last executing test programs: 7m51.934688865s ago: executing program 4 (id=2574): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000640)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c622379dc46a287748e2e673742f3ce5d57be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442ced8d387fe7282d16851afdc", 0x96}, {0x0}, {0x0}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7m51.368427926s ago: executing program 4 (id=2576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getpriority(0x0, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x401, 0x9, 0xfffffff9, 0x20b, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r4, 0x100) r5 = dup(r4) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x2000}, 0x44040) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 7m49.314133653s ago: executing program 4 (id=2583): socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) 7m48.93602274s ago: executing program 4 (id=2584): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "b9c5ec18837993a6", "94dd7adf162b79d63db3cda2b4b7c3f2779d7b777112824651d28000", "6ebc780b", "3f23b1802d00cd92"}, 0x38) 7m44.75668156s ago: executing program 4 (id=2588): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket(0x40000000015, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x9}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m44.277637154s ago: executing program 4 (id=2592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, 0x0, 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, &(0x7f00000003c0)='q\xa9', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7m28.914724106s ago: executing program 32 (id=2592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, 0x0, 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, &(0x7f00000003c0)='q\xa9', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m51.429688713s ago: executing program 0 (id=2895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 5m50.252700536s ago: executing program 0 (id=2897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x80}}, 0x0) 5m49.377568289s ago: executing program 0 (id=2898): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m46.359974145s ago: executing program 0 (id=2901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x24, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 5m45.991942372s ago: executing program 0 (id=2903): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000018c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}]}}]}, 0x50}}, 0x2004080) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "b9c5ec18837993a6", "94dd7adf162b79d63db3cda2b4b7c3f2779d7b777112824651d28000", "6ebc780b", "3f23b1802d00cd92"}, 0x38) 5m37.120812008s ago: executing program 0 (id=2922): writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 5m21.714619082s ago: executing program 33 (id=2922): writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2m23.656671334s ago: executing program 6 (id=3708): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x816, &(0x7f0000000380)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x80000000, 0x4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x34d4c0, 0x0) 2m23.618701776s ago: executing program 6 (id=3709): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setresuid(0xee00, 0xee00, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=0x0, @ANYBLOB="2d21b3b6b86c61eb205decd9ad6eda04002f80"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x24020400) 2m23.322163418s ago: executing program 6 (id=3715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0}) socket$inet(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) 2m19.707460497s ago: executing program 6 (id=3726): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0x2a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000007c0)={[{@nombcache}, {@lazytime}, {@block_validity}, {@block_validity}, {@nojournal_checksum}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x45c, &(0x7f0000000b80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)='./file0\x00') 2m19.3937025s ago: executing program 6 (id=3728): socket$rds(0x15, 0x5, 0x0) stat(0x0, 0x0) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x10c0000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/41, 0x29}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m19.263802439s ago: executing program 6 (id=3732): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) inotify_init1(0x800) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7fffffffffffffff) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') 2m19.2449171s ago: executing program 34 (id=3732): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) inotify_init1(0x800) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7fffffffffffffff) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') 1m24.997773158s ago: executing program 5 (id=4204): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f00000003c0)) 1m24.729009777s ago: executing program 5 (id=4210): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) unshare(0x24060400) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x1860) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}, {@nodevmap}]}}) r4 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x30030, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp, 0xa20, 0x8, 0x10000, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f00000002c0)=""/124, 0x7c, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r4, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX=r3], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x42880, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1m23.890140818s ago: executing program 5 (id=4224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff01000000050007000000000008000900000000000600020001000000"], 0x3c}}, 0x0) 1m23.889751027s ago: executing program 5 (id=4225): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x401a, &(0x7f0000000000), 0x2, 0xbdd, &(0x7f0000000800)="$eJzs3M1rG+kZAPBnxrJiJ27llFKaXupSQgKlip3i0IRCk5LSSw+F9lqIceRgrHxgu6R2fJDbf6C0Pbf0UkgbWnpozrnssnvdy25y3WUPC2HxxrsQll0tow9bG1mOk0ierPP7wat533klPc/jsTTzgqQAXlkT2U0acSwiLiURpdb+NCKKjd5IRK15v82NtdlPNtZmk6jXf/1hEklEPNpYm20/V9LaHmkNRiLirZ8l8Y0/dsddWlldmKlWK4ut8anlqzdOLa2s/nD+6syVypXKtakzP54+PX1m8ux032p9/O75ux9/7xfv1z7912d3PvrLP5M4H2Otuc46+mUiJrb+Jp0KETHT72A5GWrV01lnUnjKg9IBJwUAQE9pxzXct6IUQ7F98VaK197ONTkAAACgL+pDEXUAAADggEus/wEAAOCAa38O4NHG2my75fuJhP318EJEjDfr32y15kwhao3tSAxHxOFHSXR+rTVpPuyFTUTEew/O/jdr0fU95L/f7kOIXdXWI+LbOx3/pFH/eONb3N31pxEx2Yf4E0+M9/v/70XqP9+H+HnXD8Cr6d6F5oms+/yXbl3/xA7nv8IO567n0fv8tz8/EtK+/tvsuv7brn+ox/Xfr/YY49btv93sNZfV/5O7P/9Pu2Xxs+0LFfUMHq5HfKewU/3JVv1Jj/ov7TFG6fOblV5zeddf/0fEidi5/rZk998nOjU3X61MNm93jLH+5vS/e8XPu/7s+B/uUX/79596Hf8be4zx24sX/9e188F2d/f60w+KyW8avWJrz+9nlpcXpyKKyS+795/eJZHa9n3az5HVf/L7u7/+d6p/qPl0jbnsnWq9tc3Gf3gi7E/v3Pp/r5Ta679nPv6jT73HnmT1X+5x/Dvrf6PQffz/tMcYx1//88lec53r36xl8dtrYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSyNiLJK0vNVP03I54khEfDMOp9XrS8s/mLv+u2uXs7mI8RhO5+arlcmIKDXHSTaeavS3x6efGP8oIo5GxF9Lo41xefZ69XLexQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDlSESMRZKWIyKNiM1SmpbLeWcFAAAA9N143gkAAAAAA2f9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdvS79+4nEVE7N9pomWJrbjjXzIBBS/NOAMjNUN4JALkp5J0AkJtnXOO7XIADKHnK/EjPmUN9zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAl9eJY/fuJxFROzfaaJlia24418yAQUvzTgDIzdBuk4X9ywPYf17i8OqyxgeS3Sanj3eOal+ePDSYhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4KY01WpKWI6LY2lcuR3wtIsZjOJmbr1YmI+LrEfFOafhQNp7KOWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6b2lldWGmWq0sZp00Wp2tPV+BTiTNSgYeqxWnln/JOn3pFOM5H/64Xq/nnfzAO7m+LQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkJOlldWFmWq1sriUdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3pZWVhdmqtXK4gA7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+vggAAP//iD0LXQ==") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d814}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1014080, &(0x7f0000000000)={[{@barrier}, {@debug}, {@lazytime}]}, 0xfe, 0x5b3, &(0x7f0000001400)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007a0198000000000095000000000000007b4ee05685c4864cb50e0d38779ddf1470a2a3066542a0cbabdd721ccaed1d45a7ebbfbe2ea902000000891b997ed730f806d27eeaa66b7907f4bf5b00c1e3a59d6427e2af1adeddb522bacb83a6c16121853f6866f396e47ef37ad045be560de1a8a08c56294e5d0f0357450ee43f8be8e3701604183f5b2dfaac9ec1c89a5bd64a249ec2166afc3a55277cc0a8d8e3836c207d2d87a493f361cc442b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) fremovexattr(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='btr']) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000001b40)=""/4104, 0x1008}], 0x1, 0x0, 0x0, 0xa) 1m23.316862959s ago: executing program 5 (id=4236): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000100)=""/8, 0x8}], 0x2, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$RTC_PIE_OFF(r2, 0x7006) 1m21.843127774s ago: executing program 5 (id=4249): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r10], 0x54}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r3, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001328e1dc933b5558026a5e1e593b0009", @ANYRES32=r5, @ANYBLOB="141004001f4c050008000a00", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x20040000) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d03be7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x80000001) r11 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x0, 0xc}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x7f, 0x400}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x4, 0x1c, 0xd, 0x1, 0x2, 0xffffffff}}, {0x4}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) 1m21.740655202s ago: executing program 35 (id=4249): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r10], 0x54}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r3, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001328e1dc933b5558026a5e1e593b0009", @ANYRES32=r5, @ANYBLOB="141004001f4c050008000a00", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x20040000) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d03be7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x80000001) r11 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x0, 0xc}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x7f, 0x400}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x4, 0x1c, 0xd, 0x1, 0x2, 0xffffffff}}, {0x4}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) 7.858614236s ago: executing program 2 (id=4800): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x710e, &(0x7f0000000240)={0x0, 0xcd55, 0x2000, 0x2, 0x380}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x81}, {0x6}]}) r2 = syz_io_uring_setup(0x1891, &(0x7f0000000080)={0x0, 0xa435, 0x1000, 0x0, 0x197, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) r6 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x1}) poll(0x0, 0x0, 0x9) 6.426793159s ago: executing program 3 (id=4808): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) (fail_nth: 2) 6.284556959s ago: executing program 3 (id=4809): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73ee, 0x1f410, 0x80000001, 0x1c8}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x130, 0x12, 0x60a, 0x130, 0x202, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0xffffffff], 'netpci0\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfe}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [0xff], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 6.100672782s ago: executing program 3 (id=4811): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r4, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd704547e1ffff04000000080009"], 0x24}}, 0x20) 5.401975822s ago: executing program 3 (id=4812): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/171, 0xab, 0x11) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 4.843316083s ago: executing program 1 (id=4815): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40142, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) 4.31507293s ago: executing program 7 (id=4820): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) 3.917869809s ago: executing program 1 (id=4821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_setup(0x239f, &(0x7f00000001c0)) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r6, 0x8}}, 0x10) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000300), 0x0, 0x101) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.146201014s ago: executing program 7 (id=4822): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xfffffefffffffffe]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) tkill(r0, 0xf) wait4(r0, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x73}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3906a7e7}]}}]}, 0x48}}, 0x4008000) 2.296855045s ago: executing program 7 (id=4823): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x1a0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f7, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000000)="8000645dd38061ea", 0x8, 0x24040814, &(0x7f0000000800)={0xa, 0x6e20, 0x7f, @loopback={0xfec0ffffffffffff}, 0x1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) unshare(0x2c020400) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) ioctl$BLKPG(r8, 0x1274, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x2000004, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x50) 2.22942259s ago: executing program 1 (id=4824): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x224, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x5, 0x2}, 0xff19, 0x6, 0x1, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) socket(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) 2.153630026s ago: executing program 1 (id=4825): socket$inet(0x2, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) 2.006329956s ago: executing program 2 (id=4826): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2a9001e, &(0x7f00000000c0), 0xfe, 0x51b, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WufHtqtqD1BOCKFKiB5B2obEG0Wx4yh2ShP2sD1zRaISJzjyB3DuiTsXBDcu5YDEjwjUICExaMbj1Ju1s9FmY2fjz0cazXvzHH+/L9bMi1/seQGMrWsR8SAiJiPivYiYK44nxRZvd7bscZ8e3F89PLi/mkSavvuPJG/PjkXPz2SuFs9ZiYgffCfix8mjcVt7+5sr9Xptp6gvtBvbC629/ZsbjZX12nptK/vh24tv3Xpz+an19ZXGZFH68ie/f/CNn2ZpzRZHevvxJJJOl/sdj4jyUZzMRER87yzBLpArRX8mR50IT6QUES9GxKv5+T8XV/JXEwC4zNJ0LtK53joAcNmV8jmwpFQt5gJmo1SqVjtzeC/FTKnebLVv3Gvubq11/kyYj3Lp3ka9tljMFc5HOcnqS3n5s/pypz7Vrd+KiBci4udT03m9utqsr43yDx8AGGNXj43//57qjP8AwCVXGXUCAMDQGf8BYPwY/wFg/Bj/AWD8dMb/6VGnAQAM0Ynv/90PCAAuJfP/ADBWvv/OO9mWHhb3v157f293s/n+zbVaa7Pa2F2trjZ3tqvrzeZ6fs+exuOer95sbi+9EbsfzH9zu9VeaO3t3200d7fad/P7et+tlfNH9b1VNgAwJC+88vGfkmxEvjOdb9GzlkN5pJkB56006gSAkbky6gSAkTnTp3sqPhsEz7IzvMc3PQCXRJ8leh9S6fcFoTRN007pf+k55QWcn+tfMP8P46pn/t+ngGHMmP+H8WUGH8ZXmianXfM/TvtAAOBiM8cPDPj//4vF/jfFPwd+tHb8ER+dZ1YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXXX/60Wa4HPRqlUrUY8FxHzUU7ubdRrixHxfET8cao8ldWXRpwzAHBWpb8mxfpf1+den32o6eWrR8XJiPjJL9/9xQcr7fbOHyImk39OdY+3PyqOLw8/ewDgZNl7/e44ne973sh/enB/tbsNM6e/fTsiKp34hweTcXgUfyIm8n0lyhEx86+kqHckPXMXZ/Hgw4j4fL/+JzGbz4F0Vj49Hj+L/dxQ45ceil/K2zr77HfxuaeQC4ybj7Prz9v9zr9SXMv3/c//Sn6FOrvi+pc91ephfg38LH73+ndlwPXv2mljvPG773ZK04+2fRjxxYmIbuzDnutPN34yIP7rp4z/5y+9/OqgtvRXEdfjTt/4vbEW2o3thdbe/s2Nxsp6bb22tbx8e+n24lu33lxeyOeoFwaPBn+/c+P5QW1Z/2eif/8rj+n/V0/Z/1//970ffuWE+F9/rV/8Urx0QvxsTPzaKeOvzPy2Mqgti782oP+Pe/1vnDL+J3/Zf2TZcABgdFp7+5sr9Xpt51kvzJY7Hboo+SicRyF7hS9AGn0L3xpWrMno3/Sz1zqnwLGmNH2iWIOuGE9j1g24CI5O+oj4z6iTAQAAAAAAAAAAAAAA+hrGN5ZG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAur/8HAAD//5enzt4=") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0xffffffffffffffff) 1.81433802s ago: executing program 8 (id=4827): r0 = socket$kcm(0xa, 0x5, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1000) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") 1.67263037s ago: executing program 2 (id=4828): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00'], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x40090) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x9c}}, 0x20008004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r11, 0x25, 0x0, @val=@netfilter={0x5, 0x1, 0x1, 0x1}}, 0x20) 1.67243612s ago: executing program 8 (id=4829): io_uring_setup(0x691, &(0x7f0000000100)={0x0, 0x880e, 0x8, 0x0, 0x2d9}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.607905665s ago: executing program 2 (id=4830): io_uring_setup(0x691, &(0x7f0000000100)={0x0, 0x880e, 0x8, 0x0, 0x2d9}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.52233697s ago: executing program 2 (id=4831): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40142, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) 