: inode 15 [ 153.775585][ C0] EXT4-fs (loop5): last error at time 1772857989: ext4_orphan_get:1391: inode 15 [ 153.812526][ T8680] loop5: lost filesystem error report for type 5 error -117 [ 153.837349][ T8680] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.085022][ T3708] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:21: bg 0: block 5: invalid block bitmap [ 154.102461][ T8693] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4628 sclass=netlink_xfrm_socket pid=8693 comm=syz.2.1025 [ 154.115773][ T3708] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 154.130443][ T3708] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.130443][ T3708] [ 154.140148][ T3708] EXT4-fs (loop5): Total free blocks count 0 [ 154.146620][ T3708] EXT4-fs (loop5): Free/Dirty block details [ 154.152965][ T3708] EXT4-fs (loop5): free_blocks=0 [ 154.158264][ T3708] EXT4-fs (loop5): dirty_blocks=202 [ 154.165606][ T3708] EXT4-fs (loop5): Block reservation details [ 154.172976][ T3708] EXT4-fs (loop5): i_reserved_data_blocks=202 [ 154.184559][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 154.251958][ T8701] ip6_vti0 speed is unknown, defaulting to 1000 [ 154.318629][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1031'. [ 154.333980][ T8701] lo speed is unknown, defaulting to 1000 [ 154.463733][ T8709] loop1: detected capacity change from 0 to 8192 [ 154.519918][ T5859] loop1: p1 < > p2 p4 < p5 > [ 154.525740][ T5859] loop1: partition table partially beyond EOD, truncated [ 154.539660][ T5859] loop1: p1 start 134217728 is beyond EOD, truncated [ 154.562517][ T5859] loop1: p2 size 591360 extends beyond EOD, truncated [ 154.573828][ T5859] loop1: p5 size 591360 extends beyond EOD, truncated [ 154.591904][ T8709] loop1: p1 < > p2 p4 < p5 > [ 154.597392][ T8709] loop1: partition table partially beyond EOD, truncated [ 154.611767][ T8709] loop1: p1 start 134217728 is beyond EOD, truncated [ 154.628602][ T8709] loop1: p2 size 591360 extends beyond EOD, truncated [ 154.653799][ T8709] loop1: p5 size 591360 extends beyond EOD, truncated [ 154.654460][ T8712] SELinux: ebitmap: truncated map [ 154.704181][ T8712] SELinux: failed to load policy [ 154.783696][ T8712] tipc: Cannot configure node identity twice [ 154.822604][ T28] audit: type=1400 audit(1772857990.858:1934): avc: denied { accept } for pid=8717 comm="syz.3.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.030848][ T8724] ip6_vti0 speed is unknown, defaulting to 1000 [ 155.236223][ T8703] bridge0: entered allmulticast mode [ 155.259142][ T8703] bridge_slave_1: left allmulticast mode [ 155.297930][ T8703] bridge_slave_1: left promiscuous mode [ 155.393237][ T8736] loop2: detected capacity change from 0 to 128 [ 155.404467][ T8736] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.418312][ T8736] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.640327][ T8735] loop1: detected capacity change from 0 to 512 [ 155.670728][ T8735] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.754829][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.758912][ T28] audit: type=1400 audit(1772857991.788:1935): avc: denied { read write } for pid=8734 comm="syz.1.1037" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.785417][ T28] audit: type=1400 audit(1772857991.808:1936): avc: denied { open } for pid=8734 comm="syz.1.1037" path="/202/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.809379][ T8703] bridge_slave_0: left allmulticast mode [ 155.815473][ T8703] bridge_slave_0: left promiscuous mode [ 155.821254][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.860452][ T8724] lo speed is unknown, defaulting to 1000 [ 155.886008][ T3310] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 155.940678][ T8749] loop1: detected capacity change from 0 to 512 [ 155.947247][ T8749] EXT4-fs: Ignoring removed bh option [ 155.972501][ T8749] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 156.037134][ T8758] netlink: 'syz.1.1045': attribute type 29 has an invalid length. [ 156.045686][ T8758] netlink: 'syz.1.1045': attribute type 29 has an invalid length. [ 156.057477][ T8759] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.074881][ T28] audit: type=1326 audit(1772857992.108:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 156.099630][ T8762] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1045'. [ 156.116554][ T28] audit: type=1326 audit(1772857992.108:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 156.152611][ T28] audit: type=1326 audit(1772857992.108:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 156.178491][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1045'. [ 156.182809][ T28] audit: type=1326 audit(1772857992.108:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 156.225922][ T28] audit: type=1326 audit(1772857992.108:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 156.249921][ T28] audit: type=1326 audit(1772857992.118:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 156.273815][ T28] audit: type=1326 