last executing test programs: 10m45.715500986s ago: executing program 32 (id=1665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0xb000000, 0x24040011}, 0x0) 9m9.615501795s ago: executing program 1 (id=2740): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f00442f002001000000000000000000000000000100210000000000000000ffff000000002421880b0000"], 0x0) 9m8.630769976s ago: executing program 1 (id=2748): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000980)={[{@nodelalloc}, {@noblock_validity}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9d, 0x4f0, &(0x7f0000000a40)="$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") 9m7.392666259s ago: executing program 1 (id=2766): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffffc3000000000100009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000166a049c3dc112c983264ef75a7a512ea6762b3a1c0e6e2760250046b14d6e45ef813e565fce7be0d720693820ae99d1f7563c4aebe9ba274b830e1bda0e6264391c69a91fcaca243847e20f11c3006df50faf3184f0eeff52a0dc2a497aeb2d40e212f377843c3dceed670851128639c658ea42043c2d42a9ce6d66ae63163c9e097018201dd17f4e3e1ba9a60c331c213e01341f0750370b06ca"], 0x18}, 0x404f444) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x50, 0x0, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="3a3631023cb40579ed9ac31ffffc45faf60c0be7fde0b4bedba5a650e854105ef571a5462c45fd8c6349bd4fd6bd96d591931418385631e492314e05cf1dd04dce571fb2398635fe6b33cb38c21cafb469a1631da36e865d08eef6c36c86a7bfeead5b7d5382be1c000b689e43c6d8b4337abef5a14eba1d2c6956d971294958b5185e86fb788a1d1a39318281491bb1ba81e8a0c99d6b3b754bc32ef099d4cf740d3d688e8f3fbbd89ab6f261a1cde49356c818e22caedcd3b501afbbed4589ef011e7f0a5c0f3daf847baac4ae393b"], 0xb4}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000180)=0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 9m6.506153766s ago: executing program 1 (id=2780): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000ec0)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@oldalloc}, {@noload}, {@resgid}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0/file2\x00', 0x0, 0x18}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002000)={r0, &(0x7f0000000f40)="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", &(0x7f0000001f40)=""/141, 0x4}, 0x20) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x200844, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=t,gid=', @ANYRESHEX=0xee01]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 9m6.257471519s ago: executing program 1 (id=2781): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = eventfd2(0x0, 0x0) r4 = epoll_create1(0x80000) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x585c, 0x4) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)={0x20000013}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESOCT=r4], 0x150}, 0x1, 0x0, 0x0, 0x20008094}, 0x4040080) 9m5.253426291s ago: executing program 1 (id=2791): socket(0x2b, 0x80000, 0x5) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x3}}, 0x10) 9m5.253128791s ago: executing program 33 (id=2791): socket(0x2b, 0x80000, 0x5) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x3}}, 0x10) 7m38.363522113s ago: executing program 6 (id=3623): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "000000000000000000000300"}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 7m38.316809065s ago: executing program 6 (id=3626): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") 7m38.226756479s ago: executing program 6 (id=3628): socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x7, 0x4, 0x2, 0x2a, 0x1c, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @noop, @ra={0x94, 0x4}]}}}}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, 0x0, 0x18, 0x0, 0x12345}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2141, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x80000000}, 0x10928, 0x0, 0x0, 0x0, 0x7, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000000000000a00000006000100"], 0x24}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x21, 0x1, 0x0, 0x0) 7m37.337321225s ago: executing program 6 (id=3646): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x1) fsetxattr(r1, &(0x7f0000000100)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x8020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0x10}, {0x3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xfff1}, {0x5, 0x9}}}, 0x24}}, 0x20004055) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffd01, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7, @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22eca65cc5}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[], 0x0) 7m35.724297339s ago: executing program 6 (id=3655): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xa46d167a4eadda43, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,nodots,dots,check=normal,uid=', @ANYRESHEX=0x0, @ANYBLOB=',flush,cReck=strict,dmask=00000000000000000000004,nodots,\x00'], 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) 7m34.612757237s ago: executing program 6 (id=3661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0xae, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @multicast, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x1, 0x6, 0xa0, 0x68, 0x0, 0x80, 0x21, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xb, 0x9d, [@dev={0xac, 0x14, 0x14, 0x10}, @local]}]}}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x2, 0x0, 0x0, 0xa, 0x7, "c6cff3", 0x8, "962ea5"}, "17780981a67e39553cba90570abad15a6c05b56d4fc17b5a2a9c47f81f475fa353f2d3e3334836fde78a5f628917cbadc01bf0e236a0d523e48308c8e1eba070bec09e3ff828fdfd6979c3020bb6af921164b4e9c1784aa757165bf680c49ec1d2d667d2fad9c73d2e96d79d67f622c9"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 7m34.543765591s ago: executing program 34 (id=3661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0xae, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @multicast, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x1, 0x6, 0xa0, 0x68, 0x0, 0x80, 0x21, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xb, 0x9d, [@dev={0xac, 0x14, 0x14, 0x10}, @local]}]}}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x2, 0x0, 0x0, 0xa, 0x7, "c6cff3", 0x8, "962ea5"}, "17780981a67e39553cba90570abad15a6c05b56d4fc17b5a2a9c47f81f475fa353f2d3e3334836fde78a5f628917cbadc01bf0e236a0d523e48308c8e1eba070bec09e3ff828fdfd6979c3020bb6af921164b4e9c1784aa757165bf680c49ec1d2d667d2fad9c73d2e96d79d67f622c9"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4m53.261152296s ago: executing program 2 (id=5227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x8000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000700)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000eda49420d94d730c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32, @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10009, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") 4m52.977857051s ago: executing program 2 (id=5234): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pidfd_send_signal(r0, 0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r1, &(0x7f0000000280)='syz1\x00', 0x1ff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a029fb5f9061bad7c149ceb2db51e5001800000100000000180000001800000008000000000000000000a30300000061005f61612e005c10a6337cf96c9fe9f30a70488920f30fa4223cf3cc190ce4b4a4c85d918ed9dca5eaeb70092415d11955dafb06c31d356fcd76c827f94c29381ee35cbc9498f06df6cdfb574800"/142], 0x0, 0x38, 0x0, 0x1}, 0x28) 4m52.918507724s ago: executing program 2 (id=5236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090ae90400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff30fffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m52.888759175s ago: executing program 2 (id=5238): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x21, 0x2, 0x2) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4000, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)}, 0x4000004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@test_dummy_encryption_v1}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15\x11\xf0\xd3\xa0\x99\xef\xe4\xb3\xc5\xc3AK\x7f\xe2\xa6]\x9a\xadyr\xaf <\xd5\xe1\xfa,N\x8a\x03\xe7s\xef\x96\xfc\x8c\xe4\xd2', 0x6e93ebbbcc0884f2, 0x1c6, &(0x7f0000000040)={0x4d3f98f6, 0x2, 0x4, 0x1}) mq_timedreceive(r4, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x3ed7, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x3ed7, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000400)) (async) clock_gettime(0x0, &(0x7f0000000400)) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x0, 0x2, 0x80000009, 0x1}}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0xf, 0x8}, {0x5, 0x6}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xfffffff8}, {0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x7ab}]}, 0x5c}}, 0x4000) preadv(r7, 0x0, 0x0, 0x100007, 0xd) (async) preadv(r7, 0x0, 0x0, 0x100007, 0xd) 4m52.712357545s ago: executing program 2 (id=5244): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x100, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4m52.705771206s ago: executing program 2 (id=5245): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "00000000000000e000"}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4m50.193367145s ago: executing program 7 (id=5264): socket(0x1d, 