1.367346032s ago: executing program 7 (id=4832): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) 1.274749159s ago: executing program 1 (id=4833): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@usrquota}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/252}, 0x104, 0xced6b2bc496a26e6, 0x0) msgsnd(r0, &(0x7f00000010c0)={0x2}, 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) r2 = getpid() move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.25351188s ago: executing program 8 (id=4834): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x224, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x5, 0x2}, 0xff19, 0x6, 0x1, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 1.193423734s ago: executing program 8 (id=4835): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3, 0x9, 0x16, 0x20, 0x6}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44004}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000300)={0xc0004014}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x6, 0x1, 0x2, 0x4, 0x53, 0xe}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r9, &(0x7f0000000000)=@abs={0x27, 0x0, 0x2}, 0x6e) 637.813634ms ago: executing program 2 (id=4836): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x710e, &(0x7f0000000240)={0x0, 0xcd55, 0x2000, 0x2, 0x380}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x81}, {0x6}]}) r2 = syz_io_uring_setup(0x1891, &(0x7f0000000080)={0x0, 0xa435, 0x1000, 0x0, 0x197, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) r6 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x1}) poll(0x0, 0x0, 0x9) 466.999086ms ago: executing program 7 (id=4837): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c000900090000060015000200000014001680"], 0x38}}, 0x2000a080) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff}, 0x0) 408.021531ms ago: executing program 7 (id=4838): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x30000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000100)={0x800, r0, 'id1\x00'}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f000001f940)) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f00000002c0)=ANY=[], 0x381, 0x0) 406.71122ms ago: executing program 1 (id=4839): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = syz_io_uring_setup(0xc46, &(0x7f0000000280)={0x0, 0x38fa, 0x1, 0x0, 0x361}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x8, 0xe3e1, 0xcfe}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000200)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000940), 0x200001, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000400)={0x1ff, r4, 0x2, {0x40000000002, 0x258}, 0x1f}, 0x1) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000480)) write(0xffffffffffffffff, 0x0, 0x0) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r7, &(0x7f00000000c0)=[{0x2}], 0x1) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) semop(r7, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r8, r8, 0x0, 0x80000000) syz_open_dev$tty20(0xc, 0x4, 0x1) setresgid(0xee00, 0x0, 0xffffffffffffffff) r9 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$BTRFS_IOC_SUBVOL_CREATE(r9, 0x4004550c, 0x0) 258.926961ms ago: executing program 8 (id=4840): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00'], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x40090) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x9c}}, 0x20008004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000020000000800", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r11, 0x25, 0x0, @val=@netfilter={0x5, 0x1, 0x1, 0x1}}, 0x20) 253.414771ms ago: executing program 3 (id=4841): io_uring_setup(0x691, &(0x7f0000000100)={0x0, 0x880e, 0x8, 0x0, 0x2d9}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 425.75µs ago: executing program 3 (id=4842): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x1a0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f7, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000000)="8000645dd38061ea", 0x8, 0x24040814, &(0x7f0000000800)={0xa, 0x6e20, 0x7f, @loopback={0xfec0ffffffffffff}, 0x1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) unshare(0x2c020400) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) ioctl$BLKPG(r8, 0x1274, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x2000004, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x50) 0s ago: executing program 8 (id=4843): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) kernel console output (not intermixed with test programs): 00000. [ 740.272545][T17922] tipc: Enabled bearer , priority 0 [ 740.312214][T17922] syzkaller0: entered promiscuous mode [ 740.341304][T17922] syzkaller0: entered allmulticast mode [ 740.372152][T17922] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4376'. [ 740.428325][T17922] tipc: Resetting bearer [ 740.444484][T17920] tipc: Resetting bearer [ 740.469014][T17920] tipc: Disabling bearer [ 740.598295][T17934] FAULT_INJECTION: forcing a failure. [ 740.598295][T17934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.611369][T17935] set_capacity_and_notify: 1 callbacks suppressed [ 740.611387][T17935] loop1: detected capacity change from 0 to 2048 [ 740.613207][T17934] CPU: 1 UID: 0 PID: 17934 Comm: syz.8.4381 Not tainted syzkaller #0 PREEMPT(full) [ 740.613269][T17934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 740.613290][T17934] Call Trace: [ 740.613298][T17934] [ 740.613307][T17934] __dump_stack+0x1d/0x30 [ 740.613334][T17934] dump_stack_lvl+0x95/0xd0 [ 740.613407][T17934] dump_stack+0x15/0x1b [ 740.613430][T17934] should_fail_ex+0x263/0x280 [ 740.613458][T17934] should_fail+0xb/0x20 [ 740.613561][T17934] should_fail_usercopy+0x1a/0x20 [ 740.613592][T17934] strncpy_from_user+0x27/0x250 [ 740.613614][T17934] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 740.613641][T17934] do_getname+0x59/0x1c0 [ 740.613742][T17934] __se_sys_rmdir+0x1b/0xe0 [ 740.613766][T17934] __x64_sys_rmdir+0x1f/0x30 [ 740.613788][T17934] x64_sys_call+0x2448/0x3020 [ 740.613874][T17934] do_syscall_64+0x12c/0x370 [ 740.613902][T17934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.613934][T17934] RIP: 0033:0x7f609653c819 [ 740.613952][T17934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.613971][T17934] RSP: 002b:00007f6094f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 740.613994][T17934] RAX: ffffffffffffffda RBX: 00007f60967b5fa0 RCX: 00007f609653c819 [ 740.614080][T17934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 740.614100][T17934] RBP: 00007f6094f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 740.614114][T17934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.614148][T17934] R13: 00007f60967b6038 R14: 00007f60967b5fa0 R15: 00007ffe2a1a46e8 [ 740.614168][T17934] [ 740.836918][T17941] loop8: detected capacity change from 0 to 512 [ 740.844167][T17941] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 740.857780][T17938] loop3: detected capacity change from 0 to 512 [ 740.878809][T16728] loop1: p1 p2 [ 740.888842][T17941] EXT4-fs (loop8): 1 truncate cleaned up [ 740.908270][T17941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.926643][T17935] loop1: p1 p2 [ 740.982473][T17938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.003689][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 741.003762][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 741.036375][T17955] loop1: detected capacity change from 0 to 512 [ 741.054547][T17955] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 741.065748][T17504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.076307][T17955] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4386: bad orphan inode 131083 [ 741.097978][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 741.098862][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.104459][ C1] EXT4-fs (loop1): initial error at time 1775272311: ext4_orphan_get:1423 [ 741.121969][ C1] EXT4-fs (loop1): last error at time 1775272311: ext4_orphan_get:1423 [ 741.136143][T17955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.166778][T17962] loop3: detected capacity change from 0 to 512 [ 741.174069][T17962] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 741.218142][T17962] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.4388: bad orphan inode 131083 [ 741.230026][T17962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.825749][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.835558][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.918885][T17994] loop1: detected capacity change from 0 to 512 [ 741.930448][T17994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 741.942456][T17994] EXT4-fs (loop1): 1 truncate cleaned up [ 741.950539][T17994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.976054][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.996582][T18001] loop1: detected capacity change from 0 to 512 [ 742.005082][T18001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 742.016666][T18001] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4399: bad orphan inode 131083 [ 742.028855][T18001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.051763][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.097677][T18007] FAULT_INJECTION: forcing a failure. [ 742.097677][T18007] name failslab, interval 1, probability 0, space 0, times 0 [ 742.122036][T18007] CPU: 0 UID: 0 PID: 18007 Comm: syz.1.4400 Not tainted syzkaller #0 PREEMPT(full) [ 742.122071][T18007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.122087][T18007] Call Trace: [ 742.122096][T18007] [ 742.122105][T18007] __dump_stack+0x1d/0x30 [ 742.122165][T18007] dump_stack_lvl+0x95/0xd0 [ 742.122195][T18007] dump_stack+0x15/0x1b [ 742.122221][T18007] should_fail_ex+0x263/0x280 [ 742.122255][T18007] should_failslab+0x8c/0xb0 [ 742.122339][T18007] __kmalloc_cache_node_noprof+0x6b/0x480 [ 742.122378][T18007] ? __get_vm_area_node+0x106/0x1d0 [ 742.122468][T18007] __get_vm_area_node+0x106/0x1d0 [ 742.122497][T18007] __vmalloc_node_range_noprof+0x291/0x12b0 [ 742.122599][T18007] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 742.122626][T18007] ? __rcu_read_unlock+0x4e/0x70 [ 742.122651][T18007] ? avc_has_perm_noaudit+0xab/0x130 [ 742.122767][T18007] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 742.122791][T18007] __vmalloc_noprof+0xa4/0xf0 [ 742.122815][T18007] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 742.122835][T18007] bpf_prog_alloc_no_stats+0x47/0x390 [ 742.122917][T18007] ? bpf_prog_alloc+0x2a/0x150 [ 742.123014][T18007] bpf_prog_alloc+0x3c/0x150 [ 742.123033][T18007] bpf_prog_load+0x506/0x1140 [ 742.123069][T18007] ? security_bpf+0x2b/0x90 [ 742.123124][T18007] __sys_bpf+0x505/0x7e0 [ 742.123157][T18007] __x64_sys_bpf+0x41/0x50 [ 742.123203][T18007] x64_sys_call+0x10cb/0x3020 [ 742.123289][T18007] do_syscall_64+0x12c/0x370 [ 742.123323][T18007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.123344][T18007] RIP: 0033:0x7ff7ae3ac819 [ 742.123377][T18007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.123463][T18007] RSP: 002b:00007ff7ace07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 742.123567][T18007] RAX: ffffffffffffffda RBX: 00007ff7ae625fa0 RCX: 00007ff7ae3ac819 [ 742.123585][T18007] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005 [ 742.123601][T18007] RBP: 00007ff7ace07090 R08: 0000000000000000 R09: 0000000000000000 [ 742.123744][T18007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.123760][T18007] R13: 00007ff7ae626038 R14: 00007ff7ae625fa0 R15: 00007ffebef84258 [ 742.123782][T18007] [ 742.124491][T18007] syz.1.4400: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 742.278468][T17975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.525452][T18007] ,cpuset=syz1,mems_allowed=0 [ 742.531947][T18007] CPU: 0 UID: 0 PID: 18007 Comm: syz.1.4400 Not tainted syzkaller #0 PREEMPT(full) [ 742.532041][T18007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.532055][T18007] Call Trace: [ 742.532063][T18007] [ 742.532128][T18007] __dump_stack+0x1d/0x30 [ 742.532161][T18007] dump_stack_lvl+0x95/0xd0 [ 742.532266][T18007] dump_stack+0x15/0x1b [ 742.532291][T18007] warn_alloc+0x145/0x1c0 [ 742.532366][T18007] ? __pfx_warn_alloc+0x10/0x10 [ 742.532393][T18007] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 742.532466][T18007] ? __rcu_read_unlock+0x4e/0x70 [ 742.532488][T18007] ? avc_has_perm_noaudit+0xab/0x130 [ 742.532526][T18007] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 742.532548][T18007] __vmalloc_noprof+0xa4/0xf0 [ 742.532577][T18007] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 742.532597][T18007] bpf_prog_alloc_no_stats+0x47/0x390 [ 742.532617][T18007] ? bpf_prog_alloc+0x2a/0x150 [ 742.532640][T18007] bpf_prog_alloc+0x3c/0x150 [ 742.532666][T18007] bpf_prog_load+0x506/0x1140 [ 742.532711][T18007] ? security_bpf+0x2b/0x90 [ 742.532736][T18007] __sys_bpf+0x505/0x7e0 [ 742.532814][T18007] __x64_sys_bpf+0x41/0x50 [ 742.532834][T18007] x64_sys_call+0x10cb/0x3020 [ 742.532889][T18007] do_syscall_64+0x12c/0x370 [ 742.532920][T18007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.532992][T18007] RIP: 0033:0x7ff7ae3ac819 [ 742.533011][T18007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.533031][T18007] RSP: 002b:00007ff7ace07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 742.533055][T18007] RAX: ffffffffffffffda RBX: 00007ff7ae625fa0 RCX: 00007ff7ae3ac819 [ 742.533070][T18007] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005 [ 742.533086][T18007] RBP: 00007ff7ace07090 R08: 0000000000000000 R09: 0000000000000000 [ 742.533142][T18007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.533155][T18007] R13: 00007ff7ae626038 R14: 00007ff7ae625fa0 R15: 00007ffebef84258 [ 742.533174][T18007] [ 742.533295][T18007] Mem-Info: [ 742.899320][T18007] active_anon:23865 inactive_anon:3 isolated_anon:0 [ 742.899320][T18007] active_file:23953 inactive_file:2671 isolated_file:0 [ 742.899320][T18007] unevictable:0 dirty:204 writeback:0 [ 742.899320][T18007] slab_reclaimable:3890 slab_unreclaimable:22905 [ 742.899320][T18007] mapped:39437 shmem:13641 pagetables:1670 [ 742.899320][T18007] sec_pagetables:0 bounce:0 [ 742.899320][T18007] kernel_misc_reclaimable:0 [ 742.899320][T18007] free:1847423 free_pcp:14437 free_cma:0 [ 742.953234][T18007] Node 0 active_anon:95808kB inactive_anon:12kB active_file:95812kB inactive_file:10684kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158212kB dirty:816kB writeback:0kB shmem:55028kB kernel_stack:4432kB pagetables:6448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 743.017120][T18030] loop2: detected capacity change from 0 to 512 [ 743.022661][T18007] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 743.054757][T18007] lowmem_reserve[]: 0 2879 7857 7857 [ 743.069267][T18030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 743.094447][T18007] Node 0 DMA32 free:2944612kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948136kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 743.127094][T18007] lowmem_reserve[]: 0 0 4978 4978 [ 743.127705][T18030] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4404: bad orphan inode 131083 [ 743.132741][T18007] Node 0 Normal free:4429592kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103116kB inactive_anon:12kB active_file:95812kB inactive_file:10684kB unevictable:0kB writepending:816kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:47596kB local_pcp:11964kB free_cma:0kB [ 743.177972][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 743.184596][ C1] EXT4-fs (loop2): initial error at time 1775272313: ext4_orphan_get:1423 [ 743.193287][ C1] EXT4-fs (loop2): last error at time 1775272313: ext4_orphan_get:1423 [ 743.208725][T18030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.213191][T18007] lowmem_reserve[]: 0 0 0 0 [ 743.245887][T18007] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 743.282902][T18007] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944612kB [ 743.373703][T18007] Node 0 Normal: 25*4kB (UE) 1210*8kB (UM) 270*16kB (UE) 324*32kB (UME) 150*64kB (UME) 147*128kB (UME) 96*256kB (UME) 64*512kB (UME) 73*1024kB (UME) 46*2048kB (UME) 1012*4096kB (UM) = 4424340kB [ 743.413395][T18007] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 743.437996][T18007] 44611 total pagecache pages [ 743.442943][T18007] 3 pages in swap cache [ 743.467492][T18007] Free swap = 124984kB [ 743.476473][T18007] Total swap = 124996kB [ 743.486698][T18007] 2097051 pages RAM [ 743.500781][T18007] 0 pages HighMem/MovableOnly [ 743.508190][T18007] 81617 pages reserved [ 743.596839][T13115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.073851][T18065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18065 