last executing test programs: 8m26.411122024s ago: executing program 0 (id=17): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = semget$private(0x0, 0x4000000009, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) semop(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) pipe(&(0x7f0000002680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) 8m22.851641425s ago: executing program 0 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x2c}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x111081, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) 8m21.716017551s ago: executing program 0 (id=31): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x206a02, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004000}, 0x8000) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(r2, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 8m19.083696953s ago: executing program 0 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x41, @mcast2, 0x41}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000401f000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x111081, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) 8m17.731717524s ago: executing program 0 (id=41): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) 8m16.2742164s ago: executing program 0 (id=46): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x8, 0x4, 0x4, 0x7, 0x400}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x42, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) bind$qrtr(r2, &(0x7f00000001c0)={0x2a, 0x1, 0x8000}, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000013, 0x4c032, 0xffffffffffffffff, 0x0) 8m0.857186121s ago: executing program 32 (id=46): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x8, 0x4, 0x4, 0x7, 0x400}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x42, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) bind$qrtr(r2, &(0x7f00000001c0)={0x2a, 0x1, 0x8000}, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000013, 0x4c032, 0xffffffffffffffff, 0x0) 4m55.709601636s ago: executing program 3 (id=853): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 4m55.682526197s ago: executing program 3 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x41, @mcast2, 0x41}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000401f000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x111081, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) 4m54.745561266s ago: executing program 3 (id=860): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000380)=0x2004, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40, 0x2}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@cipso={0x86, 0x6, 0x1}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000029}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0xfffffeec}, 0xae, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m53.848682533s ago: executing program 5 (id=867): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x81, 0x0, 0x0, 0x0, 0x9, 0xb00d8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x9, 0x2, 0x0, 0x5, 0x0, 0x80000001}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbce}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) tkill(0x0, 0x7) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x2, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000c80)=ANY=[], 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b700000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1016, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8000000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r6, 0x9}, 0x8) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) 4m53.765578086s ago: executing program 3 (id=868): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 4m52.464970916s ago: executing program 3 (id=872): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x81, 0x0, 0x0, 0x0, 0x9, 0xb00d8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x9, 0x2, 0x0, 0x5, 0x0, 0x80000001}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbce}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x2, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r4, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b700000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1016, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) wait4(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x9}, 0x8) capget(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000300)={0x7, 0x9, 0x9, 0x4003fc, 0xff9a, 0x3}) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) 4m52.36859171s ago: executing program 5 (id=873): getrandom(0x0, 0x0, 0xa9bf455a49f07f52) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) socket$kcm(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001100), &(0x7f0000001180)=0x68) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x164) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) write$UHID_INPUT(r4, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 4m51.299623733s ago: executing program 3 (id=876): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40, 0x2}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@cipso={0x86, 0x6, 0x1}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000029}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0xfffffeec}, 0xae, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m51.194166036s ago: executing program 33 (id=876): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40, 0x2}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@cipso={0x86, 0x6, 0x1}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000029}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0xfffffeec}, 0xae, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m51.163813057s ago: executing program 5 (id=878): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0x41a0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000004900)=""/4075, 0xfeb}, {&(0x7f0000003880)=""/4171, 0x104b}], 0x2}, 0x10002) 4m51.128839178s ago: executing program 5 (id=879): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@jqfmt_vfsv1}, {@nodiscard}, {@noquota}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) open(0x0, 0x141042, 0x20) 4m50.746084469s ago: executing program 5 (id=880): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 4m50.07567271s ago: executing program 5 (id=885): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d228186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x4}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16], 0x0) uname(&(0x7f0000000080)=""/209) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r8}, 0x20) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) 4m50.050449461s ago: executing program 34 (id=885): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x4}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16], 0x0) uname(&(0x7f0000000080)=""/209) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r8}, 0x20) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) 2m18.596428035s ago: executing program 4 (id=1986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000001740)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @mcast2}}}}}}, 0x0) 2m18.536813347s ago: executing program 4 (id=1987): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010021000000240002801400018008000100e000000108000200e00000010c0002800500010000000000007c80358f5b83"], 0x5c}}, 0x0) 2m18.334855553s ago: executing program 4 (id=1988): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x164, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000007000000000000000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000100850000000c000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x5, 0x0, 0x0, 0xf8, 0x3, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x89ff]}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$tipc(0x1e, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r4 = socket$netlink(0x10, 0x3, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m18.176763018s ago: executing program 4 (id=1991): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@jqfmt_vfsv1}, {@nodiscard}, {@noquota}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) pipe2(&(0x7f0000000040), 0x0) open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x20) 2m17.815695159s ago: executing program 4 (id=1993): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x25dfdbff, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 2m17.419768092s ago: executing program 4 (id=1997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000001740)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @mcast2}}}}}}, 0x0) 2m17.316320735s ago: executing program 35 (id=1997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000001740)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @mcast2}}}}}}, 0x0) 2m15.562235779s ago: executing program 6 (id=2011): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x100) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x100000000000001, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x8f40, 0x0, 0x99768b89776078f8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002"], 0x428}}, 0x40088) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3e, &(0x7f0000001180)=""/4096, &(0x7f0000002180)=0x1000) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000380)={&(0x7f0000000300)=""/82, 0x52}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 2m15.240920669s ago: executing program 6 (id=2014): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x4, r0, 0x0, 0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x6883, 0x7, 0x7) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) socket$inet6(0xa, 0x3, 0x3c) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000144035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x40084) close(0x3) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) 2m14.830165082s ago: executing program 6 (id=2015): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = semget$private(0x0, 0x4000000009, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) semop(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) pipe(&(0x7f0000002680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m13.831994573s ago: executing program 6 (id=2020): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) getdents(r0, 0x0, 0x0) 2m13.644773498s ago: executing program 6 (id=2023): getrandom(0x0, 0x0, 0xa9bf455a49f07f52) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) socket$kcm(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019c80)=""/102400, 0x19000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) mkdir(0x0, 0x164) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) write$UHID_INPUT(r3, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 2m13.343849478s ago: executing program 6 (id=2026): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x41, @mcast2, 0x41}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000401f000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x111081, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) 2m13.30383534s ago: executing program 36 (id=2026): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x41, @mcast2, 0x41}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000401f000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x111081, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) 5.001449766s ago: executing program 7 (id=3235): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000006f, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x2a399462846ad0b, 0x4, 0x7, 0x4, 0x6, 0x7ffe, 0x8000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) acct(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x4008054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xb0, 0xd0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getdents64(r0, &(0x7f0000000240)=""/164, 0xa4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000141401002abd7000fedb73797a3100000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = memfd_create(0x0, 0x5) fallocate(r2, 0x10, 0x0, 0x80) syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r3, 0x0, 0x0) 4.409255604s ago: executing program 7 (id=3239): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) socket$kcm(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mkdir(0x0, 0x164) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=0x2710], 0x48}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 3.117036634s ago: executing program 8 (id=3249): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000006f, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x2a399462846ad0b, 0x4, 0x7, 0x4, 0x6, 0x7ffe, 0x8000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) acct(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x4008054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xb0, 0xd0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getdents64(r0, &(0x7f0000000240)=""/164, 0xa4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000141401002abd7000fedb73797a3100000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = memfd_create(0x0, 0x5) fallocate(r2, 0x10, 0x0, 0x80) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r3, 0x0, 0x0) 2.618658599s ago: executing program 8 (id=3251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x1, 0x2, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1001a}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x38}}, 0x0) 2.61810373s ago: executing program 7 (id=3252): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x28400) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000180)=@raw=[@generic={0xf, 0x6, 0x8, 0x6, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @jmp={0x5, 0x0, 0xb, 0x8, 0x7, 0x10, 0xfffffffffffffffc}, @generic={0x69, 0x8, 0x2, 0xfffd, 0xffff}, @alu={0x7, 0x0, 0xb, 0x0, 0xa, 0xffffffffffffffc9, 0x8}, @alu={0x7, 0x0, 0x6, 0x3, 0x7, 0x10}], &(0x7f0000000240)='syzkaller\x00', 0x400, 0x1f, &(0x7f0000000280)=""/31, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffff00}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x91, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r2 = gettid() (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42400, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e040002"], 0x10}}, 0x24004010) (async) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) (async) capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000080)={0x6, 0x4000006, 0x0, 0x8066, 0xfffffbff, 0x2}) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xd, 0xffffefff}, {0x6, 0x0, 0x42}]}, 0x10) 2.60624191s ago: executing program 8 (id=3253): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000006f, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x2a399462846ad0b, 0x4, 0x7, 0x4, 0x6, 0x7ffe, 0x8000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) acct(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x4008054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xb0, 0xd0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) memfd_create(0x0, 0x5) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x44000160) 2.535733752s ago: executing program 2 (id=3254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="0503222ed3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.535597422s ago: executing program 7 (id=3255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="0503222ed3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 1) 2.510132483s ago: executing program 8 (id=3256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x5) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e24, @remote}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x17}}], 0x1, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000012c0)={@broadcast, @loopback}, &(0x7f0000001640)=0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2, &(0x7f00000014c0)=""/45, 0x2d}}], 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000001280)={0x30000010}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 2.26646408s ago: executing program 1 (id=3257): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x8, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xf8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000100), 0x0, 0x7e0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(&(0x7f00000011c0)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x8402, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f696e74722c0051ae108e05c79850f4e955c18360698420b51d4850217f4967d6"]) r2 = socket(0x1a, 0x1, 0xc) sendmsg$nl_route_sched(r2, 0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000008020900000110005000000001400090008"], 0x30}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'nicvf0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x11}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000], 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x21, 0x9, 0x6, 0x10}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffffff, 0xff, 0x100fffe00, 0xff000000], 0x4e20, 0x4e20, 0x4e21, 0x4e24, 0xdb, 0x8, 0x8, 0x0, 0x99}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r8, &(0x7f0000000580)=[{&(0x7f0000000bc0)="d18a87", 