0x2, 0x6) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x5) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0xffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9, 0x64}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4m50.11285613s ago: executing program 7 (id=5265): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x9, &(0x7f00000008c0)=ANY=[@ANYRESOCT], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x10}, 0x94) 4m50.072731491s ago: executing program 7 (id=5266): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000d, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c, 0x0, @perf_bp={0x0, 0x6}, 0x5, 0x600, 0x1, 0x0, 0xfffffffe, 0x4, 0x65b0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 4m49.944920768s ago: executing program 7 (id=5269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x70}}, 0x0) 4m49.905517091s ago: executing program 7 (id=5271): getpid() accept4$llc(0xffffffffffffffff, &(0x7f0000000500)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000540)=0x10, 0x180800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r0, 0x0) stat(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x251, &(0x7f0000001040)="$eJzs3T9oJFUcB/DvzO545i7IqY0g/gER0UA4O0GLs1E4kOMQEVQ4EbFR7oTzDruLlY2F1irXaBPEzmgpaYKNIlhFTREbQYOIwUKLldlJJG7WRN1kRzKfD0xmXmbe/N6w8327zewG6KyTSU4n6SWZS1IlKXYecGeznNxqXptZOZ8MBo//VAyPa9qN7X4nkiwkeSDJclnkxX5yZenp9V9XH73njcvV3e8vPTUz1YvcsrG+9tjmu2df/+jM/Ve++OqHs0VOZ/Yv13XwijH/6xfJTYdR7H+i6Lc9Av6Jc69++HWd+5uT3DXMf5UyzYv35qXrlqvc987f9X3rxy9vneZYgYM3GFT1e+DCAOicMslsinI+SbNdlvPzzWf4b3rHy5cuXnpl7oWLly883/ZMBRyIss551h755NjHJ0by/32vyT9wdNX5f+Lc4rf19mav7dEAU3Fbs6rzP/fs1Xsj/9A58g/dVMk/dJr8Q3fJP3SX/ENX/DzSfk/+4Sir9t4t/9Bd8g/dJf/QXTvzDwB0y+BY208gA21pe/4BAAAAAAAAAAAAAAAAAAB2uzazcn57mVbNz95ONh5O0h9Xvzf8PeLk+uHf478U9WF/KppuE3nmjglPMKEPWn76+obv2q3/+e3t1r96IVl4Lcmpfn/3/Vds3X//3Y377K+em7DAv1SMtB98crr1R/2+eOglHtpr55nV5NN6/jk1bv4pc8twPX7+md3/K5b39fJvE54AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAqfkjAAD//xoMbyQ=") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdf41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc3}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) utime(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)={0xffffffffffffff7f, 0x8000000000000001}) timer_create(0x1, 0x0, &(0x7f0000000140)) io_uring_enter(0xffffffffffffffff, 0x2a37, 0x4e26, 0x40, &(0x7f0000000680)={[0x1]}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r2, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmsg$can_bcm(r4, 0x0, 0x2000) 4m49.664573183s ago: executing program 7 (id=5274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) shutdown(r1, 0x0) 4m37.280896674s ago: executing program 35 (id=5245): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "00000000000000e000"}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4m34.390124064s ago: executing program 36 (id=5274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) shutdown(r1, 0x0) 1m45.296493085s ago: executing program 8 (id=6860): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1m45.270605626s ago: executing program 8 (id=6862): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004091) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="800000000514210626bd7000000000000800010000000000080003000000000008000100000000000800030001b3000008000100010000000800030004000000080001000100"], 0x80}}, 0x600) 1m45.19719689s ago: executing program 8 (id=6863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x2400}}, 0xbc}}, 0x0) 1m45.196697s ago: executing program 8 (id=6864): r0 = open(&(0x7f0000000280)='.\x00', 0x80080, 0x122) fcntl$notify(r0, 0x402, 0x24) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(&(0x7f0000000000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fbfffe) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c4947d3"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r2, 0x80000001, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xc48, 0x1, 0x10000000, 0x7, 0xfffffff8}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) fcntl$notify(r1, 0x402, 0x0) 1m45.063017097s ago: executing program 8 (id=6865): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1m44.519581745s ago: executing program 8 (id=6880): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000380), 0x1, 0x7b4, &(0x7f0000000f80)="$eJzs3c9rHNcdAPDvrFY/LLuVCoXWPQkKrcB4Vbmq3UKhKj2UQg2G9mxbrNbC1UprtCtjCYFtSiCXHBJyCMQXn+PEufmaH9fkkr8hh2DjJLKJQw5BYVaz9kralRVZu+ugzwdG+97M7L733Tfz5mnnsRvAoTWW/slFHI/oT5Mj2fokshWRj5je3O/J+loxXZLY2PjPV0l9n8fra8Voek7qaJb5dUR89ErEidzOcqsrq/Mz5XJpKctP1BauTCT5iMsLM3OludLi6cmpqVNn/nTm9MHF+s2nq8cevP7P3783/d3/f3X3tY+TmI5j2bbmOA7KWIxl70n/0/e14R8HXViPJb2uAPuSnpp9m2d5HI+R6NulJf/W1ZoBAJ1yPSI2AIBDJnH9B4BDpvE5wOP1tWJjic37OTd6+sFElzz8e0QMbcbfuL+5uSUf0+nDZ0P1+6DDj5P6PZKGJCJGD6D8sYi4de/8nXSJDt2HBGjlxs2IuDg6tr3/T3u46Rd87T/sYZ+xbXn9H3TPB+n45887x38Ruez8H6r/3T7+GWxx7u7H88//3P0t2f4DKLRJOv77a9PctidN8WdG+7Lcz+pjvv7k0uVyKe3bfh4R49E/mOYndylj/NH3j9ptax7/ff3G/95Jy08fn+2Ru58f3Pqc2ZnazIvE3OzhzYjf5FvFnzxt/6TN+PfcHsv4119efbvdtjT+NN7GsjP+ztq4HfG7lu3/bB5U0pifWF1ZPbljfuJE/XCYaBwULbz/+VvD7cpvbv9b99KS1oqN/wW6IW3/4d3jH93oa5qvWf3xZXxye+TDdtu2xn/+Tlr+1vhbH/8DyX/r6YFs3bWZWm1pMmIg+ffO9aeePbeRb+yfxj/+29bn/27Hf9oNXczSG8+Z/Jh/8OW7+4+/s9L4Z9P2T7IgWrR/0jxfdx+Ju0/m+9qVv7f2n6qnxrM1O/u//I7X3WsFX+jNAwAAAAAAAAAAAAAAAAAAAAAAAIA9ykXEsUhyhafpXK5Q2PwN71/GcK5cqdZOXKosL85G/beyR6M/1/iqy5Gm70OdzL4Pv5E/tS3/x4j4RUS8OXikni8UK+XZXgcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJmjbX7/P/XFYK9rBwB0zFCvKwAAdJ3rPwAcPm2u/wOtVx/paF0AgO6oX/+TfK+rAQB0kc//AeDwcf0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgw86dPZsuG9+urxXT/OzVleX5ytWTs6XqfGFhuVgoVpauFOYqlblyqVCsLLR9oRubD+VK5cpULC5fm6iVqrWJ6srqhYXK8mLtwuWFmbnShVJ/1yIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL2rrqzOz5TLpSWJ3RPXX4pq3MyardfvhsRLkRiMiE4V0dxLHOlN5wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwE/BDAAAA//+CMB8a") 1m44.476285017s ago: executing program 37 (id=6880): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000380), 0x1, 0x7b4, &(0x7f0000000f80)="$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") 6.810527447s ago: executing program 0 (id=7884): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', 0x0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2100}, 0x0) 6.697218564s ago: executing program 0 (id=7885): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020480) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RTC_EPOCH_READ(r8, 0x8008700d, &(0x7f00000000c0)) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) 5.866076057s ago: executing program 0 (id=7893): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) write$sndseq(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xf0ff}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.801377873s ago: executing program 0 (id=7903): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x3}, 0x108010, 0x200, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x24044000) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000180)={'ip6_vti0\x00', 0x8, 0x89ed}) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000c40, &(0x7f0000000180)={[{@block_validity}, {@block_validity}, {@auto_da_alloc}, {@resgid}, {@noblock_validity}]}, 0xfe, 0x4ba, &(0x7f0000001180)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) 3.015666584s ago: executing program 3 (id=7935): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) r1 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800cfffecc507006c001a8054"], 0x94}}, 0x20008841) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x8201, 0x4) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) syz_emit_ethernet(0x13a, &(0x7f0000000200)={@broadcast, @random="5260e2625315", @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@generic={0x88fb, "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"}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5, 0x700}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0xb, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2) shutdown(r0, 0x1) 2.949855008s ago: executing program 0 (id=7936): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x4100}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.885073691s ago: executing program 0 (id=7938): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = shmget(0x0, 0x3000, 0x4, &(0x7f000074a000/0x3000)=nil) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f00000000c0)=""/62) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)="ab1a", 0x2}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r7, 0x0, 0x3053, 0x4) splice(r4, 0x0, r7, 0x0, 0x80, 0x6) write(r7, &(0x7f0000003300)="ac", 0x1) write(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x8, &(0x7f0000000100)=[{0x806, 0x80, 0x9, 0x7fff0000}, {0x7, 0x7, 0x80, 0xf0c}, {0xffe2, 0x81, 0x4, 0x400004}, {0x8, 0x2, 0xf9, 0x5}, {0x2, 0x0, 0x40, 0xe03}, {0x2, 0xf8, 0x51, 0x5}, {0x0, 0x2, 0x5e, 0xffffffff}, {0x6, 0x5, 0xa, 0xdd}]}) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x82) unlinkat(r9, &(0x7f0000000140)='./file0\x00', 0x200) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) 2.685281212s ago: executing program 4 (id=7942): r0 = socket$kcm(0x2d, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) (async, rerun: 64) r2 = signalfd(r0, &(0x7f0000000000)={[0x5]}, 0x8) (rerun: 64) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000040)={@mcast1, @loopback}) (async) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x9f0, 0x0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) 2.298338851s ago: executing program 4 (id=7945): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) 1.914112771s ago: executing program 3 (id=7946): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="b2", 0x5}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES16=r0], 0x15, 0x4850}}], 0x1, 0x20040804) accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.912214991s ago: executing program 4 (id=7948): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000007fffffee4ff00000000feffffff000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000084c3da60ff00000000"]}, 0x138) 1.633210236s ago: executing program 3 (id=7949): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x4000001c, 0x2, @thr={&(0x7f00000004c0)="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", &(0x7f0000000b00)="a1758cfbc2175bed56bf6ddcc7a5a521d7cef290a40103082064ef30cf64ca52c009039a95902d7362e111f76af2c2fe0b741982e46ed6aecb7353fda11806947003d014a0e3e4ccf21cea23c9fc7c788f4de75839ac2126cc5287cbe99453721e8ed506d766db26e4b5da207783779a01c6262d0d2a29a2ef61adcf546720cc33e6bc46a7e351f1c0241c921962fe86a381dda0129e7d6f4f1cda99da8f2381c14a141463839bf512a16a1142a1787aa9ba531cf2d65b6923b63a8db75a884a83f870a5423a"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000080000000c00000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v'], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x176) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x18044, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x111905, 0xa51, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0xcef1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x2d0bfbea9cd38ec2}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES8], 0x23, 0x232, &(0x7f0000000640)="$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") creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) rename(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x6083, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f000010b000/0x2000)=nil, 0x2000, 0x1000000, 0x1810, r2, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x9}, 0x2475f6a37e2d0c88, 0x10004, 0x6, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000040000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000029c4f22200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf2501000000000000000b000000000c020073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="912fc393901e9894fb9263d492c7e739785c2ccbde0e77e1717cbe1d0db5d4fbb807b578318dcf0ab24acf57952ea86881ee17a8acebc433337af8f9b18195e41e9fac0371072780c975dc80a0115083e6e6d972747832766537b687c5d284ff851ec1ad9e9f08cf9b3babc172abaa86a854bf48f078df56f297c9c90b8118ce4e71ced1ce84d57e39e06a3ab5c3c43e4a689bea3d4dea262532bdd6a979523e"], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20) 1.593196688s ago: executing program 4 (id=7950): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x91, 0x4) connect$inet6(r0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (fail_nth: 3) 1.489019833s ago: executing program 9 (id=7951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010065040900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073987a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000f08000340000000f10800044000000022050002000700000024000180090001006d6173710000020014000280080002400000000f08000340000000030900010073797a30"], 0xf8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7040fcdbdf251b00000008009a00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}]]}, 0x50}}, 0x80) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x30}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000) 939.486782ms ago: executing program 4 (id=7954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0xffed, 0x40040}, 0x0) 697.123154ms ago: executing program 4 (id=7955): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) close(0x3) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newtaction={0xd8, 0x30, 0x10, 0x0, 0x80000, {}, [{0xc4, 0x1, [@m_vlan={0xc0, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x91, 0x6, "438b7c7209b156ee954a6fd48391ea827ea43671a3f36b973e7ba755f0a4038c67aa9cb33329b00607e2077f2340ae4b149d97ca3974fb0f86aa1296a4336907ce1cb13ec4577e68efd1c5680ed08e60fc7372244a2dfd6f5be7e13b5e385b3d3dd9e6383b60db2e51093ce3249142d4ded2f9a9302d299f168390abb2c03f9b09a472d06360626b8ff5000000"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000400)='quota'}, 0x30) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000c80)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="2f00466c86850000000000002b69e897c0c18d3df5e634bd0cd1925c75f8b66b2c8bd93318816f1fd423734b5478", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x25, 0x19, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x81}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r4}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0xffffffff, 0x1, &(0x7f0000000ac0)="1e00000002000000347d8660f13fc6cbf5e2e977087236000000000000000000000000000017d0a39239ebb9ebac144aa6a5548b86ec3ce4ffa56cb5b4ed07c17592ba3b6428ae2e11c906a195996118a18056d96455fca0816c15b082e60f5b989cdc44a8c5c177c70abc40c74bf56bb62d2b2df4d04937b9de3234ffc35816e96909d516abfb0c7cb995e4fda62c33a5f1a4538a62bb3454ab558fefe08dfed5413524578bcf75c3fee38ade463c4e61e35f35f89584bbbd229d0ad822a1ae3c72dbfba9d9c889ffea5959be7f316af7c6635df33aea624847b7a10cb2ec05fe82f6d62cbd2006c1890206ffa86c74de597a0cb8e2166c9877aff080aaad173727dc07695ac1d2b3ee84cc7e0394a01c7d7c21180e1ca8f1b4fa0db7ebd7ead8a55c2a60579fc56c1d4ad5bdf4dafd16ae71c792ff4a2056d14513e109980ecc7f7240da0f20a224dbe37f97c81b2a52b04f7b40a4480432b067a7e62d086fdc6b0350cc5397c1fc74005887dec186c6015616f7426fb3696e45040d6cb4141d678dd0bdf4acb7acee3b90705c65619eb6c562fac981d7fe94f0b577fcb84d06e2885eafee17d4", 0x1a8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xfef4, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x8f}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r3], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) rename(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000140)='./file1\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x50) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)='./file1\x00') 637.102527ms ago: executing program 9 (id=7956): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001200)={&(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0x9, "b0f1c5b8e6edea74b33dff8908023070fa2220c73f08d228dc2a799bb33a457fcad799718fac6531c9ac997bf2b853596ca62daab971dd75246591695edfb8", 0x8}, 0x60, &(0x7f0000001140)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="e48159e33b3d573c15b9a8e6d9286b3ac42f0bf8b6598b204ada8219f574ab9031c3386948e01af54b0496de8b281b2dbaed2f9d5827e2e267bea59122b1350c7cd5dbb33b532915e9e5be8ce2b833ba0a7d1610349684cdef6551c8d76986dd0599729bee748f3d72f3fc58d4842b0e97c9da4ae385", 0x76}], 0x2, &(0x7f0000001180)={0x78, 0x118, 0x7, "81c79d8872fb313219c926c1348fa2c776e33827a86cd63f273849252ff70292aa0ca1d051f98d65e483d2bf9787546bd5ea592aaf51ac4840c832e60faeb7ed72bcc21c83a1ea28f6195a3b34e5c9fbe52e652a91036ca3b39bd9eeff14c1fd9d05960da19fcbd6"}, 0x78, 0x803}, 0x40000801) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000001280)={&(0x7f0000001240)=[{0x7, 0x4, 0x1}, {0x4, 0x1}, {0xffffffff, 0x9, 0x1}], 0x3, 0x10, 0x4, 0x5}) (async, rerun: 32) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000012c0)=""/215) (async, rerun: 64) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000013c0)=0x0) (rerun: 64) write$P9_RGETLOCK(r0, &(0x7f0000001400)={0x3b, 0x37, 0x2, {0x1, 0x6, 0x2, r2, 0x1d, '/selinux/avc/cache_threshold\x00'}}, 0x3b) (async, rerun: 64) r3 = syz_open_procfs$userns(r2, &(0x7f0000001440)) (rerun: 64) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001480), 0x48400, 0x0) (async) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder-control\x00', 0x800, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000026c0)={r4, 0x20, &(0x7f0000002680)={&(0x7f0000001640)=""/11, 0xb, 0x0, &(0x7f0000001680)=""/4096, 0x1000}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x1f, 0xa, &(0x7f0000001500)=@raw=[@ldst={0x2, 0x2, 0x2, 0x8, 0xa, 0x20, 0xfffffffffffffff0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit, @func], &(0x7f0000001580)='syzkaller\x00', 0x6, 0x2e, &(0x7f00000015c0)=""/46, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x4, 0x7, 0x7}, 0x10, r6, r0, 0x2, 0x0, &(0x7f0000002700)=[{0x3, 0x3, 0xd, 0x7}, {0x2, 0x1, 0x7, 0x1}], 0x10, 0x2}, 0x94) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000002800)={0x1}) poll(&(0x7f0000002840)=[{r3, 0x411d30520d9dafed}, {r1, 0x10}, {r3, 0x4021}, {r3, 0x25}, {r4, 0x1053}, {r7, 0x41}, {r3, 0x1110}, {r5, 0x80}], 0x8, 0x4) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002880)={0x3, 0x7, 0x8}, 0xc) (async) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000028c0)=""/233) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r8, &(0x7f0000002ec0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e80)={&(0x7f0000002a00)={0x458, 0x3f4, 0x2, 0x70bd25, 0x25dfdbfe, {0x1, 0x1, 0x20, [0x6, 0xe, 0x2, 0x10000, 0x400, 0x4, 0x2000, 0x5, 0x0, 0x0, 0xa, 0x9, 0x8, 0x80000000, 