comm=syz.7.4413 [ 744.088969][T18066] FAULT_INJECTION: forcing a failure. [ 744.088969][T18066] name failslab, interval 1, probability 0, space 0, times 0 [ 744.103121][T18066] CPU: 0 UID: 0 PID: 18066 Comm: syz.1.4412 Not tainted syzkaller #0 PREEMPT(full) [ 744.103198][T18066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.103211][T18066] Call Trace: [ 744.103219][T18066] [ 744.103228][T18066] __dump_stack+0x1d/0x30 [ 744.103335][T18066] dump_stack_lvl+0x95/0xd0 [ 744.103360][T18066] dump_stack+0x15/0x1b [ 744.103385][T18066] should_fail_ex+0x263/0x280 [ 744.103417][T18066] should_failslab+0x8c/0xb0 [ 744.103522][T18066] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 744.103555][T18066] ? __alloc_skb+0x2d6/0x690 [ 744.103624][T18066] __alloc_skb+0x2d6/0x690 [ 744.103654][T18066] ? __alloc_skb+0x200/0x690 [ 744.103684][T18066] netlink_alloc_large_skb+0xbf/0xf0 [ 744.103781][T18066] netlink_sendmsg+0x40c/0x6f0 [ 744.103864][T18066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.103888][T18066] ____sys_sendmsg+0x563/0x5b0 [ 744.103984][T18066] ___sys_sendmsg+0x195/0x1e0 [ 744.104027][T18066] __x64_sys_sendmsg+0xd4/0x160 [ 744.104145][T18066] x64_sys_call+0x194c/0x3020 [ 744.104176][T18066] do_syscall_64+0x12c/0x370 [ 744.104203][T18066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.104225][T18066] RIP: 0033:0x7ff7ae3ac819 [ 744.104277][T18066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.104295][T18066] RSP: 002b:00007ff7acde6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.104319][T18066] RAX: ffffffffffffffda RBX: 00007ff7ae626090 RCX: 00007ff7ae3ac819 [ 744.104337][T18066] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 744.104354][T18066] RBP: 00007ff7acde6090 R08: 0000000000000000 R09: 0000000000000000 [ 744.104427][T18066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.104442][T18066] R13: 00007ff7ae626128 R14: 00007ff7ae626090 R15: 00007ffebef84258 [ 744.104462][T18066] [ 744.365253][T18068] loop7: detected capacity change from 0 to 4096 [ 744.377154][T18068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.400689][T18068] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.474274][T18045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.503568][T18068] loop7: detected capacity change from 0 to 2048 [ 744.531372][T18071] ext4: Unknown parameter 'pcr' [ 744.575174][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 744.575117][T16728] loop7: p1 p2 [ 744.575189][ T28] audit: type=1400 audit(1775272314.620:728): avc: denied { setopt } for pid=18070 comm="syz.8.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 744.608096][T18068] loop7: p1 p2 [ 744.617924][ T3003] loop7: p1 p2 [ 744.672129][ T28] audit: type=1400 audit(1775272314.620:729): avc: denied { read } for pid=18070 comm="syz.8.4415" path="socket:[53741]" dev="sockfs" ino=53741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 744.718025][ T28] audit: type=1400 audit(1775272314.650:730): avc: denied { write } for pid=18070 comm="syz.8.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 744.734929][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 744.759827][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 744.759929][T18080] iso9660: Bad value for 'uid' [ 744.774720][T18080] iso9660: Bad value for 'uid' [ 744.780630][ T28] audit: type=1400 audit(1775272314.650:731): avc: denied { accept } for pid=18070 comm="syz.8.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 744.809431][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 744.820790][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 744.863518][ T28] audit: type=1400 audit(1775272314.750:732): avc: denied { mount } for pid=18072 comm="syz.1.4416" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 744.908548][T13655] udevd[13655]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 744.914886][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 744.943521][T18075] FAULT_INJECTION: forcing a failure. [ 744.943521][T18075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.957270][T18075] CPU: 1 UID: 0 PID: 18075 Comm: syz.2.4417 Not tainted syzkaller #0 PREEMPT(full) [ 744.957312][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.957359][T18075] Call Trace: [ 744.957368][T18075] [ 744.957377][T18075] __dump_stack+0x1d/0x30 [ 744.957408][T18075] dump_stack_lvl+0x95/0xd0 [ 744.957449][T18075] dump_stack+0x15/0x1b [ 744.957535][T18075] should_fail_ex+0x263/0x280 [ 744.957563][T18075] should_fail+0xb/0x20 [ 744.957613][T18075] should_fail_usercopy+0x1a/0x20 [ 744.957645][T18075] _copy_from_iter+0xcf/0xea0 [ 744.957678][T18075] ? __kvmalloc_node_noprof+0x569/0x650 [ 744.957749][T18075] ? file_tty_write+0x1a3/0x690 [ 744.957780][T18075] file_tty_write+0x322/0x690 [ 744.957810][T18075] ? __pfx_tty_write+0x10/0x10 [ 744.957908][T18075] tty_write+0x25/0x30 [ 744.957939][T18075] vfs_write+0x5a6/0x9f0 [ 744.957972][T18075] ksys_write+0xdc/0x1a0 [ 744.957997][T18075] __x64_sys_write+0x40/0x50 [ 744.958037][T18075] x64_sys_call+0x27e1/0x3020 [ 744.958068][T18075] do_syscall_64+0x12c/0x370 [ 744.958113][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.958138][T18075] RIP: 0033:0x7fbf8fa1c819 [ 744.958157][T18075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.958177][T18075] RSP: 002b:00007fbf8e46f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 744.958201][T18075] RAX: ffffffffffffffda RBX: 00007fbf8fc95fa0 RCX: 00007fbf8fa1c819 [ 744.958295][T18075] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 000000000000000a [ 744.958319][T18075] RBP: 00007fbf8e46f090 R08: 0000000000000000 R09: 0000000000000000 [ 744.958362][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.958376][T18075] R13: 00007fbf8fc96038 R14: 00007fbf8fc95fa0 R15: 00007fff73db3268 [ 744.958438][T18075] [ 745.424276][T18109] FAULT_INJECTION: forcing a failure. [ 745.424276][T18109] name failslab, interval 1, probability 0, space 0, times 0 [ 745.437259][T18109] CPU: 1 UID: 0 PID: 18109 Comm: syz.1.4426 Not tainted syzkaller #0 PREEMPT(full) [ 745.437292][T18109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.437305][T18109] Call Trace: [ 745.437313][T18109] [ 745.437322][T18109] __dump_stack+0x1d/0x30 [ 745.437352][T18109] dump_stack_lvl+0x95/0xd0 [ 745.437384][T18109] dump_stack+0x15/0x1b [ 745.437406][T18109] should_fail_ex+0x263/0x280 [ 745.437435][T18109] should_failslab+0x8c/0xb0 [ 745.437502][T18109] __kvmalloc_node_noprof+0x155/0x650 [ 745.437528][T18109] ? cred_has_capability+0x224/0x2a0 [ 745.437560][T18109] ? alloc_netdev_mqs+0xa5/0xa40 [ 745.437597][T18109] ? __pfx_gprs_setup+0x10/0x10 [ 745.437622][T18109] alloc_netdev_mqs+0xa5/0xa40 [ 745.437663][T18109] gprs_attach+0x65/0x350 [ 745.437723][T18109] pep_setsockopt+0x2a1/0x330 [ 745.437759][T18109] sock_common_setsockopt+0x69/0x80 [ 745.437855][T18109] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 745.437927][T18109] __sys_setsockopt+0x184/0x200 [ 745.437967][T18109] __x64_sys_setsockopt+0x64/0x80 [ 745.438004][T18109] x64_sys_call+0x2327/0x3020 [ 745.438097][T18109] do_syscall_64+0x12c/0x370 [ 745.438128][T18109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.438154][T18109] RIP: 0033:0x7ff7ae3ac819 [ 745.438172][T18109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.438243][T18109] RSP: 002b:00007ff7acde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 745.438328][T18109] RAX: ffffffffffffffda RBX: 00007ff7ae626090 RCX: 00007ff7ae3ac819 [ 745.438344][T18109] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000008 [ 745.438359][T18109] RBP: 00007ff7acde6090 R08: 0000000000000004 R09: 0000000000000000 [ 745.438382][T18109] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 745.438398][T18109] R13: 00007ff7ae626128 R14: 00007ff7ae626090 R15: 00007ffebef84258 [ 745.438417][T18109] [ 745.807205][T18117] lo speed is unknown, defaulting to 1000 [ 745.947216][T18127] set_capacity_and_notify: 2 callbacks suppressed [ 745.947252][T18127] loop8: detected capacity change from 0 to 512 [ 745.964580][T18127] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 746.029117][T18127] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.4433: bad orphan inode 131083 [ 746.084251][T18130] loop2: detected capacity change from 0 to 128 [ 746.103698][T18124] netlink: 'syz.7.4430': attribute type 39 has an invalid length. [ 746.149047][T18127] fserror_report: 7 callbacks suppressed [ 746.149155][T18127] loop8: lost filesystem error report for type 5 error -117 [ 746.241374][T18127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.608897][T18138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4436'. [ 746.786897][T17504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.868086][T18159] lo speed is unknown, defaulting to 1000 [ 746.954318][T18165] loop2: detected capacity change from 0 to 512 [ 746.967011][T18165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 746.979057][T18165] EXT4-fs (loop2): 1 truncate cleaned up [ 746.986391][T18165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.063290][T13115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.171466][T18173] loop7: detected capacity change from 0 to 512 [ 747.178701][T18173] EXT4-fs: Ignoring removed bh option [ 747.200257][T18173] EXT4-fs: Ignoring removed mblk_io_submit option [ 747.215659][T18173] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 747.230638][T18173] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 747.238941][T18173] EXT4-fs (loop7): orphan cleanup on readonly fs [ 747.253152][T18173] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4 [ 747.265966][T18173] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 747.276184][T18173] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.4444: Failed to acquire dquot type 1 [ 747.288084][T18173] loop7: lost filesystem error report for type 5 error -5 [ 747.288332][T18173] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4444: Invalid block bitmap block 0 in block_group 0 [ 747.309227][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 747.309249][ C1] EXT4-fs (loop7): last error at time 1775272317: ext4_acquire_dquot:7026 [ 747.329390][T18173] loop7: lost filesystem error report for type 5 error -117 [ 747.330493][T18173] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4444: Invalid block bitmap block 0 in block_group 0 [ 747.351754][T18173] loop7: lost filesystem error report for type 5 error -117 [ 747.352464][T18173] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4444: Invalid block bitmap block 0 in block_group 0 [ 747.375500][T18173] loop7: lost filesystem error report for type 5 error -117 [ 747.376106][T18173] Quota error (device loop7): write_blk: dquota write failed [ 747.393195][T18173] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 747.405719][T18173] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.4444: Failed to acquire dquot type 1 [ 747.421816][T18173] loop7: lost filesystem error report for type 5 error -28 [ 747.422522][T18173] Quota error (device loop7): write_blk: dquota write failed [ 747.439123][T18173] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.4444: Failed to acquire dquot type 1 [ 747.453406][T18173] loop7: lost filesystem error report for type 5 error -28 [ 747.455031][T18173] EXT4-fs (loop7): 1 orphan inode deleted [ 747.470689][T18173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 747.753126][T18194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4449'. [ 747.776462][T18196] loop3: detected capacity change from 0 to 512 [ 747.797262][T18196] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 747.812709][T18196] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.4450: bad orphan inode 131083 [ 747.823203][T18196] loop3: lost filesystem error report for type 5 error -117 [ 747.823904][T18196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.861297][T15595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.992918][T18209] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 748.023264][T18209] loop2: detected capacity change from 0 to 2048 [ 748.079680][T16728] loop2: p1 p2 p3 [ 748.178962][T18205] lo speed is unknown, defaulting to 1000 [ 748.261684][T18209] loop2: p1 p2 p3 [ 748.628680][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.766855][T18234] loop2: detected capacity change from 0 to 512 [ 748.775605][T18234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 748.790168][T18234] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4461: bad orphan inode 131083 [ 748.807354][T18234] loop2: lost filesystem error report for type 5 error -117 [ 748.852636][T18238] loop2: detected capacity change from 0 to 256 [ 748.936282][T18248] loop3: detected capacity change from 0 to 512 [ 748.957371][T18248] EXT4-fs: Ignoring removed bh option [ 748.962948][T18248] EXT4-fs: Ignoring removed mblk_io_submit option [ 748.995600][T18248] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 749.015553][T18248] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 749.023837][T18248] EXT4-fs (loop3): orphan cleanup on readonly fs [ 749.031377][T18248] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.4460: Failed to acquire dquot type 1 [ 749.043569][T18248] loop3: lost filesystem error report for type 5 error -5 [ 749.043833][T18248] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4460: Invalid block bitmap block 0 in block_group 0 [ 749.051098][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 749.051122][ C0] EXT4-fs (loop3): last error at time 1775272319: ext4_acquire_dquot:7026 [ 749.081799][T18248] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4460: Invalid block bitmap block 0 in block_group 0 [ 749.107403][T18248] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4460: Invalid block bitmap block 0 in block_group 0 [ 749.121854][T18248] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.4460: Failed to acquire dquot type 1 [ 749.135065][T18248] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.4460: Failed to acquire dquot type 1 [ 749.146830][T18248] EXT4-fs (loop3): 1 orphan inode deleted [ 749.183181][T18265] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4464'. [ 749.502230][T18298] loop8: detected capacity change from 0 to 512 [ 749.659586][T18314] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 749.677554][T18314] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4469: bad orphan inode 131083 [ 749.734929][T18336] FAULT_INJECTION: forcing a failure. [ 749.734929][T18336] name failslab, interval 1, probability 0, space 0, times 0 [ 749.917305][T18336] CPU: 1 UID: 0 PID: 18336 Comm: syz.3.4468 Not tainted syzkaller #0 PREEMPT(full) [ 749.917406][T18336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 749.917422][T18336] Call Trace: [ 749.917429][T18336] [ 749.917439][T18336] __dump_stack+0x1d/0x30 [ 749.917470][T18336] dump_stack_lvl+0x95/0xd0 [ 749.917667][T18336] dump_stack+0x15/0x1b [ 749.917692][T18336] should_fail_ex+0x263/0x280 [ 749.917781][T18336] should_failslab+0x8c/0xb0 [ 749.917808][T18336] __kvmalloc_node_noprof+0x155/0x650 [ 749.917836][T18336] ? alloc_netdev_mqs+0xa5/0xa40 [ 749.917914][T18336] ? __pfx_gprs_setup+0x10/0x10 [ 749.917983][T18336] alloc_netdev_mqs+0xa5/0xa40 [ 749.918020][T18336] gprs_attach+0x65/0x350 [ 749.918043][T18336] pep_setsockopt+0x2a1/0x330 [ 749.918067][T18336] sock_common_setsockopt+0x69/0x80 [ 749.918147][T18336] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 749.918177][T18336] __sys_setsockopt+0x184/0x200 [ 749.918213][T18336] __x64_sys_setsockopt+0x64/0x80 [ 749.918338][T18336] x64_sys_call+0x2327/0x3020 [ 749.918429][T18336] do_syscall_64+0x12c/0x370 [ 749.918459][T18336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.918483][T18336] RIP: 0033:0x7f78b34ec819 [ 749.918502][T18336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.918548][T18336] RSP: 002b:00007f78b1f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 749.918631][T18336] RAX: ffffffffffffffda RBX: 00007f78b3766090 RCX: 00007f78b34ec819 [ 749.918649][T18336] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000008 [ 749.918661][T18336] RBP: 00007f78b1f26090 R08: 0000000000000004 R09: 0000000000000000 [ 749.918698][T18336] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 749.918712][T18336] R13: 00007f78b3766128 R14: 00007f78b3766090 R15: 00007ffd3272aa08 [ 749.918731][T18336] [ 750.303126][T18349] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 750.340853][T18353] FAULT_INJECTION: forcing a failure. [ 750.340853][T18353] name failslab, interval 1, probability 0, space 0, times 0 [ 750.378801][T18349] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.4472: bad orphan inode 131083 [ 750.414151][T18353] CPU: 1 UID: 0 PID: 18353 Comm: syz.3.4473 Not tainted syzkaller #0 PREEMPT(full) [ 750.414201][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 750.414215][T18353] Call Trace: [ 750.414223][T18353] [ 750.414232][T18353] __dump_stack+0x1d/0x30 [ 750.414264][T18353] dump_stack_lvl+0x95/0xd0 [ 750.414287][T18353] dump_stack+0x15/0x1b [ 750.414351][T18353] should_fail_ex+0x263/0x280 [ 750.414529][T18353] should_failslab+0x8c/0xb0 [ 750.414555][T18353] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 750.414582][T18353] ? __alloc_skb+0x2d6/0x690 [ 750.414619][T18353] __alloc_skb+0x2d6/0x690 [ 750.414722][T18353] ? __alloc_skb+0x200/0x690 [ 750.414749][T18353] netlink_alloc_large_skb+0xbf/0xf0 [ 750.414778][T18353] netlink_sendmsg+0x40c/0x6f0 [ 750.414863][T18353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.414922][T18353] ____sys_sendmsg+0x563/0x5b0 [ 750.415037][T18353] ___sys_sendmsg+0x195/0x1e0 [ 750.415099][T18353] __x64_sys_sendmsg+0xd4/0x160 [ 750.415133][T18353] x64_sys_call+0x194c/0x3020 [ 750.415162][T18353] do_syscall_64+0x12c/0x370 [ 750.415232][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.415256][T18353] RIP: 0033:0x7f78b34ec819 [ 750.415276][T18353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.415356][T18353] RSP: 002b:00007f78b1f47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.415379][T18353] RAX: ffffffffffffffda RBX: 00007f78b3765fa0 RCX: 00007f78b34ec819 [ 750.415449][T18353] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 750.415465][T18353] RBP: 00007f78b1f47090 R08: 0000000000000000 R09: 0000000000000000 [ 750.415479][T18353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.415491][T18353] R13: 00007f78b3766038 R14: 00007f78b3765fa0 R15: 00007ffd3272aa08 [ 750.415522][T18353] [ 750.417989][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 750.614930][ C0] EXT4-fs (loop8): initial error at time 1775272320: ext4_orphan_get:1423 [ 750.623692][ C0] EXT4-fs (loop8): last error at time 1775272320: ext4_orphan_get:1423 [ 750.745436][T18367] lo speed is unknown, defaulting to 1000 [ 750.751595][T18370] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.759251][T18370] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.779172][T18370] bridge0: entered allmulticast mode [ 750.844032][T14967] kernel write not supported for file bpf-prog (pid: 14967 comm: kworker/1:0) [ 750.882385][T18375] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.889647][T18375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.897231][T18375] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.904489][T18375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.933010][T18375] bridge0: entered promiscuous mode [ 751.159435][T18389] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 751.163578][T18391] set_capacity_and_notify: 3 callbacks suppressed [ 751.163595][T18391] loop1: detected capacity change from 0 to 512 [ 751.269088][T18391] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 751.323132][T18391] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4486: bad orphan inode 131083 [ 751.340707][T18391] fserror_report: 7 callbacks suppressed [ 751.340726][T18391] loop1: lost filesystem error report for type 5 error -117 [ 751.347980][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 751.361941][ C1] EXT4-fs (loop1): initial error at time 1775272321: ext4_orphan_get:1423 [ 751.370498][ C1] EXT4-fs (loop1): last error at time 1775272321: ext4_orphan_get:1423 [ 751.378663][T18401] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4487'. [ 751.415089][T18404] loop3: detected capacity change from 0 to 512 [ 751.438847][T18404] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 751.478312][T18404] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.4489: bad orphan inode 131083 [ 751.565661][T18411] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4490'. [ 751.594046][T18412] loop2: detected capacity change from 0 to 1024 [ 751.595513][T18404] loop3: lost filesystem error report for type 5 error -117 [ 751.652892][T18412] EXT4-fs: test_dummy_encryption option not supported [ 751.789221][T18420] SET target dimension over the limit! [ 751.810936][T18420] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 751.843964][T18420] bond1: (slave lo): Enslaving as an active interface with an up link [ 751.866529][T18420] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 751.954479][T18422] loop2: detected capacity change from 0 to 512 [ 752.037991][T18422] EXT4-fs (loop2): 1 orphan inode deleted [ 752.062081][ T4884] __quota_error: 9 callbacks suppressed [ 752.062100][ T4884] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 752.078302][T18422] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.118088][ T4884] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:20: Failed to release dquot type 1 [ 752.547053][T18440] loop7: detected capacity change from 0 to 128 [ 752.747081][ T28] audit: type=1400 audit(1775272322.790:735): avc: denied { unlink } for pid=11770 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 752.882066][T18443] loop1: detected capacity change from 0 to 1024 [ 752.904930][T18445] FAULT_INJECTION: forcing a failure. [ 752.904930][T18445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.016431][T18445] CPU: 1 UID: 0 PID: 18445 Comm: syz.3.4502 Not tainted syzkaller #0 PREEMPT(full) [ 753.016489][T18445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 753.016504][T18445] Call Trace: [ 753.016512][T18445] [ 753.016520][T18445] __dump_stack+0x1d/0x30 [ 753.016558][T18445] dump_stack_lvl+0x95/0xd0 [ 753.016585][T18445] dump_stack+0x15/0x1b [ 753.016610][T18445] should_fail_ex+0x263/0x280 [ 753.016643][T18445] should_fail+0xb/0x20 [ 753.016773][T18445] should_fail_usercopy+0x1a/0x20 [ 753.016812][T18445] _copy_to_user+0x20/0xa0 [ 753.016849][T18445] simple_read_from_buffer+0xb5/0x130 [ 753.016955][T18445] proc_fail_nth_read+0x10e/0x150 [ 753.016992][T18445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.017145][T18445] vfs_read+0x1ab/0x7f0 [ 753.017189][T18445] ? __rcu_read_unlock+0x6b/0x70 [ 753.017222][T18445] ? __fget_files+0x184/0x1c0 [ 753.017258][T18445] ? mutex_lock+0x57/0x90 [ 753.017280][T18445] ksys_read+0xdc/0x1a0 [ 753.017338][T18445] __x64_sys_read+0x40/0x50 [ 753.017360][T18445] x64_sys_call+0x2886/0x3020 [ 753.017391][T18445] do_syscall_64+0x12c/0x370 [ 753.017424][T18445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.017449][T18445] RIP: 0033:0x7f78b34ad04e [ 753.017539][T18445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.017560][T18445] RSP: 002b:00007f78b1f46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.017631][T18445] RAX: ffffffffffffffda RBX: 00007f78b1f476c0 RCX: 00007f78b34ad04e [ 753.017647][T18445] RDX: 000000000000000f RSI: 00007f78b1f470a0 RDI: 0000000000000004 [ 753.017733][T18445] RBP: 00007f78b1f47090 R08: 0000000000000000 R09: 0000000000000000 [ 753.017748][T18445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.017763][T18445] R13: 00007f78b3766038 R14: 00007f78b3765fa0 R15: 00007ffd3272aa08 [ 753.017784][T18445] [ 753.227378][T18449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4501'. [ 753.248265][T18443] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.325910][T18443] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.4500: lblock 0 mapped to illegal pblock 0 (length 1) [ 753.375881][ T28] audit: type=1400 audit(1775272323.360:736): avc: denied { map } for pid=18442 comm="syz.1.4500" path="/304/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 753.401865][T18443] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 753.446586][T18443] EXT4-fs (loop1): This should not happen!! Data will be lost [ 753.446586][T18443] [ 753.509206][T18467] loop7: detected capacity change from 0 to 512 [ 753.564915][T18467] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 753.607276][T12833] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 753.620180][T18467] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4504: bad orphan inode 131083 [ 753.635470][T18467] loop7: lost filesystem error report for type 5 error -117 [ 754.843816][T18490] lo speed is unknown, defaulting to 1000 [ 755.421089][T18498] loop7: detected capacity change from 0 to 128 [ 755.590456][T18505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4516'. [ 756.186197][T18514] loop7: detected capacity change from 0 to 512 [ 756.232142][T18514] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 756.295138][T18514] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4520: bad orphan inode 131083 [ 756.310456][T18514] loop7: lost filesystem error report for type 5 error -117 [ 756.878208][T18535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18535 comm=syz.2.4525 [ 756.949613][T18536] loop3: detected capacity change from 0 to 512 [ 756.993374][T18536] EXT4-fs: Ignoring removed bh option [ 757.036003][T18536] EXT4-fs: Ignoring removed mblk_io_submit option [ 757.394563][T18541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18541 comm=syz.2.4527 [ 757.417797][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4527'. [ 757.526363][T18536] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 757.559911][T18536] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 757.625300][T18536] EXT4-fs (loop3): orphan cleanup on readonly fs [ 757.662987][T18536] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 757.720681][T18536] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 757.738579][T18553] loop8: detected capacity change from 0 to 512 [ 757.758069][ T28] audit: type=1400 audit(1775272327.790:737): avc: denied { map } for pid=18550 comm="syz.1.4531" path="/proc/904/net/icmp" dev="proc" ino=4026533999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 757.759984][T18553] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 757.822024][T18536] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.4523: Failed to acquire dquot type 1 [ 757.844784][T18536] loop3: lost filesystem error report for type 5 error -5 [ 757.848098][T18536] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4523: Invalid block bitmap block 0 in block_group 0 [ 757.868808][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 757.868831][ C1] EXT4-fs (loop3): last error at time 1775272327: ext4_acquire_dquot:7026 [ 757.895685][T18554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18554 comm=syz.1.4531 [ 757.932930][T18536] loop3: lost filesystem error report for type 5 error -117 [ 757.933204][T18536] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4523: Invalid block bitmap block 0 in block_group 0 [ 757.957305][T18553] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.4532: bad orphan inode 131083 [ 757.972016][T18553] loop8: lost filesystem error report for type 5 error -117 [ 757.977325][T18536] loop3: lost filesystem error report for type 5 error -117 [ 758.015386][T18536] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4523: Invalid block bitmap block 0 in block_group 0 [ 758.085652][T18558] loop2: detected capacity change from 0 to 512 [ 758.114867][T18558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 758.135154][T18536] loop3: lost filesystem error report for type 5 error -117 [ 758.135426][T18536] Quota error (device loop3): write_blk: dquota write failed [ 758.152995][T18558] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4533: bad orphan inode 131083 [ 758.163678][T18536] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 758.175134][T18558] loop2: lost filesystem error report for type 5 error -117 [ 758.184153][T18536] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.4523: Failed to acquire dquot type 1 [ 758.226474][T18536] loop3: lost filesystem error report for type 5 error -28 [ 758.226846][T18536] Quota error (device loop3): write_blk: dquota write failed [ 758.255900][T18536] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 758.276109][T18536] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.4523: Failed to acquire dquot type 1 [ 758.300140][T18536] loop3: lost filesystem error report for type 5 error -28 [ 758.300486][T18536] EXT4-fs (loop3): 1 orphan inode deleted [ 758.435973][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4536'. [ 758.446417][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4536'. [ 758.542341][ T28] audit: type=1400 audit(1775272328.590:738): avc: denied { append } for pid=18569 comm="syz.7.4537" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 758.733034][ T28] audit: type=1400 audit(1775272328.770:739): avc: denied { unmount } for pid=15595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 758.908244][T18584] loop2: detected capacity change from 0 to 2048 [ 758.950888][T18584] loop2: p1 p2 [ 759.528457][T18610] loop2: detected capacity change from 0 to 128 [ 760.130918][T18622] loop8: detected capacity change from 0 to 128 [ 760.154536][T18622] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 760.163218][T18622] FAT-fs (loop8): Filesystem has been set read-only [ 760.404116][T18624] netlink: 'syz.7.4558': attribute type 13 has an invalid length. [ 760.659090][T18624] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.666443][T18624] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.718027][ T28] audit: type=1400 audit(1775272330.750:740): avc: denied { create } for pid=18635 comm="syz.1.4564" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 760.733969][T18638] loop1: detected capacity change from 0 to 512 [ 760.779409][T18638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 760.853894][T18624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.872289][T18624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.880888][T18638] EXT4-fs (loop1): 1 truncate cleaned up [ 760.887286][T18638] EXT4-fs mount: 30 callbacks suppressed [ 760.887303][T18638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.059734][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.114393][ T4884] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.129202][ T4884] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.214994][ T4884] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.244015][ T4884] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.620336][T18674] loop7: detected capacity change from 0 to 128 [ 762.679258][T18675] Falling back ldisc for ttyS3. [ 762.933217][T18686] FAULT_INJECTION: forcing a failure. [ 762.933217][T18686] name failslab, interval 1, probability 0, space 0, times 0 [ 762.963988][T18686] CPU: 1 UID: 0 PID: 18686 Comm: syz.3.4582 Not tainted syzkaller #0 PREEMPT(full) [ 762.964019][T18686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.964034][T18686] Call Trace: [ 762.964046][T18686] [ 762.964056][T18686] __dump_stack+0x1d/0x30 [ 762.964087][T18686] dump_stack_lvl+0x95/0xd0 [ 762.964114][T18686] dump_stack+0x15/0x1b [ 762.964191][T18686] should_fail_ex+0x263/0x280 [ 762.964220][T18686] should_failslab+0x8c/0xb0 [ 762.964242][T18686] __kvmalloc_node_noprof+0x155/0x650 [ 762.964370][T18686] ? vmemdup_user+0x2b/0xd0 [ 762.964397][T18686] ? cred_has_capability+0x224/0x2a0 [ 762.964428][T18686] vmemdup_user+0x2b/0xd0 [ 762.964457][T18686] con_set_unimap+0x3f/0x700 [ 762.964526][T18686] ? selinux_capable+0x31/0x40 [ 762.964591][T18686] ? should_fail_ex+0xd9/0x280 [ 762.964621][T18686] vt_ioctl+0xfe4/0x18d0 [ 762.964644][T18686] ? tty_jobctrl_ioctl+0x29c/0x810 [ 762.964666][T18686] tty_ioctl+0x7d7/0xb80 [ 762.964736][T18686] ? __pfx_tty_ioctl+0x10/0x10 [ 762.964888][T18686] __se_sys_ioctl+0xce/0x140 [ 762.964911][T18686] __x64_sys_ioctl+0x43/0x50 [ 762.964933][T18686] x64_sys_call+0x1563/0x3020 [ 762.965033][T18686] do_syscall_64+0x12c/0x370 [ 762.965063][T18686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.965166][T18686] RIP: 0033:0x7f78b34ec819 [ 762.965188][T18686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.965206][T18686] RSP: 002b:00007f78b1f47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.965227][T18686] RAX: ffffffffffffffda RBX: 00007f78b3765fa0 RCX: 00007f78b34ec819 [ 762.965242][T18686] RDX: 0000200000000200 RSI: 0000000000004b67 RDI: 0000000000000003 [ 762.965270][T18686] RBP: 00007f78b1f47090 R08: 0000000000000000 R09: 0000000000000000 [ 762.965283][T18686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.965295][T18686] R13: 00007f78b3766038 R14: 00007f78b3765fa0 R15: 00007ffd3272aa08 [ 762.965316][T18686] [ 763.223820][T18697] loop2: detected capacity change from 0 to 512 [ 763.239383][T18697] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 763.311090][T18697] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4587: bad orphan inode 131083 [ 763.322353][T18697] loop2: lost filesystem error report for type 5 error -117 [ 763.322975][T18697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.353286][T13115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.439661][T18705] lo speed is unknown, defaulting to 1000 [ 763.646923][T18704] loop7: detected capacity change from 0 to 512 [ 763.750754][T18704] EXT4-fs: Ignoring removed bh option [ 763.823454][T18704] EXT4-fs: Ignoring removed mblk_io_submit option [ 763.895188][T18704] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 763.946638][T18704] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 763.954939][T18704] EXT4-fs (loop7): orphan cleanup on readonly fs [ 763.962679][T18704] __quota_error: 4 callbacks suppressed [ 763.962697][T18704] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4 [ 763.969645][T18709] loop1: detected capacity change from 0 to 2048 [ 763.978880][T18704] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 763.995501][T18704] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.4585: Failed to acquire dquot type 1 [ 764.007460][T18704] loop7: lost filesystem error report for type 5 error -5 [ 764.008046][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 764.017076][T18704] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4585: Invalid block bitmap block 0 in block_group 0 [ 764.021722][ C0] EXT4-fs (loop7): last error at time 1775272334: ext4_acquire_dquot:7026 [ 764.088510][T18704] loop7: lost filesystem error report for type 5 error -117 [ 764.088743][T18704] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4585: Invalid block bitmap block 0 in block_group 0 [ 764.111080][T18709] loop1: p1 p2 [ 764.150357][ T3003] loop1: p1 p2 [ 764.218696][T18704] loop7: lost filesystem error report for type 5 error -117 [ 764.223128][T18704] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4585: Invalid block bitmap block 0 in block_group 0 [ 764.276157][T18704] loop7: lost filesystem error report for type 5 error -117 [ 764.391730][T18720] loop8: detected capacity change from 0 to 128 [ 765.258271][T18704] Quota error (device loop7): write_blk: dquota write failed [ 765.265781][T18704] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 765.276979][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 765.301525][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 765.336659][T18704] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.4585: Failed to acquire dquot type 1 [ 765.348096][T18704] loop7: lost filesystem error report for type 5 error -28 [ 765.365865][T18722] loop2: detected capacity change from 0 to 128 [ 765.391630][T18704] Quota error (device loop7): write_blk: dquota write failed [ 765.449028][T18704] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 765.461032][T18704] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.4585: Failed to acquire dquot type 1 [ 765.472692][T18704] loop7: lost filesystem error report for type 5 error -28 [ 765.472951][T18704] EXT4-fs (loop7): 1 orphan inode deleted [ 765.493436][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 765.506930][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 765.525703][T18704] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 765.755637][T18734] loop3: detected capacity change from 0 to 128 [ 765.927103][T15595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.190117][T18723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.376139][T18743] loop2: detected capacity change from 0 to 128 [ 766.802638][T18749] loop3: detected capacity change from 0 to 512 [ 766.810720][T18749] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 766.886176][T18749] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.4598: bad orphan inode 131083 [ 766.910128][T18749] loop3: lost filesystem error report for type 5 error -117 [ 766.911040][T18749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.983793][T18751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18751 comm=syz.1.4601 [ 766.997592][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.171494][T18775] FAULT_INJECTION: forcing a failure. [ 767.171494][T18775] name failslab, interval 1, probability 0, space 0, times 0 [ 767.233621][T18775] CPU: 1 UID: 0 PID: 18775 Comm: syz.2.4606 Not tainted syzkaller #0 PREEMPT(full) [ 767.233655][T18775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.233715][T18775] Call Trace: [ 767.233724][T18775] [ 767.233733][T18775] __dump_stack+0x1d/0x30 [ 767.233766][T18775] dump_stack_lvl+0x95/0xd0 [ 767.233813][T18775] dump_stack+0x15/0x1b [ 767.233912][T18775] should_fail_ex+0x263/0x280 [ 767.233945][T18775] should_failslab+0x8c/0xb0 [ 767.233973][T18775] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 767.234003][T18775] ? __alloc_skb+0x2d6/0x690 [ 767.234091][T18775] __alloc_skb+0x2d6/0x690 [ 767.234125][T18775] ? __alloc_skb+0x200/0x690 [ 767.234153][T18775] netlink_alloc_large_skb+0xbf/0xf0 [ 767.234182][T18775] netlink_sendmsg+0x40c/0x6f0 [ 767.234222][T18775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.234249][T18775] ____sys_sendmsg+0x563/0x5b0 [ 767.234287][T18775] ___sys_sendmsg+0x195/0x1e0 [ 767.234503][T18775] __x64_sys_sendmsg+0xd4/0x160 [ 767.234537][T18775] x64_sys_call+0x194c/0x3020 [ 767.234568][T18775] do_syscall_64+0x12c/0x370 [ 767.234602][T18775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.234734][T18775] RIP: 0033:0x7fbf8fa1c819 [ 767.234826][T18775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.234844][T18775] RSP: 002b:00007fbf8e46f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.234871][T18775] RAX: ffffffffffffffda RBX: 00007fbf8fc95fa0 RCX: 00007fbf8fa1c819 [ 767.234903][T18775] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 767.234920][T18775] RBP: 00007fbf8e46f090 R08: 0000000000000000 R09: 0000000000000000 [ 767.235002][T18775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.235015][T18775] R13: 00007fbf8fc96038 R14: 00007fbf8fc95fa0 R15: 00007fff73db3268 [ 767.235034][T18775] [ 767.464097][T18781] loop2: detected capacity change from 0 to 512 [ 767.477904][T18781] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 767.489878][T18781] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4609: bad orphan inode 131083 [ 767.600693][T18781] loop2: lost filesystem error report for type 5 error -117 [ 767.606765][T18781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.816441][T18787] set_capacity_and_notify: 1 callbacks suppressed [ 767.816473][T18787] loop7: detected capacity change from 0 to 512 [ 767.909928][T18787] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 767.973547][T18787] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4610: bad orphan inode 131083 [ 767.987534][T18787] loop7: lost filesystem error report for type 5 error -117 [ 767.988070][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 768.004050][ C1] EXT4-fs (loop7): initial error at time 1775272338: ext4_orphan_get:1423 [ 768.013658][ C1] EXT4-fs (loop7): last error at time 1775272338: ext4_orphan_get:1423 [ 768.031286][T18787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.083796][ T28] audit: type=1400 audit(1775272338.130:745): avc: denied { write } for pid=18789 comm="syz.3.4611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 768.132726][ T28] audit: type=1400 audit(1775272338.160:746): avc: denied { connect } for pid=18789 comm="syz.3.4611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 768.154391][ T28] audit: type=1400 audit(1775272338.170:747): avc: denied { write } for pid=18789 comm="syz.3.4611" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 768.444244][T18798] FAULT_INJECTION: forcing a failure. [ 768.444244][T18798] name failslab, interval 1, probability 0, space 0, times 0 [ 768.457065][T18798] CPU: 1 UID: 0 PID: 18798 Comm: syz.1.4612 Not tainted syzkaller #0 PREEMPT(full) [ 768.457109][T18798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.457123][T18798] Call Trace: [ 768.457131][T18798] [ 768.457140][T18798] __dump_stack+0x1d/0x30 [ 768.457278][T18798] dump_stack_lvl+0x95/0xd0 [ 768.457417][T18798] dump_stack+0x15/0x1b [ 768.457441][T18798] should_fail_ex+0x263/0x280 [ 768.457468][T18798] ? __pfx_proc_alloc_inode+0x10/0x10 [ 768.457580][T18798] should_failslab+0x8c/0xb0 [ 768.457636][T18798] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 768.457664][T18798] ? proc_alloc_inode+0x34/0x90 [ 768.457706][T18798] ? __pfx_proc_alloc_inode+0x10/0x10 [ 768.457735][T18798] proc_alloc_inode+0x34/0x90 [ 768.457766][T18798] alloc_inode+0x40/0x170 [ 768.457809][T18798] new_inode+0x1d/0xe0 [ 768.457834][T18798] proc_pid_make_inode+0x1f/0xd0 [ 768.457856][T18798] proc_pid_instantiate+0x37/0x1a0 [ 768.457952][T18798] proc_fill_cache+0x1e0/0x260 [ 768.457973][T18798] ? __pfx_proc_pid_instantiate+0x10/0x10 [ 768.458066][T18798] proc_pid_readdir+0x2d1/0x3d0 [ 768.458098][T18798] proc_root_readdir+0x80/0xa0 [ 768.458200][T18798] iterate_dir+0x114/0x330 [ 768.458225][T18798] __se_sys_getdents64+0xd2/0x230 [ 768.458246][T18798] ? __pfx_filldir64+0x10/0x10 [ 768.458271][T18798] __x64_sys_getdents64+0x43/0x50 [ 768.458374][T18798] x64_sys_call+0x2408/0x3020 [ 768.458411][T18798] do_syscall_64+0x12c/0x370 [ 768.458513][T18798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.458536][T18798] RIP: 0033:0x7ff7ae3ac819 [ 768.458564][T18798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.458583][T18798] RSP: 002b:00007ff7acdc5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 768.458675][T18798] RAX: ffffffffffffffda RBX: 00007ff7ae626180 RCX: 00007ff7ae3ac819 [ 768.458690][T18798] RDX: 2457a0be381e3a04 RSI: 0000200000000040 RDI: 0000000000000008 [ 768.458703][T18798] RBP: 00007ff7acdc5090 R08: 0000000000000000 R09: 0000000000000000 [ 768.458729][T18798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.458745][T18798] R13: 00007ff7ae626218 R14: 00007ff7ae626180 R15: 00007ffebef84258 [ 768.458768][T18798] [ 768.755202][T13115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.822392][T18800] loop2: detected capacity change from 0 to 512 [ 768.842865][T18800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 768.888871][T18800] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.4613: bad orphan inode 131083 [ 768.900569][T18800] loop2: lost filesystem error report for type 5 error -117 [ 768.903100][T18800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.927602][T15595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.967920][T13115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.215953][T18808] loop1: detected capacity change from 0 to 2048 [ 769.286768][T18806] loop7: detected capacity change from 0 to 128 [ 769.369375][ T3003] loop1: p1 p2 [ 769.376637][ T3003] loop1: p1 p2 [ 769.520149][T18817] loop2: detected capacity change from 0 to 2048 [ 769.567234][T18808] loop1: p1 p2 [ 769.590573][T16728] loop2: p1 p2 [ 769.607364][T18817] loop2: p1 p2 [ 770.714302][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 770.933640][T18823] lo speed is unknown, defaulting to 1000 [ 771.549543][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 771.596157][T18828] loop2: detected capacity change from 0 to 1764 [ 771.694692][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 771.712655][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 771.736146][T18828] iso9660: Unknown parameter 'iocharseô ÿÿo8859-2' [ 771.801340][T12662] udevd[12662]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 771.816764][T13655] udevd[13655]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 771.842738][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 771.860403][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 771.863526][T18840] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4625'. [ 771.890507][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 771.917006][T13655] udevd[13655]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 772.449291][T18853] loop1: detected capacity change from 0 to 512 [ 772.477851][T18853] EXT4-fs: Ignoring removed bh option [ 772.483581][T18853] EXT4-fs: Ignoring removed mblk_io_submit option [ 772.508588][T18853] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 772.521523][T18843] loop7: detected capacity change from 0 to 128 [ 772.530465][T18853] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 772.539739][T18853] EXT4-fs (loop1): orphan cleanup on readonly fs [ 772.546805][T18853] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 772.564020][T18853] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 772.574097][T18853] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.4626: Failed to acquire dquot type 1 [ 772.585784][T18853] loop1: lost filesystem error report for type 5 error -5 [ 772.587962][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 772.601621][ C1] EXT4-fs (loop1): last error at time 1775272342: ext4_acquire_dquot:7026 [ 772.610985][T18853] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4626: Invalid block bitmap block 0 in block_group 0 [ 772.624843][T18853] loop1: lost filesystem error report for type 5 error -117 [ 772.625101][T18853] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4626: Invalid block bitmap block 0 in block_group 0 [ 772.646150][T18853] loop1: lost filesystem error report for type 5 error -117 [ 772.683864][T18853] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4626: Invalid block bitmap block 0 in block_group 0 [ 772.718623][T18853] loop1: lost filesystem error report for type 5 error -117 [ 772.721219][T18853] Quota error (device loop1): write_blk: dquota write failed [ 772.765485][T18853] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 772.799975][T18863] loop2: detected capacity change from 0 to 2048 [ 772.806445][T18853] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.4626: Failed to acquire dquot type 1 [ 772.838904][T18853] loop1: lost filesystem error report for type 5 error -28 [ 772.839380][T18853] Quota error (device loop1): write_blk: dquota write failed [ 772.879722][T18853] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 772.893041][T18867] loop8: detected capacity change from 0 to 512 [ 772.907973][T18853] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.4626: Failed to acquire dquot type 1 [ 772.953298][T18867] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 772.963487][T18853] loop1: lost filesystem error report for type 5 error -28 [ 772.963770][T18853] EXT4-fs (loop1): 1 orphan inode deleted [ 772.978474][T12829] loop2: p1 p2 [ 772.979753][T18853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 773.001246][T18863] loop2: p1 p2 [ 773.048565][T18867] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.4632: bad orphan inode 131083 [ 773.061697][T18867] loop8: lost filesystem error report for type 5 error -117 [ 773.068390][T18867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.314967][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.358398][T17504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.643209][T18894] loop2: detected capacity change from 0 to 2048 [ 773.699675][T18894] loop2: p1 p2 [ 773.777517][T18900] loop2: detected capacity change from 0 to 512 [ 773.810509][T18900] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 773.929880][T18908] x_tables: unsorted underflow at hook 2 [ 773.971107][T18910] FAULT_INJECTION: forcing a failure. [ 773.971107][T18910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.991031][T18910] CPU: 0 UID: 0 PID: 18910 Comm: syz.8.4647 Not tainted syzkaller #0 PREEMPT(full) [ 773.991110][T18910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.991124][T18910] Call Trace: [ 773.991132][T18910] [ 773.991141][T18910] __dump_stack+0x1d/0x30 [ 773.991190][T18910] dump_stack_lvl+0x95/0xd0 [ 773.991217][T18910] dump_stack+0x15/0x1b [ 773.991319][T18910] should_fail_ex+0x263/0x280 [ 773.991348][T18910] ? __pfx_ucma_create_id+0x10/0x10 [ 773.991377][T18910] should_fail+0xb/0x20 [ 773.991463][T18910] should_fail_usercopy+0x1a/0x20 [ 773.991528][T18910] _copy_from_user+0x1c/0xb0 [ 773.991563][T18910] ucma_create_id+0x7f/0x280 [ 773.991615][T18910] ? __pfx_ucma_create_id+0x10/0x10 [ 773.991641][T18910] ucma_write+0x1c9/0x260 [ 773.991669][T18910] vfs_writev+0x42b/0x900 [ 773.991717][T18910] ? __pfx_ucma_write+0x10/0x10 [ 773.991750][T18910] do_writev+0xe9/0x210 [ 773.991779][T18910] __x64_sys_writev+0x45/0x50 [ 773.991807][T18910] x64_sys_call+0x1c0c/0x3020 [ 773.991835][T18910] do_syscall_64+0x12c/0x370 [ 773.991871][T18910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.991928][T18910] RIP: 0033:0x7f609653c819 [ 