0x3}], 0x1) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r10 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="00da000000000000"], &(0x7f00000004c0)='GPL\x00', 0x7fff, 0x72, &(0x7f0000000500)=""/114, 0x41000, 0x39, '\x00', r7, @fallback=0x37, r9, 0x8, &(0x7f0000000600)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xfff}, 0x10, 0x0, r10, 0x6, &(0x7f00000006c0)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r5, r5], &(0x7f0000000700)=[{0x5, 0x5, 0xf, 0x6}, {0x2, 0x4, 0x3, 0x7}, {0x2, 0x5, 0x2, 0x6}, {0x5, 0x5, 0xa, 0x8}, {0x1, 0x2, 0x3, 0xa}, {0x5, 0x1, 0x4, 0x7}], 0x10, 0x7}, 0x94) fsopen(&(0x7f0000000440)='ext2\x00', 0x1) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.202814302s ago: executing program 8 (id=3258): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x106f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) open$dir(&(0x7f0000000300)='./file0\x00', 0xe42, 0x88) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0x200}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dffbfb, 0x1010000}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 2.117377505s ago: executing program 7 (id=3260): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x20004f) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a010100"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x3) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.050339547s ago: executing program 2 (id=3262): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) 1.982164319s ago: executing program 2 (id=3263): socket$nl_netfilter(0x10, 0x3, 0xc) getpgid(0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) open$dir(&(0x7f0000000300)='./file0\x00', 0xe42, 0x88) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0x200}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dffbfb, 0x1010000}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 1.871349873s ago: executing program 1 (id=3265): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000009356c65d2bdfa53a480800000061121c000000000095000000000000000800cdbc000000003c2c0fd3fa679655ce86fcae614cd32720e124f7bd4824773ccc562b2a9b463f242efc87"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x600, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) recvmsg$unix(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.258588442s ago: executing program 8 (id=3266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x1e, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f0000000200)={0x5, 0xffffffeffffffff5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) gettid() socket$phonet(0x23, 0x2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = open(0x0, 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000340)={0xffffff00, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x88) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000034) munlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) socket$inet6_sctp(0xa, 0x801, 0x84) 1.111088376s ago: executing program 2 (id=3267): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) (fail_nth: 2) 1.049630618s ago: executing program 7 (id=3269): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002020000000000000002000005000000000000000001"], &(0x7f0000001f40)=""/4089, 0x4a, 0xff9, 0xa}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff2abd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468001e00000440028008001300", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) 959.751891ms ago: executing program 1 (id=3270): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000845}, 0xc0) 871.194314ms ago: executing program 1 (id=3271): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r1, &(0x7f0000000240), 0x0}, 0x20) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x45) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xfffffffffffffffd, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2}, 0x4) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 848.089524ms ago: executing program 9 (id=3272): unshare(0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac838", 0x27, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="8967b626b2b1eb6eaaaaaaaa08060001080006"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 711.763509ms ago: executing program 9 (id=3273): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) 711.547589ms ago: executing program 9 (id=3274): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) 703.642889ms ago: executing program 1 (id=3275): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r1, 0x2000000) pread64(r1, &(0x7f0000000180)=""/84, 0x54, 0x9) r2 = socket(0xa, 0x3, 0xfb) r3 = socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000a40)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\x1cKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\v\x15\xa8\f1\xa0\xfb\x87M\xfb\xd3\xd7d\xb2\x90\xfer\fu\xb9Y5\x9f\x17\xab\xbc\x01>\x87\xc6\x8bh\xd7\x16\xd9\xa9\xd5\xf2l\xb0\x11J\xa5\a\x8c\x02\xacR+\x15\x9b\x95-\xbdL\xf3\x90\x8aP(\xdd\x15\xe0\x89+\xedz_\xae\xf8\x98B;\xcc,\xfb\x7f\x00]\x95\\\xb5\x8c01g\xce\xba\x13\x7f\xdc\x82N\xad\xeft\x01&\x88\xd4\x90\b\xf8\x81\a\x9c\xb8p\xf7\xa9\xc1;\xd2v\x87#\xb4\x80\x9b\x8f\"\xc1\x1e\x12\xa8\xc8\xaf\xf8\xb2p\x12\xd2\xabU<\xdeV\x88\x9f\xd2xC:3\x96\xb7[C\xe8n\xbf\x11v\xd9AM\xdb\x18\xd2\x84\xa3FixF\xb0\x10\x89j8=\xf0\xdc\xaa\xbd\xd54J\x05\x05\xc1gQ\xe7Y\xd0X,\xe65\xbb9\xc4\xc4\x87|\xb1\xf8dq\xdf~\xd2\x8d\xdbN\xfe\xcd\x1d\x86\t_\xbbU\x86\x1af\xc8,\xeeE\xbd1\xdb\xa4\xc8\x16p\xbd\xc7\xbd\xe8\x84G\x13 *~\x1b', 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @private0}}}, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0xc0080c1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES16=r5, @ANYBLOB="010025bc7000fbdbdf25250000000c0099000600000037000000"], 0x20}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r4) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYRES8], 0x38}}, 0x4000) getdents(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f000400000008000700057f55f2d19ce2c0aee3cf51cd3ea60281547e501e8e49ef9d5eef339fa5e6403318af33b5e6da87e5b3f398dc34c5c04d20f7c2bc8e304cc4f91aba3e0dc11b6577083bdae10489fdbdc43a5e95b95cfd8ba6040a8c479b76444ed53e55ff130f6d5e509698ee08b41167bde34168bbab81115afc83186e8be9edb91650c04f1577e318044113d65a6fa3312ba7c490c15101301d5d854f973c7e242366"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000845}, 0xc0) 399.998719ms ago: executing program 2 (id=3276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="0503222ed3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 315.64391ms ago: executing program 9 (id=3277): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x8, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xf8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000008020900000110005000000001400090008"], 0x30}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'nicvf0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x11}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000], 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x21, 0x9, 0x6, 0x10}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffffff, 0xff, 0x100fffe00, 0xff000000], 0x4e20, 0x4e20, 0x4e21, 0x4e24, 0xdb, 0x8, 0x8, 0x0, 0x99}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 252.588503ms ago: executing program 9 (id=3278): socket(0x2, 0x80805, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711223000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x800) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x80480, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0xfe, 0x480, &(0x7f0000000180)="$eJzs3M9vFFUcAPDvzLag/CoiovJDqmhs/NHSgsrBi0aPJiZywItJbQtBFmpoSYQQrcbg0ZB4N56M0b/Ak16MejLxqndDQpSYgB50zezMLt3SXdiy2y3u55NsebPzdt77zps382YeuwH0reHsTxKxKSJ+iYihfLExw3D+z7Ur56f+unJ+KolK5bXfk2q+q1fOTx0+W6mqfW5jsc2RNCL9MCkKaTR39tyJyXJ55nSxPDZ/8u2xubPnnj5+cvLYzLGZUxOHDh08MP7csxPPdCTOLK6rO9+d3Z0MvH7xlakjF9/84auBiNixJ1+fxdGRgtKN9eRwFvgf+b5Zmu2xjhS2dmxelE4GelgR2lKKiKy5Bqv9fyhKcb3xhuLlD3paOaCrsmvT+uarFyrA/1gSva4B0Bu1C312/1t7rdLQY024/EJ+A5TFfa145WsGIi3yDHax/Aci4sjC359mryja4Z9NXSwQAOh732Tjn6eWG/+lsWNRvi3FHMrWiLgnIrZFxL0RsT0i7ouo5r2/GM+0I58aKtWXbxx/ppdWHNwtyMZ/zxdzW43jv3z0V6lU/i0VS5ur8Q8mR4+XZ/YX+2QkBtdny+Mtyvj2pZ8/brZueNH4L3tl5dfGgkU9Lg0seUA3PTk/2alB6eX3I3YOLBd/Up8JSCLiwYjY2d6mt9QSx5/4YnezTDePv4UOzDNVPot4PG//hVgSf03Sen5y7K4oz+wfqx0VN/rxpwuvNiv/tuLvgKz9NzQe/0tyDP2ZLJ6vnWu/jAu/ftT0nnKlx/+65HB1znpd8d47k/Pzp8evt1nD+xPXP1tbzvPn8Y/sW77/bys+k211V0RkB/GeiHgoIvYWdX84Ih6JiH0t4v/+xUffWnn83ZXFP73s+a++L7c2tn/7idKJ775uVv6ttf/BamqkeKd6/ruJ5tWJ8kx2Wl/x0QwAAAB3njQiNkWSjtbTaTo6mv8f/u2xIS3Pzs0/eXT2zKnp/DsCW2MwrT3pGiqeh2Z32+PJQrHF/PnoRPGsuPa89EDx3PiT0t3V5dGp2fJ0j2OHfrexSf/P/Fbqde2ArvN9LehfS/t/2qN6AKvP9R/6l/4P/Uv/h/61qP9/eebCrmriverfvfUVy84FtPjlEODO4PoP/Uv/h/6l/0P/0v+hL93O9/rXdmLd2qhG+4nPB9dENVokShFxLtJWed6IVa9Y9Hq3dCWRtPwxiy4men1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA//9RqPWi") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2277e77d6087cdc2}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 112.343447ms ago: executing program 1 (id=3279): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x20004f) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a010100"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x3) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 3.57189ms ago: executing program 9 (id=3280): shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x3, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r4, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x19, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x211}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000140)=0x30) socket(0x2, 0x3, 0xff) setresuid(0x0, 0xee00, 0xee01) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}}, 0x24004000) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) 0s ago: executing program 2 (id=3281): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000845}, 0xc0) kernel console output (not intermixed with test programs): d values 0 - 2147483647 [ 513.745319][T14283] bond1 (unregistering): Released all slaves [ 513.771852][T14291] bond1: option arp_interval: invalid value (18446744073480273669) [ 513.779814][T14291] bond1: option arp_interval: allowed values 0 - 2147483647 [ 513.789537][T14291] bond1 (unregistering): Released all slaves [ 513.797915][T10592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.854064][T14302] loop1: detected capacity change from 0 to 2048 [ 513.888613][T14302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.894898][T14302] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 513.894966][T14302] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 513.894999][T14302] EXT4-fs (loop1): This should not happen!! Data will be lost [ 513.894999][T14302] [ 513.895014][T14302] EXT4-fs (loop1): Total free blocks count 0 [ 513.895028][T14302] EXT4-fs (loop1): Free/Dirty block details [ 513.895041][T14302] EXT4-fs (loop1): free_blocks=2415919104 [ 513.895055][T14302] EXT4-fs (loop1): dirty_blocks=64 [ 513.895068][T14302] EXT4-fs (loop1): Block reservation details [ 513.895080][T14302] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 513.908250][T14302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2988'. [ 514.113613][T14309] bond1: option arp_interval: invalid value (18446744073480273669) [ 514.121780][T14309] bond1: option arp_interval: allowed values 0 - 2147483647 [ 514.206275][T14309] bond1 (unregistering): Released all slaves [ 514.512534][ T3467] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 514.515637][T13710] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 514.566031][T14324] loop1: detected capacity change from 0 to 512 [ 514.568142][T14324] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 514.574172][T14324] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2994: invalid indirect mapped block 4294967295 (level 0) [ 514.574333][T14324] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 514.574598][T14324] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2994: invalid indirect mapped block 4294967295 (level 1) [ 514.574635][T14324] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 514.575318][T14324] EXT4-fs (loop1): 1 orphan inode deleted [ 514.575334][T14324] EXT4-fs (loop1): 1 truncate cleaned up [ 514.581119][T14324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.749594][T13710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.839761][T14329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2996'. [ 514.851358][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2998'. [ 514.966920][T14331] nfs: Deprecated parameter 'nointr' [ 515.053146][T14298] program syz.8.2985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.182872][T14345] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 515.199335][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.200528][T14345] EXT4-fs (loop8): 1 truncate cleaned up [ 515.206562][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.227044][T14345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.230352][T14334] batman_adv: batadv0: Interface deactivated: dummy0 [ 515.253054][T14356] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 515.264945][T14356] EXT4-fs (loop9): 1 truncate cleaned up [ 515.271059][T14356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.283485][T14356] FAULT_INJECTION: forcing a failure. [ 515.283485][T14356] name failslab, interval 1, probability 0, space 0, times 0 [ 515.296092][T14356] CPU: 1 UID: 0 PID: 14356 Comm: syz.9.3005 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 515.296140][T14356] Tainted: [W]=WARN [ 515.296146][T14356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 515.296213][T14356] Call Trace: [ 515.296220][T14356] [ 515.296277][T14356] __dump_stack+0x1d/0x30 [ 515.296300][T14356] dump_stack_lvl+0x95/0xd0 [ 515.296340][T14356] dump_stack+0x15/0x1b [ 515.296369][T14356] should_fail_ex+0x25e/0x270 [ 515.296490][T14356] should_failslab+0x8c/0xb0 [ 515.296515][T14356] kmem_cache_alloc_noprof+0x66/0x3f0 [ 515.296590][T14356] ? ep_insert+0x135/0xd80 [ 515.296614][T14356] ? percpu_counter_add_batch+0xb5/0x120 [ 515.296637][T14356] ep_insert+0x135/0xd80 [ 515.296662][T14356] ? __rcu_read_unlock+0x4e/0x70 [ 515.296722][T14356] ? proc_fail_nth_write+0x13b/0x160 [ 515.296752][T14356] do_epoll_ctl_file+0x645/0x700 [ 515.296781][T14356] __se_sys_epoll_ctl+0xf1/0x190 [ 515.296807][T14356] __x64_sys_epoll_ctl+0x55/0x70 [ 515.296876][T10592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.296875][T14356] x64_sys_call+0x2a8b/0x3020 [ 515.296902][T14356] do_syscall_64+0x136/0x3c0 [ 515.296921][T14356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.296939][T14356] RIP: 0033:0x7efe1123ce59 [ 515.296998][T14356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.297133][T14356] RSP: 002b:00007efe0fc8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 515.297153][T14356] RAX: ffffffffffffffda RBX: 00007efe114b5fa0 RCX: 00007efe1123ce59 [ 515.297168][T14356] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 515.297181][T14356] RBP: 00007efe0fc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 515.297194][T14356] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.297282][T14356] R13: 00007efe114b6038 R14: 00007efe114b5fa0 R15: 00007ffd1ece35a8 [ 515.297373][T14356] [ 515.509414][T14364] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 515.526675][T14334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.528885][T14364] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3006: invalid indirect mapped block 4294967295 (level 0) [ 515.538193][T14334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.566017][T14364] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 515.567231][T14364] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3006: invalid indirect mapped block 4294967295 (level 1) [ 515.576990][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 515.577009][ C0] EXT4-fs (loop8): initial error at time 1781833743: ext4_free_branches:1023: inode 16 [ 515.577040][ C0] EXT4-fs (loop8): last error at time 1781833743: ext4_free_branches:1023: inode 16 [ 515.618432][T10715] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.619975][T14364] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 515.642580][T14364] EXT4-fs (loop8): 1 orphan inode deleted [ 515.662696][T14364] EXT4-fs (loop8): 1 truncate cleaned up [ 515.669089][T14364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.690875][T14367] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.704254][T14367] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.749890][T10592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.807859][T14375] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 515.824094][T14378] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3010'. [ 515.835034][T14375] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3009: invalid indirect mapped block 4294967295 (level 0) [ 515.849047][T14375] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 515.855401][T14375] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3009: invalid indirect mapped block 4294967295 (level 1) [ 515.878851][T14375] EXT4-fs (loop8): 1 orphan inode deleted [ 515.884584][T14375] EXT4-fs (loop8): 1 truncate cleaned up [ 515.890669][T14375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.917557][T14342] bond4: option arp_interval: invalid value (18446744073480273669) [ 515.925599][T14342] bond4: option arp_interval: allowed values 0 - 2147483647 [ 515.938164][T14342] bond4 (unregistering): Released all slaves [ 515.952093][T13637] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.961119][T13637] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.970577][T13637] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.970638][T13637] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.970751][T13637] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.970785][T13637] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.970813][T13637] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.970854][T13637] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.061177][T14384] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.349869][T14397] set_capacity_and_notify: 6 callbacks suppressed [ 516.349897][T14397] loop7: detected capacity change from 0 to 512 [ 516.385737][T14397] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.413024][T14404] loop2: detected capacity change from 0 to 512 [ 516.425192][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 516.425206][ T28] audit: type=1400 audit(1781833744.329:3659): avc: denied { listen } for pid=14398 comm="syz.1.