0x10, 0x3, 0x0, 0x67, 0x5, 0x7, 0x6, 0xe29, 0xb50, 0x2, 0x7f, 0x6, 0x5, 0x80000001, 0x7, 0x5, 0x0, 0x5, 0x1, 0x7fffffff, 0x100, 0x2, 0x8, 0x4, 0xb, 0x4, 0x4, 0x8, 0x2, 0x1, 0x8, 0x0, 0x9, 0xb1, 0xf982, 0x40000, 0x1, 0x6, 0x3, 0x7f, 0x3, 0x1, 0x1000, 0x0, 0xb1e, 0xe, 0xffff299d, 0x7fff, 0x4, 0x7ff], [0xffffffff, 0x8, 0xffffffff, 0xe, 0x192, 0x10000, 0xc7, 0xc259, 0x38102cfb, 0x5, 0x80000000, 0x8, 0x4, 0x1, 0x8, 0x6, 0x55d405d5, 0xfffffff2, 0x6, 0x8, 0x9b, 0x7fff, 0xfffff000, 0xffffffff, 0x2, 0xfff, 0xdd44, 0x2, 0x100, 0xbb, 0x7, 0x40, 0x9b, 0x6, 0x1, 0x1000, 0x3, 0x5bd3ec52, 0x1, 0x1a33, 0x9, 0x6b, 0x101, 0x94, 0x6a59, 0xd, 0x2, 0x1, 0x7, 0x1ff, 0x5, 0x7, 0x3, 0xbb, 0x6, 0x5, 0x3, 0x8, 0x8, 0x4, 0x8, 0x8, 0xa, 0xfffffff9], [0xe0, 0x0, 0x80000001, 0x1, 0x8, 0x9700, 0x8a2a, 0x4, 0x40, 0x100, 0x7, 0x6, 0xfffffff1, 0x43e, 0x10, 0x40, 0x8, 0x6, 0x4, 0x2, 0x100, 0x0, 0x5, 0xbba, 0x6, 0x2, 0xab, 0x8, 0x0, 0x80000000, 0x8000, 0x2, 0x8e, 0x2, 0xe000000, 0x8, 0x7, 0x2, 0x0, 0x80000000, 0x7, 0x8, 0x988d, 0x790, 0x7, 0x1, 0x2, 0x0, 0x526, 0x7, 0x7, 0x30, 0xf85d, 0x7ff, 0x8, 0x6, 0xcf18, 0x9, 0x24, 0xa14, 0xffffffff, 0x9, 0xffff, 0x4], [0x6, 0x7, 0x0, 0x4, 0x1, 0x8, 0x5, 0x7fffffff, 0x9111, 0x97a3, 0x6, 0x400, 0x2, 0x10001, 0x7, 0x5, 0x4, 0x8, 0xff800000, 0x5, 0x3, 0x7, 0x3, 0x5da, 0x9, 0x1000, 0x0, 0x433, 0x7, 0x7, 0x80, 0x8, 0x778, 0x10001, 0x80000000, 0x5f, 0x5, 0x4, 0x8, 0xe2, 0x4, 0x6, 0x3, 0x2, 0xfffffff8, 0x0, 0xc000000, 0x80000000, 0xffff, 0x4, 0xb638, 0x80, 0x9, 0x5, 0x4, 0x1e9, 0x5, 0x7ff, 0x401, 0x7fff, 0x5, 0x3, 0xffffffff, 0x7de3f994], 0x38, ['ns/user\x00', '-\'\x00', ']]%@#\x00', '\x00', '/\x00', 'syzkaller\x00', './binderfs/binder-control\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x458}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000002f00)=0xffffff7f, &(0x7f0000002f40)=0x4) readv(r1, &(0x7f0000003240)=[{&(0x7f0000002f80)=""/42, 0x2a}, {&(0x7f0000002fc0)=""/132, 0x84}, {&(0x7f0000003080)=""/212, 0xd4}, {&(0x7f0000003180)}, {&(0x7f00000031c0)=""/50, 0x32}, {&(0x7f0000003200)=""/23, 0x17}], 0x6) (async) sendmsg$unix(r4, &(0x7f0000003440)={&(0x7f00000032c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000003340)="a4ba3a275217316d78533fe6f9d5e6d0a48d7874cc5104a23450d5172833908f1fdb76d4c2423a5093c5517bfee0de20d25c87b4827051f975ec3b5776eb9eb24aa829371f33e963342ab823fef1a67afbaffcc1e9469d029363cd04a00c27df0cd46690c00d14779901a398a1165f79b8d6344e120c0ec24000fe95461409edf2d4d790d50dc7ea12a1ab7569a202e6f9418feb28a9f3840ed6939b171d51a2", 0xa0}], 0x1, 0x0, 0x0, 0x4800}, 0x4000880) r9 = getpgrp(r2) syz_clone3(&(0x7f0000003680)={0x8080, &(0x7f0000003480), &(0x7f00000034c0), &(0x7f0000003500), {0x26}, &(0x7f0000003540)=""/23, 0x17, &(0x7f0000003580)=""/175, &(0x7f0000003640)=[r9, r2, r2, r2, r2, r2, r2, r2], 0x8, {r0}}, 0x58) syz_emit_ethernet(0xab, &(0x7f0000003700)={@random="8597da68f87d", @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@generic={0x4502d79c8247fa18, "374e6c1234da85fb232b57c49ad9ea54467e4acfd54034c975a32c26986744a4c06a3fd9ec7a310b578a30befba71a126cf206c4f385d07434b0ea7cbbf605c714a7de3e4c5fc655835835e0a9166b943a5ec408aa8a00ab7d8747e2a990e4701dd8193836236ff4e2edb2ce597c3396748569c1cc7a9a0dcb247a4404bd0cf28cdf07af2407b9c9d3bf5ac9e8fd3dd2aa32c0621f5f1a903c"}}}, &(0x7f00000037c0)={0x0, 0x2, [0xc6b, 0xeb4, 0x57e, 0x339]}) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003800), 0x428002, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000003840)=0x5) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000003880)) 401.47639ms ago: executing program 9 (id=7957): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a0000000000000000000038", 0x2a}, {&(0x7f00000000c0)="aee4e9c52e863a72da3f3b2759e5fac30c2bd95ba050791e46c4692713d29910872449f44b", 0x25}], 0x2) 352.761062ms ago: executing program 9 (id=7958): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0xa4ad}, 0x102368, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0xffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) 273.301596ms ago: executing program 9 (id=7960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="79ca4388331c", 0x6}, {&(0x7f0000000180)="6019c239f5b7336b587d7168e0c40dd5be0c0f6c72f09c156739e3029765933bea8aa176ebc08f55a5df5cd2db979e54ba7b11c743831ae5fe5834b50b0bf368b1b6f0f5927b693e1a217b0193ba74a088bf0a1cc7c8afbe24d21b59502ae77ebd80020b55aefa2bf0a0e7d988d099b77ec46d940224ee0d8ae31c2dd5c361be8ca54f36815a70759ca2b823554074057ef0b3912ebae3f3ee13b3a0cc", 0x9d}], 0x2, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100001042dbd7000000000f43b6fe900", @ANYRES32=0x0, @ANYBLOB="4b02060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x100000, 0x0, 0x4081}, 0x0) 272.848816ms ago: executing program 5 (id=7961): perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0xa109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000020000000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f44001280100001800c000100636f756e74657200200001800a00010071756f7461000000100002800c00014000000000000008001000018008000100647570000400028008000340000001"], 0xd0}}, 0x20050800) 193.42815ms ago: executing program 5 (id=7962): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 193.24693ms ago: executing program 5 (id=7963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090ae90400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0xf5ffffff, 0x4000850}, 0x40) 192.803721ms ago: executing program 5 (id=7964): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 188.049081ms ago: executing program 5 (id=7965): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200050000000000fddbdf250200000008000000060000000800e880040043488609bb06a81d9edbbc8cf0c52cb1cd7a0ba396cd963349171dffcf0609a737d912a55c809e59da71cfb66db6058800394d58ccfa4fa2f372dbd83490"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 172.925691ms ago: executing program 5 (id=7966): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) mknod(&(0x7f0000000140)='./file1\x00', 0x100, 0x5) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 65.250927ms ago: executing program 9 (id=7967): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c09718a12b3749b1ada6f05a20427070b6a34416197391b1c63ecfc50266aaaa5559a1c"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020480) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RTC_EPOCH_READ(r8, 0x8008700d, &(0x7f00000000c0)) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) 65.034037ms ago: executing program 3 (id=7968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000000000000e000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31f5ffffff38000000030a01040000000000000000010000010900030001007a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 25.074069ms ago: executing program 3 (id=7969): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf1000000, '\x00', 0x0, @sk_skb}, 0x48) 0s ago: executing program 3 (id=7970): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) sync() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x0, 0xa, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000600)='./file0\x00', 0x8000, &(0x7f0000000640), 0x1, 0x5b1, &(0x7f0000001200)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00002000000000000000000000000000000020004e692bb9a7280e4d73a66b28a67fb3fd5d6adda50cf2fa72f0456f6a52f0fed0b5ccb841ae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): w without journal. Quota mode: writeback. [ 765.634662][T27050] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 766.213395][T27064] syzkaller0: entered promiscuous mode [ 766.239820][T27064] syzkaller0: entered allmulticast mode [ 766.256551][T27067] xt_hashlimit: size too large, truncated to 1048576 [ 766.421363][T22866] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 766.438231][T27081] loop4: detected capacity change from 0 to 512 [ 766.487539][T27084] macvlan0: entered allmulticast mode [ 766.524104][T27084] bridge0: entered allmulticast mode [ 766.539250][T27084] bridge0: port 2(macvlan0) entered blocking state [ 766.555898][T27084] bridge0: port 2(macvlan0) entered disabled state [ 766.585318][T27084] bridge0: left allmulticast mode [ 767.461442][T27124] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 767.507520][T27126] loop0: detected capacity change from 0 to 512 [ 767.514734][ T28] audit: type=1400 audit(3327.499:6419): avc: denied { shutdown } for pid=27127 comm="syz.4.7160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 767.541545][T27126] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 767.558286][T27126] EXT4-fs (loop0): 1 truncate cleaned up [ 767.564985][T27126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.731282][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.777846][T27150] __nla_validate_parse: 4 callbacks suppressed [ 767.777893][T27150] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7166'. [ 767.809289][T27151] loop0: detected capacity change from 0 to 1024 [ 767.823775][T27151] EXT4-fs: Mount option(s) incompatible with ext3 [ 767.846779][ T28] audit: type=1400 audit(3327.839:6420): avc: denied { connect } for pid=27147 comm="syz.0.7167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 767.903419][ T28] audit: type=1400 audit(3327.849:6421): avc: denied { map } for pid=27147 comm="syz.0.7167" path="socket:[89086]" dev="sockfs" ino=89086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 