audit(1772857992.118:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 156.297770][ T28] audit: type=1326 audit(1772857992.118:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b7ac799 code=0x7ffc0000 [ 156.312419][ T8769] loop5: detected capacity change from 0 to 512 [ 156.331581][ T8767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'. [ 156.351048][ T8769] EXT4-fs: Ignoring removed nobh option [ 156.362355][ T8769] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.383520][ T8769] EXT4-fs (loop5): 1 truncate cleaned up [ 156.389755][ T8769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.403163][ T8769] FAULT_INJECTION: forcing a failure. [ 156.403163][ T8769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.416519][ T8769] CPU: 1 UID: 0 PID: 8769 Comm: syz.5.1048 Not tainted syzkaller #0 PREEMPT(full) [ 156.416568][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.416579][ T8769] Call Trace: [ 156.416640][ T8769] [ 156.416648][ T8769] __dump_stack+0x1d/0x30 [ 156.416725][ T8769] dump_stack_lvl+0x95/0xd0 [ 156.416745][ T8769] dump_stack+0x15/0x1b [ 156.416783][ T8769] should_fail_ex+0x263/0x280 [ 156.416808][ T8769] should_fail+0xb/0x20 [ 156.416834][ T8769] should_fail_usercopy+0x1a/0x20 [ 156.416907][ T8769] _copy_from_iter+0xcf/0xea0 [ 156.416933][ T8769] ? __alloc_skb+0x4f6/0x690 [ 156.416969][ T8769] ? __alloc_skb+0x200/0x690 [ 156.416989][ T8769] netlink_sendmsg+0x4ae/0x6f0 [ 156.417078][ T8769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.417101][ T8769] ____sys_sendmsg+0x563/0x5b0 [ 156.417132][ T8769] ___sys_sendmsg+0x195/0x1e0 [ 156.417208][ T8769] __x64_sys_sendmsg+0xd4/0x160 [ 156.417234][ T8769] x64_sys_call+0x194c/0x3020 [ 156.417260][ T8769] do_syscall_64+0x12c/0x370 [ 156.417320][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.417339][ T8769] RIP: 0033:0x7f0eedc5c799 [ 156.417353][ T8769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.417373][ T8769] RSP: 002b:00007f0eec6af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.417413][ T8769] RAX: ffffffffffffffda RBX: 00007f0eeded5fa0 RCX: 00007f0eedc5c799 [ 156.417425][ T8769] RDX: 0000000000000880 RSI: 0000200000000500 RDI: 0000000000000005 [ 156.417437][ T8769] RBP: 00007f0eec6af090 R08: 0000000000000000 R09: 0000000000000000 [ 156.417449][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.417462][ T8769] R13: 00007f0eeded6038 R14: 00007f0eeded5fa0 R15: 00007fff479cb1a8 [ 156.417481][ T8769] [ 156.600474][ T8770] loop0: detected capacity change from 0 to 8192 [ 156.609398][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.627057][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1050'. [ 156.636157][ T8777] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1050'. [ 156.649782][ T5859] loop0: p1 < > p2 p4 < p5 > [ 156.654517][ T5859] loop0: partition table partially beyond EOD, truncated [ 156.675669][ T5859] loop0: p1 start 134217728 is beyond EOD, truncated [ 156.690389][ T5859] loop0: p2 size 591360 extends beyond EOD, truncated [ 156.700520][ T5859] loop0: p5 size 591360 extends beyond EOD, truncated [ 156.712494][ T8770] loop0: p1 < > p2 p4 < p5 > [ 156.717843][ T8770] loop0: partition table partially beyond EOD, truncated [ 156.726673][ T8770] loop0: p1 start 134217728 is beyond EOD, truncated [ 156.733790][ T8770] loop0: p2 size 591360 extends beyond EOD, truncated [ 156.743295][ T8770] loop0: p5 size 591360 extends beyond EOD, truncated [ 156.859600][ T8797] SET target dimension over the limit! [ 157.070465][ T8833] netlink: 'syz.2.1053': attribute type 2 has an invalid length. [ 157.249084][ T8857] loop3: detected capacity change from 0 to 512 [ 157.259103][ T8857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.273771][ T8857] EXT4-fs (loop3): 1 truncate cleaned up [ 157.280173][ T8857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.357275][ T8866] loop0: detected capacity change from 0 to 128 [ 157.368812][ T8866] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.415252][ T8866] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.949114][ T8926] SET target dimension over the limit! [ 158.040065][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.662412][ T9025] loop5: detected capacity change from 0 to 128 [ 158.846637][ T9037] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.874810][ T9037] lo speed is unknown, defaulting to 1000 [ 159.040976][ T8756] delete_channel: no stack [ 159.149323][ T9043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1065'. [ 159.425811][ T9044] loop1: detected capacity change from 0 to 8192 [ 159.481447][ T5859] loop1: p1 < > p2 p4 < p5 > [ 159.487892][ T5859] loop1: partition table partially beyond EOD, truncated [ 159.495290][ T5859] loop1: p1 start 134217728 is beyond EOD, truncated [ 159.504198][ T5859] loop1: p2 size 591360 extends beyond EOD, truncated [ 159.512280][ T5859] loop1: p5 size 591360 extends beyond EOD, truncated [ 159.522798][ T9044] loop1: p1 < > p2 p4 < p5 > [ 159.527620][ T9044] loop1: partition table partially beyond EOD, truncated [ 159.535098][ T9044] loop1: p1 start 