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 516.448251][T14404] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3017: bg 0: block 127: padding at end of block bitmap is not set [ 516.465555][T14404] loop2: lost filesystem error report for type 5 error -117 [ 516.465903][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 516.479753][ C0] EXT4-fs (loop2): initial error at time 1781833744: ext4_validate_block_bitmap:441 [ 516.489236][ C0] EXT4-fs (loop2): last error at time 1781833744: ext4_validate_block_bitmap:441 [ 516.498756][T14404] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.3017: bit already cleared for inode 11 [ 516.511772][ T28] audit: type=1400 audit(1781833744.419:3660): avc: denied { write } for pid=14396 comm="syz.7.3015" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 516.533221][T14409] loop1: detected capacity change from 0 to 512 [ 516.538636][T14404] loop2: lost filesystem error report for type 5 error -117 [ 516.550356][T14404] EXT4-fs (loop2): 1 orphan inode deleted [ 516.575232][T14409] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3018: inode has both inline data and extents flags [ 516.592228][T14409] fserror_report: 1 callbacks suppressed [ 516.592242][T14409] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 516.598259][T14409] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3018: couldn't read orphan inode 15 (err -117) [ 516.606922][T14413] loop9: detected capacity change from 0 to 512 [ 516.607428][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 516.607444][ C0] EXT4-fs (loop1): initial error at time 1781833744: ext4_orphan_get:1399: inode 15 [ 516.607477][ C0] EXT4-fs (loop1): last error at time 1781833744: ext4_orphan_get:1399 [ 516.620107][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'. [ 516.625704][ C0] : inode 15 [ 516.656728][T14413] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 516.659069][T14409] loop1: lost filesystem error report for type 5 error -117 [ 516.672912][T14413] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.3019: invalid indirect mapped block 4294967295 (level 0) [ 516.694719][T14413] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 516.694928][T14413] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.3019: invalid indirect mapped block 4294967295 (level 1) [ 516.704142][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 516.704160][ C1] EXT4-fs (loop9): initial error at time 1781833744: ext4_free_branches:1023: inode 16 [ 516.704184][ C1] EXT4-fs (loop9): last error at time 1781833744: ext4_free_branches:1023: inode 16 [ 516.745093][T14413] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 516.746881][T14413] EXT4-fs (loop9): 1 orphan inode deleted [ 516.762935][T14413] EXT4-fs (loop9): 1 truncate cleaned up [ 516.792850][T14420] FAULT_INJECTION: forcing a failure. [ 516.792850][T14420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.794340][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 516.806473][T14420] CPU: 1 UID: 0 PID: 14420 Comm: syz.2.3022 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 516.806574][T14420] Tainted: [W]=WARN [ 516.806581][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.806594][T14420] Call Trace: [ 516.806601][T14420] [ 516.806610][T14420] __dump_stack+0x1d/0x30 [ 516.806634][T14420] dump_stack_lvl+0x95/0xd0 [ 516.806733][T14420] dump_stack+0x15/0x1b [ 516.806751][T14420] should_fail_ex+0x25e/0x270 [ 516.806773][T14420] should_fail+0xb/0x20 [ 516.806792][T14420] should_fail_usercopy+0x1a/0x20 [ 516.806814][T14420] _copy_to_user+0x20/0xa0 [ 516.806884][T14420] simple_read_from_buffer+0xb5/0x130 [ 516.806915][T14420] proc_fail_nth_read+0x10e/0x150 [ 516.807003][T14420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.807030][T14420] vfs_read+0x18e/0x7c0 [ 516.807169][T14420] ? cap_task_prctl+0x13f/0x6b0 [ 516.807192][T14420] ? __rcu_read_unlock+0x4e/0x70 [ 516.807216][T14420] ? __fget_files+0x184/0x1c0 [ 516.807236][T14420] ? mutex_lock+0x57/0x90 [ 516.807342][T14420] ksys_read+0xdc/0x1a0 [ 516.807371][T14420] __x64_sys_read+0x40/0x50 [ 516.807409][T14420] x64_sys_call+0x2886/0x3020 [ 516.807431][T14420] do_syscall_64+0x136/0x3c0 [ 516.807450][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.807529][T14420] RIP: 0033:0x7fa28204d68e [ 516.807547][T14420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.807621][T14420] RSP: 002b:00007fa280adefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.807641][T14420] RAX: ffffffffffffffda RBX: 00007fa280adf6c0 RCX: 00007fa28204d68e [ 516.807656][T14420] RDX: 000000000000000f RSI: 00007fa280adf0a0 RDI: 0000000000000003 [ 516.807669][T14420] RBP: 00007fa280adf090 R08: 0000000000000000 R09: 0000000000000000 [ 516.807682][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.807695][T14420] R13: 00007fa282306038 R14: 00007fa282305fa0 R15: 00007ffe43f90c68 [ 516.807752][T14420] [ 516.878205][T14422] bond4: option arp_interval: invalid value (18446744073480273669) [ 517.029453][T14422] bond4: option arp_interval: allowed values 0 - 2147483647 [ 517.080290][T14422] bond4 (unregistering): Released all slaves [ 517.090839][T14431] nfs: Deprecated parameter 'nointr' [ 517.252193][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3028'. [ 517.292308][T14447] loop8: detected capacity change from 0 to 512 [ 517.308302][T14449] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3031'. [ 517.324428][T14447] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3030: bg 0: block 127: padding at end of block bitmap is not set [ 517.362631][T14447] loop8: lost filesystem error report for type 5 error -117 [ 517.364791][T14447] EXT4-fs error (device loop8): ext4_free_inode:356: comm syz.8.3030: bit already cleared for inode 11 [ 517.372247][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 517.372272][ C1] EXT4-fs (loop8): initial error at time 1781833745: ext4_validate_block_bitmap:441 [ 517.372299][ C1] EXT4-fs (loop8): last error at time 1781833745: ext4_validate_block_bitmap:441 [ 517.516471][T14447] loop8: lost filesystem error report for type 5 error -117 [ 517.517880][T14447] EXT4-fs (loop8): 1 orphan inode deleted [ 517.537544][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3030'. [ 517.744613][T14461] loop8: detected capacity change from 0 to 164 [ 517.760088][T14462] loop2: detected capacity change from 0 to 512 [ 517.771978][T14462] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 517.794302][T14461] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 517.819757][T14461] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 517.829461][T14462] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3035: invalid indirect mapped block 4294967295 (level 0) [ 517.863111][T14462] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 517.863263][T14462] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3035: invalid indirect mapped block 4294967295 (level 1) [ 517.872867][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 517.872885][ C0] EXT4-fs (loop2): initial error at time 1781833745: ext4_free_branches:1023: inode 16 [ 517.872920][ C0] EXT4-fs (loop2): last error at time 1781833745: ext4_free_branches:1023: inode 16 [ 517.941786][T14462] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 517.942105][T14462] EXT4-fs (loop2): 1 orphan inode deleted [ 517.959067][T14462] EXT4-fs (loop2): 1 truncate cleaned up [ 518.142085][T14474] loop9: detected capacity change from 0 to 164 [ 518.154068][T14474] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 518.165059][T14474] FAULT_INJECTION: forcing a failure. [ 518.165059][T14474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.193846][T14474] CPU: 1 UID: 0 PID: 14474 Comm: syz.9.3040 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 518.193942][T14474] Tainted: [W]=WARN [ 518.193948][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.193961][T14474] Call Trace: [ 518.193969][T14474] [ 518.193977][T14474] __dump_stack+0x1d/0x30 [ 518.194063][T14474] dump_stack_lvl+0x95/0xd0 [ 518.194084][T14474] dump_stack+0x15/0x1b [ 518.194102][T14474] should_fail_ex+0x25e/0x270 [ 518.194151][T14474] should_fail+0xb/0x20 [ 518.194170][T14474] should_fail_usercopy+0x1a/0x20 [ 518.194203][T14474] strncpy_from_user+0x27/0x250 [ 518.194231][T14474] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 518.194346][T14474] do_getname+0x59/0x1c0 [ 518.194363][T14474] getname_flags+0x1d/0x30 [ 518.194385][T14474] __se_sys_chdir+0x3d/0x1f0 [ 518.194407][T14474] __x64_sys_chdir+0x1f/0x30 [ 518.194424][T14474] x64_sys_call+0x2041/0x3020 [ 518.194448][T14474] do_syscall_64+0x136/0x3c0 [ 518.194535][T14474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.194558][T14474] RIP: 0033:0x7efe1123ce59 [ 518.194576][T14474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.194594][T14474] RSP: 002b:00007efe0fc8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 518.194683][T14474] RAX: ffffffffffffffda RBX: 00007efe114b5fa0 RCX: 00007efe1123ce59 [ 518.194699][T14474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 518.194713][T14474] RBP: 00007efe0fc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 518.194753][T14474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.194806][T14474] R13: 00007efe114b6038 R14: 00007efe114b5fa0 R15: 00007ffd1ece35a8 [ 518.194824][T14474] [ 518.400347][T14471] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 518.451093][T14481] loop8: detected capacity change from 0 to 164 [ 518.464108][T14479] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3042'. [ 518.473797][T14483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3044'. [ 518.490173][T14481] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 518.550003][T14489] loop2: detected capacity change from 0 to 512 [ 518.568490][T14489] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 518.601191][T14491] FAULT_INJECTION: forcing a failure. [ 518.601191][T14491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.617022][T14489] EXT4-fs (loop2): group descriptors corrupted! [ 518.631235][T14491] CPU: 1 UID: 0 PID: 14491 Comm: syz.1.3047 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 518.631330][T14491] Tainted: [W]=WARN [ 518.631338][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.631352][T14491] Call Trace: [ 518.631360][T14491] [ 518.631370][T14491] __dump_stack+0x1d/0x30 [ 518.631394][T14491] dump_stack_lvl+0x95/0xd0 [ 518.631415][T14491] dump_stack+0x15/0x1b [ 518.631435][T14491] should_fail_ex+0x25e/0x270 [ 518.631468][T14491] should_fail+0xb/0x20 [ 518.631528][T14491] should_fail_usercopy+0x1a/0x20 [ 518.631552][T14491] _copy_from_iter+0xcc/0xe70 [ 518.631575][T14491] ? should_fail_ex+0xd9/0x270 [ 518.631668][T14491] ? should_failslab+0x8c/0xb0 [ 518.631762][T14491] ? __kmalloc_noprof+0x1e3/0x4d0 [ 518.631797][T14491] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 518.631818][T14491] kernfs_fop_write_iter+0x117/0x2e0 [ 518.631838][T14491] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 518.631907][T14491] vfs_write+0x57d/0x990 [ 518.631932][T14491] ksys_write+0xdc/0x1a0 [ 518.631958][T14491] __x64_sys_write+0x40/0x50 [ 518.632060][T14491] x64_sys_call+0x27e1/0x3020 [ 518.632083][T14491] do_syscall_64+0x136/0x3c0 [ 518.632146][T14491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.632225][T14491] RIP: 0033:0x7f095cadce59 [ 518.632242][T14491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.632260][T14491] RSP: 002b:00007f095b52f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.632278][T14491] RAX: ffffffffffffffda RBX: 00007f095cd55fa0 RCX: 00007f095cadce59 [ 518.632291][T14491] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000006 [ 518.632328][T14491] RBP: 00007f095b52f090 R08: 0000000000000000 R09: 0000000000000000 [ 518.632342][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.632353][T14491] R13: 00007f095cd56038 R14: 00007f095cd55fa0 R15: 00007ffca95ea458 [ 518.632370][T14491] [ 518.899698][T14497] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.899870][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3045'. [ 518.933283][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3045'. [ 518.938701][ T28] audit: type=1400 audit(1781833746.849:3661): avc: denied { accept } for pid=14478 comm="syz.2.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 519.003755][ T28] audit: type=1400 audit(1781833746.909:3662): avc: denied { write } for pid=14495 comm="syz.1.3048" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 519.004890][T14511] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 519.041175][T14511] EXT4-fs (loop7): 1 truncate cleaned up [ 519.149525][T14521] nfs: Deprecated parameter 'nointr' [ 519.201199][T14526] FAULT_INJECTION: forcing a failure. [ 519.201199][T14526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.217277][T14526] CPU: 1 UID: 0 PID: 14526 Comm: syz.8.3056 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 519.217324][T14526] Tainted: [W]=WARN [ 519.217332][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.217344][T14526] Call Trace: [ 519.217352][T14526] [ 519.217361][T14526] __dump_stack+0x1d/0x30 [ 519.217385][T14526] dump_stack_lvl+0x95/0xd0 [ 519.217432][T14526] dump_stack+0x15/0x1b [ 519.217447][T14526] should_fail_ex+0x25e/0x270 [ 519.217466][T14526] should_fail+0xb/0x20 [ 519.217484][T14526] should_fail_usercopy+0x1a/0x20 [ 519.217506][T14526] _copy_from_iter+0xcc/0xe70 [ 519.217540][T14526] ? should_fail_ex+0xd9/0x270 [ 519.217557][T14526] ? should_failslab+0x8c/0xb0 [ 519.217622][T14526] ? __kmalloc_noprof+0x1e3/0x4d0 [ 519.217643][T14526] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 519.217661][T14526] kernfs_fop_write_iter+0x117/0x2e0 [ 519.217678][T14526] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 519.217729][T14526] vfs_write+0x57d/0x990 [ 519.217759][T14526] ksys_write+0xdc/0x1a0 [ 519.217852][T14526] __x64_sys_write+0x40/0x50 [ 519.217942][T14526] x64_sys_call+0x27e1/0x3020 [ 519.217966][T14526] do_syscall_64+0x136/0x3c0 [ 519.218000][T14526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.218029][T14526] RIP: 0033:0x7ff3fd8cce59 [ 519.218044][T14526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.218092][T14526] RSP: 002b:00007ff3fc327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 519.218116][T14526] RAX: ffffffffffffffda RBX: 00007ff3fdb45fa0 RCX: 00007ff3fd8cce59 [ 519.218129][T14526] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000005 [ 519.218146][T14526] RBP: 00007ff3fc327090 R08: 0000000000000000 R09: 0000000000000000 [ 519.218160][T14526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.218173][T14526] R13: 00007ff3fdb46038 R14: 00007ff3fdb45fa0 R15: 00007ffe63d33ef8 [ 519.218272][T14526] [ 519.471826][T14530] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 519.487880][T14530] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 519.496735][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3059'. [ 519.512343][T14530] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 519.530594][ T28] audit: type=1400 audit(1781833747.429:3663): avc: denied { write } for pid=10715 comm="syz-executor" name="194" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 519.549853][T14534] nfs: Deprecated parameter 'nointr' [ 519.562556][ T28] audit: type=1400 audit(1781833747.429:3664): avc: denied { write } for pid=10715 comm="syz-executor" name="194" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 519.589225][ T28] audit: type=1400 audit(1781833747.429:3665): avc: denied { write } for pid=10715 comm="syz-executor" name="194" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 