767.940650][ T28] audit: type=1400 audit(3327.849:6422): avc: denied { read } for pid=27147 comm="syz.0.7167" path="socket:[89086]" dev="sockfs" ino=89086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 767.953576][T27164] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7174'. [ 768.042391][T27170] loop4: detected capacity change from 0 to 512 [ 768.049348][T27170] EXT4-fs: Invalid want_extra_isize 1 [ 768.140118][T27182] loop4: detected capacity change from 0 to 128 [ 768.243316][T27193] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 768.417656][T27201] loop3: detected capacity change from 0 to 512 [ 768.424610][T27201] EXT4-fs: dax option not supported [ 768.439432][T27205] loop4: detected capacity change from 0 to 164 [ 768.477249][T27205] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 768.560881][T27207] syzkaller0: entered promiscuous mode [ 768.566583][T27207] syzkaller0: entered allmulticast mode [ 768.611427][T27211] tipc: Started in network mode [ 768.616490][T27211] tipc: Node identity ac14140f, cluster identity 4711 [ 768.623732][T27211] tipc: Enabled bearer , priority 10 [ 768.662220][T27213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7192'. [ 768.694913][T27215] bridge0: entered promiscuous mode [ 768.700332][T27215] macvlan2: entered allmulticast mode [ 768.706061][T27215] bridge0: entered allmulticast mode [ 768.712072][T27215] bridge0: port 3(macvlan2) entered blocking state [ 768.718843][T27215] bridge0: port 3(macvlan2) entered disabled state [ 768.765452][T27215] bridge0: left allmulticast mode [ 768.773552][T27215] bridge0: left promiscuous mode [ 768.985248][T27242] loop3: detected capacity change from 0 to 512 [ 768.995550][T27244] bond2: entered allmulticast mode [ 769.017833][T27242] EXT4-fs (loop3): 1 truncate cleaned up [ 769.039134][T27242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.075164][T27252] syzkaller0: entered promiscuous mode [ 769.086457][T27258] loop0: detected capacity change from 0 to 256 [ 769.095292][T27258] vfat: Bad value for 'gid' [ 769.099636][T27242] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7204: bg 0: block 465: padding at end of block bitmap is not set [ 769.099884][T27258] vfat: Bad value for 'gid' [ 769.114618][T27252] syzkaller0: entered allmulticast mode [ 769.122772][T27242] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 769.138834][T27242] EXT4-fs (loop3): This should not happen!! Data will be lost [ 769.138834][T27242] [ 769.149632][T27242] EXT4-fs (loop3): Total free blocks count 0 [ 769.156169][T27242] EXT4-fs (loop3): Free/Dirty block details [ 769.167676][T27242] EXT4-fs (loop3): free_blocks=0 [ 769.173049][T27242] EXT4-fs (loop3): dirty_blocks=10 [ 769.178559][T27242] EXT4-fs (loop3): Block reservation details [ 769.185087][T27242] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 769.192119][T27263] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 769.226915][ T28] audit: type=1400 audit(3329.219:6423): avc: denied { connect } for pid=27241 comm="syz.3.7204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 769.251833][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7204'. [ 769.260883][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7204'. [ 769.273304][T27270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7215'. [ 769.282663][T27242] syz.3.7204 (27242) used greatest stack depth: 7680 bytes left [ 769.300045][T26017] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 769.313984][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.325079][ T28] audit: type=1400 audit(3329.319:6424): avc: denied { read } for pid=27271 comm="syz.0.7217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 769.371410][T27277] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7218'. [ 769.382544][T27272] vlan3: left promiscuous mode [ 769.387610][T27272] bond1: left promiscuous mode [ 769.394663][T27272] vlan3: left allmulticast mode [ 769.399676][T27272] bond1: left allmulticast mode [ 769.405006][T27272] geneve2: left promiscuous mode [ 769.410323][T27272] geneve2: left allmulticast mode [ 769.416361][T27272] hsr1: left promiscuous mode [ 769.421557][T27272] bridge1: left promiscuous mode [ 769.426898][T27272] bridge1: left allmulticast mode [ 769.432823][T27272] bond5: left promiscuous mode [ 769.450192][T27283] program syz.4.7219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 769.480170][T27290] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 769.631176][T22169] tipc: Node number set to 2886997007 [ 769.663966][T27292] loop3: detected capacity change from 0 to 512 [ 769.678099][T27294] netlink: 'syz.0.7223': attribute type 29 has an invalid length. [ 769.690338][T27294] netlink: 'syz.0.7223': attribute type 29 has an invalid length. [ 769.699445][T27294] xt_limit: Overflow, try lower: 0/0 [ 769.707250][T27294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7223'. [ 769.729882][T27296] macvlan3: entered allmulticast mode [ 769.735321][T27296] bridge0: entered allmulticast mode [ 769.740988][T27296] bridge0: port 5(macvlan3) entered blocking state [ 769.747616][T27296] bridge0: port 5(macvlan3) entered disabled state [ 769.749461][T27294] netlink: 532 bytes leftover after parsing attributes in process `syz.0.7223'. [ 769.780142][T27292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.783050][T27294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.805856][T27296] bridge0: left allmulticast mode [ 769.822755][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.887731][T27301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.905154][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.926473][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.981392][T27307] xt_hashlimit: size too large, truncated to 1048576 [ 770.146199][T27340] netlink: 272 bytes leftover after parsing attributes in process `syz.0.7231'. [ 770.161593][ T28] audit: type=1400 audit(3330.160:6425): avc: denied { lock } for pid=27327 comm="syz.0.7231" path="socket:[90413]" dev="sockfs" ino=90413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 770.311307][ T28] audit: type=1400 audit(3330.260:6426): avc: denied { unmount } for pid=27346 comm="syz.9.7236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 770.660645][T27378] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 770.763313][T27384] netlink: 'syz.3.7241': attribute type 13 has an invalid length. [ 770.774786][T27384] netlink: 'syz.3.7241': attribute type 17 has an invalid length. [ 770.796695][T27384] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.806505][T27384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.984939][T27391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.080528][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.098879][ T28] audit: type=1400 audit(3331.090:6427): avc: denied { read } for pid=27400 comm="syz.5.7248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 771.584141][T27423] IPv6: sit1: Disabled Multicast RS [ 772.322223][T27461] netlink: 'syz.3.7263': attribute type 28 has an invalid length. [ 772.346885][T27461] netlink: 'syz.3.7263': attribute type 29 has an invalid length. [ 772.419570][T27466] netlink: 'syz.3.7263': attribute type 13 has an invalid length. [ 772.446607][T27466] netlink: 'syz.3.7263': attribute type 17 has an invalid length. [ 772.478768][T27470] set_capacity_and_notify: 5 callbacks suppressed [ 772.479135][T27470] loop4: detected capacity change from 0 to 512 [ 772.504177][T27466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 772.527759][T27470] EXT4-fs: dax option not supported [ 773.483199][T27485] syzkaller0: entered promiscuous mode [ 773.488752][T27485] syzkaller0: entered allmulticast mode [ 773.528175][T27490] FAULT_INJECTION: forcing a failure. [ 773.528175][T27490] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 773.547235][T27490] CPU: 1 UID: 0 PID: 27490 Comm: syz.5.7268 Tainted: G W syzkaller #0 PREEMPT(full) [ 773.547318][T27490] Tainted: [W]=WARN [ 773.547328][T27490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.547372][T27490] Call Trace: [ 773.547379][T27490] [ 773.547387][T27490] __dump_stack+0x1d/0x30 [ 773.547416][T27490] dump_stack_lvl+0x95/0xd0 [ 773.547468][T27490] dump_stack+0x15/0x1b [ 773.547496][T27490] should_fail_ex+0x263/0x280 [ 773.547534][T27490] should_fail_alloc_page+0xf2/0x100 [ 773.547560][T27490] __alloc_frozen_pages_noprof+0x108/0x350 [ 773.547617][T27490] alloc_pages_mpol+0xb3/0x260 [ 773.547649][T27490] folio_alloc_mpol_noprof+0x39/0x80 [ 773.547727][T27490] shmem_get_folio_gfp+0x3da/0xd60 [ 773.547757][T27490] shmem_write_begin+0xfc/0x1f0 [ 773.547808][T27490] generic_perform_write+0x183/0x490 [ 773.547991][T27490] shmem_file_write_iter+0xc5/0xf0 [ 773.548024][T27490] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 773.548063][T27490] vfs_write+0x5a6/0x9f0 [ 773.548098][T27490] ksys_write+0xdc/0x1a0 [ 773.548161][T27490] __x64_sys_write+0x40/0x50 [ 773.548207][T27490] x64_sys_call+0x27e1/0x3020 [ 773.548241][T27490] do_syscall_64+0x12c/0x3b0 [ 773.548317][T27490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.548342][T27490] RIP: 0033:0x7f8437c2d04e [ 773.548362][T27490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 773.548383][T27490] RSP: 