134217728 is beyond EOD, truncated [ 159.542228][ T9044] loop1: p2 size 591360 extends beyond EOD, truncated [ 159.550468][ T9044] loop1: p5 size 591360 extends beyond EOD, truncated [ 159.955946][ T8809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.086707][ T9054] ip6_vti0 speed is unknown, defaulting to 1000 [ 160.210436][ T9070] SET target dimension over the limit! [ 160.329216][ T9054] lo speed is unknown, defaulting to 1000 [ 160.395805][ T9083] ip6_vti0 speed is unknown, defaulting to 1000 [ 160.560139][ T9053] tipc: Cannot configure node identity twice [ 160.648228][ T9083] lo speed is unknown, defaulting to 1000 [ 160.904715][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 160.929362][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1080'. [ 161.014746][ T9160] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1082'. [ 161.129760][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 161.129776][ T28] audit: type=1400 audit(1772857997.138:1946): avc: denied { read } for pid=9163 comm="syz.2.1083" path="socket:[17232]" dev="sockfs" ino=17232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.229808][ T9153] loop1: detected capacity change from 0 to 8192 [ 161.267756][ T28] audit: type=1400 audit(1772857997.268:1947): avc: denied { audit_read } for pid=9166 comm="syz.3.1084" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.269844][ T4106] loop1: p1 < > p2 p4 < p5 > [ 161.327736][ T4106] loop1: partition table partially beyond EOD, truncated [ 161.343525][ T9159] tipc: Cannot configure node identity twice [ 161.356681][ T4106] loop1: p1 start 134217728 is beyond EOD, truncated [ 161.372368][ T4106] loop1: p2 size 591360 extends beyond EOD, truncated [ 161.380982][ T4106] loop1: p5 size 591360 extends beyond EOD, truncated [ 161.462830][ T9153] loop1: p1 < > p2 p4 < p5 > [ 161.486587][ T9153] loop1: partition table partially beyond EOD, truncated [ 161.527030][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1089'. [ 161.570431][ T9153] loop1: p1 start 134217728 is beyond EOD, truncated [ 161.592713][ T9153] loop1: p2 size 591360 extends beyond EOD, truncated [ 161.630330][ T9153] loop1: p5 size 591360 extends beyond EOD, truncated [ 161.749682][ T28] audit: type=1400 audit(1772857997.778:1948): avc: denied { getopt } for pid=9192 comm="syz.5.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.822020][ T9198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.851476][ T4106] udevd[4106]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 161.861623][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 161.872259][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 161.900515][ T9200] loop5: detected capacity change from 0 to 128 [ 162.019351][ T4108] udevd[4108]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 162.051388][ T9210] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1094'. [ 162.120773][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 162.149421][ T4108] udevd[4108]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 162.556922][ T4106] udevd[4106]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 162.645943][ T9214] SET target dimension over the limit! [ 162.705828][ T9220] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 162.831345][ T9229] IPVS: Error connecting to the multicast addr [ 163.265230][ T9306] loop3: detected capacity change from 0 to 512 [ 163.275721][ T9306] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1100: iget: bad i_size value: 38620345925642 [ 163.288401][ T9306] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.288899][ T9306] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1100: couldn't read orphan inode 15 (err -117) [ 163.298135][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 163.298156][ C1] EXT4-fs (loop3): initial error at time 1772857999: ext4_orphan_get:1391: inode 15 [ 163.298190][ C1] EXT4-fs (loop3): last error at time 1772857999: ext4_orphan_get:1391: inode 15 [ 163.335005][ T9306] loop3: lost filesystem error report for type 5 error -117 [ 163.335935][ T9306] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.424806][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 163.716053][ T9298] loop0: detected capacity change from 0 to 128 [ 164.001987][ T325] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 164.070154][ T325] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 164.128319][ T325] EXT4-fs (loop3): This should not happen!! Data will be lost [ 164.128319][ T325] [ 164.146342][ T9361] tipc: Cannot configure node identity twice [ 164.159767][ T325] EXT4-fs (loop3): Total free blocks count 0 [ 164.178917][ T325] EXT4-fs (loop3): Free/Dirty block details [ 164.193408][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.213147][ T325] EXT4-fs (loop3): free_blocks=0 [ 164.236787][ T325] EXT4-fs (loop3): dirty_blocks=202 [ 164.253876][ T325] EXT4-fs (loop3): Block reservation details [ 164.388146][ T325] EXT4-fs (loop3): i_reserved_data_blocks=202 [ 164.410405][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 