519.615645][ T28] audit: type=1400 audit(1781833747.429:3666): avc: denied { write } for pid=10715 comm="syz-executor" name="194" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 519.898041][T14553] xt_TCPMSS: Only works on TCP SYN packets [ 519.968052][T14549] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3066: bad orphan inode 13 [ 519.984526][T14549] loop1: lost filesystem error report for type 5 error -117 [ 519.985201][T14549] ext4_test_bit(bit=12, block=4) = 1 [ 519.992865][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 519.992902][ C0] EXT4-fs (loop1): initial error at time 1781833747: ext4_orphan_get:1425 [ 519.992972][ C0] EXT4-fs (loop1): last error at time 1781833747: ext4_orphan_get:1425 [ 520.033434][T14549] is_bad_inode(inode)=0 [ 520.038188][T14549] NEXT_ORPHAN(inode)=0 [ 520.042583][T14549] max_ino=32 [ 520.046725][T14549] i_nlink=1 [ 520.133185][T14563] FAULT_INJECTION: forcing a failure. [ 520.133185][T14563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.153707][T14563] CPU: 0 UID: 0 PID: 14563 Comm: syz.2.3070 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 520.153745][T14563] Tainted: [W]=WARN [ 520.153753][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.153766][T14563] Call Trace: [ 520.153775][T14563] [ 520.153855][T14563] __dump_stack+0x1d/0x30 [ 520.153879][T14563] dump_stack_lvl+0x95/0xd0 [ 520.153900][T14563] dump_stack+0x15/0x1b [ 520.153918][T14563] should_fail_ex+0x25e/0x270 [ 520.153940][T14563] should_fail+0xb/0x20 [ 520.154020][T14563] should_fail_usercopy+0x1a/0x20 [ 520.154043][T14563] _copy_from_user+0x1c/0xb0 [ 520.154069][T14563] do_sock_getsockopt+0x122/0x570 [ 520.154098][T14563] ? vfs_write+0x848/0x990 [ 520.154180][T14563] __x64_sys_getsockopt+0x11d/0x1a0 [ 520.154211][T14563] x64_sys_call+0x2dcf/0x3020 [ 520.154234][T14563] do_syscall_64+0x136/0x3c0 [ 520.154297][T14563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.154319][T14563] RIP: 0033:0x7fa28208ce59 [ 520.154337][T14563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.154357][T14563] RSP: 002b:00007fa280adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 520.154426][T14563] RAX: ffffffffffffffda RBX: 00007fa282305fa0 RCX: 00007fa28208ce59 [ 520.154442][T14563] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 520.154456][T14563] RBP: 00007fa280adf090 R08: 0000200000000100 R09: 0000000000000000 [ 520.154471][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.154485][T14563] R13: 00007fa282306038 R14: 00007fa282305fa0 R15: 00007ffe43f90c68 [ 520.154505][T14563] [ 520.406646][T14568] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3071'. [ 520.431599][T14549] syzkaller0: entered promiscuous mode [ 520.447465][T14549] syzkaller0: entered allmulticast mode [ 520.501187][T14570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 520.516108][T14570] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3072: iget: bad i_size value: 38620345925642 [ 520.530120][T14570] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 520.530420][T14570] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3072: couldn't read orphan inode 15 (err -117) [ 520.539659][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 520.539710][ C0] EXT4-fs (loop7): initial error at time 1781833748: ext4_orphan_get:1399: inode 15 [ 520.539778][ C0] EXT4-fs (loop7): last error at time 1781833748: ext4_orphan_get:1399: inode 15 [ 520.578772][T14570] loop7: lost filesystem error report for type 5 error -117 [ 520.603754][ T28] audit: type=1400 audit(1781833748.509:3667): avc: denied { write } for pid=14569 comm="syz.7.3072" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 520.679082][T14577] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.721231][T14584] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3075'. [ 520.746032][ T28] audit: type=1400 audit(1781833748.509:3668): avc: denied { write } for pid=14569 comm="syz.7.3072" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 520.907041][T14587] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 520.907041][T14587] [ 520.938004][T14592] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.029640][T14581] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 521.080866][T14598] netlink: 'syz.8.3077': attribute type 30 has an invalid length. [ 521.092708][T14598] netlink: 'syz.8.3077': attribute type 30 has an invalid length. [ 521.159646][T14600] netlink: 'syz.8.3078': attribute type 30 has an invalid length. [ 521.189143][T14600] netlink: 'syz.8.3078': attribute type 30 has an invalid length. [ 521.341427][T14606] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 521.752298][T13637] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:23: bg 0: block 5: invalid block bitmap [ 521.775242][T14606] EXT4-fs (loop1): 1 truncate cleaned up [ 521.785626][T13637] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 521.798479][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 521.798491][ T28] audit: type=1400 audit(1781833749.709:3671): avc: denied { write } for pid=14601 comm="syz.1.3079" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 521.836272][T13637] EXT4-fs (loop7): This should not happen!! Data will be lost [ 521.836272][T13637] [ 521.871507][T14609] set_capacity_and_notify: 9 callbacks suppressed [ 521.871523][T14609] loop8: detected capacity change from 0 to 512 [ 521.872360][T13637] EXT4-fs (loop7): Total free blocks count 0 [ 521.890272][T14616] nfs: Deprecated parameter 'nointr' [ 521.903929][T13637] EXT4-fs (loop7): Free/Dirty block details [ 521.913269][T14609] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.3084: bad orphan inode 13 [ 521.924336][T13637] EXT4-fs (loop7): free_blocks=0 [ 521.927999][T14609] loop8: lost filesystem error report for type 5 error -117 [ 521.935764][T13637] EXT4-fs (loop7): dirty_blocks=8096 [ 521.944916][T14609] ext4_test_bit(bit=12, block=4) = 1 [ 521.948631][T13637] EXT4-fs (loop7): Block reservation details [ 521.953774][T14609] is_bad_inode(inode)=0 [ 521.959883][T13637] EXT4-fs (loop7): i_reserved_data_blocks=8096 [ 521.963920][T14609] NEXT_ORPHAN(inode)=0 [ 521.963929][T14609] max_ino=32 [ 521.963937][T14609] i_nlink=1 [ 521.973635][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 521.973675][ C1] EXT4-fs (loop8): initial error at time 1781833749: ext4_orphan_get:1425 [ 521.973795][ C1] EXT4-fs (loop8): last error at time 1781833749: ext4_orphan_get:1425 [ 521.981870][T13637] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 522.061131][T13637] EXT4-fs (loop7): This should not happen!! Data will be lost [ 522.061131][T13637] [ 522.082146][ T6772] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 522.109072][T14624] syzkaller0: entered promiscuous mode [ 522.109209][ T28] audit: type=1326 audit(1781833750.019:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.1.3087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095cadce59 code=0x7ffc0000 [ 522.120857][T14624] syzkaller0: entered allmulticast mode [ 522.149179][T14625] sg_write: data in/out 484352/136 bytes for SCSI command 0x0-- guessing data in; [ 522.149179][T14625] program syz.1.3087 not setting count and/or reply_len properly [ 522.171634][ T28] audit: type=1326 audit(1781833750.019:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.1.3087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095cadce59 code=0x7ffc0000 [ 522.211831][ T28] audit: type=1326 audit(1781833750.019:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.1.3087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095cadce59 code=0x7ffc0000 [ 522.242185][ T28] audit: type=1326 audit(1781833750.019:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.1.3087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095cadce59 code=0x7ffc0000 [ 522.275129][ T28] audit: type=1326 audit(1781833750.059:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.1.3087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f095cadce59 code=0x7ffc0000 [ 522.299357][T14637] loop2: detected capacity change from 0 to 512 [ 522.304472][ T28] audit: type=1326 audit(1781833750.059:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.1.3087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095cadce59 code=0x7ffc0000 [ 522.333032][T14635] loop7: detected capacity change from 0 to 512 [ 522.341578][T14637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 522.351454][T14637] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3091: iget: bad i_size value: 38620345925642 [ 522.352717][T14630] FAULT_INJECTION: forcing a failure. [ 522.352717][T14630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.364180][T14637] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 522.377922][T14637] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3091: couldn't read orphan inode 15 (err -117) [ 522.384689][T14630] CPU: 1 UID: 0 PID: 14630 Comm: syz.9.3089 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 522.384737][T14630] Tainted: [W]=WARN [ 522.384744][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 522.384756][T14630] Call Trace: [ 522.384764][T14630] [ 522.384772][T14630] __dump_stack+0x1d/0x30 [ 522.384796][T14630] dump_stack_lvl+0x95/0xd0 [ 522.384879][T14630] dump_stack+0x15/0x1b [ 522.384897][T14630] should_fail_ex+0x25e/0x270 [ 522.384918][T14630] should_fail+0xb/0x20 [ 522.384935][T14630] should_fail_usercopy+0x1a/0x20 [ 522.385009][T14630] _copy_from_user+0x1c/0xb0 [ 522.385093][T14630] __copy_msghdr+0x242/0x300 [ 522.385121][T14630] ___sys_sendmsg+0x10c/0x1e0 [ 522.385215][T14630] __x64_sys_sendmsg+0xd4/0x160 [ 522.385247][T14630] x64_sys_call+0x194c/0x3020 [ 522.385339][T14630] do_syscall_64+0x136/0x3c0 [ 522.385359][T14630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.385433][T14630] RIP: 0033:0x7efe1123ce59 [ 522.385449][T14630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.385467][T14630] RSP: 002b:00007efe0fc8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.385487][T14630] RAX: ffffffffffffffda RBX: 00007efe114b5fa0 RCX: 00007efe1123ce59 [ 522.385536][T14630] RDX: 0000000000048800 RSI: 0000200000000340 RDI: 0000000000000007 [ 522.385549][T14630] RBP: 00007efe0fc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 522.385563][T14630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.385575][T14630] R13: 00007efe114b6038 R14: 00007efe114b5fa0 R15: 00007ffd1ece35a8 [ 522.385594][T14630] [ 522.387088][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 522.387110][ C0] EXT4-fs (loop2): initial error at time 1781833750: ext4_orphan_get:1399: inode 15 [ 522.387141][ C0] EXT4-fs (loop2): last error at time 1781833750: ext4_orphan_get:1399: inode 15 [ 522.402468][T14635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 522.411811][ T28] audit: type=1326 audit(1781833750.059:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.1.3087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095cadce59 code=0x7ffc0000 [ 522.433965][T14637] loop2: lost filesystem error report for type 5 error -117 [ 522.438169][T14635] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3082: iget: bad i_size value: 38620345925642 [ 522.452242][ T28] audit: type=1326 audit(1781833750.059:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.1.3087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095cadce59 code=0x7ffc0000 [ 522.457497][T14635] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 522.476427][ T28] audit: type=1326 audit(1781833750.059:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.1.3087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095cadce59 code=0x7ffc0000 [ 522.527435][T14635] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3082: couldn't read orphan inode 15 (err -117) [ 522.540231][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 522.540249][ C0] EXT4-fs (loop7): initial error at time 1781833750: ext4_orphan_get:1399: inode 15 [ 522.540281][ C0] EXT4-fs (loop7): last error at time 1781833750: ext4_orphan_get:1399: inode 15 [ 522.734632][T14643] loop9: detected capacity change from 0 to 512 [ 522.746542][T14646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3091: bg 0: block 5: invalid block bitmap [ 522.754582][T14635] loop7: lost filesystem error report for type 5 error -117 [ 522.765394][T14646] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 522.769156][T14643] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.3093: bad orphan inode 13 [ 522.785903][T14646] EXT4-fs (loop2): This should not happen!! Data will be lost [ 522.785903][T14646] [ 522.795243][T14643] loop9: lost filesystem error report for type 5 error -117 [ 522.803669][T14643] ext4_test_bit(bit=12, block=4) = 1 [ 522.805988][T14646] EXT4-fs (loop2): Total free blocks count 0 [ 522.812276][T14643] is_bad_inode(inode)=0 [ 522.813525][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 522.817932][T14646] EXT4-fs (loop2): Free/Dirty block details [ 522.823714][ C1] EXT4-fs (loop9): initial error at time 1781833750: ext4_orphan_get:1425 [ 522.828532][T14646] EXT4-fs (loop2): free_blocks=0 [ 522.834326][ C1] [ 522.840608][T14646] EXT4-fs (loop2): dirty_blocks=6728 [ 522.848843][ C1] EXT4-fs (loop9): last error at time 1781833750: ext4_orphan_get:1425 [ 522.853966][T14646] EXT4-fs (loop2): Block reservation details [ 522.873649][T14646] EXT4-fs (loop2): i_reserved_data_blocks=6728 [ 522.882251][T14643] NEXT_ORPHAN(inode)=0 [ 522.887810][T14643] max_ino=32 [ 522.891360][T14643] i_nlink=1 [ 522.921053][T13623] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 522.958533][T13623] EXT4-fs (loop2): This should not happen!! Data will be lost [ 522.958533][T13623] [ 522.981247][T14651] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3082: bg 0: block 5: invalid block bitmap [ 523.002061][T14643] syzkaller0: entered promiscuous mode [ 523.008049][T14643] syzkaller0: entered allmulticast mode [ 523.019285][T14651] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 500 with error 28 [ 523.037707][T14651] EXT4-fs (loop7): This should not happen!! Data will be lost [ 523.037707][T14651] [ 523.045782][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 523.058646][T14632] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 523.068760][T14651] EXT4-fs (loop7): Total free blocks count 0 [ 523.080857][T14651] EXT4-fs (loop7): Free/Dirty block details [ 523.093451][T14651] EXT4-fs (loop7): free_blocks=0 [ 523.110382][T14651] EXT4-fs (loop7): dirty_blocks=560 [ 523.115655][T14651] EXT4-fs (loop7): Block reservation details [ 523.122016][T14651] EXT4-fs (loop7): i_reserved_data_blocks=560 [ 523.145311][T13629] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 500 with max blocks 60 with error 28 [ 523.166338][T14658] loop2: detected capacity change from 0 to 512 [ 523.171719][T13629] EXT4-fs (loop7): This should not happen!! Data will be lost [ 523.171719][T13629] [ 523.184093][T14658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 523.195052][ T6772] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 523.210828][T14656] nfs: Deprecated parameter 'nointr' [ 523.216718][T14658] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3094: iget: bad i_size value: 38620345925642 [ 523.216760][T14658] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 523.218425][T14658] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3094: couldn't read orphan inode 15 (err -117) [ 523.230033][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 523.230099][ C0] EXT4-fs (loop2): initial error at time 1781833751: ext4_orphan_get:1399: inode 15 [ 523.230163][ C0] EXT4-fs (loop2): last error at time 1781833751: ext4_orphan_get:1399: inode 15 [ 523.276721][T14658] loop2: lost filesystem error report for type 5 error -117 [ 523.306351][T14662] __nla_validate_parse: 1 callbacks suppressed [ 523.306449][T14662] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3099'. [ 523.431120][T14669] smc: net device vlan1 applied user defined pnetid SYZ2 [ 523.444582][T14670] nfs: Deprecated parameter 'nointr' [ 523.514369][T14674] loop1: detected capacity change from 0 to 512 [ 523.521371][T14674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 523.536505][T14674] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3104: iget: bad i_size value: 38620345925642 [ 523.554468][T14674] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 523.554607][T14674] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3104: couldn't read orphan inode 15 (err -117) [ 523.563867][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 523.563887][ C1] EXT4-fs (loop1): initial error at time 1781833751: ext4_orphan_get:1399: inode 15 [ 523.563932][ C1] EXT4-fs (loop1): last error at time 1781833751: ext4_orphan_get:1399: inode 15 [ 523.717332][T14674] loop1: lost filesystem error report for type 5 error -117 [ 523.775281][T14687] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3104: bg 0: block 5: invalid block bitmap [ 523.819389][T14687] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1632 with error 28 [ 523.845936][T14687] EXT4-fs (loop1): This should not happen!! Data will be lost [ 