773.991948][T18910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.992048][T18910] RSP: 002b:00007f6094f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 773.992117][T18910] RAX: ffffffffffffffda RBX: 00007f60967b5fa0 RCX: 00007f609653c819 [ 773.992134][T18910] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000d [ 773.992149][T18910] RBP: 00007f6094f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 773.992175][T18910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.992190][T18910] R13: 00007f60967b6038 R14: 00007f60967b5fa0 R15: 00007ffe2a1a46e8 [ 773.992211][T18910] [ 774.255844][T18918] geneve1: entered promiscuous mode [ 774.273838][T18915] loop1: detected capacity change from 0 to 512 [ 774.278191][T18918] macsec1: entered allmulticast mode [ 774.286008][T18918] geneve1: entered allmulticast mode [ 774.464640][T18915] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 774.493514][T18915] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4649: bg 0: block 5: invalid block bitmap [ 774.516950][T18915] loop1: lost filesystem error report for type 5 error -117 [ 774.517440][T18915] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 774.524823][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 774.524842][ C0] EXT4-fs (loop1): initial error at time 1775272344: ext4_validate_block_bitmap:432 [ 774.524870][ C0] EXT4-fs (loop1): last error at time 1775272344: ext4_validate_block_bitmap:432 [ 774.905952][T18915] loop1: lost filesystem error report for type 5 error -117 [ 774.906527][T18915] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4649: invalid indirect mapped block 3 (level 2) [ 775.318557][T18935] loop8: detected capacity change from 0 to 2048 [ 776.225201][ T3003] loop8: p1 p2 [ 776.257378][T18915] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 776.260525][T18915] EXT4-fs (loop1): 1 orphan inode deleted [ 776.303350][T18935] loop8: p1 p2 [ 776.519642][T18946] loop7: detected capacity change from 0 to 512 [ 776.539084][T18946] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 776.605133][ T3003] loop8: p1 p2 [ 776.613673][T18946] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4658: bad orphan inode 131083 [ 776.648985][T18915] EXT4-fs (loop1): 1 truncate cleaned up [ 776.666413][T18946] loop7: lost filesystem error report for type 5 error -117 [ 776.667989][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 776.681918][ C0] EXT4-fs (loop7): initial error at time 1775272346: ext4_orphan_get:1423 [ 776.690725][ C0] EXT4-fs (loop7): last error at time 1775272346: ext4_orphan_get:1423 [ 776.702831][T18946] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.735138][T18915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.768597][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 776.845949][T13655] udevd[13655]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 776.856613][ T28] audit: type=1326 audit(1775272346.770:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.3.4659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78b34ec819 code=0x0 [ 776.898488][T15595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.949051][T13655] udevd[13655]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 776.981509][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 777.078940][T13655] udevd[13655]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 777.111006][T12829] udevd[12829]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 777.122557][T18960] netlink: 'syz.8.4662': attribute type 16 has an invalid length. [ 777.148818][T14963] IPVS: starting estimator thread 0... [ 777.165311][T18960] netlink: 'syz.8.4662': attribute type 17 has an invalid length. [ 777.225407][T18960] netlink: 'syz.8.4662': attribute type 27 has an invalid length. [ 777.248026][T18961] IPVS: using max 2544 ests per chain, 127200 per kthread [ 777.903436][T18973] loop8: detected capacity change from 0 to 512 [ 777.910073][T18973] EXT4-fs: Ignoring removed bh option [ 777.915692][T18973] EXT4-fs: Ignoring removed mblk_io_submit option [ 777.941066][T18973] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 777.968391][T18973] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 777.976738][T18973] EXT4-fs (loop8): orphan cleanup on readonly fs [ 777.983868][T18973] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4 [ 778.037811][T18973] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 778.078061][T18973] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.4665: Failed to acquire dquot type 1 [ 778.128445][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.146415][T18973] loop8: lost filesystem error report for type 5 error -5 [ 778.147981][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 778.161876][ C0] EXT4-fs (loop8): last error at time 1775272348: ext4_acquire_dquot:7026 [ 778.215187][T18973] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4665: Invalid block bitmap block 0 in block_group 0 [ 778.298034][T18973] loop8: lost filesystem error report for type 5 error -117 [ 778.299672][T18973] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4665: Invalid block bitmap block 0 in block_group 0 [ 778.338500][T18973] loop8: lost filesystem error report for type 5 error -117 [ 778.338761][T18973] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4665: Invalid block bitmap block 0 in block_group 0 [ 778.379967][T18973] loop8: lost filesystem error report for type 5 error -117 [ 778.380187][T18973] Quota error (device loop8): write_blk: dquota write failed [ 778.440214][T18973] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 778.467860][T18973] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.4665: Failed to acquire dquot type 1 [ 778.506334][T18973] loop8: lost filesystem error report for type 5 error -28 [ 778.508320][T18973] Quota error (device loop8): write_blk: dquota write failed [ 778.549981][T18973] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 778.580616][T18973] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.4665: Failed to acquire dquot type 1 [ 778.615274][T18973] loop8: lost filesystem error report for type 5 error -28 [ 778.615540][T18973] EXT4-fs (loop8): 1 orphan inode deleted [ 778.644180][T18973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 779.064737][T18990] loop7: detected capacity change from 0 to 512 [ 779.089801][T18990] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 779.123663][T18990] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4671: bad orphan inode 131083 [ 779.144498][T18990] loop7: lost filesystem error report for type 5 error -117 [ 779.145946][T18990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.222206][T17504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.234242][T15595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.280304][T18995] FAULT_INJECTION: forcing a failure. [ 779.280304][T18995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.350113][T18995] CPU: 0 UID: 0 PID: 18995 Comm: syz.8.4670 Not tainted syzkaller #0 PREEMPT(full) [ 779.350147][T18995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.350163][T18995] Call Trace: [ 779.350250][T18995] [ 779.350260][T18995] __dump_stack+0x1d/0x30 [ 779.350293][T18995] dump_stack_lvl+0x95/0xd0 [ 779.350316][T18995] dump_stack+0x15/0x1b [ 779.350370][T18995] should_fail_ex+0x263/0x280 [ 779.350398][T18995] should_fail+0xb/0x20 [ 779.350449][T18995] should_fail_usercopy+0x1a/0x20 [ 779.350481][T18995] _copy_from_iter+0xcf/0xea0 [ 779.350552][T18995] ? __rcu_read_unlock+0x4e/0x70 [ 779.350580][T18995] ? terminate_walk+0x1e6/0x210 [ 779.350703][T18995] ? path_openat+0x1ab2/0x2050 [ 779.350722][T18995] tun_get_user+0x390/0x27c0 [ 779.350754][T18995] ? ref_tracker_alloc+0x1eb/0x2f0 [ 779.350791][T18995] tun_chr_write_iter+0x15e/0x210 [ 779.350886][T18995] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 779.350917][T18995] vfs_write+0x5a6/0x9f0 [ 779.350945][T18995] ksys_write+0xdc/0x1a0 [ 779.350967][T18995] __x64_sys_write+0x40/0x50 [ 779.351043][T18995] x64_sys_call+0x27e1/0x3020 [ 779.351069][T18995] do_syscall_64+0x12c/0x370 [ 779.351100][T18995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.351279][T18995] RIP: 0033:0x7f609653c819 [ 779.351300][T18995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.351322][T18995] RSP: 002b:00007f6094f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 779.351348][T18995] RAX: ffffffffffffffda RBX: 00007f60967b5fa0 RCX: 00007f609653c819 [ 779.351362][T18995] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 0000000000000003 [ 779.351376][T18995] RBP: 00007f6094f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 779.351389][T18995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.351406][T18995] R13: 00007f60967b6038 R14: 00007f60967b5fa0 R15: 00007ffe2a1a46e8 [ 779.351428][T18995] [ 779.357054][T19002] FAULT_INJECTION: forcing a failure. [ 779.357054][T19002] name failslab, interval 1, probability 0, space 0, times 0 [ 779.614092][T19002] CPU: 1 UID: 0 PID: 19002 Comm: syz.2.4676 Not tainted syzkaller #0 PREEMPT(full) [ 779.614173][T19002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.614188][T19002] Call Trace: [ 779.614196][T19002] [ 779.614205][T19002] __dump_stack+0x1d/0x30 [ 779.614243][T19002] dump_stack_lvl+0x95/0xd0 [ 779.614272][T19002] dump_stack+0x15/0x1b [ 779.614297][T19002] should_fail_ex+0x263/0x280 [ 779.614389][T19002] should_failslab+0x8c/0xb0 [ 779.614415][T19002] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 779.614449][T19002] ? __alloc_skb+0x2d6/0x690 [ 779.614517][T19002] ? read_tsc+0x9/0x20 [ 779.614549][T19002] __alloc_skb+0x2d6/0x690 [ 779.614658][T19002] ? __alloc_skb+0x200/0x690 [ 779.614709][T19002] alloc_skb_with_frags+0x7d/0x470 [ 779.614742][T19002] ? hrtimer_reprogram+0x1d4/0x220 [ 779.614769][T19002] ? hrtimer_start_range_ns+0xd07/0x10f0 [ 779.614837][T19002] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 779.614866][T19002] sock_alloc_send_pskb+0x44d/0x500 [ 779.614896][T19002] __ip_append_data+0x192b/0x2460 [ 779.614962][T19002] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 779.614990][T19002] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 779.615089][T19002] ? __rcu_read_unlock+0x4e/0x70 [ 779.615113][T19002] ? ipv4_mtu+0x210/0x230 [ 779.615135][T19002] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 779.615164][T19002] ip_make_skb+0x150/0x2d0 [ 779.615208][T19002] udp_sendmsg+0x10e3/0x1590 [ 779.615236][T19002] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 779.615273][T19002] ? __pfx_udp_sendmsg+0x10/0x10 [ 779.615351][T19002] inet_sendmsg+0xac/0xd0 [ 779.615383][T19002] ? __pfx_inet_sendmsg+0x10/0x10 [ 779.615405][T19002] ____sys_sendmsg+0x519/0x5b0 [ 779.615447][T19002] ___sys_sendmsg+0x195/0x1e0 [ 779.615586][T19002] __sys_sendmmsg+0x185/0x320 [ 779.615620][T19002] __x64_sys_sendmmsg+0x57/0x70 [ 779.615642][T19002] x64_sys_call+0x27aa/0x3020 [ 779.615728][T19002] do_syscall_64+0x12c/0x370 [ 779.615803][T19002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.615829][T19002] RIP: 0033:0x7fbf8fa1c819 [ 779.615850][T19002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.615871][T19002] RSP: 002b:00007fbf8e46f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 779.615953][T19002] RAX: ffffffffffffffda RBX: 00007fbf8fc95fa0 RCX: 00007fbf8fa1c819 [ 779.615972][T19002] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000005 [ 779.615988][T19002] RBP: 00007fbf8e46f090 R08: 0000000000000000 R09: 0000000000000000 [ 779.616004][T19002] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 779.616020][T19002] R13: 00007fbf8fc96038 R14: 00007fbf8fc95fa0 R15: 00007fff73db3268 [ 779.616041][T19002] [ 780.104644][ T28] audit: type=1400 audit(1775272350.150:749): avc: denied { mount } for pid=19011 comm="syz.1.4677" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 780.116338][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4677'. [ 780.147044][T19023] loop3: detected capacity change from 0 to 2048 [ 780.350861][T19030] loop8: detected capacity change from 0 to 512 [ 780.444648][T19029] loop1: detected capacity change from 0 to 512 [ 780.464293][T19029] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 780.551456][T19030] EXT4-fs (loop8): 1 orphan inode deleted [ 780.589958][T19030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.636092][T19030] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.778452][ T36] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 780.822030][ T36] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 780.844664][T19016] loop7: detected capacity change from 0 to 512 [ 780.905327][T19029] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4683: bad orphan inode 131083 [ 780.975401][T19029] loop1: lost filesystem error report for type 5 error -117 [ 780.976179][T19029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.038912][T12829] loop3: p1 p2 [ 781.047603][T19016] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 781.187192][T19023] loop3: p1 p2 [ 781.210086][ T3003] loop3: p1 p2 [ 781.220437][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.371071][T19045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19045 comm=syz.2.4687 [ 781.391996][T16728] udevd[16728]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 781.406168][T18959] udevd[18959]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 781.454143][T19047] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 781.487112][T12813] IPVS: starting estimator thread 0... [ 781.495497][T19016] EXT4-fs (loop7): orphan cleanup on readonly fs [ 781.590903][ T28] audit: type=1400 audit(1775272351.630:750): avc: denied { map } for pid=19049 comm="syz.2.4689" path="socket:[57340]" dev="sockfs" ino=57340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 781.615267][T19048] IPVS: using max 2496 ests per chain, 124800 per kthread [ 781.630630][T19016] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4679: Block bitmap for bg 0 marked uninitialized [ 781.732189][T19016] loop7: lost filesystem error report for type 5 error -117 [ 781.736331][T19016] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 781.744429][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 781.744479][ C0] EXT4-fs (loop7): initial error at time 1775272351: ext4_read_block_bitmap_nowait:517 [ 781.744598][ C0] EXT4-fs (loop7): last error at time 1775272351: ext4_read_block_bitmap_nowait:517 [ 781.828531][T17504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.832530][T19016] loop7: lost filesystem error report for type 5 error -117 [ 781.855118][T19062] loop8: detected capacity change from 0 to 512 [ 781.869405][T19059] loop1: detected capacity change from 0 to 128 [ 781.880796][T19016] EXT4-fs (loop7): 1 orphan inode deleted [ 781.937224][T19016] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 781.976672][T19062] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 782.013278][T19062] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 782.028701][ T28] audit: type=1400 audit(1775272352.050:751): avc: denied { open } for pid=19061 comm="syz.8.4692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 782.051868][T19053] loop3: detected capacity change from 0 to 512 [ 782.058717][T19053] EXT4-fs: Ignoring removed bh option [ 782.069112][T19066] FAULT_INJECTION: forcing a failure. [ 782.069112][T19066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.071511][T19053] EXT4-fs: Ignoring removed mblk_io_submit option [ 782.090338][T19016] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 782.117344][T19016] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 782.132162][T19053] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 782.177567][T19066] CPU: 1 UID: 0 PID: 19066 Comm: syz.8.4692 Not tainted syzkaller #0 PREEMPT(full) [ 782.177600][T19066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.177615][T19066] Call Trace: [ 782.177623][T19066] [ 782.177633][T19066] __dump_stack+0x1d/0x30 [ 782.177666][T19066] dump_stack_lvl+0x95/0xd0 [ 782.177765][T19066] dump_stack+0x15/0x1b [ 782.177837][T19066] should_fail_ex+0x263/0x280 [ 782.177866][T19066] should_fail+0xb/0x20 [ 782.177936][T19066] should_fail_usercopy+0x1a/0x20 [ 782.178011][T19066] _copy_from_user+0x1c/0xb0 [ 782.178049][T19066] ipv6_flowlabel_opt+0xa3/0x19c0 [ 782.178076][T19066] ? lockref_put_return+0xf7/0x130 [ 782.178193][T19066] ? __rcu_read_unlock+0x4e/0x70 [ 782.178220][T19066] ? terminate_walk+0x1e6/0x210 [ 782.178276][T19066] ? _raw_spin_unlock_bh+0x18/0x20 [ 782.178307][T19066] ? lock_sock_nested+0x132/0x160 [ 782.178335][T19066] ? should_fail_ex+0xd9/0x280 [ 782.178367][T19066] do_ipv6_setsockopt+0xb4e/0x21d0 [ 782.178469][T19066] ? kstrtoull+0x111/0x140 [ 