165.127321][ T9370] loop0: detected capacity change from 0 to 128 [ 165.136797][ T9370] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.151111][ T9370] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.346299][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 165.368504][ T9372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.391973][ T9374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1109'. [ 165.542475][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'. [ 165.558256][ T9379] loop5: detected capacity change from 0 to 8192 [ 165.584941][ T9391] FAULT_INJECTION: forcing a failure. [ 165.584941][ T9391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.598193][ T9391] CPU: 0 UID: 0 PID: 9391 Comm: syz.1.1114 Not tainted syzkaller #0 PREEMPT(full) [ 165.598218][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.598263][ T9391] Call Trace: [ 165.598269][ T9391] [ 165.598275][ T9391] __dump_stack+0x1d/0x30 [ 165.598324][ T9391] dump_stack_lvl+0x95/0xd0 [ 165.598344][ T9391] dump_stack+0x15/0x1b [ 165.598363][ T9391] should_fail_ex+0x263/0x280 [ 165.598388][ T9391] should_fail+0xb/0x20 [ 165.598408][ T9391] should_fail_usercopy+0x1a/0x20 [ 165.598476][ T9391] _copy_from_user+0x1c/0xb0 [ 165.598502][ T9391] ___sys_sendmsg+0xc1/0x1e0 [ 165.598543][ T9391] __x64_sys_sendmsg+0xd4/0x160 [ 165.598570][ T9391] x64_sys_call+0x194c/0x3020 [ 165.598597][ T9391] do_syscall_64+0x12c/0x370 [ 165.598660][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.598683][ T9391] RIP: 0033:0x7f2ff175c799 [ 165.598716][ T9391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.598733][ T9391] RSP: 002b:00007f2ff01b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.598751][ T9391] RAX: ffffffffffffffda RBX: 00007f2ff19d5fa0 RCX: 00007f2ff175c799 [ 165.598766][ T9391] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 165.598832][ T9391] RBP: 00007f2ff01b7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.598844][ T9391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.598884][ T9391] R13: 00007f2ff19d6038 R14: 00007f2ff19d5fa0 R15: 00007ffffc34a088 [ 165.598904][ T9391] [ 165.630785][ T9402] SET target dimension over the limit! [ 165.799038][ T9395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.944949][ T9405] ip6_vti0 speed is unknown, defaulting to 1000 [ 166.124112][ T9405] lo speed is unknown, defaulting to 1000 [ 166.439313][ T9481] loop1: detected capacity change from 0 to 512 [ 166.473875][ T9481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.499047][ T9481] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.531799][ T9481] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 4: comm syz.1.1126: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=253816, size=1024 fake=0 [ 166.553114][ T9481] EXT4-fs (loop1): Remounting filesystem read-only [ 166.689924][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.735853][ T28] audit: type=1400 audit(1772858002.768:1949): avc: denied { cpu } for pid=9500 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 166.797665][ T9492] loop3: detected capacity change from 0 to 512 [ 166.817755][ T28] audit: type=1400 audit(1772858002.848:1950): avc: denied { shutdown } for pid=9505 comm="syz.0.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.851390][ T9492] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.889625][ T9503] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 166.914124][ T9503] SELinux: failed to load policy [ 166.921674][ T9503] tipc: Cannot configure node identity twice [ 166.938340][ T9501] loop1: detected capacity change from 0 to 512 [ 166.945283][ T9501] EXT4-fs: Ignoring removed nobh option [ 166.952628][ T9501] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.965724][ T9501] EXT4-fs (loop1): 1 truncate cleaned up [ 166.971868][ T9501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.013781][ T9501] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1131'. [ 167.024353][ T9497] SELinux: ebitmap: truncated map [ 167.040134][ T9497] SELinux: failed to load policy [ 167.085753][ T9497] tipc: Cannot configure node identity twice [ 167.097026][ T28] audit: type=1400 audit(1772858003.038:1951): avc: denied { watch watch_reads } for pid=9500 comm="syz.1.1131" path="/220/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.140120][ T28] audit: type=1400 audit(1772858003.038:1952): avc: denied { link } for pid=9500 comm="syz.1.1131" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.196594][ T28] audit: type=1400 audit(1772858003.228:1953): avc: denied { recv } for pid=9436 comm="syz.5.1121" saddr=10.128.0.163 src=30036 daddr=10.128.0.143 dest=34322 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 167.232410][ T28] audit: type=1400 audit(1772858003.248:1954): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.259670][ T28] audit: type=1400 audit(1772858003.248:1955): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.266278][ T9512] netlink: 'syz.0.1135': attribute type 12 has an invalid length. [ 167.284012][ T28] audit: type=1400 