523.845936][T14687] [ 523.866019][T14687] EXT4-fs (loop1): Total free blocks count 0 [ 523.879760][T14687] EXT4-fs (loop1): Free/Dirty block details [ 523.883934][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3108'. [ 523.892996][T14687] EXT4-fs (loop1): free_blocks=0 [ 523.908310][T14687] EXT4-fs (loop1): dirty_blocks=1632 [ 523.916676][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3108'. [ 523.919935][T14687] EXT4-fs (loop1): Block reservation details [ 523.944618][T14687] EXT4-fs (loop1): i_reserved_data_blocks=1632 [ 523.957603][T14688] program syz.8.3103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.995815][T13710] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 524.032891][T13629] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:20: bg 0: block 5: invalid block bitmap [ 524.084067][T13629] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 524.098689][T13629] EXT4-fs (loop2): This should not happen!! Data will be lost [ 524.098689][T13629] [ 524.108637][T13629] EXT4-fs (loop2): Total free blocks count 0 [ 524.114335][T14694] bond1: option arp_interval: invalid value (18446744073480273669) [ 524.114704][T13629] EXT4-fs (loop2): Free/Dirty block details [ 524.122719][T14694] bond1: option arp_interval: allowed values 0 - 2147483647 [ 524.128770][T14697] loop1: detected capacity change from 0 to 512 [ 524.136696][T13629] EXT4-fs (loop2): free_blocks=0 [ 524.143087][T14694] bond1 (unregistering): Released all slaves [ 524.147693][T13629] EXT4-fs (loop2): dirty_blocks=9852 [ 524.157959][T14697] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3109: inode has both inline data and extents flags [ 524.163433][T13629] EXT4-fs (loop2): Block reservation details [ 524.171752][T14697] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 524.172414][T14697] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3109: couldn't read orphan inode 15 (err -117) [ 524.177995][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 524.178026][ C1] EXT4-fs (loop1): initial error at time 1781833752: ext4_orphan_get:1399: inode 15 [ 524.178058][ C1] EXT4-fs (loop1): last error at time 1781833752: ext4_orphan_get:1399: inode 15 [ 524.202889][T13629] EXT4-fs (loop2): i_reserved_data_blocks=9852 [ 524.213811][T14697] loop1: lost filesystem error report for type 5 error -117 [ 524.264842][T13623] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 524.289562][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3115'. [ 524.298528][T13623] EXT4-fs (loop2): This should not happen!! Data will be lost [ 524.298528][T13623] [ 524.307328][T14703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3114'. [ 524.327770][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 524.363839][T14707] loop7: detected capacity change from 0 to 512 [ 524.380503][T14709] syzkaller1: entered promiscuous mode [ 524.389873][T14709] syzkaller1: entered allmulticast mode [ 524.403881][T14707] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.452109][T14720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3119'. [ 524.458676][T14710] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3116'. [ 524.462762][T14683] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 524.498597][T14723] loop9: detected capacity change from 0 to 512 [ 524.507845][T14723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.538562][T14723] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3120: iget: bad i_size value: 38620345925642 [ 524.559952][T14723] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 524.561968][T14723] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3120: couldn't read orphan inode 15 (err -117) [ 524.564587][T14729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3122'. [ 524.571246][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 524.571268][ C0] EXT4-fs (loop9): initial error at time 1781833752: ext4_orphan_get:1399: inode 15 [ 524.571297][ C0] EXT4-fs (loop9): last error at time 1781833752: ext4_orphan_get:1399: inode 15 [ 524.576416][T14723] loop9: lost filesystem error report for type 5 error -117 [ 524.715613][T14737] FAULT_INJECTION: forcing a failure. [ 524.715613][T14737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.757442][T14737] CPU: 1 UID: 0 PID: 14737 Comm: syz.2.3125 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 524.757473][T14737] Tainted: [W]=WARN [ 524.757479][T14737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.757538][T14737] Call Trace: [ 524.757545][T14737] [ 524.757555][T14737] __dump_stack+0x1d/0x30 [ 524.757580][T14737] dump_stack_lvl+0x95/0xd0 [ 524.757597][T14737] dump_stack+0x15/0x1b [ 524.757613][T14737] should_fail_ex+0x25e/0x270 [ 524.757632][T14737] should_fail+0xb/0x20 [ 524.757726][T14737] should_fail_usercopy+0x1a/0x20 [ 524.757746][T14737] _copy_from_user+0x1c/0xb0 [ 524.757774][T14737] ___sys_sendmsg+0xc1/0x1e0 [ 524.757895][T14737] __x64_sys_sendmsg+0xd4/0x160 [ 524.757977][T14737] x64_sys_call+0x194c/0x3020 [ 524.757997][T14737] do_syscall_64+0x136/0x3c0 [ 524.758014][T14737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.758038][T14737] RIP: 0033:0x7fa28208ce59 [ 524.758085][T14737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.758100][T14737] RSP: 002b:00007fa280adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.758117][T14737] RAX: ffffffffffffffda RBX: 00007fa282305fa0 RCX: 00007fa28208ce59 [ 524.758147][T14737] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000003 [ 524.758159][T14737] RBP: 00007fa280adf090 R08: 0000000000000000 R09: 0000000000000000 [ 524.758170][T14737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.758180][T14737] R13: 00007fa282306038 R14: 00007fa282305fa0 R15: 00007ffe43f90c68 [ 524.758229][T14737] [ 524.762398][T14733] loop1: detected capacity change from 0 to 8192 [ 524.952885][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3124'. [ 524.964069][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3124'. [ 525.002877][T14727] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 525.010044][T14727] FAT-fs (loop1): Filesystem has been set read-only [ 525.016571][T14743] nfs: Deprecated parameter 'nointr' [ 525.026100][T14739] program syz.2.3126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.092820][T14746] pimreg: tun_chr_ioctl cmd 1074025677 [ 525.098935][T14746] pimreg: linktype set to 804 [ 525.149164][T14749] gre0 speed is unknown, defaulting to 1000 [ 525.247024][T14756] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3133: inode has both inline data and extents flags [ 525.271807][T14756] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 525.271918][T14756] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3133: couldn't read orphan inode 15 (err -117) [ 525.281127][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 525.281150][ C1] EXT4-fs (loop7): initial error at time 1781833753: ext4_orphan_get:1399: inode 15 [ 525.281184][ C1] EXT4-fs (loop7): last error at time 1781833753: ext4_orphan_get:1399: inode 15 [ 525.296371][T14760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 525.345932][T14756] loop7: lost filesystem error report for type 5 error -117 [ 525.364322][T14760] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3134: iget: bad i_size value: 38620345925642 [ 525.393237][T14753] gre0 speed is unknown, defaulting to 1000 [ 525.419375][T14760] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 525.423839][T14760] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3134: couldn't read orphan inode 15 (err -117) [ 525.433124][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 525.433141][ C0] EXT4-fs (loop2): initial error at time 1781833753: ext4_orphan_get:1399: inode 15 [ 525.433194][ C0] EXT4-fs (loop2): last error at time 1781833753: ext4_orphan_get:1399: inode 15 [ 525.479894][T14746] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.3129: ea_inode with extended attributes [ 525.493377][T14746] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 525.494260][T14760] loop2: lost filesystem error report for type 5 error -117 [ 525.503503][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 525.503526][ C0] EXT4-fs (loop9): initial error at time 1781833753: ext4_xattr_inode_iget:441: inode 11 [ 525.503560][ C0] EXT4-fs (loop9): last error at time 1781833753: ext4_xattr_inode_iget:441: inode 11 [ 525.516375][T14746] EXT4-fs (loop9): Remounting filesystem read-only [ 525.567856][T14746] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -30) [ 525.589842][T14767] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3136: inode has both inline data and extents flags [ 525.605409][T14746] EXT4-fs (loop9): 1 orphan inode deleted [ 525.616715][T14767] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 525.618898][T14767] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3136: couldn't read orphan inode 15 (err -117) [ 525.628099][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 525.628120][ C0] EXT4-fs (loop2): initial error at time 1781833753: ext4_orphan_get:1399: inode 15 [ 525.628158][ C0] EXT4-fs (loop2): last error at time 1781833753: ext4_orphan_get:1399: inode 15 [ 525.683243][T14749] ALSA: seq fatal error: cannot create timer (-22) [ 525.887663][T14764] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 525.923745][T14777] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 525.934725][T14753] ALSA: seq fatal error: cannot create timer (-22) [ 525.981398][T14777] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 525.993924][T14780] nfs: Deprecated parameter 'nointr' [ 526.020429][T14777] FAULT_INJECTION: forcing a failure. [ 526.020429][T14777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.064046][T14777] CPU: 0 UID: 0 PID: 14777 Comm: syz.2.3139 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 526.064156][T14777] Tainted: [W]=WARN [ 526.064163][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.064176][T14777] Call Trace: [ 526.064184][T14777] [ 526.064193][T14777] __dump_stack+0x1d/0x30 [ 526.064223][T14777] dump_stack_lvl+0x95/0xd0 [ 526.064240][T14777] dump_stack+0x15/0x1b [ 526.064257][T14777] should_fail_ex+0x25e/0x270 [ 526.064429][T14777] should_fail+0xb/0x20 [ 526.064449][T14777] should_fail_usercopy+0x1a/0x20 [ 526.064472][T14777] strncpy_from_user+0x27/0x250 [ 526.064497][T14777] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 526.064584][T14777] do_getname+0x59/0x1c0 [ 526.064602][T14777] __se_sys_mkdirat+0x21/0xf0 [ 526.064630][T14777] __x64_sys_mkdirat+0x43/0x50 [ 526.064681][T14777] x64_sys_call+0x2c4e/0x3020 [ 526.064700][T14777] do_syscall_64+0x136/0x3c0 [ 526.064718][T14777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.064735][T14777] RIP: 0033:0x7fa28208ce59 [ 526.064789][T14777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.064806][T14777] RSP: 002b:00007fa280adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 526.064824][T14777] RAX: ffffffffffffffda RBX: 00007fa282305fa0 RCX: 00007fa28208ce59 [ 526.064836][T14777] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 526.064848][T14777] RBP: 00007fa280adf090 R08: 0000000000000000 R09: 0000000000000000 [ 526.064860][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.064897][T14777] R13: 00007fa282306038 R14: 00007fa282305fa0 R15: 00007ffe43f90c68 [ 526.064913][T14777] [ 526.307774][T14781] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 526.332164][T14781] FAT-fs (loop1): Filesystem has been set read-only [ 526.474123][T14799] nfs: Deprecated parameter 'nointr' [ 526.597599][T14785] program syz.2.3142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.604068][T14795] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.635605][T14797] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.680646][T14803] gre0 speed is unknown, defaulting to 1000 [ 526.693747][T14814] nfs: Deprecated parameter 'nointr' [ 527.030106][T14811] ALSA: seq fatal error: cannot create timer (-22) [ 527.039277][T14818] set_capacity_and_notify: 9 callbacks suppressed [ 527.039341][T14818] loop1: detected capacity change from 0 to 512 [ 527.073399][T14818] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 527.087384][T14818] EXT4-fs (loop1): 1 truncate cleaned up [ 527.099526][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 527.099551][ T28] audit: type=1400 audit(1781833754.979:3732): avc: denied { write } for pid=14809 comm="syz.1.3148" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 527.212106][T14823] bond4: option arp_interval: invalid value (18446744073480273669) [ 527.220087][T14823] bond4: option arp_interval: allowed values 0 - 2147483647 [ 527.242872][T14823] bond4 (unregistering): Released all slaves [ 527.473081][T14831] bond1: option arp_interval: invalid value (18446744073480273669) [ 527.481868][T14831] bond1: option arp_interval: allowed values 0 - 2147483647 [ 527.497518][T14837] nfs: Deprecated parameter 'nointr' [ 527.585357][T14831] bond1 (unregistering): Released all slaves [ 527.992575][ T28] audit: type=1400 audit(1781833755.759:3733): avc: denied { accept } for pid=14841 comm="syz.1.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 528.116680][T14852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.149781][T14855] loop7: detected capacity change from 0 to 8192 [ 528.157789][T14852] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.182585][T14855] FAT-fs (loop7): error, clusters badly computed (2 != 1) [ 528.211399][T14852] batman_adv: batadv0: Interface activated: dummy0 [ 528.254118][T14855] FAT-fs (loop7): Filesystem has been set read-only [ 528.267229][T14852] batadv0: mtu less than device minimum [ 528.292425][T14852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.303868][T14852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.315406][T14852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.324292][T14853] syz.1.3157 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 528.327062][T14852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.342209][T14853] CPU: 1 UID: 0 PID: 14853 Comm: syz.1.3157 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 528.342285][T14853] Tainted: [W]=WARN [ 528.342344][T14853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 528.342357][T14853] Call Trace: [ 528.342364][T14853] [ 528.342373][T14853] __dump_stack+0x1d/0x30 [ 528.342485][T14853] dump_stack_lvl+0x95/0xd0 [ 528.342505][T14853] dump_stack+0x15/0x1b [ 528.342524][T14853] dump_header+0x80/0x240 [ 528.342545][T14853] oom_kill_process+0x295/0x350 [ 528.342621][T14853] out_of_memory+0x981/0xbc0 [ 528.342688][T14853] try_charge_memcg+0x621/0xa00 [ 528.342721][T14853] __memcg_kmem_charge_page+0x199/0x3a0 [ 528.342746][T14853] __alloc_frozen_pages_noprof+0x18a/0x350 [ 528.342828][T14853] alloc_pages_mpol+0xa9/0x1d0 [ 528.342853][T14853] alloc_pages_noprof+0x8f/0x140 [ 528.342914][T14853] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 528.342946][T14853] __kvmalloc_node_noprof+0x3d4/0x640 [ 528.343054][T14853] ? futex_hash_allocate+0x192/0x920 [ 528.343155][T14853] ? futex_hash_allocate+0x192/0x920 [ 528.343177][T14853] futex_hash_allocate+0x192/0x920 [ 528.343245][T14853] ? cap_task_prctl+0x13f/0x6b0 [ 528.343271][T14853] futex_hash_prctl+0xd8/0xf0 [ 528.343292][T14853] __se_sys_prctl+0x4f4/0x13c0 [ 528.343318][T14853] __x64_sys_prctl+0x67/0x80 [ 528.343342][T14853] x64_sys_call+0x2533/0x3020 [ 528.343409][T14853] do_syscall_64+0x136/0x3c0 [ 528.343430][T14853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.343452][T14853] RIP: 0033:0x7f095cadce59 [ 528.343469][T14853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.343488][T14853] RSP: 002b:00007f095b4ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 528.343536][T14853] RAX: ffffffffffffffda RBX: 00007f095cd56180 RCX: 00007f095cadce59 [ 528.343551][T14853] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 528.343565][T14853] RBP: 00007f095cb72e6f R08: 0000000000000000 R09: 0000000000000000 [ 528.343579][T14853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.343592][T14853] R13: 00007f095cd56218 R14: 00007f095cd56180 R15: 00007ffca95ea458 [ 528.343683][T14853] [ 528.343691][T14853] memory: usage 307200kB, limit 307200kB, failcnt 1071 [ 528.351747][T14852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.361511][T14853] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 528.361527][T14853] kmem: usage 295124kB, limit 9007199254740988kB, failcnt 0 [ 528.361538][T14853] Memory cgroup stats for /syz1: [ 528.361823][T14853] cache 12144640 [ 528.366507][T14852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.375550][T14853] rss 200704 [ 528.375559][T14853] shmem 11755520 [ 528.375567][T14853] mapped_file 12144640 [ 528.380031][T14852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.381799][T14853] dirty 389120 [ 528.381808][T14853] writeback 0 [ 528.387288][T14852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.390702][T14853] workingset_refault_anon 0 [ 528.390712][T14853] workingset_refault_file 0 [ 528.390721][T14853] swap 0 [ 528.390729][T14853] swapcached 4096 [ 528.396084][T14852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.399221][T14853] pgpgin 