002b:00007f84366beda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.548410][T27490] RAX: ffffffffffffffda RBX: 00007f84366bf6c0 RCX: 00007f8437c2d04e [ 773.548503][T27490] RDX: 0000000000040000 RSI: 00007f842e29f000 RDI: 0000000000000006 [ 773.548520][T27490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 773.548535][T27490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 773.548550][T27490] R13: 00007f84366beee0 R14: 00007f84366beea0 R15: 00007f842e29f000 [ 773.548640][T27490] [ 773.804640][T27514] loop3: detected capacity change from 0 to 1024 [ 773.819308][T27514] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 773.827445][T27514] System zones: 0-1, 3-36 [ 773.846401][T27514] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.7273: bad orphan inode 134217728 [ 773.857446][T27514] loop3: lost filesystem error report for type 5 error -117 [ 773.858167][T27514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.917702][T27533] __nla_validate_parse: 3 callbacks suppressed [ 773.917725][T27533] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7280'. [ 773.941777][T27533] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7280'. [ 773.955426][T27536] loop0: detected capacity change from 0 to 512 [ 773.961889][T27537] loop4: detected capacity change from 0 to 512 [ 773.969784][T27536] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 773.988488][T27536] EXT4-fs (loop0): orphan cleanup on readonly fs [ 774.007603][T27536] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 774.022388][T27536] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.7282: corrupted inode contents [ 774.034368][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 774.034394][ C0] EXT4-fs (loop0): initial error at time 3334: mb_free_blocks:2049: inode 12: block 14 [ 774.034431][ C0] EXT4-fs (loop0): last error at time 3334: mb_free_blocks:2049: inode 12: block 14 [ 774.061358][ T28] audit: type=1400 audit(3334.040:6428): avc: denied { read } for pid=27542 comm="syz.4.7283" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:etc_t:s0" [ 774.087912][ T28] audit: type=1400 audit(3334.040:6429): avc: denied { ioctl } for pid=27542 comm="syz.4.7283" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:etc_t:s0" [ 774.117807][T27536] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 774.119091][T27536] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #12: comm syz.0.7282: mark_inode_dirty error [ 774.144428][T27536] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 774.144726][T27536] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.7282: corrupted inode contents [ 774.166175][T27536] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 774.166351][T27536] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.7282: mark_inode_dirty error [ 774.166576][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.175529][T27536] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 774.175760][T27536] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.7282: corrupted inode contents [ 774.240654][T27536] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 774.240865][T27536] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 774.271252][T27536] loop0: lost filesystem error report for type 5 error -117 [ 774.271570][T27536] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.7282: corrupted inode contents [ 774.294034][T27536] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 774.294224][T27536] EXT4-fs error (device loop0): ext4_truncate:4690: inode #12: comm syz.0.7282: mark_inode_dirty error [ 774.323873][T27536] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 774.324121][T27536] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 774.342665][T27536] loop0: lost filesystem error report for type 5 error -117 [ 774.348410][T27536] EXT4-fs (loop0): 1 truncate cleaned up [ 774.357519][T27553] netlink: 'syz.3.7287': attribute type 1 has an invalid length. [ 774.373286][ T4051] Quota error (device loop0): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 774.384043][ T4051] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 774.400677][ T4051] loop0: lost filesystem error report for type 5 error -5 [ 774.403024][T27536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 774.403111][T27553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.447311][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.503493][T27561] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7289'. [ 774.514499][T27561] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7289'. [ 774.523909][T27559] netlink: 272 bytes leftover after parsing attributes in process `syz.3.7287'. [ 774.574337][T27568] 8021q: VLANs not supported on sit0 [ 774.902277][T27584] loop4: detected capacity change from 0 to 8192 [ 774.981666][T27584] xfrm0 speed is unknown, defaulting to 1000 [ 775.079049][T27589] netlink: 'syz.4.7300': attribute type 1 has an invalid length. [ 775.090926][T27589] loop4: detected capacity change from 0 to 512 [ 775.097941][T27589] EXT4-fs: Ignoring removed orlov option [ 775.155761][T27593] FAULT_INJECTION: forcing a failure. [ 775.155761][T27593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 775.169386][T27593] CPU: 0 UID: 0 PID: 27593 Comm: syz.4.7301 Tainted: G W syzkaller #0 PREEMPT(full) [ 775.169419][T27593] Tainted: [W]=WARN [ 775.169467][T27593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 775.169502][T27593] Call Trace: [ 775.169510][T27593] [ 775.169520][T27593] __dump_stack+0x1d/0x30 [ 775.169549][T27593] dump_stack_lvl+0x95/0xd0 [ 775.169643][T27593] dump_stack+0x15/0x1b [ 775.169668][T27593] should_fail_ex+0x263/0x280 [ 775.169703][T27593] should_fail_alloc_page+0xf2/0x100 [ 775.169855][T27593] __alloc_frozen_pages_noprof+0x108/0x350 [ 775.169891][T27593] alloc_pages_mpol+0xb3/0x260 [ 775.169924][T27593] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 775.169956][T27593] do_wp_page+0x70e/0x2040 [ 775.170062][T27593] ? _raw_spin_lock+0x52/0xa0 [ 775.170082][T27593] ? __rcu_read_lock+0x36/0x50 [ 775.170284][T27593] handle_mm_fault+0x8b9/0x2e70 [ 775.170320][T27593] ? vma_start_read+0x1c7/0x2c0 [ 775.170350][T27593] do_user_addr_fault+0x62f/0x1050 [ 775.170463][T27593] ? ksys_mmap_pgoff+0xc1/0x310 [ 775.170493][T27593] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 775.170529][T27593] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 775.170630][T27593] ? trace_page_fault_user+0x1f/0xa0 [ 775.170666][T27593] exc_page_fault+0x62/0xa0 [ 775.170729][T27593] asm_exc_page_fault+0x26/0x30 [ 775.170755][T27593] RIP: 0033:0x7eff911b3ae3 [ 775.170855][T27593] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 775.170920][T27593] RSP: 002b:00007eff8fd4e470 EFLAGS: 00010206 [ 775.170938][T27593] RAX: 0000000000005400 RBX: 00007eff8fd4e530 RCX: 00007eff8792f000 [ 775.170953][T27593] RDX: 00007eff8fd4e6d0 RSI: 000000000000000a RDI: 00007eff8fd4e5d0 [ 775.170969][T27593] RBP: 00000000000000dd R08: 0000000000000006 R09: 000000000000000f [ 775.170984][T27593] R10: 0000000000000018 R11: 00007eff8fd4e530 R12: 0000000000000001 [ 775.171008][T27593] R13: 00007eff913b2600 R14: 000000000000002e R15: 00007eff8fd4e5d0 [ 775.171027][T27593] [ 775.379754][T27593] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 775.388664][T27593] loop4: detected capacity change from 0 to 128 [ 775.506351][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7308'. [ 775.556081][T27619] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7310'. [ 775.614748][ T28] audit: type=1400 audit(3335.610:6430): avc: denied { setopt } for pid=27623 comm="syz.4.7312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 775.649856][T27626] macvlan3: entered allmulticast mode [ 775.663487][T27628] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 775.674322][T27626] bridge0: entered allmulticast mode [ 775.819820][T27634] syz1: rxe_newlink: already configured on xfrm0 [ 775.836919][T27647] loop0: detected capacity change from 0 to 512 [ 775.838632][T27642] xt_hashlimit: overflow, rate too high: 0 [ 775.845016][T27647] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7320: inode has both inline data and extents flags [ 775.891191][T27647] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 775.892669][T27647] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7320: couldn't read orphan inode 15 (err -117) [ 775.901881][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 775.901907][ C1] EXT4-fs (loop0): initial error at time 3335: ext4_orphan_get:1397: inode 15 [ 775.901941][ C1] EXT4-fs (loop0): last error at time 3335: ext4_orphan_get:1397: inode 15 [ 775.938263][T27647] loop0: lost filesystem error report for type 5 error -117 [ 775.940782][T27647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.982876][T27647] EXT4-fs error (device loop0): __ext4_add_entry:2412: inode #2: comm syz.0.7320: Directory hole found for htree leaf block 0 [ 776.013594][T27657] bridge2: entered allmulticast mode [ 776.252254][T27674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7330'. [ 776.719846][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.765175][T27683] loop4: detected capacity change from 0 to 512 [ 776.830176][T27683] EXT4-fs: inline encryption not supported [ 