audit(1772858003.248:1956): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.303492][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 167.318180][ T28] audit: type=1400 audit(1772858003.298:1957): avc: denied { prog_load } for pid=9511 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.346468][ T28] audit: type=1400 audit(1772858003.298:1958): avc: denied { bpf } for pid=9511 comm="syz.0.1135" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.416916][ T9520] xt_CONNSECMARK: invalid mode: 0 [ 167.500454][ T9520] xt_hashlimit: size too large, truncated to 1048576 [ 167.515956][ T9526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9526 comm=syz.5.1140 [ 167.606154][ T9534] loop2: detected capacity change from 0 to 512 [ 167.649869][ T9534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1143: bg 0: block 248: padding at end of block bitmap is not set [ 167.669992][ T9534] loop2: lost filesystem error report for type 5 error -117 [ 167.670161][ T9534] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1143: Failed to acquire dquot type 1 [ 167.688747][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 167.688773][ C0] EXT4-fs (loop2): last error at time 1772858003: ext4_validate_block_bitmap:441 [ 167.724462][ T9537] loop3: detected capacity change from 0 to 1024 [ 167.787789][ T9534] loop2: lost filesystem error report for type 5 error -117 [ 167.790806][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.807970][ T9534] EXT4-fs (loop2): 1 truncate cleaned up [ 167.820113][ T9534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.836586][ T9537] EXT4-fs: Ignoring removed orlov option [ 167.846126][ T9534] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.876440][ T9537] EXT4-fs (loop3): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 167.892376][ T9534] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 167.940018][ T9537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.954630][ T9550] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.968918][ T9550] bond2: (slave lo): Enslaving as an active interface with an up link [ 167.978215][ T9550] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 167.998317][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.012981][ T9556] FAULT_INJECTION: forcing a failure. [ 168.012981][ T9556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.013011][ T9550] syzkaller0: entered promiscuous mode [ 168.026149][ T9556] CPU: 0 UID: 0 PID: 9556 Comm: syz.0.1150 Not tainted syzkaller #0 PREEMPT(full) [ 168.026238][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.026251][ T9556] Call Trace: [ 168.026257][ T9556] [ 168.026265][ T9556] __dump_stack+0x1d/0x30 [ 168.026292][ T9556] dump_stack_lvl+0x95/0xd0 [ 168.026312][ T9556] dump_stack+0x15/0x1b [ 168.026333][ T9556] should_fail_ex+0x263/0x280 [ 168.026408][ T9556] should_fail+0xb/0x20 [ 168.026427][ T9556] should_fail_usercopy+0x1a/0x20 [ 168.026452][ T9556] _copy_to_user+0x20/0xa0 [ 168.026477][ T9556] simple_read_from_buffer+0xb5/0x130 [ 168.026510][ T9556] proc_fail_nth_read+0x10e/0x150 [ 168.026539][ T9556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.026575][ T9556] vfs_read+0x1ab/0x7f0 [ 168.026683][ T9556] ? __rcu_read_unlock+0x4e/0x70 [ 168.026769][ T9556] ? __fget_files+0x184/0x1c0 [ 168.026848][ T9556] ? mutex_lock+0x57/0x90 [ 168.026874][ T9556] ksys_read+0xdc/0x1a0 [ 168.026982][ T9556] __x64_sys_read+0x40/0x50 [ 168.027109][ T9556] x64_sys_call+0x2886/0x3020 [ 168.027133][ T9556] do_syscall_64+0x12c/0x370 [ 168.027154][ T9556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.027175][ T9556] RIP: 0033:0x7f517578cfce [ 168.027191][ T9556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.027272][ T9556] RSP: 002b:00007f5174226fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.027292][ T9556] RAX: ffffffffffffffda RBX: 00007f51742276c0 RCX: 00007f517578cfce [ 168.027306][ T9556] RDX: 000000000000000f RSI: 00007f51742270a0 RDI: 0000000000000005 [ 168.027318][ T9556] RBP: 00007f5174227090 R08: 0000000000000000 R09: 0000000000000000 [ 168.027331][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.027344][ T9556] R13: 00007f5175a46038 R14: 00007f5175a45fa0 R15: 00007ffe8ee6f398 [ 168.027400][ T9556] [ 168.223846][ T9550] syzkaller0: entered allmulticast mode [ 168.351445][ T9569] loop2: detected capacity change from 0 to 128 [ 168.434125][ T9571] FAULT_INJECTION: forcing a failure. [ 168.434125][ T9571] name failslab, interval 1, probability 0, space 0, times 0 [ 168.447073][ T9569] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 168.455094][ T9571] CPU: 1 UID: 0 PID: 9571 Comm: syz.0.1154 Not tainted syzkaller #0 PREEMPT(full) [ 168.455172][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.455182][ T9571] Call Trace: [ 168.455262][ T9571] [ 168.455270][ T9571] __dump_stack+0x1d/0x30 [ 168.455297][ T9571] dump_stack_lvl+0x95/0xd0 [ 168.455398][ T9571] dump_stack+0x15/0x1b [ 168.455421][ T9571] should_fail_ex+0x263/0x280 [ 168.455445][ T9571] should_failslab+0x8c/0xb0 [ 168.455519][ T9571] kmem_cache_alloc_noprof+0x66/0x400 [ 168.455602][ T9571] ? skb_clone+0x151/0x1f0 [ 168.455686][ T9571] skb_clone+0x151/0x1f0 [ 168.455788][ T9571] __netlink_deliver_tap+0x2c9/0x500 [ 168.455817][ T9571] netlink_unicast+0x66b/0x690 [ 168.455841][ T9571] netlink_sendmsg+0x5c8/0x6f0 [ 168.455937][ T9571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.456039][ T9571] sock_write_iter+0x2e8/0x320 [ 168.456101][ T9571] do_iter_readv_writev+0x4fd/0x5a0 [ 168.456122][ T9571] vfs_writev+0x2e1/0x900 [ 168.456265][ T9571] do_writev+0xe9/0x210 [ 168.456290][ T9571] __x64_sys_writev+0x45/0x50 [ 168.456309][ T9571] x64_sys_call+0x1c0c/0x3020 [ 168.456335][ T9571] do_syscall_64+0x12c/0x370 [ 168.456420][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.456444][ T9571] RIP: 0033:0x7f51757cc799 [ 168.456461][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.456478][ T9571] RSP: 002b:00007f5174227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 168.456554][ T9571] RAX: ffffffffffffffda RBX: 00007f5175a45fa0 RCX: 00007f51757cc799 [ 168.456569][ T9571] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 168.456583][ T9571] RBP: 00007f5174227090 R08: 0000000000000000 R09: 0000000000000000 [ 168.456672][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.456683][ T9571] R13: 00007f5175a46038 R14: 00007f5175a45fa0 R15: 00007ffe8ee6f398 [ 168.456698][ T9571] [ 168.457390][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.581333][ T9548] tipc: Cannot configure node identity twice [ 168.670769][ T9580] loop2: detected capacity change from 0 to 1024 [ 168.724932][ T9580] EXT4-fs: Ignoring removed orlov option [ 168.726464][ T9585] loop0: detected capacity change from 0 to 512 [ 168.844905][ T9585] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1160: bg 0: block 248: padding at end of block bitmap is not set [ 168.860315][ T9580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.890394][ T9585] loop0: lost filesystem error report for type 5 error -117 [ 168.890599][ T9585] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1160: Failed to acquire dquot type 1 [ 168.909304][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 168.909322][ C0] EXT4-fs (loop0): last error at time 1772858004: ext4_validate_block_bitmap:441 [ 168.957229][ T35] kernel read not supported for file / (pid: 35 comm: kworker/1:1) [ 168.990799][ T9593] loop3: detected capacity change from 0 to 128 [ 169.003112][ T9593] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.017144][ T9593] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.100035][ T9585] loop0: lost filesystem error report for type 5 error -117 [ 169.108622][ T9585] EXT4-fs (loop0): 1 truncate cleaned up [ 169.198780][ T9585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.216831][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 169.301549][ T9585] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.313307][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.334746][ T9595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.376843][ T9585] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 169.420454][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.481781][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 169.530935][ T9603] loop0: detected capacity change from 0 to 128 [ 169.656054][ T9615] loop1: detected capacity change from 0 to 512 [ 169.670056][ T9615] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 169.689543][ T9618] SELinux: ebitmap: truncated map [ 169.706510][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 169.716129][ T9618] SELinux: failed to load policy [ 169.740851][ T9610] tipc: Cannot configure node identity twice [ 170.247963][ T9621] loop3: detected capacity change from 0 to 128 [ 170.318413][ T9609] netlink: 'syz.2.1167': attribute type 11 has an invalid length. [ 170.380876][ T9630] FAULT_INJECTION: forcing a failure. [ 170.380876][ T9630] name failslab, interval 1, probability 0, space 0, times 0 [ 170.393715][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.5.1170 Not tainted syzkaller #0 PREEMPT(full) [ 170.393743][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.393756][ T9630] Call Trace: [ 170.393762][ T9630] [ 170.393769][ T9630] __dump_stack+0x1d/0x30 [ 170.393793][ T9630] dump_stack_lvl+0x95/0xd0 [ 170.393816][ T9630] dump_stack+0x15/0x1b [ 170.393926][ T9630] should_fail_ex+0x263/0x280 [ 170.393951][ T9630] ? __se_sys_memfd_create+0x1df/0x3b0 [ 170.393984][ T9630] should_failslab+0x8c/0xb0 [ 170.394004][ T9630] __kmalloc_cache_noprof+0x5f/0x410 [ 170.394059][ T9630] ? fput+0x8f/0xc0 [ 170.394079][ T9630] __se_sys_memfd_create+0x1df/0x3b0 [ 170.394112][ T9630] __x64_sys_memfd_create+0x31/0x40 [ 170.394206][ T9630] x64_sys_call+0x1f22/0x3020 [ 170.394232][ T9630] do_syscall_64+0x12c/0x370 [ 170.394254][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.394287][ T9630] RIP: 0033:0x7f0eedc5c799 [ 170.394383][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.394401][ T9630] RSP: 002b:00007f0eec6aee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 