417376 [ 528.623603][T14852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.625894][T14853] pgpgout 414362 [ 528.700249][T14853] pgfault 678590 [ 528.704049][T14853] pgmajfault 9 [ 528.707512][T14853] inactive_anon 11952128 [ 528.711986][T14853] active_anon 4096 [ 528.715814][T14853] inactive_file 0 [ 528.719514][T14853] active_file 389120 [ 528.720740][T14852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.723402][T14853] unevictable 0 [ 528.723412][T14853] hierarchical_memory_limit 314572800 [ 528.723421][T14853] hierarchical_memsw_limit 9223372036854771712 [ 528.745885][T14853] total_cache 12144640 [ 528.749964][T14853] total_rss 200704 [ 528.750762][T14852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.753669][T14853] total_shmem 11755520 [ 528.753678][T14853] total_mapped_file 12144640 [ 528.753687][T14853] total_dirty 389120 [ 528.753695][T14853] total_writeback 0 [ 528.753704][T14853] total_workingset_refault_anon 0 [ 528.782248][T14853] total_workingset_refault_file 0 [ 528.787336][T14853] total_swap 0 [ 528.790708][T14853] total_swapcached 4096 [ 528.794863][T14853] total_pgpgin 417376 [ 528.798869][T14853] total_pgpgout 414362 [ 528.802932][T14853] total_pgfault 678590 [ 528.804619][T14852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.807086][T14853] total_pgmajfault 9 [ 528.807096][T14853] total_inactive_anon 11952128 [ 528.826229][T14853] total_active_anon 4096 [ 528.830458][T14853] total_inactive_file 0 [ 528.834609][T14853] total_active_file 389120 [ 528.839116][T14853] total_unevictable 0 [ 528.840890][T14852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.843086][T14853] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3157,pid=14841,uid=0 [ 528.861885][T14852] veth1_vlan: left promiscuous mode [ 528.868524][T14853] Memory cgroup out of memory: Killed process 14853 (syz.1.3157) total-vm:96348kB, anon-rss:1420kB, file-rss:22360kB, shmem-rss:11480kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 528.890253][T14852] veth0_vlan: left promiscuous mode [ 528.904561][T14852] veth0_vlan: entered promiscuous mode [ 528.922281][T14852] veth1_vlan: entered promiscuous mode [ 528.937350][T14852] veth1_macvtap: left promiscuous mode [ 528.973838][T14852] veth0_macvtap: left promiscuous mode [ 528.997339][T14852] veth0_macvtap: entered promiscuous mode [ 529.012304][T14852] veth1_macvtap: entered promiscuous mode [ 529.020841][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.029004][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.037563][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.045620][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.146338][T13603] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.153453][T13603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.167705][T13603] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.174822][T13603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.239214][T14869] loop7: detected capacity change from 0 to 512 [ 529.242540][T14860] FAULT_INJECTION: forcing a failure. [ 529.242540][T14860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.258997][T14839] loop9: detected capacity change from 0 to 512 [ 529.260315][T13637] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.272273][T14839] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 529.274771][T13637] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.286176][T14860] CPU: 1 UID: 0 PID: 14860 Comm: syz.8.3160 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 529.286213][T14860] Tainted: [W]=WARN [ 529.286220][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.286292][T14860] Call Trace: [ 529.286300][T14860] [ 529.286309][T14860] __dump_stack+0x1d/0x30 [ 529.286334][T14860] dump_stack_lvl+0x95/0xd0 [ 529.286354][T14860] dump_stack+0x15/0x1b [ 529.286379][T14860] should_fail_ex+0x25e/0x270 [ 529.286401][T14860] should_fail+0xb/0x20 [ 529.286419][T14860] should_fail_usercopy+0x1a/0x20 [ 529.286441][T14860] _copy_from_user+0x1c/0xb0 [ 529.286512][T14860] ppp_set_compress+0x95/0x480 [ 529.286533][T14860] ? __pfx_ppp_ioctl+0x10/0x10 [ 529.286580][T14860] ppp_ioctl+0xf8c/0x1230 [ 529.286598][T14860] ? __pfx_ppp_ioctl+0x10/0x10 [ 529.286627][T14860] __se_sys_ioctl+0xce/0x140 [ 529.286725][T14860] __x64_sys_ioctl+0x43/0x50 [ 529.286798][T14860] x64_sys_call+0x1563/0x3020 [ 529.286820][T14860] do_syscall_64+0x136/0x3c0 [ 529.286841][T14860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.286899][T14860] RIP: 0033:0x7ff3fd8cce59 [ 529.286915][T14860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.286976][T14860] RSP: 002b:00007ff3fc2e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.286996][T14860] RAX: ffffffffffffffda RBX: 00007ff3fdb46180 RCX: 00007ff3fd8cce59 [ 529.287059][T14860] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 529.287073][T14860] RBP: 00007ff3fc2e5090 R08: 0000000000000000 R09: 0000000000000000 [ 529.287093][T14860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.287106][T14860] R13: 00007ff3fdb46218 R14: 00007ff3fdb46180 R15: 00007ffe63d33ef8 [ 529.287125][T14860] [ 529.315465][T14869] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.3162: bad orphan inode 13 [ 529.322986][T13637] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.325991][T14869] fserror_report: 1 callbacks suppressed [ 529.326070][T14869] loop7: lost filesystem error report for type 5 error -117 [ 529.330617][T13637] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.334997][T14869] ext4_test_bit(bit=12, block=4) = 1 [ 529.348702][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 529.348851][ C1] EXT4-fs (loop7): initial error at time 1781833757: ext4_orphan_get:1425 [ 529.348941][ C1] EXT4-fs (loop7): last error at time 1781833757: ext4_orphan_get:1425 [ 529.409588][T14863] can0: slcan on ttyS3. [ 529.410680][T14869] is_bad_inode(inode)=0 [ 529.444736][T13637] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.444818][T13637] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.444872][T13637] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.444904][T13637] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.499467][T14873] __nla_validate_parse: 4 callbacks suppressed [ 529.499495][T14873] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3163'. [ 529.500567][T14869] NEXT_ORPHAN(inode)=0 [ 529.615997][T14875] loop9: detected capacity change from 0 to 512 [ 529.626500][T14869] max_ino=32 [ 529.644045][T14869] i_nlink=1 [ 529.665676][T14875] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.3164: bad orphan inode 13 [ 529.683882][T14840] gre0 speed is unknown, defaulting to 1000 [ 529.706613][T14866] can0 (unregistered): slcan off ttyS3. [ 529.707022][T14875] loop9: lost filesystem error report for type 5 error -117 [ 529.714380][T14875] ext4_test_bit(bit=12, block=4) = 1 [ 529.722017][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 529.722160][ C0] EXT4-fs (loop9): initial error at time 1781833757: ext4_orphan_get:1425 [ 529.722341][ C0] EXT4-fs (loop9): last error at time 1781833757: ext4_orphan_get:1425 [ 529.770739][T14875] is_bad_inode(inode)=0 [ 529.775415][T14875] NEXT_ORPHAN(inode)=0 [ 529.781897][T14875] max_ino=32 [ 529.785444][T14875] i_nlink=1 [ 529.812177][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.834282][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.966624][T14502] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 529.986189][T14895] ALSA: seq fatal error: cannot create timer (-22) [ 530.018813][T14878] gre0 speed is unknown, defaulting to 1000 [ 530.039121][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.080851][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.092872][T14875] syzkaller0: entered promiscuous mode [ 530.098862][T14875] syzkaller0: entered allmulticast mode [ 530.112773][T14890] syzkaller0: entered promiscuous mode [ 530.118402][T14890] syzkaller0: entered allmulticast mode [ 530.222566][T14898] loop1: detected capacity change from 0 to 256 [ 530.246798][T14898] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 530.434408][T14840] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.442099][T14840] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.450300][T14840] bridge_slave_0: entered allmulticast mode [ 530.458020][T14840] bridge_slave_0: entered promiscuous mode [ 530.466333][T14840] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.473716][T14840] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.481738][T14840] bridge_slave_1: entered allmulticast mode [ 530.489803][T14840] bridge_slave_1: entered promiscuous mode [ 530.525029][T14840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.538041][T14840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.586240][T14840] team0: Port device team_slave_0 added [ 530.598731][T14840] team0: Port device team_slave_1 added [ 530.624381][T14840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.635651][T14840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.663586][T14840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.676550][T14840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.683565][T14840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.710875][T14840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.758058][T14840] hsr_slave_0: entered promiscuous mode [ 530.765265][T14840] hsr_slave_1: entered promiscuous mode [ 530.772605][T14840] debugfs: 'hsr0' already exists in 'hsr' [ 530.929078][T14840] Cannot create hsr debugfs directory [ 531.005015][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.015810][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.072640][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.083211][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.330050][ T30] vlan3: left allmulticast mode [ 531.345154][ T30] geneve0: left allmulticast mode [ 531.373754][ T30] vlan3: left promiscuous mode [ 531.399015][ T30] geneve0: left promiscuous mode [ 531.420421][ T30] bridge0: port 3(vlan3) entered disabled state [ 531.456563][ T30] bridge_slave_1: left allmulticast mode [ 531.465329][T14910] loop7: detected capacity change from 0 to 512 [ 531.479874][ T30] bridge_slave_1: left promiscuous mode [ 531.514450][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.561235][T14910] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 531.576109][ T30] bridge_slave_0: left allmulticast mode [ 531.588802][T14921] loop8: detected capacity change from 0 to 512 [ 531.601999][ T30] bridge_slave_0: left promiscuous mode [ 531.621020][T14921] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 531.642063][T14910] EXT4-fs mount: 66 callbacks suppressed [ 531.642188][T14910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.663215][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.700992][ T28] audit: type=1400 audit(1781833759.609:3734): avc: denied { write } for pid=14913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.736743][ T28] audit: type=1400 audit(1781833759.629:3735): avc: denied { write } for pid=14930 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.760429][T14921] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3173: invalid indirect mapped block 4294967295 (level 0) [ 531.811985][T14921] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 531.812252][T14921] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3173: invalid indirect mapped block 4294967295 (level 1) [ 531.821468][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 531.821490][ C1] EXT4-fs (loop8): initial error at time 1781833759: ext4_free_branches:1023: inode 16 [ 531.821529][ C1] EXT4-fs (loop8): last error at time 1781833759: ext4_free_branches:1023: inode 16 [ 531.896780][T14936] loop9: detected capacity change from 0 to 512 [ 531.911162][T14936] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 531.995377][T14921] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 531.998505][T14921] EXT4-fs (loop8): 1 orphan inode deleted [ 532.043684][T14921] EXT4-fs (loop8): 1 truncate cleaned up [ 532.061394][T14921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.074300][ T6772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.083696][T14939] loop9: detected capacity change from 0 to 512 [ 532.106466][T14939] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.3176: bad orphan inode 13 [ 532.136074][T14939] loop9: lost filesystem error report for type 5 error -117 [ 532.136370][T14939] ext4_test_bit(bit=12, block=4) = 1 [ 532.143406][ T30] erspan0 (unregistering): left allmulticast mode [ 532.143884][T14939] is_bad_inode(inode)=0 [ 532.143894][T14939] NEXT_ORPHAN(inode)=0 [ 532.163824][T14939] max_ino=32 [ 532.167099][T14939] i_nlink=1 [ 532.171061][T14939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.213323][ T30] bridge0 (unregistering): left allmulticast mode [ 532.231456][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.241250][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.251634][ T30] bond0 (unregistering): Released all slaves [ 532.259787][ T30] bond1 (unregistering): Released all slaves [ 532.268981][ T30] bond2 (unregistering): Released all slaves [ 532.277519][ T30] bond3 (unregistering): Released all slaves [ 532.286440][ T3017] 8021q: adding VLAN 0 to HW filter on device eth21 [ 532.295705][T14937] can0: slcan on ttyS3. [ 532.336627][T14943] bond1: option arp_interval: invalid value (18446744073480273669) [ 532.344788][T14943] bond1: option arp_interval: allowed values 0 - 2147483647 [ 532.354210][T14940] can0 (unregistered): slcan off ttyS3. [ 532.370727][T14943] bond1 (unregistering): Released all slaves [ 532.432226][T14959] vhci_hcd vhci_hcd.4: invalid port number 255 [ 532.438572][T14959] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 532.455983][T14959] netlink: 'syz.1.3180': attribute type 1 has an invalid length. [ 532.465049][T10592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.573484][T14961] bond1: option arp_interval: invalid value (18446744073480273669) [ 532.582315][T14961] bond1: option arp_interval: allowed values 0 - 2147483647 [ 532.590650][T14961] bond1 (unregistering): Released all slaves [ 532.599807][ T30] tipc: Left network mode [ 532.600569][T14948] syzkaller0: entered promiscuous mode [ 532.609665][T14948] syzkaller0: entered allmulticast mode [ 532.627536][T14965] gre0 speed is unknown, defaulting to 1000 [ 532.740117][ T28] audit: type=1400 audit(1781833760.649:3736): avc: denied { write } for pid=14967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.810463][ T28] audit: type=1400 audit(1781833760.719:3737): avc: denied { write } for pid=14982 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.854294][T10715] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.878054][T14973] ALSA: seq fatal error: cannot create timer (-22) [ 532.890673][ T30] hsr_slave_0: left promiscuous mode [ 532.905246][ T30] hsr_slave_1: left promiscuous mode [ 532.929565][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.966640][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.971065][T14992] loop9: detected capacity change from 0 to 512 [ 532.992069][T14992] EXT4-fs: inline encryption not supported [ 533.006202][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.006299][T14992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 533.020552][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.029593][T14992] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 533.044859][ T30] veth1_macvtap: left promiscuous mode [ 533.050579][ T30] veth0_macvtap: left promiscuous mode [ 533.059148][ T30] veth1_vlan: left promiscuous mode [ 533.063671][T14992] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 533.064611][ T30] veth0_vlan: left promiscuous mode [ 533.079001][T14992] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3185: bg 0: block 248: padding at end of block bitmap is not set [ 533.098372][T14992] loop9: lost filesystem error report for type 5 error -117 [ 533.098772][T14992] Quota error (device loop9): write_blk: dquota write failed [ 533.106106][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 533.106138][ C0] EXT4-fs (loop9): last error at time 1781833761: ext4_validate_block_bitmap:441 [ 533.129363][T14992] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 533.139218][T14992] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3185: Failed to acquire dquot type 1 [ 533.150517][T14992] loop9: lost filesystem error report for type 5 error -28 [ 533.151081][T14992] EXT4-fs (loop9): 1 truncate cleaned up [ 533.163400][T15005] syz.7.3191: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 533.164530][T14992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 533.191327][T15005] CPU: 0 UID: 0 PID: 15005 Comm: syz.7.3191 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 533.191503][T15005] Tainted: [W]=WARN [ 533.191509][T15005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.191520][T15005] Call Trace: [ 533.191527][T15005] [ 533.191534][T15005] __dump_stack+0x1d/0x30 [ 533.191559][T15005] dump_stack_lvl+0x95/0xd0 [ 533.191693][T15005] dump_stack+0x15/0x1b [ 