782.178497][T19066] ? avc_has_perm_noaudit+0xab/0x130 [ 782.178532][T19066] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 782.178564][T19066] ipv6_setsockopt+0x59/0x130 [ 782.178659][T19066] udpv6_setsockopt+0x99/0xb0 [ 782.178682][T19066] sock_common_setsockopt+0x69/0x80 [ 782.178773][T19066] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 782.178805][T19066] __sys_setsockopt+0x184/0x200 [ 782.178843][T19066] __x64_sys_setsockopt+0x64/0x80 [ 782.178941][T19066] x64_sys_call+0x2327/0x3020 [ 782.178969][T19066] do_syscall_64+0x12c/0x370 [ 782.179145][T19066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.179171][T19066] RIP: 0033:0x7f609653c819 [ 782.179207][T19066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.179229][T19066] RSP: 002b:00007f6094f6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 782.179255][T19066] RAX: ffffffffffffffda RBX: 00007f60967b6090 RCX: 00007f609653c819 [ 782.179311][T19066] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 782.179325][T19066] RBP: 00007f6094f6e090 R08: 0000000000000021 R09: 0000000000000000 [ 782.179338][T19066] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 782.179359][T19066] R13: 00007f60967b6128 R14: 00007f60967b6090 R15: 00007ffe2a1a46e8 [ 782.179447][T19066] [ 782.441127][T19016] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4679: Block bitmap for bg 0 marked uninitialized [ 782.456930][T19053] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 782.465987][T19053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 782.475909][T19053] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.4686: Failed to acquire dquot type 1 [ 782.491865][T19053] loop3: lost filesystem error report for type 5 error -5 [ 782.492141][T19053] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4686: Invalid block bitmap block 0 in block_group 0 [ 782.499451][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 782.499474][ C1] EXT4-fs (loop3): last error at time 1775272352: ext4_acquire_dquot:7026 [ 782.531397][T19053] loop3: lost filesystem error report for type 5 error -117 [ 782.531633][T19053] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4686: Invalid block bitmap block 0 in block_group 0 [ 782.532446][T19016] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4679: Block bitmap for bg 0 marked uninitialized [ 782.539448][T19053] loop3: lost filesystem error report for type 5 error -117 [ 782.539671][T19053] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4686: Invalid block bitmap block 0 in block_group 0 [ 782.539738][T19053] loop3: lost filesystem error report for type 5 error -117 [ 782.539890][T19053] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.4686: Failed to acquire dquot type 1 [ 782.539960][T19053] loop3: lost filesystem error report for type 5 error -28 [ 782.540248][T19053] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.4686: Failed to acquire dquot type 1 [ 782.540348][T19053] loop3: lost filesystem error report for type 5 error -28 [ 782.540565][T19053] EXT4-fs (loop3): 1 orphan inode deleted [ 782.656279][T19053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 782.696243][T15595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.722192][T17504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.800196][T19078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 782.819093][T12813] IPVS: starting estimator thread 0... [ 782.899928][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.918224][T19079] IPVS: using max 2544 ests per chain, 127200 per kthread [ 783.078408][T19103] loop8: detected capacity change from 0 to 512 [ 783.087028][T19103] EXT4-fs: Ignoring removed bh option [ 783.095999][T19103] EXT4-fs: Ignoring removed mblk_io_submit option [ 783.108907][T19103] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 783.123262][T19103] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 783.131961][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 783.132106][ T28] audit: type=1400 audit(1775272353.170:757): avc: denied { read } for pid=19104 comm="syz.7.4706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 783.226607][T19107] loop3: detected capacity change from 0 to 128 [ 783.698963][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4704'. [ 784.061117][T19103] EXT4-fs (loop8): orphan cleanup on readonly fs [ 784.104864][T19103] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4 [ 784.124256][T19103] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 784.134516][T19103] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.4695: Failed to acquire dquot type 1 [ 784.146833][T19103] loop8: lost filesystem error report for type 5 error -5 [ 784.147953][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 784.161768][ C0] EXT4-fs (loop8): last error at time 1775272354: ext4_acquire_dquot:7026 [ 784.206452][T19103] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4695: Invalid block bitmap block 0 in block_group 0 [ 784.245772][ T28] audit: type=1400 audit(1775272354.280:758): avc: denied { write } for pid=19115 comm="syz.3.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 784.276037][T19103] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4695: Invalid block bitmap block 0 in block_group 0 [ 784.293161][T19118] FAULT_INJECTION: forcing a failure. [ 784.293161][T19118] name failslab, interval 1, probability 0, space 0, times 0 [ 784.298143][T19103] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4695: Invalid block bitmap block 0 in block_group 0 [ 784.327300][T19118] CPU: 1 UID: 0 PID: 19118 Comm: syz.2.4710 Not tainted syzkaller #0 PREEMPT(full) [ 784.327332][T19118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.327347][T19118] Call Trace: [ 784.327354][T19118] [ 784.327363][T19118] __dump_stack+0x1d/0x30 [ 784.327466][T19118] dump_stack_lvl+0x95/0xd0 [ 784.327556][T19118] dump_stack+0x15/0x1b [ 784.327580][T19118] should_fail_ex+0x263/0x280 [ 784.327611][T19118] should_failslab+0x8c/0xb0 [ 784.327638][T19118] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 784.327735][T19118] ? __alloc_skb+0x2d6/0x690 [ 784.327769][T19118] __alloc_skb+0x2d6/0x690 [ 784.327849][T19118] ? __alloc_skb+0x200/0x690 [ 784.327935][T19118] netlink_alloc_large_skb+0xbf/0xf0 [ 784.327999][T19118] netlink_sendmsg+0x40c/0x6f0 [ 784.328025][T19118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.328049][T19118] ____sys_sendmsg+0x563/0x5b0 [ 784.328166][T19118] ___sys_sendmsg+0x195/0x1e0 [ 784.328208][T19118] __x64_sys_sendmsg+0xd4/0x160 [ 784.328253][T19118] x64_sys_call+0x194c/0x3020 [ 784.328286][T19118] do_syscall_64+0x12c/0x370 [ 784.328319][T19118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.328405][T19118] RIP: 0033:0x7fbf8fa1c819 [ 784.328434][T19118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.328526][T19118] RSP: 002b:00007fbf8e46f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.328547][T19118] RAX: ffffffffffffffda RBX: 00007fbf8fc95fa0 RCX: 00007fbf8fa1c819 [ 784.328563][T19118] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 784.328580][T19118] RBP: 00007fbf8e46f090 R08: 0000000000000000 R09: 0000000000000000 [ 784.328593][T19118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.328659][T19118] R13: 00007fbf8fc96038 R14: 00007fbf8fc95fa0 R15: 00007fff73db3268 [ 784.328725][T19118] [ 784.532251][T19103] Quota error (device loop8): write_blk: dquota write failed [ 784.548122][T19103] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 784.559829][T19103] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.4695: Failed to acquire dquot type 1 [ 784.576841][T19123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 784.597786][T14963] IPVS: starting estimator thread 0... [ 784.615120][T19103] Quota error (device loop8): write_blk: dquota write failed [ 784.624008][T19103] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 784.636132][T19103] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.4695: Failed to acquire dquot type 1 [ 784.659441][T19129] loop1: detected capacity change from 0 to 512 [ 784.668099][T19129] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 784.679508][T19103] EXT4-fs (loop8): 1 orphan inode deleted [ 784.685821][T19129] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.4714: corrupted in-inode xattr: invalid size in ea xattr [ 784.700923][T19103] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 784.708442][T19124] IPVS: using max 2400 ests per chain, 120000 per kthread [ 784.714176][T19129] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 784.720865][T19129] EXT4-fs (loop1): get orphan inode failed [ 784.730446][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 784.730470][ C0] EXT4-fs (loop1): initial error at time 1775272354: ext4_iget_extra_inode:5040: inode 15 [ 784.730503][ C0] EXT4-fs (loop1): last error at time 1775272354: ext4_iget_extra_inode:5040: inode 15 [ 784.757333][T19136] loop2: detected capacity change from 0 to 512 [ 784.788625][T19129] EXT4-fs (loop1): mount failed [ 784.830185][T19136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.863577][T19136] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.874320][ T28] audit: type=1326 audit(1775272354.920:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19141 comm="syz.1.4718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7ae3ac819 code=0x0 [ 784.937595][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4715'. [ 785.031871][T17504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.638434][T13115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.773116][T19159] FAULT_INJECTION: forcing a failure. [ 785.773116][T19159] name failslab, interval 1, probability 0, space 0, times 0 [ 785.806767][T19159] CPU: 0 UID: 0 PID: 19159 Comm: syz.2.4723 Not tainted syzkaller #0 PREEMPT(full) [ 785.806797][T19159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 785.806858][T19159] Call Trace: [ 785.806866][T19159] [ 785.806876][T19159] __dump_stack+0x1d/0x30 [ 785.806951][T19159] dump_stack_lvl+0x95/0xd0 [ 785.806979][T19159] dump_stack+0x15/0x1b [ 785.807003][T19159] should_fail_ex+0x263/0x280 [ 785.807182][T19159] ? tcx_link_attach+0xab/0x550 [ 785.807208][T19159] should_failslab+0x8c/0xb0 [ 785.807230][T19159] __kmalloc_cache_noprof+0x5f/0x410 [ 785.807301][T19159] tcx_link_attach+0xab/0x550 [ 785.807327][T19159] ? __fget_files+0x184/0x1c0 [ 785.807444][T19159] link_create+0x512/0x690 [ 785.807525][T19159] __sys_bpf+0x35d/0x7e0 [ 785.807557][T19159] __x64_sys_bpf+0x41/0x50 [ 785.807579][T19159] x64_sys_call+0x10cb/0x3020 [ 785.807610][T19159] do_syscall_64+0x12c/0x370 [ 785.807658][T19159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.807681][T19159] RIP: 0033:0x7fbf8fa1c819 [ 785.807699][T19159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.807721][T19159] RSP: 002b:00007fbf8e46f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 785.807747][T19159] RAX: ffffffffffffffda RBX: 00007fbf8fc95fa0 RCX: 00007fbf8fa1c819 [ 785.807776][T19159] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 000000000000001c [ 785.807850][T19159] RBP: 00007fbf8e46f090 R08: 0000000000000000 R09: 0000000000000000 [ 785.807863][T19159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.807876][T19159] R13: 00007fbf8fc96038 R14: 00007fbf8fc95fa0 R15: 00007fff73db3268 [ 785.807894][T19159] [ 785.984294][T19163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.076565][T19171] FAULT_INJECTION: forcing a failure. [ 786.076565][T19171] name failslab, interval 1, probability 0, space 0, times 0 [ 786.089941][T19171] CPU: 0 UID: 0 PID: 19171 Comm: syz.7.4731 Not tainted syzkaller #0 PREEMPT(full) [ 786.090018][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.090032][T19171] Call Trace: [ 786.090041][T19171] [ 786.090051][T19171] __dump_stack+0x1d/0x30 [ 786.090081][T19171] dump_stack_lvl+0x95/0xd0 [ 786.090106][T19171] dump_stack+0x15/0x1b [ 786.090139][T19171] should_fail_ex+0x263/0x280 [ 786.090169][T19171] should_failslab+0x8c/0xb0 [ 786.090191][T19171] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 786.090217][T19171] ? __alloc_skb+0x2d6/0x690 [ 786.090253][T19171] __alloc_skb+0x2d6/0x690 [ 786.090349][T19171] ? __alloc_skb+0x200/0x690 [ 786.090374][T19171] netlink_alloc_large_skb+0xbf/0xf0 [ 786.090408][T19171] netlink_sendmsg+0x40c/0x6f0 [ 786.090429][T19171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.090475][T19171] ____sys_sendmsg+0x563/0x5b0 [ 786.090510][T19171] ___sys_sendmsg+0x195/0x1e0 [ 786.090621][T19171] __x64_sys_sendmsg+0xd4/0x160 [ 786.090660][T19171] x64_sys_call+0x194c/0x3020 [ 786.090734][T19171] do_syscall_64+0x12c/0x370 [ 786.090806][T19171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.090832][T19171] RIP: 0033:0x7f90d005c819 [ 786.090852][T19171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.090873][T19171] RSP: 002b:00007f90ceab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.090898][T19171] RAX: ffffffffffffffda RBX: 00007f90d02d5fa0 RCX: 00007f90d005c819 [ 786.090925][T19171] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 786.090941][T19171] RBP: 00007f90ceab7090 R08: 0000000000000000 R09: 0000000000000000 [ 786.090957][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.090972][T19171] R13: 00007f90d02d6038 R14: 00007f90d02d5fa0 R15: 00007fff412eedb8 [ 786.091019][T19171] [ 786.486861][T19181] bridge0: entered allmulticast mode [ 786.529739][T19181] bridge0: entered promiscuous mode [ 786.660631][ T28] audit: type=1326 audit(1775272356.710:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19191 comm="syz.2.4736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fa1c819 code=0x0 [ 787.110350][T19203] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4738'. [ 788.069322][T19222] netlink: 'syz.3.4742': attribute type 16 has an invalid length. [ 788.077188][T19222] netlink: 'syz.3.4742': attribute type 17 has an invalid length. [ 788.103069][T19222] netlink: 'syz.3.4742': attribute type 27 has an invalid length. [ 788.148882][T19226] FAULT_INJECTION: forcing a failure. [ 788.148882][T19226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.183152][T19226] CPU: 1 UID: 0 PID: 19226 Comm: syz.8.4746 Not tainted syzkaller #0 PREEMPT(full) [ 788.183222][T19226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 788.183238][T19226] Call Trace: [ 788.183247][T19226] [ 788.183257][T19226] __dump_stack+0x1d/0x30 [ 788.183287][T19226] dump_stack_lvl+0x95/0xd0 [ 788.183315][T19226] dump_stack+0x15/0x1b [ 788.183367][T19226] should_fail_ex+0x263/0x280 [ 788.183398][T19226] should_fail+0xb/0x20 [ 788.183456][T19226] should_fail_usercopy+0x1a/0x20 [ 788.183491][T19226] _copy_to_user+0x20/0xa0 [ 788.183533][T19226] simple_read_from_buffer+0xb5/0x130 [ 788.183622][T19226] proc_fail_nth_read+0x10e/0x150 [ 788.183658][T19226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.183716][T19226] vfs_read+0x1ab/0x7f0 [ 788.183761][T19226] ? __rcu_read_unlock+0x4e/0x70 [ 788.183787][T19226] ? __fget_files+0x184/0x1c0 [ 788.183929][T19226] ? mutex_lock+0x57/0x90 [ 788.183953][T19226] ksys_read+0xdc/0x1a0 [ 788.183975][T19226] __x64_sys_read+0x40/0x50 [ 788.184022][T19226] x64_sys_call+0x2886/0x3020 [ 788.184051][T19226] do_syscall_64+0x12c/0x370 [ 788.184081][T19226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.184106][T19226] RIP: 0033:0x7f60964fd04e [ 788.184141][T19226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.184160][T19226] RSP: 002b:00007f6094f8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 788.184239][T19226] RAX: ffffffffffffffda RBX: 00007f6094f8f6c0 RCX: 00007f60964fd04e [ 788.184255][T19226] RDX: 000000000000000f RSI: 00007f6094f8f0a0 RDI: 0000000000000003 [ 788.184272][T19226] RBP: 00007f6094f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 788.184286][T19226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.184301][T19226] R13: 00007f60967b6038 R14: 00007f60967b5fa0 R15: 00007ffe2a1a46e8 [ 788.184383][T19226] [ 788.483842][T19229] loop8: detected capacity change from 0 to 128 [ 789.272910][ T28] audit: type=1326 audit(1775272359.320:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.3.4750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78b34ec819 code=0x0 [ 789.310235][T19244] loop1: detected capacity change from 0 to 512 [ 789.341750][T19244] EXT4-fs: Ignoring removed bh option [ 789.352317][T19244] EXT4-fs: Ignoring removed mblk_io_submit option [ 789.408699][T19244] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 789.464703][T19244] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 789.598190][T19244] EXT4-fs (loop1): orphan cleanup on readonly fs [ 789.607525][T19244] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 