170.394421][ T9630] RAX: ffffffffffffffda RBX: 0000000000000548 RCX: 00007f0eedc5c799 [ 170.394436][ T9630] RDX: 00007f0eec6aeee0 RSI: 0000000000000000 RDI: 00007f0eedcf2db9 [ 170.394450][ T9630] RBP: 0000200000001300 R08: 00000000ffffffff R09: 0000000000000000 [ 170.394501][ T9630] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 170.394515][ T9630] R13: 00007f0eec6aeee0 R14: 00007f0eec6aeea0 R15: 0000200000000080 [ 170.394534][ T9630] [ 170.865830][ T9638] ip6_vti0 speed is unknown, defaulting to 1000 [ 170.923763][ T9638] lo speed is unknown, defaulting to 1000 [ 171.114048][ T9638] nfs: Unknown parameter ' [ 171.114048][ T9638] ' [ 171.264147][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 171.281388][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1174'. [ 171.309753][ T9645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.336588][ T9637] ip6_vti0 speed is unknown, defaulting to 1000 [ 171.354486][ T9649] loop0: detected capacity change from 0 to 512 [ 171.371664][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.379488][ T9649] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 171.390804][ T9650] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.439641][ T9650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.487651][ T9649] EXT4-fs (loop0): orphan cleanup on readonly fs [ 171.525519][ T9649] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.1177: Block bitmap for bg 0 marked uninitialized [ 171.563749][ T9637] lo speed is unknown, defaulting to 1000 [ 171.680587][ T9649] loop0: lost filesystem error report for type 5 error -117 [ 171.680786][ T9649] EXT4-fs (loop0): Remounting filesystem read-only [ 171.694666][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 171.694686][ C0] EXT4-fs (loop0): initial error at time 1772858007: ext4_read_block_bitmap_nowait:517 [ 171.694706][ C0] EXT4-fs (loop0): last error at time 1772858007: ext4_read_block_bitmap_nowait:517 [ 171.739317][ T9652] ip6_vti0 speed is unknown, defaulting to 1000 [ 171.814601][ T9649] EXT4-fs (loop0): 1 orphan inode deleted [ 171.825328][ T9649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.842350][ T9658] loop5: detected capacity change from 0 to 256 [ 171.869940][ T9658] FAT-fs (loop5): Directory bread(block 64) failed [ 171.876492][ T9658] FAT-fs (loop5): Directory bread(block 65) failed [ 171.883201][ T9658] FAT-fs (loop5): Directory bread(block 66) failed [ 171.889866][ T9658] FAT-fs (loop5): Directory bread(block 67) failed [ 171.896571][ T9658] FAT-fs (loop5): Directory bread(block 68) failed [ 171.903127][ T9658] FAT-fs (loop5): Directory bread(block 69) failed [ 171.909732][ T9658] FAT-fs (loop5): Directory bread(block 70) failed [ 171.916322][ T9658] FAT-fs (loop5): Directory bread(block 71) failed [ 171.922969][ T9658] FAT-fs (loop5): Directory bread(block 72) failed [ 171.929489][ T9658] FAT-fs (loop5): Directory bread(block 73) failed [ 172.023988][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.065858][ T9652] lo speed is unknown, defaulting to 1000 [ 172.319427][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 172.319441][ T28] audit: type=1400 audit(1772858008.348:2060): avc: denied { create } for pid=9665 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.387153][ T28] audit: type=1400 audit(1772858008.358:2061): avc: denied { write } for pid=9665 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.573930][ T9680] loop5: detected capacity change from 0 to 1024 [ 172.591780][ T9680] ext4: Unknown parameter 'nouser_xattr' [ 172.616364][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1183'. [ 172.629650][ T28] audit: type=1400 audit(1772858008.648:2062): avc: denied { connect } for pid=9679 comm="syz.5.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.670222][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1183'. [ 172.701417][ T9671] SELinux: ebitmap: truncated map [ 172.730495][ T9671] SELinux: failed to load policy [ 172.771526][ T9671] tipc: Cannot configure node identity twice [ 172.787605][ T9688] SET target dimension over the limit! [ 172.872996][ T9703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1186'. [ 172.944512][ T9710] loop3: detected capacity change from 0 to 2048 [ 172.978612][ T9710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.012007][ T9710] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.030191][ T28] audit: type=1400 audit(1772858009.068:2063): avc: denied { append } for pid=9709 comm="syz.3.1187" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.049324][ T9710] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1187: bg 0: block 345: padding at end of block bitmap is not set [ 173.095347][ T9710] EXT4-fs (loop3): Remounting filesystem read-only [ 173.195169][ T9753] loop1: detected capacity change from 0 to 512 [ 173.240331][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.287130][ T28] audit: type=1400 audit(1772858009.318:2064): avc: denied { setopt } for pid=9763 comm="syz.3.