533.191714][T15005] warn_alloc+0x145/0x1c0 [ 533.191735][T15005] ? __rb_insert_augmented+0x76/0x2c0 [ 533.191773][T15005] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 533.191916][T15005] ? hrtimer_start_range_ns_common+0x585/0x860 [ 533.192000][T15005] ? avc_has_perm_noaudit+0xa3/0x120 [ 533.192029][T15005] ? should_fail_ex+0x30/0x270 [ 533.192049][T15005] vmalloc_user_noprof+0x7d/0xb0 [ 533.192176][T15005] ? xskq_create+0x80/0xe0 [ 533.192266][T15005] xskq_create+0x80/0xe0 [ 533.192285][T15005] xsk_init_queue+0x70/0xb0 [ 533.192306][T15005] xsk_setsockopt+0x471/0x640 [ 533.192326][T15005] ? __pfx_xsk_setsockopt+0x10/0x10 [ 533.192420][T15005] __sys_setsockopt+0x184/0x200 [ 533.192445][T15005] __x64_sys_setsockopt+0x64/0x80 [ 533.192474][T15005] x64_sys_call+0x2327/0x3020 [ 533.192530][T15005] do_syscall_64+0x136/0x3c0 [ 533.192548][T15005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.192566][T15005] RIP: 0033:0x7f4aadc2ce59 [ 533.192591][T15005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.192611][T15005] RSP: 002b:00007f4aac63d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 533.192629][T15005] RAX: ffffffffffffffda RBX: 00007f4aadea6180 RCX: 00007f4aadc2ce59 [ 533.192643][T15005] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 533.192657][T15005] RBP: 00007f4aadcc2e6f R08: 0000000000000004 R09: 0000000000000000 [ 533.192672][T15005] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 533.192748][T15005] R13: 00007f4aadea6218 R14: 00007f4aadea6180 R15: 00007ffffb780d68 [ 533.192771][T15005] [ 533.193001][T15005] Mem-Info: [ 533.236541][ T28] audit: type=1400 audit(1781833761.119:3738): avc: denied { write } for pid=14991 comm="syz.9.3185" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 533.237653][T15005] active_anon:46401 inactive_anon:9 isolated_anon:0 [ 533.237653][T15005] active_file:23376 inactive_file:2712 isolated_file:0 [ 533.237653][T15005] unevictable:0 dirty:644 writeback:0 [ 533.237653][T15005] slab_reclaimable:4126 slab_unreclaimable:24766 [ 533.237653][T15005] mapped:35010 shmem:34701 pagetables:4752 [ 533.237653][T15005] sec_pagetables:0 bounce:0 [ 533.237653][T15005] kernel_misc_reclaimable:0 [ 533.237653][T15005] free:1814065 free_pcp:21358 free_cma:0 [ 533.469419][T15005] Node 0 active_anon:185604kB inactive_anon:36kB active_file:93504kB inactive_file:10848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140156kB dirty:2576kB writeback:0kB shmem:138804kB kernel_stack:5408kB pagetables:19008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 533.499913][T15005] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.529612][T15005] lowmem_reserve[]: 0 2878 7857 7857 [ 533.535029][T15005] Node 0 DMA32 free:2944196kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947824kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 533.566468][T15005] lowmem_reserve[]: 0 0 4978 4978 [ 533.566639][ T30] team0 (unregistering): Port device team_slave_1 removed [ 533.571605][T15005] Node 0 Normal free:4300128kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:185588kB inactive_anon:36kB active_file:93504kB inactive_file:10888kB unevictable:0kB writepending:2656kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:78648kB local_pcp:10892kB free_cma:0kB [ 533.612042][T15005] lowmem_reserve[]: 0 0 0 0 [ 533.612200][ T30] team0 (unregistering): Port device team_slave_0 removed [ 533.616662][T15005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 533.636546][T15005] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944196kB [ 533.652817][T15005] Node 0 Normal: 2392*4kB (UM) 1174*8kB (UM) 815*16kB (UM) 665*32kB (UME) 388*64kB (UME) 149*128kB (UME) 138*256kB (UME) 53*512kB (UME) 34*1024kB (UME) 33*2048kB (UME) 986*4096kB (UME) = 4300704kB [ 533.653721][T10715] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 533.685916][T13629] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 533.695005][T15005] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 533.705263][T13629] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:20: Failed to release dquot type 1 [ 533.716989][T13637] net_ratelimit: 67 callbacks suppressed [ 533.717002][T13637] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 533.732574][T15005] 60794 total pagecache pages [ 533.736932][T13637] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 533.741917][T15005] 3 pages in swap cache [ 533.757421][T13629] loop9: lost filesystem error report for type 5 error -117 [ 533.761240][T15005] Free swap = 123052kB [ 533.770246][T15003] slcan: can't register candev [ 533.779976][T15005] Total swap = 124996kB [ 533.784215][T15005] 2097051 pages RAM [ 533.788454][T15005] 0 pages HighMem/MovableOnly [ 533.793284][T15005] 81696 pages reserved [ 533.793711][ T3017] 8021q: adding VLAN 0 to HW filter on device eth22 [ 533.881702][T15014] loop9: detected capacity change from 0 to 512 [ 533.889777][T15014] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 533.900259][T15014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.924783][T15018] loop8: detected capacity change from 0 to 512 [ 533.935408][T15018] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 533.969686][T15018] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.008900][ T28] audit: type=1400 audit(1781833761.919:3739): avc: denied { write } for pid=15017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.082339][ T28] audit: type=1400 audit(1781833761.989:3740): avc: denied { write } for pid=15033 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.176031][ T28] audit: type=1400 audit(1781833762.079:3741): avc: denied { write } for pid=15036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.226079][ T28] audit: type=1400 audit(1781833762.129:3742): avc: denied { write } for pid=15047 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.231496][T14840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 534.266953][T14840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.277058][T13614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 534.291393][T13614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 534.326435][T14840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 534.336916][T14840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.346237][T14840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 534.371755][T14840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.383744][T14840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 534.396370][T14840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.407537][ T30] IPVS: stop unused estimator thread 0... [ 534.479298][T14840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.491183][T14840] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.510775][T13614] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.517879][T13614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.529838][T13629] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.536951][T13629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.673656][T10715] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.690841][T10592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.722782][T15061] loop1: detected capacity change from 0 to 512 [ 534.769085][T15076] FAULT_INJECTION: forcing a failure. [ 534.769085][T15076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.818356][T15061] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 534.821735][T15076] CPU: 0 UID: 0 PID: 15076 Comm: syz.9.3199 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 534.821763][T15076] Tainted: [W]=WARN [ 534.821769][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 534.821781][T15076] Call Trace: [ 534.821788][T15076] [ 534.821796][T15076] __dump_stack+0x1d/0x30 [ 534.821830][T15076] dump_stack_lvl+0x95/0xd0 [ 534.821850][T15076] dump_stack+0x15/0x1b [ 534.821868][T15076] should_fail_ex+0x25e/0x270 [ 534.821890][T15076] should_fail+0xb/0x20 [ 534.821931][T15076] should_fail_usercopy+0x1a/0x20 [ 534.821956][T15076] _copy_from_user+0x1c/0xb0 [ 534.822002][T15076] __copy_msghdr+0x242/0x300 [ 534.822031][T15076] ___sys_sendmsg+0x10c/0x1e0 [ 534.822058][T15076] ? terminate_walk+0x1d5/0x200 [ 534.822124][T15076] __sys_sendmmsg+0x185/0x320 [ 534.822175][T15076] __x64_sys_sendmmsg+0x57/0x70 [ 534.822265][T15076] x64_sys_call+0x27aa/0x3020 [ 534.822354][T15076] do_syscall_64+0x136/0x3c0 [ 534.822374][T15076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.822395][T15076] RIP: 0033:0x7efe1123ce59 [ 534.822412][T15076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.822430][T15076] RSP: 002b:00007efe0fc8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 534.822451][T15076] RAX: ffffffffffffffda RBX: 00007efe114b5fa0 RCX: 00007efe1123ce59 [ 534.822523][T15076] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000003 [ 534.822537][T15076] RBP: 00007efe0fc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 534.822550][T15076] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 534.822563][T15076] R13: 00007efe114b6038 R14: 00007efe114b5fa0 R15: 00007ffd1ece35a8 [ 534.822623][T15076] [ 534.871086][T13629] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 534.967748][T14840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.970914][T13629] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 535.070911][T15061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.096766][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3201'. [ 535.107421][T15087] can0: slcan on ttyS3. [ 535.119842][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3201'. [ 535.153763][T14840] veth0_vlan: entered promiscuous mode [ 535.161840][T14840] veth1_vlan: entered promiscuous mode [ 535.176942][T14840] veth0_macvtap: entered promiscuous mode [ 535.184330][T14840] veth1_macvtap: entered promiscuous mode [ 535.187083][T15087] can0 (unregistered): slcan off ttyS3. [ 535.218731][T14840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.229924][T14840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.245149][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.254247][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.263609][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.272706][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.313126][T15096] gre0 speed is unknown, defaulting to 1000 [ 535.341656][T13710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.401046][T15102] nfs: Deprecated parameter 'nointr' [ 535.577678][T13603] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 535.592173][T13603] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 535.615162][T15096] ALSA: seq fatal error: cannot create timer (-22) [ 535.637008][ T23] hid_parser_main: 24 callbacks suppressed [ 535.637025][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.652168][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.661552][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.669339][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.677082][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.684932][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.693493][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.709733][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.717657][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.725178][ T23] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 535.756710][T15106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.758621][ T23] hid-generic 0006:0008:0001.000C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 535.768654][T15106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.805298][T15124] fido_id[15124]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 536.045926][T15129] loop7: detected capacity change from 0 to 512 [ 536.068840][T15131] FAULT_INJECTION: forcing a failure. [ 536.068840][T15131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.099557][T15131] CPU: 1 UID: 0 PID: 15131 Comm: syz.9.3215 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 536.099589][T15131] Tainted: [W]=WARN [ 536.099598][T15131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.099609][T15131] Call Trace: [ 536.099615][T15131] [ 536.099623][T15131] __dump_stack+0x1d/0x30 [ 536.099647][T15131] dump_stack_lvl+0x95/0xd0 [ 536.099671][T15131] dump_stack+0x15/0x1b [ 536.099687][T15131] should_fail_ex+0x25e/0x270 [ 536.099730][T15131] should_fail+0xb/0x20 [ 536.099778][T15131] should_fail_usercopy+0x1a/0x20 [ 536.099797][T15131] _copy_to_user+0x20/0xa0 [ 536.099818][T15131] simple_read_from_buffer+0xb5/0x130 [ 536.099845][T15131] proc_fail_nth_read+0x10e/0x150 [ 536.099910][T15131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.099935][T15131] vfs_read+0x18e/0x7c0 [ 536.100052][T15131] ? __rcu_read_unlock+0x4e/0x70 [ 536.100077][T15131] ? __fget_files+0x184/0x1c0 [ 536.100096][T15131] ? mutex_lock+0x57/0x90 [ 536.100118][T15131] ksys_read+0xdc/0x1a0 [ 536.100140][T15131] __x64_sys_read+0x40/0x50 [ 536.100264][T15131] x64_sys_call+0x2886/0x3020 [ 536.100283][T15131] do_syscall_64+0x136/0x3c0 [ 536.100302][T15131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.100344][T15131] RIP: 0033:0x7efe111fd68e [ 536.100362][T15131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 536.100378][T15131] RSP: 002b:00007efe0fc8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.100396][T15131] RAX: ffffffffffffffda RBX: 00007efe0fc8f6c0 RCX: 00007efe111fd68e [ 536.100435][T15131] RDX: 000000000000000f RSI: 00007efe0fc8f0a0 RDI: 0000000000000004 [ 536.100449][T15131] RBP: 00007efe0fc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 536.100463][T15131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.100474][T15131] R13: 00007efe114b6038 R14: 00007efe114b5fa0 R15: 00007ffd1ece35a8 [ 536.100505][T15131] [ 536.309486][T15133] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3216'. [ 536.314668][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 536.318821][T15129] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 536.332870][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 536.349716][T15110] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 536.382037][T15129] EXT4-fs (loop7): 1 truncate cleaned up [ 536.403623][T15129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.481945][T15138] bond1: option arp_interval: invalid value (18446744073480273669) [ 536.488438][T15144] nfs: Deprecated parameter 'nointr' [ 536.493623][T15138] bond1: option arp_interval: allowed values 0 - 2147483647 [ 536.505224][T15138] bond1 (unregistering): Released all slaves [ 536.518692][T15143] netlink: 'syz.8.3220': attribute type 30 has an invalid length. [ 536.530151][T15143] netlink: 'syz.8.3220': attribute type 30 has an invalid length. [ 536.653682][T15153] gre0 speed is unknown, defaulting to 1000 [ 536.832443][ T6772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.887935][T15157] ALSA: seq fatal error: cannot create timer (-22) [ 537.175174][T15167] loop1: detected capacity change from 0 to 512 [ 537.200594][T15167] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3228: bad orphan inode 13 [ 537.210643][T15167] loop1: lost filesystem error report for type 5 error -117 [ 537.210775][T15167] ext4_test_bit(bit=12, block=4) = 1 [ 537.223446][T15167] is_bad_inode(inode)=0 [ 537.227621][T15167] NEXT_ORPHAN(inode)=0 [ 537.231727][T15167] max_ino=32 [ 537.234915][T15167] i_nlink=1 [ 537.238440][T15167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.330766][ T23] hid-generic 0006:0008:0001.000D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 537.511129][T13710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.656251][T15189] nfs: Deprecated parameter 'nointr' [ 537.826788][T15181] gre0 speed is unknown, defaulting to 1000 [ 537.911834][T15195] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3235'. [ 538.096358][T15204] loop2: detected capacity change from 0 to 1024 [ 538.104320][T15204] EXT4-fs: Ignoring removed bh option [ 538.141262][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 538.141314][ T28] audit: type=1326 audit(1781833765.989:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d534ce59 code=0x7ffc0000 [ 538.325061][T15204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.534049][ T28] audit: type=1326 audit(1781833765.999:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d534ce59 code=0x7ffc0000 [ 538.534681][ T28] audit: type=1326 audit(1781833765.999:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d534ce59 code=0x7ffc0000 [ 538.574861][ T28] audit: type=1326 audit(1781833765.999:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d534ce59 code=0x7ffc0000 [ 538.575030][ T28] audit: type=1326 audit(1781833765.999:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa4d534ce59 code=0x7ffc0000 [ 538.575428][ T28] audit: type=1326 audit(1781833765.999:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4d534cbc2 code=0x7ffc0000 [ 538.575785][ T28] audit: type=1326 audit(1781833765.999:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4d530d68e code=0x7ffc0000 [ 538.582766][ T28] audit: type=1326 audit(1781833765.999:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa4d534cc87 