789.637666][T19244] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 789.658007][T19244] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.4749: Failed to acquire dquot type 1 [ 789.847466][T19257] loop8: detected capacity change from 0 to 128 [ 790.662000][T19244] fserror_report: 5 callbacks suppressed [ 790.662021][T19244] loop1: lost filesystem error report for type 5 error -5 [ 790.677956][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 790.691740][ C1] EXT4-fs (loop1): last error at time 1775272360: ext4_acquire_dquot:7026 [ 790.912460][T19260] loop2: detected capacity change from 0 to 512 [ 790.979160][T19244] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4749: Invalid block bitmap block 0 in block_group 0 [ 791.056759][T19244] loop1: lost filesystem error report for type 5 error -117 [ 791.696575][T19244] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4749: Invalid block bitmap block 0 in block_group 0 [ 791.966784][T19260] EXT4-fs (loop2): 1 orphan inode deleted [ 792.009232][T19260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.026726][T19260] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.198396][T18333] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 792.316575][T18333] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 1 [ 792.338891][T19244] loop1: lost filesystem error report for type 5 error -117 [ 792.339094][T19244] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4749: Invalid block bitmap block 0 in block_group 0 [ 792.389647][T19277] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4768'. [ 792.413746][T19244] loop1: lost filesystem error report for type 5 error -117 [ 792.413950][T19244] Quota error (device loop1): write_blk: dquota write failed [ 792.439747][T19244] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 792.452866][T13115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.459710][T19244] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.4749: Failed to acquire dquot type 1 [ 792.493652][T19244] loop1: lost filesystem error report for type 5 error -28 [ 792.497579][T19244] Quota error (device loop1): write_blk: dquota write failed [ 792.531085][T19244] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 792.548105][T19244] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.4749: Failed to acquire dquot type 1 [ 792.564273][T19244] loop1: lost filesystem error report for type 5 error -28 [ 792.564553][T19244] EXT4-fs (loop1): 1 orphan inode deleted [ 792.584826][T19244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 792.630113][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.431240][ T28] audit: type=1400 audit(1775272363.480:762): avc: denied { read } for pid=19302 comm="syz.8.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 793.636810][T19308] loop1: detected capacity change from 0 to 512 [ 793.675245][T19312] rdma_op ffff88810b163980 conn xmit_rdma 0000000000000000 [ 793.680720][T19308] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 793.701427][T19314] loop2: detected capacity change from 0 to 512 [ 793.711806][T19308] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4771: bad orphan inode 131083 [ 793.728885][T19308] loop1: lost filesystem error report for type 5 error -117 [ 793.738454][T19308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.769206][T19314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.783972][T19314] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.805039][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.825171][ T28] audit: type=1400 audit(1775272363.870:763): avc: denied { link } for pid=19313 comm="syz.2.4773" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 793.885056][T13115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.964458][ T28] audit: type=1326 audit(1775272366.010:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19340 comm="syz.7.4781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90d005c819 code=0x0 [ 796.609639][T19338] loop3: detected capacity change from 0 to 128 [ 798.716288][T19359] loop2: detected capacity change from 0 to 512 [ 798.725288][T19359] EXT4-fs: Ignoring removed bh option [ 798.738041][T19359] EXT4-fs: Ignoring removed mblk_io_submit option [ 798.745010][T19359] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 798.755938][T19359] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 798.764805][T19359] EXT4-fs (loop2): orphan cleanup on readonly fs [ 798.771936][T19359] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 798.782315][T19359] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 798.792616][T19359] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.4787: Failed to acquire dquot type 1 [ 798.806312][T19359] loop2: lost filesystem error report for type 5 error -5 [ 798.806741][T19359] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4787: Invalid block bitmap block 0 in block_group 0 [ 798.813920][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 798.813937][ C1] EXT4-fs (loop2): last error at time 1775272368: ext4_acquire_dquot:7026 [ 798.843665][T19359] loop2: lost filesystem error report for type 5 error -117 [ 798.843952][T19359] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4787: Invalid block bitmap block 0 in block_group 0 [ 798.865449][T19359] loop2: lost filesystem error report for type 5 error -117 [ 798.865744][T19359] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4787: Invalid block bitmap block 0 in block_group 0 [ 798.890446][T19359] loop2: lost filesystem error report for type 5 error -117 [ 798.897862][T19359] Quota error (device loop2): write_blk: dquota write failed [ 798.914009][T19359] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 798.925601][T19359] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.4787: Failed to acquire dquot type 1 [ 798.937431][T19359] loop2: lost filesystem error report for type 5 error -28 [ 798.938099][T19359] Quota error (device loop2): write_blk: dquota write failed [ 798.956387][T19359] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 798.966644][T19359] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.4787: Failed to acquire dquot type 1 [ 798.980750][T19359] loop2: lost filesystem error report for type 5 error -28 [ 798.981852][T19359] EXT4-fs (loop2): 1 orphan inode deleted [ 798.998945][T19359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 799.070709][ T28] audit: type=1326 audit(1775272369.120:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19371 comm="syz.8.4793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f609653c819 code=0x0 [ 799.192378][T19380] loop7: detected capacity change from 0 to 2048 [ 799.238250][T19380] loop7: p1 p2 [ 799.316696][T19386] SET target dimension over the limit! [ 799.528449][T13115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.666492][T19394] loop7: detected capacity change from 0 to 128 [ 800.149251][ T28] audit: type=1326 audit(1775272370.190:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.2.4800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fa1c819 code=0x0 [ 801.128260][T19423] SET target dimension over the limit! [ 801.268774][T19427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4810'. [ 801.434018][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4811'. [ 802.237717][T19437] FAULT_INJECTION: forcing a failure. [ 802.237717][T19437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.302513][T19437] CPU: 1 UID: 0 PID: 19437 Comm: syz.1.4814 Not tainted syzkaller #0 PREEMPT(full) [ 802.302550][T19437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 802.302566][T19437] Call Trace: [ 802.302575][T19437] [ 802.302582][T19437] __dump_stack+0x1d/0x30 [ 802.302637][T19437] dump_stack_lvl+0x95/0xd0 [ 802.302682][T19437] dump_stack+0x15/0x1b [ 802.302708][T19437] should_fail_ex+0x263/0x280 [ 802.302742][T19437] should_fail+0xb/0x20 [ 802.302766][T19437] should_fail_usercopy+0x1a/0x20 [ 802.302802][T19437] _copy_from_user+0x1c/0xb0 [ 802.302840][T19437] ___sys_sendmsg+0xc1/0x1e0 [ 802.302950][T19437] __x64_sys_sendmsg+0xd4/0x160 [ 802.303115][T19437] x64_sys_call+0x194c/0x3020 [ 802.303222][T19437] do_syscall_64+0x12c/0x370 [ 802.303255][T19437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.303282][T19437] RIP: 0033:0x7ff7ae3ac819 [ 802.303302][T19437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.303324][T19437] RSP: 002b:00007ff7ace07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.303365][T19437] RAX: ffffffffffffffda RBX: 00007ff7ae625fa0 RCX: 00007ff7ae3ac819 [ 802.303379][T19437] RDX: 0000000020040800 RSI: 0000200000001e00 RDI: 0000000000000003 [ 802.303393][T19437] RBP: 00007ff7ace07090 R08: 0000000000000000 R09: 0000000000000000 [ 802.303409][T19437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.303434][T19437] R13: 00007ff7ae626038 R14: 00007ff7ae625fa0 R15: 00007ffebef84258 [ 802.303528][T19437] [ 804.729542][T19459] loop1: detected capacity change from 0 to 128 [ 805.239937][T19470] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4823'. [ 805.607820][T19479] loop2: detected capacity change from 0 to 512 [ 805.744977][T19481] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4828'. [ 806.123292][T19495] loop1: detected capacity change from 0 to 512 [ 806.179206][T19495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.192252][T19495] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.648926][ T28] audit: type=1400 audit(1775272376.620:767): avc: denied { connect } for pid=19501 comm="syz.8.4835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 806.837630][ T28] audit: type=1326 audit(1775272376.870:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.2.4836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fa1c819 code=0x0 [ 806.985051][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.198886][T19522] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4840'. [ 807.256305][T19514] loop7: detected capacity change from 0 to 512 [ 807.302054][T19514] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 807.430119][T19534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4842'. [ 807.468787][T19525] loop1: detected capacity change from 0 to 512 [ 807.475875][T19525] EXT4-fs: Ignoring removed bh option [ 807.496338][T19525] EXT4-fs: Ignoring removed mblk_io_submit option [ 807.531095][T19525] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 807.549486][T19514] EXT4-fs (loop7): orphan cleanup on readonly fs [ 807.568405][T19525] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 807.576629][T19525] EXT4-fs (loop1): orphan cleanup on readonly fs [ 807.589856][T19514] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4838: Block bitmap for bg 0 marked uninitialized [ 807.606419][T19525] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 807.627007][T19525] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 807.637537][T19514] loop7: lost filesystem error report for type 5 error -117 [ 807.648803][T19514] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 807.666396][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 807.666498][ C0] EXT4-fs (loop7): initial error at time 1775272377: ext4_read_block_bitmap_nowait:517 [ 807.666638][ C0] EXT4-fs (loop7): last error at time 1775272377: ext4_read_block_bitmap_nowait:517 [ 807.726441][T19525] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.4839: Failed to acquire dquot type 1 [ 807.748917][T19514] loop7: lost filesystem error report for type 5 error -117 [ 807.750665][T19525] loop1: lost filesystem error report for type 5 error -5 [ 807.761125][T19514] EXT4-fs (loop7): 1 orphan inode deleted [ 807.776406][T19525] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4839: Invalid block bitmap block 0 in block_group 0 [ 807.789916][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 807.789934][ C0] EXT4-fs (loop1): last error at time 1775272377: ext4_acquire_dquot:7026 [ 807.806600][T19525] loop1: lost filesystem error report for type 5 error -117 [ 807.806874][T19525] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4839: Invalid block bitmap block 0 in block_group 0 [ 807.813741][T19514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 807.814713][T19525] loop1: lost filesystem error report for type 5 error -117 [ 807.814968][T19525] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4839: Invalid block bitmap block 0 in block_group 0 [ 807.814998][T19525] loop1: lost filesystem error report for type 5 error -117 [ 807.815209][T19525] Quota error (device loop1): write_blk: dquota write failed [ 807.815229][T19525] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 807.815251][T19525] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.4839: Failed to acquire dquot type 1 [ 807.815328][T19525] loop1: lost filesystem error report for type 5 error -28 [ 807.815654][T19525] Quota error (device loop1): write_blk: dquota write failed [ 807.915480][T19514] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 807.928582][T19525] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 807.938845][T19525] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.4839: Failed to acquire dquot type 1 [ 807.939209][T19514] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 807.958248][T19525] loop1: lost filesystem error report for type 5 error -28 [ 807.961573][T19525] EXT4-fs (loop1): 1 orphan inode deleted [ 807.988851][T19525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 808.003768][T19514] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4838: Block bitmap for bg 0 marked uninitialized [ 808.043000][T19514] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.4838: Block bitmap for bg 0 marked uninitialized [ 808.043111][T19525] ================================================================== [ 808.043152][T19525] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 808.043202][T19525] [ 808.043210][T19525] write to 0xffffffff86c7ae00 of 8 bytes by task 19514 on cpu 1: [ 808.043230][T19525] data_alloc+0x310/0x390 [ 808.043264][T19525] prb_reserve+0x8d7/0xae0 [ 808.043296][T19525] vprintk_store+0x54a/0x910 [ 808.043319][T19525] vprintk_emit+0x1a4/0x600 [ 808.043341][T19525] vprintk_default+0x26/0x30 [ 808.043364][T19525] vprintk+0x1d/0x30 [ 808.043393][T19525] _printk+0x79/0xa0 [ 808.043470][T19525] __ext4_error+0x225/0x310 [ 808.043494][T19525] ext4_read_block_bitmap_nowait+0x58c/0x680 [ 808.043520][T19525] ext4_read_block_bitmap+0x1e/0x70 [ 808.043541][T19525] __ext4_new_inode+0x14e4/0x2340 [ 808.043568][T19525] ext4_xattr_inode_lookup_create+0x4d4/0xeb0 [ 808.043606][T19525] ext4_xattr_ibody_set+0x136/0x3c0 [ 808.043642][T19525] ext4_xattr_set_handle+0xc1d/0xf80 [ 808.043674][T19525] ext4_xattr_set+0x18e/0x240 [ 808.043695][T19525] ext4_xattr_trusted_set+0x3c/0x50 [ 808.161741][T19525] __vfs_setxattr+0x2e6/0x310 [ 808.166521][T19525] __vfs_setxattr_noperm+0xe8/0x410 [ 808.171730][T19525] __vfs_setxattr_locked+0x105/0x220 [ 808.177116][T19525] vfs_setxattr+0x12c/0x2a0 [ 808.181635][T19525] filename_setxattr+0x1c4/0x410 [ 808.186844][T19525] path_setxattrat+0x2be/0x310 [ 808.191716][T19525] __x64_sys_lsetxattr+0x71/0x90 [ 808.196754][T19525] x64_sys_call+0x1300/0x3020 [ 808.201441][T19525] do_syscall_64+0x12c/0x370 [ 808.206041][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.211940][T19525] [ 808.214265][T19525] read to 0xffffffff86c7ae00 of 16 bytes by task 19525 on cpu 0: [ 808.222067][T19525] _prb_read_valid+0x1bc/0x950 [ 808.226849][T19525] prb_read_valid+0x3c/0x60 [ 808.231370][T19525] console_unlock+0x146/0x280 [ 808.236225][T19525] con_install+0x2df/0x330 [ 808.240839][T19525] tty_init_dev+0x7c/0x320 [ 808.245324][T19525] tty_open+0x6c6/0xaf0 [ 808.249526][T19525] chrdev_open+0x2eb/0x3a0 [ 808.253956][T19525] do_dentry_open+0x4ca/0xa90 [ 808.258651][T19525] vfs_open+0x37/0x1e0 [ 808.262737][T19525] path_openat+0x1b70/0x2050 [ 808.267521][T19525] do_file_open+0x16c/0x290 [ 808.272052][T19525] do_sys_openat2+0x94/0x130 [ 808.277098][T19525] __x64_sys_openat+0xf2/0x120 [ 808.281880][T19525] x64_sys_call+0x1e39/0x3020 [ 808.286655][T19525] do_syscall_64+0x12c/0x370 [ 808.291431][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.297327][T19525] [ 808.299648][T19525] Reported by Kernel Concurrency Sanitizer on: [ 808.305802][T19525] CPU: 0 UID: 0 PID: 19525 Comm: syz.1.4839 Not tainted syzkaller #0 PREEMPT(full) [ 808.315399][T19525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 808.325633][T19525] ================================================================== [ 808.399579][T15595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.581852][T12833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.