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.318445][ T9753] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1189: bg 0: block 248: padding at end of block bitmap is not set [ 173.351151][ T9760] ip6_vti0 speed is unknown, defaulting to 1000 [ 173.370341][ T9766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.392627][ T9766] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.403202][ T9753] loop1: lost filesystem error report for type 5 error -117 [ 173.403368][ T9753] Quota error (device loop1): write_blk: dquota write failed [ 173.410839][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 173.410856][ C0] EXT4-fs (loop1): last error at time 1772858009: ext4_validate_block_bitmap:441 [ 173.459475][ T9753] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 173.476039][ T9766] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1193'. [ 173.485114][ T28] audit: type=1400 audit(1772858009.488:2065): avc: denied { read append open } for pid=9765 comm="syz.2.1193" path="/239/bus/memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 173.501377][ T9760] lo speed is unknown, defaulting to 1000 [ 173.539734][ T9753] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1189: Failed to acquire dquot type 1 [ 173.552564][ T9753] loop1: lost filesystem error report for type 5 error -117 [ 173.553084][ T9753] EXT4-fs (loop1): 1 truncate cleaned up [ 173.573245][ T28] audit: type=1400 audit(1772858009.608:2066): avc: denied { create } for pid=9765 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.595245][ T9753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.610928][ T9766] siw: device registration error -23 [ 173.618070][ T9766] smc: removing ib device syz2 [ 173.622954][ T28] audit: type=1400 audit(1772858009.628:2067): avc: denied { write } for pid=9765 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.643403][ T9753] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.882515][ T9753] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 173.893976][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.945076][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'. [ 173.969396][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.023108][ T9777] set_capacity_and_notify: 1 callbacks suppressed [ 174.023152][ T9777] loop5: detected capacity change from 0 to 128 [ 174.047672][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 174.111564][ T9783] loop2: detected capacity change from 0 to 128 [ 174.212691][ T9796] loop0: detected capacity change from 0 to 8192 [ 174.265797][ T9796] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.465873][ T9826] SET target dimension over the limit! [ 174.547261][ T9777] ================================================================== [ 174.555374][ T9777] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 174.562410][ T9777] [ 174.564732][ T9777] read-write to 0xffff888237c1b898 of 2 bytes by interrupt on cpu 0: [ 174.572800][ T9777] hrtimer_interrupt+0x6b9/0x810 [ 174.577749][ T9777] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 174.583677][ T9777] sysvec_apic_timer_interrupt+0x6f/0x80 [ 174.589332][ T9777] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 174.595330][ T9777] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 174.600975][ T9777] uart_write+0x266/0x530 [ 174.605310][ T9777] n_tty_write+0x856/0xc20 [ 174.609846][ T9777] file_tty_write+0x378/0x690 [ 174.614614][ T9777] tty_write+0x25/0x30 [ 174.618693][ T9777] iter_file_splice_write+0x6c4/0xa80 [ 174.624061][ T9777] direct_splice_actor+0x156/0x2a0 [ 174.629184][ T9777] splice_direct_to_actor+0x311/0x670 [ 174.634567][ T9777] do_splice_direct+0x119/0x1a0 [ 174.639522][ T9777] do_sendfile+0x382/0x650 [ 174.643950][ T9777] __x64_sys_sendfile64+0x105/0x150 [ 174.649252][ T9777] x64_sys_call+0x2dc4/0x3020 [ 174.653940][ T9777] do_syscall_64+0x12c/0x370 [ 174.658537][ T9777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.664439][ T9777] [ 174.666934][ T9777] read to 0xffff888237c1b898 of 2 bytes by task 9777 on cpu 1: [ 174.674484][ T9777] print_cpu+0x35b/0x660 [ 174.678737][ T9777] timer_list_show+0x107/0x170 [ 174.683512][ T9777] seq_read_iter+0x31e/0x940 [ 174.688114][ T9777] proc_reg_read_iter+0x110/0x180 [ 174.693162][ T9777] copy_splice_read+0x471/0x6c0 [ 174.698017][ T9777] splice_direct_to_actor+0x26e/0x670 [ 174.703397][ T9777] do_splice_direct+0x119/0x1a0 [ 174.708267][ T9777] do_sendfile+0x382/0x650 [ 174.712697][ T9777] __x64_sys_sendfile64+0x105/0x150 [ 174.717913][ T9777] x64_sys_call+0x2dc4/0x3020 [ 174.722617][ T9777] do_syscall_64+0x12c/0x370 [ 174.727214][ T9777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.733115][ T9777] [ 174.735449][ T9777] value changed: 0xea79 -> 0xea7a [ 174.740468][ T9777] [ 174.742787][ T9777] Reported by Kernel Concurrency Sanitizer on: [ 174.748939][ T9777] CPU: 1 UID: 0 PID: 9777 Comm: syz.5.1196 Not tainted syzkaller #0 PREEMPT(full) [ 174.758229][ T9777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.768306][ T9777] ==================================================================