code=0x7ffc0000 [ 538.582856][ T28] audit: type=1326 audit(1781833766.009:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4d530d68e code=0x7ffc0000 [ 538.583425][ T28] audit: type=1326 audit(1781833766.009:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4d534caeb code=0x7ffc0000 [ 538.738462][ T3467] net_ratelimit: 6 callbacks suppressed [ 538.738476][ T3467] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 538.738501][ T3467] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 538.770324][T15205] loop1: detected capacity change from 0 to 8192 [ 538.921643][T15205] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 538.921756][T15205] FAT-fs (loop1): Filesystem has been set read-only [ 539.069486][T15215] bond1: option arp_interval: invalid value (18446744073480273669) [ 539.069575][T15215] bond1: option arp_interval: allowed values 0 - 2147483647 [ 539.070720][T15215] bond1 (unregistering): Released all slaves [ 539.159268][T15203] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 539.176868][T13614] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 539.254558][T13614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 539.254587][T13614] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 539.309604][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'. [ 539.309880][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'. [ 539.331472][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3244'. [ 539.466314][T15236] loop1: detected capacity change from 0 to 512 [ 539.468437][T15236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 539.472162][T15236] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3246: iget: bad i_size value: 38620345925642 [ 539.472239][T15236] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 539.472347][T15236] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3246: couldn't read orphan inode 15 (err -117) [ 539.472442][T15236] loop1: lost filesystem error report for type 5 error -117 [ 539.563525][T15236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.720303][T15244] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3249'. [ 539.830197][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 539.848375][T15236] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3246: bg 0: block 5: invalid block bitmap [ 539.853196][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 539.863869][T14840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.926231][T15236] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 540.090723][T15236] EXT4-fs (loop1): This should not happen!! Data will be lost [ 540.090723][T15236] [ 540.100912][T15236] EXT4-fs (loop1): Total free blocks count 0 [ 540.129613][T15236] EXT4-fs (loop1): Free/Dirty block details [ 540.137803][T15260] syzkaller0: entered promiscuous mode [ 540.143519][T15260] syzkaller0: entered allmulticast mode [ 540.152293][T15259] syzkaller0: entered promiscuous mode [ 540.152613][T15260] FAULT_INJECTION: forcing a failure. [ 540.152613][T15260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.181024][T15259] syzkaller0: entered allmulticast mode [ 540.182479][T15236] EXT4-fs (loop1): free_blocks=0 [ 540.192338][T15236] EXT4-fs (loop1): dirty_blocks=4152 [ 540.199242][T15260] CPU: 0 UID: 0 PID: 15260 Comm: syz.7.3255 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 540.199275][T15260] Tainted: [W]=WARN [ 540.199282][T15260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.199298][T15260] Call Trace: [ 540.199305][T15260] [ 540.199313][T15260] __dump_stack+0x1d/0x30 [ 540.199341][T15260] dump_stack_lvl+0x95/0xd0 [ 540.199363][T15260] dump_stack+0x15/0x1b [ 540.199382][T15260] should_fail_ex+0x25e/0x270 [ 540.199405][T15260] should_fail+0xb/0x20 [ 540.199544][T15260] should_fail_usercopy+0x1a/0x20 [ 540.199573][T15260] _copy_from_user+0x1c/0xb0 [ 540.199660][T15260] __sys_sendto+0x1b5/0x470 [ 540.199689][T15260] __x64_sys_sendto+0x76/0x90 [ 540.199713][T15260] x64_sys_call+0x2d35/0x3020 [ 540.199732][T15260] do_syscall_64+0x136/0x3c0 [ 540.199757][T15260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.199821][T15260] RIP: 0033:0x7f4aadc2ce59 [ 540.199835][T15260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.199941][T15260] RSP: 002b:00007f4aac67f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 540.199959][T15260] RAX: ffffffffffffffda RBX: 00007f4aadea5fa0 RCX: 00007f4aadc2ce59 [ 540.199971][T15260] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 540.199983][T15260] RBP: 00007f4aac67f090 R08: 0000200000000140 R09: 0000000000000014 [ 540.199996][T15260] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 540.200008][T15260] R13: 00007f4aadea6038 R14: 00007f4aadea5fa0 R15: 00007ffffb780d68 [ 540.200056][T15260] [ 540.200286][T15236] EXT4-fs (loop1): Block reservation details [ 540.342959][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3256'. [ 540.345206][T15236] EXT4-fs (loop1): i_reserved_data_blocks=4152 [ 540.404859][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3256'. [ 540.419991][T13637] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 540.434422][T13637] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 540.452282][T13637] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 540.484344][T13710] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 540.510644][T15267] loop8: detected capacity change from 0 to 512 [ 540.559630][T15267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 540.579973][T15271] nfs: Deprecated parameter 'nointr' [ 540.592143][T15274] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3261'. [ 540.597209][T15267] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3258: iget: bad i_size value: 38620345925642 [ 540.614019][T15267] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 540.614281][T15267] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3258: couldn't read orphan inode 15 (err -117) [ 540.635621][T15267] loop8: lost filesystem error report for type 5 error -117 [ 540.636430][T15267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.650210][T15275] loop7: detected capacity change from 0 to 512 [ 540.734012][T15281] loop2: detected capacity change from 0 to 512 [ 540.743036][T15283] loop9: detected capacity change from 0 to 512 [ 540.762372][T15281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 540.819441][T15283] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3264: inode has both inline data and extents flags [ 540.832884][T15283] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 540.833128][T15283] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3264: couldn't read orphan inode 15 (err -117) [ 540.838290][T15275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.842310][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 540.842327][ C1] EXT4-fs (loop9): initial error at time 1781833768: ext4_orphan_get:1399: inode 15 [ 540.842350][ C1] EXT4-fs (loop9): last error at time 1781833768: ext4_orphan_get:1399 [ 540.855410][T15281] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3263: iget: bad i_size value: 38620345925642 [ 540.866841][ C1] : inode 15 [ 540.912808][T15275] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.929174][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 540.943482][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 540.976322][T15283] loop9: lost filesystem error report for type 5 error -117 [ 540.978389][T15283] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.004685][T15281] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 541.004931][T15281] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3263: couldn't read orphan inode 15 (err -117) [ 541.014115][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 541.014149][ C0] EXT4-fs (loop2): initial error at time 1781833768: ext4_orphan_get:1399: inode 15 [ 541.014173][ C0] EXT4-fs (loop2): last error at time 1781833768: ext4_orphan_get:1399: inode 15 [ 541.115597][T15281] loop2: lost filesystem error report for type 5 error -117 [ 541.117871][T15281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.440230][T15290] program syz.1.3265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.592502][T13637] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:23: bg 0: block 5: invalid block bitmap [ 541.607987][T13637] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 541.622336][T13631] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:21: bg 0: block 5: invalid block bitmap [ 541.624358][T13637] EXT4-fs (loop2): This should not happen!! Data will be lost [ 541.624358][T13637] [ 541.646494][T13637] EXT4-fs (loop2): Total free blocks count 0 [ 541.647802][T10715] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.652513][T13637] EXT4-fs (loop2): Free/Dirty block details [ 541.661582][T13631] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 541.667669][T13637] EXT4-fs (loop2): free_blocks=0 [ 541.685316][T13637] EXT4-fs (loop2): dirty_blocks=7248 [ 541.691075][T13637] EXT4-fs (loop2): Block reservation details [ 541.693098][T13631] EXT4-fs (loop8): This should not happen!! Data will be lost [ 541.693098][T13631] [ 541.697499][T13637] EXT4-fs (loop2): i_reserved_data_blocks=7248 [ 541.713705][ T6772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.730928][T13631] EXT4-fs (loop8): Total free blocks count 0 [ 541.737088][T13631] EXT4-fs (loop8): Free/Dirty block details [ 541.743125][T13631] EXT4-fs (loop8): free_blocks=0 [ 541.748466][T13631] EXT4-fs (loop8): dirty_blocks=14304 [ 541.754092][T13631] EXT4-fs (loop8): Block reservation details [ 541.760271][T13631] EXT4-fs (loop8): i_reserved_data_blocks=14304 [ 541.783654][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3269'. [ 541.795308][T13631] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 541.820059][T13623] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 541.842610][T14840] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 541.876143][T10592] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 541.940704][T15305] FAULT_INJECTION: forcing a failure. [ 541.940704][T15305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.999385][T15305] CPU: 1 UID: 0 PID: 15305 Comm: syz.2.3267 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 541.999418][T15305] Tainted: [W]=WARN [ 541.999424][T15305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.999446][T15305] Call Trace: [ 541.999454][T15305] [ 541.999462][T15305] __dump_stack+0x1d/0x30 [ 541.999506][T15305] dump_stack_lvl+0x95/0xd0 [ 541.999525][T15305] dump_stack+0x15/0x1b [ 541.999543][T15305] should_fail_ex+0x25e/0x270 [ 541.999562][T15305] should_fail+0xb/0x20 [ 541.999632][T15305] should_fail_usercopy+0x1a/0x20 [ 541.999722][T15305] _copy_to_user+0x20/0xa0 [ 541.999781][T15305] simple_read_from_buffer+0xb5/0x130 [ 541.999809][T15305] proc_fail_nth_read+0x10e/0x150 [ 541.999887][T15305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.999952][T15305] vfs_read+0x18e/0x7c0 [ 541.999973][T15305] ? __rcu_read_unlock+0x4e/0x70 [ 541.999999][T15305] ? __fget_files+0x184/0x1c0 [ 542.000153][T15305] ? mutex_lock+0x57/0x90 [ 542.000176][T15305] ksys_read+0xdc/0x1a0 [ 542.000240][T15305] __x64_sys_read+0x40/0x50 [ 542.000286][T15305] x64_sys_call+0x2886/0x3020 [ 542.000306][T15305] do_syscall_64+0x136/0x3c0 [ 542.000347][T15305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.000365][T15305] RIP: 0033:0x7fa4d530d68e [ 542.000378][T15305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 542.000396][T15305] RSP: 002b:00007fa4d3da6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 542.000452][T15305] RAX: ffffffffffffffda RBX: 00007fa4d3da76c0 RCX: 00007fa4d530d68e [ 542.000464][T15305] RDX: 000000000000000f RSI: 00007fa4d3da70a0 RDI: 0000000000000004 [ 542.000619][T15305] RBP: 00007fa4d3da7090 R08: 0000000000000000 R09: 0000000000000000 [ 542.000633][T15305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.000647][T15305] R13: 00007fa4d55c6038 R14: 00007fa4d55c5fa0 R15: 00007ffe676df578 [ 542.000743][T15305] [ 542.309118][T15312] bond1: option arp_interval: invalid value (18446744073480273669) [ 542.318117][T15312] bond1: option arp_interval: allowed values 0 - 2147483647 [ 542.394501][T15312] bond1 (unregistering): Released all slaves [ 542.454369][T15324] loop9: detected capacity change from 0 to 512 [ 542.485065][T15324] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3278: inode has both inline data and extents flags [ 542.511353][T15325] syzkaller0: entered promiscuous mode [ 542.519767][T15325] syzkaller0: entered allmulticast mode [ 542.527070][T15324] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 542.527185][T15324] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3278: couldn't read orphan inode 15 (err -117) [ 542.536627][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 542.536646][ C1] EXT4-fs (loop9): initial error at time 1781833770: ext4_orphan_get:1399: inode 15 [ 542.536674][ C1] EXT4-fs (loop9): last error at time 1781833770: ext4_orphan_get:1399: inode 15 [ 542.573669][T15324] loop9: lost filesystem error report for type 5 error -117 [ 542.583489][T15324] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.596338][T15330] loop1: detected capacity change from 0 to 512 [ 542.644528][T10715] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.693546][ T3284] ================================================================== [ 542.701722][ T3284] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 542.708832][ T3284] [ 542.711151][ T3284] write to 0xffff8881040a83ac of 4 bytes by task 3285 on cpu 1: [ 542.718769][ T3284] shmem_mknod+0x143/0x170 [ 542.723183][ T3284] shmem_create+0x34/0x50 [ 542.727599][ T3284] path_openat+0xcfb/0x2000 [ 542.732183][ T3284] do_file_open+0x16c/0x290 [ 542.736683][ T3284] do_sys_openat2+0xa0/0x130 [ 542.741266][ T3284] __x64_sys_openat+0xf2/0x120 [ 542.746028][ T3284] x64_sys_call+0x1e39/0x3020 [ 542.750784][ T3284] do_syscall_64+0x136/0x3c0 [ 542.755383][ T3284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.761278][ T3284] [ 542.763777][ T3284] read to 0xffff8881040a83ac of 4 bytes by task 3284 on cpu 0: [ 542.771307][ T3284] fill_mg_cmtime+0x5b/0x240 [ 542.775980][ T3284] generic_fillattr+0x24d/0x340 [ 542.780847][ T3284] shmem_getattr+0x181/0x200 [ 542.785438][ T3284] vfs_getattr_nosec+0x146/0x1e0 [ 542.790381][ T3284] vfs_getattr+0x48/0x60 [ 542.794662][ T3284] vfs_statx_path+0x28/0x140 [ 542.799266][ T3284] vfs_statx+0xc4/0x170 [ 542.803431][ T3284] vfs_fstatat+0x118/0x170 [ 542.807892][ T3284] __se_sys_newfstatat+0x55/0x3e0 [ 542.812914][ T3284] __x64_sys_newfstatat+0x55/0x70 [ 542.817934][ T3284] x64_sys_call+0x2c64/0x3020 [ 542.822702][ T3284] do_syscall_64+0x136/0x3c0 [ 542.827287][ T3284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.833182][ T3284] [ 542.835497][ T3284] value changed: 0x24973685 -> 0x249c4d2b [ 542.841208][ T3284] [ 542.843573][ T3284] Reported by Kernel Concurrency Sanitizer on: [ 542.849717][ T3284] CPU: 0 UID: 0 PID: 3284 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 542.860219][ T3284] Tainted: [W]=WARN [ 542.864010][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.874068][ T3284] ================================================================== [ 542.957384][T15330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.977371][T15330] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.055934][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.429287][T13710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.056770][ T30] net_ratelimit: 10 callbacks suppressed [ 544.056785][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 544.077661][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 544.595962][T13623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 544.610322][T13623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 545.125968][T13623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 545.140259][T13623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 545.655953][T13623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 545.670290][T13623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 546.186033][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 546.200337][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.285938][T13631] net_ratelimit: 10 callbacks suppressed [ 549.285956][T13631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 549.305928][T13631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.835987][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 549.850323][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 550.376036][T13631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 550.390658][T13631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 550.735993][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 550.907584][T13631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 550.921918][T13631] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 551.446406][T13623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 551.460747][T13623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01