777.012948][T27683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7334'. [ 777.053777][T27683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7334'. [ 778.058390][T27719] macvlan0: entered allmulticast mode [ 778.067446][T27719] bridge0: entered allmulticast mode [ 778.084641][T27719] bridge0: port 2(macvlan0) entered blocking state [ 778.096348][T27719] bridge0: port 2(macvlan0) entered disabled state [ 778.116109][T27719] bridge0: left allmulticast mode [ 778.144676][T27724] loop3: detected capacity change from 0 to 512 [ 778.161189][T27724] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 778.175262][T27724] EXT4-fs (loop3): orphan cleanup on readonly fs [ 778.175440][T27726] syzkaller0: entered promiscuous mode [ 778.187541][T27726] syzkaller0: entered allmulticast mode [ 778.192386][T27724] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 778.207939][T27724] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.7350: corrupted inode contents [ 778.219900][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 778.219923][ C1] EXT4-fs (loop3): initial error at time 3338: mb_free_blocks:2049: inode 12: block 14 [ 778.219964][ C1] EXT4-fs (loop3): last error at time 3338: mb_free_blocks:2049: inode 12: block 14 [ 778.245820][T27724] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 778.246188][T27724] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.7350: mark_inode_dirty error [ 778.271152][T27724] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 778.271875][T27724] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.7350: corrupted inode contents [ 778.293277][T27724] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.7350: mark_inode_dirty error [ 778.308274][T27724] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.7350: corrupted inode contents [ 778.320616][T27724] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 778.331492][T27724] loop3: lost filesystem error report for type 5 error -117 [ 778.334510][T27724] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.7350: corrupted inode contents [ 778.357466][T27724] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.7350: mark_inode_dirty error [ 778.378959][T27724] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 778.393451][T27724] loop3: lost filesystem error report for type 5 error -117 [ 778.395271][T27724] EXT4-fs (loop3): 1 truncate cleaned up [ 778.410927][ T30] Quota error (device loop3): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 778.434041][T27741] netlink: 'syz.4.7356': attribute type 13 has an invalid length. [ 778.454481][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 778.457634][T27741] netlink: 'syz.4.7356': attribute type 17 has an invalid length. [ 778.466053][ T30] loop3: lost filesystem error report for type 5 error -5 [ 778.482171][T27724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 778.525203][T27749] netlink: 'syz.9.7360': attribute type 3 has an invalid length. [ 778.533438][T27741] bridge0: left promiscuous mode [ 778.539075][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.539608][T27741] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.559931][T27741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 778.589381][T27746] vlan0: entered promiscuous mode [ 778.596888][T27746] vlan0: entered allmulticast mode [ 778.603028][T27746] gretap0: entered allmulticast mode [ 778.627517][T27759] loop0: detected capacity change from 0 to 128 [ 778.629531][T27755] geneve3: entered promiscuous mode [ 778.643027][ T4047] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.657550][ T4047] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.676972][T27756] 8021q: VLANs not supported on sit0 [ 778.690076][ T4047] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.710633][ T4047] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.938664][T27779] __nla_validate_parse: 4 callbacks suppressed [ 778.938685][T27779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7368'. [ 778.976344][T27779] loop0: detected capacity change from 0 to 512 [ 779.011374][T27783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7367'. [ 779.035835][T27783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7367'. [ 779.060625][T27779] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7368: inode has both inline data and extents flags [ 779.087049][T27784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7367'. [ 779.096728][T27779] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7368: couldn't read orphan inode 15 (err -117) [ 779.108601][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 779.108623][ C1] EXT4-fs (loop0): initial error at time 3339: ext4_orphan_get:1397: inode 15 [ 779.108656][ C1] EXT4-fs (loop0): last error at time 3339: ext4_orphan_get:1397: inode 15 [ 779.144344][T27784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7367'. [ 779.163988][T27779] loop0: lost filesystem error report for type 5 error -117 [ 779.165564][T27779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.209891][T27779] EXT4-fs error (device loop0): __ext4_add_entry:2412: inode #2: comm syz.0.7368: Directory hole found for htree leaf block 0 [ 779.342481][T27788] loop4: detected capacity change from 0 to 128 [ 779.469338][T27788] loop4: detected capacity change from 0 to 2048 [ 779.630191][T27792] 8021q: VLANs not supported on sit0 [ 779.743215][T27799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7373'. [ 779.752813][T27800] netlink: 'syz.5.7373': attribute type 10 has an invalid length. [ 779.772158][T27799] netlink: 'syz.5.7373': attribute type 10 has an invalid length. [ 779.781561][T27800] veth0_macvtap: left promiscuous mode [ 779.787578][T27800] team0: Device veth0_macvtap failed to register rx_handler [ 779.795934][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.814546][T27799] team0: Device veth0_macvtap failed to register rx_handler [ 779.856095][T27803] macvlan0: entered allmulticast mode [ 779.861966][T27803] bridge0: entered allmulticast mode [ 780.118632][ T42] Bluetooth: hci0: sending frame failed (-49) [ 780.124813][ T3564] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 780.364626][T27831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7384'. [ 780.405952][T27832] bridge0: left allmulticast mode [ 780.411570][T27832] macvlan3: left allmulticast mode [ 780.418128][T27832] bridge2: left allmulticast mode [ 780.425577][T27832] geneve3: left promiscuous mode [ 780.432411][ T4073] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.442310][ T4073] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.452008][ T4073] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.461749][ T4073] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.582434][T27839] loop4: detected capacity change from 0 to 512 [ 781.547272][T27845] xt_hashlimit: size too large, truncated to 1048576 [ 784.159192][T27871] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7397'. [ 784.200413][T27871] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7397'. [ 784.219020][T27873] loop4: detected capacity change from 0 to 8192 [ 784.228306][T27879] FAULT_INJECTION: forcing a failure. [ 784.228306][T27879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 784.268240][T27879] CPU: 0 UID: 0 PID: 27879 Comm: syz.3.7402 Tainted: G W syzkaller #0 PREEMPT(full) [ 784.268458][T27879] Tainted: [W]=WARN [ 784.268467][T27879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 784.268482][T27879] Call Trace: [ 784.268492][T27879] [ 784.268502][T27879] __dump_stack+0x1d/0x30 [ 784.268535][T27879] dump_stack_lvl+0x95/0xd0 [ 784.268588][T27879] dump_stack+0x15/0x1b [ 784.268629][T27879] should_fail_ex+0x263/0x280 [ 784.268664][T27879] should_fail_alloc_page+0xf2/0x100 [ 784.268690][T27879] __alloc_frozen_pages_noprof+0x108/0x350 [ 784.268727][T27879] alloc_pages_mpol+0xb3/0x260 [ 784.268758][T27879] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 784.268792][T27879] do_wp_page+0x70e/0x2040 [ 784.268877][T27879] ? _raw_spin_lock+0x52/0xa0 [ 784.268921][T27879] ? __rcu_read_lock+0x36/0x50 [ 784.268950][T27879] handle_mm_fault+0x8b9/0x2e70 [ 784.269012][T27879] ? vma_start_read+0x1c7/0x2c0 [ 784.269040][T27879] do_user_addr_fault+0x62f/0x1050 [ 784.269145][T27879] ? ksys_mmap_pgoff+0xc1/0x310 [ 784.269173][T27879] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 784.269231][T27879] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 784.269263][T27879] ? trace_page_fault_user+0x1f/0xa0 [ 784.269370][T27879] exc_page_fault+0x62/0xa0 [ 784.269400][T27879] asm_exc_page_fault+0x26/0x30 [ 784.269420][T27879] RIP: 0033:0x7f4dd11b3b98 [ 784.269438][T27879] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 784.269476][T27879] RSP: 002b:00007f4dcfd56470 EFLAGS: 00010202 [ 784.269498][T27879] RAX: 0000000000007400 RBX: 00007f4dcfd56530 RCX: 0000000000000009 [ 784.269512][T27879] RDX: 000000000000000f RSI: 0000000000000c10 RDI: 00007f4dcfd565d0 [ 784.269582][T27879] RBP: 000000000000000a R08: 00007f4dc7937000 R09: 0000000000000073 [ 784.269595][T27879] R10: 0000200000000102 R11: 00000000000002af R12: 0000000000000c01 [ 784.269609][T27879] R13: 00007f4dd13b2600 R14: 0000000000000017 R15: 00007f4dcfd565d0 [ 784.269707][T27879] [ 784.490037][T27879] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 784.498405][T27879] loop3: detected capacity change from 0 to 128 [ 784.513271][T27879] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000006) [ 784.523962][T27879] FAT-fs (loop3): Filesystem has been set read-only [ 784.560400][T27889] loop3: detected capacity change from 0 to 512 [ 784.567450][T27889] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 784.576651][T27889] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7406: bg 0: block 104: invalid block bitmap [ 784.591443][T27889] loop3: lost filesystem error report for type 5 error -117 [ 784.591844][T27889] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 784.608085][T27889] loop3: lost filesystem error report for type 5 error -117 [ 784.608648][T27889] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7406: invalid indirect mapped block 1 (level 1) [ 784.608718][T27889] fserror_report: 6 callbacks suppressed [ 784.608756][T27889] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 784.608972][T27889] EXT4-fs (loop3): 1 truncate cleaned up [ 784.609754][T27889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.696354][T27873] xfrm0 speed is unknown, defaulting to 1000 [ 784.817075][T27900] xt_hashlimit: size too large, truncated to 1048576 [ 785.516659][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.605210][T27931] loop4: detected capacity change from 0 to 512 [ 785.607813][T27934] loop0: detected capacity change from 0 to 128 [ 785.699490][T27940] netlink: 'syz.0.7419': attribute type 21 has an invalid length. [ 785.699554][T27940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7419'. [ 785.737186][T27939] xfrm0 speed is unknown, defaulting to 1000 [ 785.916127][T27961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7428'. [ 786.034949][ T58] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.090223][T27970] loop3: detected capacity change from 0 to 512 [ 786.122171][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.131956][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.143949][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.164160][T27970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.167236][T27978] 8021q: VLANs not supported on sit0 [ 786.178964][ T28] audit: type=1400 audit(3346.181:6431): avc: denied { map } for pid=27969 comm="syz.3.7433" path="/105/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 786.971297][T27973] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.7424'. [ 787.205855][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.257268][T27990] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7436'. [ 787.314846][T27996] xt_TCPMSS: Only works on TCP SYN packets [ 787.434941][T27990] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7436'. [ 787.494880][ T28] audit: type=1400 audit(3347.482:6432): avc: denied { ioctl } for pid=28000 comm="syz.4.7442" path="socket:[92374]" dev="sockfs" ino=92374 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 787.593307][T28010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7440'. [ 787.738366][T28015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7447'. [ 788.085309][T28020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7448'. [ 788.225290][T28027] FAULT_INJECTION: forcing a failure. [ 788.225290][T28027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 788.239081][T28027] CPU: 0 UID: 0 PID: 28027 Comm: syz.0.7451 Tainted: G W syzkaller #0 PREEMPT(full) [ 788.239122][T28027] Tainted: [W]=WARN [ 788.239206][T28027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 788.239218][T28027] Call Trace: [ 788.239227][T28027] [ 788.239238][T28027] __dump_stack+0x1d/0x30 [ 788.239296][T28027] dump_stack_lvl+0x95/0xd0 [ 788.239322][T28027] dump_stack+0x15/0x1b [ 788.239345][T28027] should_fail_ex+0x263/0x280 [ 788.239436][T28027] should_fail_alloc_page+0xf2/0x100 [ 788.239464][T28027] __alloc_frozen_pages_noprof+0x108/0x350 [ 788.239518][T28027] alloc_pages_mpol+0xb3/0x260 [ 788.239550][T28027] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 788.239648][T28027] do_wp_page+0x70e/0x2040 [ 788.239681][T28027] ? _raw_spin_lock+0x52/0xa0 [ 788.239701][T28027] ? __rcu_read_lock+0x36/0x50 [ 788.239782][T28027] handle_mm_fault+0x8b9/0x2e70 [ 788.239814][T28027] ? vma_start_read+0x1c7/0x2c0 [ 788.239865][T28027] do_user_addr_fault+0x62f/0x1050 [ 788.239901][T28027] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 788.239935][T28027] ? trace_page_fault_user+0x1f/0xa0 [ 788.240004][T28027] exc_page_fault+0x62/0xa0 [ 788.240032][T28027] asm_exc_page_fault+0x26/0x30 [ 788.240052][T28027] RIP: 0033:0x7f14cfc43b98 [ 788.240082][T28027] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 788.240112][T28027] RSP: 002b:00007f14ce7de470 EFLAGS: 00010202 [ 788.240135][T28027] RAX: 000000000000b400 RBX: 00007f14ce7de530 RCX: 0000000000000063 [ 788.240149][T28027] RDX: 0000000000006cba RSI: 0000000000004cbb RDI: 00007f14ce7de5d0 [ 788.240163][T28027] RBP: 0000000000000064 R08: 00007f14c63bf000 R09: 0000000000000073 [ 788.240177][T28027] R10: 0000200000000102 R11: 00000000000002af R12: 0000000000004001 [ 788.240190][T28027] R13: 00007f14cfe42600 R14: 000000000000001c R15: 00007f14ce7de5d0 [ 788.240238][T28027] [ 788.240274][T28027] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 788.498926][ T28] audit: type=1400 audit(3348.042:6433): avc: denied { map } for pid=28019 comm="syz.4.7448" path="socket:[92040]" dev="sockfs" ino=92040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 788.525790][T28030] loop3: detected capacity change from 0 to 128 [ 788.594115][T28030] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000006) [ 788.604738][T28030] FAT-fs (loop3): Filesystem has been set read-only [ 788.683270][T28039] FAULT_INJECTION: forcing a failure. [ 788.683270][T28039] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 788.716947][T28039] CPU: 0 UID: 0 PID: 28039 Comm: syz.5.7455 Tainted: G W syzkaller #0 PREEMPT(full) [ 788.717048][T28039] Tainted: [W]=WARN [ 788.717057][T28039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 788.717071][T28039] Call Trace: [ 788.717080][T28039] [ 788.717091][T28039] __dump_stack+0x1d/0x30 [ 788.717180][T28039] dump_stack_lvl+0x95/0xd0 [ 788.717208][T28039] dump_stack+0x15/0x1b [ 788.717236][T28039] should_fail_ex+0x263/0x280 [ 788.717273][T28039] should_fail_alloc_page+0xf2/0x100 [ 788.717315][T28039] __alloc_frozen_pages_noprof+0x108/0x350 [ 788.717343][T28039] alloc_pages_mpol+0xb3/0x260 [ 788.717475][T28039] folio_alloc_mpol_noprof+0x39/0x80 [ 788.717508][T28039] shmem_get_folio_gfp+0x3da/0xd60 [ 788.717556][T28039] shmem_write_begin+0xfc/0x1f0 [ 788.717611][T28039] generic_perform_write+0x183/0x490 [ 788.717646][T28039] shmem_file_write_iter+0xc5/0xf0 [ 788.717694][T28039] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 788.717726][T28039] vfs_write+0x5a6/0x9f0 [ 788.717765][T28039] ksys_write+0xdc/0x1a0 [ 788.717895][T28039] __x64_sys_write+0x40/0x50 [ 788.717932][T28039] x64_sys_call+0x27e1/0x3020 [ 788.717965][T28039] do_syscall_64+0x12c/0x3b0 [ 788.717997][T28039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.718097][T28039] RIP: 0033:0x7f8437c2d04e [ 788.718118][T28039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.718150][T28039] RSP: 002b:00007f84366beda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.718173][T28039] RAX: ffffffffffffffda RBX: 00007f84366bf6c0 RCX: 00007f8437c2d04e [ 788.718188][T28039] RDX: 0000000000040000 RSI: 00007f842e29f000 RDI: 0000000000000006 [ 788.718207][T28039] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.718219][T28039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 788.718285][T28039] R13: 00007f84366beee0 R14: 00007f84366beea0 R15: 00007f842e29f000 [ 788.718304][T28039] [ 788.919415][T28027] loop0: detected capacity change from 0 to 128 [ 788.943638][T28027] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000006) [ 788.963559][T28027] FAT-fs (loop0): Filesystem has been set read-only [ 789.125806][T28054] syzkaller0: entered promiscuous mode [ 789.144904][T28054] syzkaller0: entered allmulticast mode [ 789.369103][T28072] 8021q: VLANs not supported on sit0 [ 789.387892][T28067] loop0: detected capacity change from 0 to 8192 [ 789.411395][T28067] FAT-fs (loop0): bogus sectors per cluster 0 [ 789.434230][T28075] lo: left promiscuous mode [ 789.441982][T28075] tunl0: left promiscuous mode [ 789.444540][T28067] FAT-fs (loop0): Can't find a valid FAT filesystem [ 789.466508][T28075] gre0: left promiscuous mode [ 789.480811][T28075] erspan0: left promiscuous mode [ 789.496093][T28075] ip_vti0: left promiscuous mode [ 789.508360][T28075] ip6_vti0: left promiscuous mode [ 789.519891][T28075] sit0: left promiscuous mode [ 789.540482][T28075] ip6tnl0: left promiscuous mode [ 789.578933][T28075] ip6gre0: left promiscuous mode [ 789.579099][T28075] syz_tun: left promiscuous mode [ 789.579210][T28075] ip6gretap0: left promiscuous mode [ 789.579359][T28075] bridge0: left promiscuous mode [ 789.579486][T28075] vcan0: left promiscuous mode [ 789.579593][T28075] team0: left promiscuous mode [ 789.579807][T28075] dummy0: left promiscuous mode [ 789.579859][T28075] nlmon0: left promiscuous mode [ 789.579931][T28075] caif0: left promiscuous mode [ 789.580055][T28075] batadv0: left promiscuous mode [ 789.580105][T28075] vxcan0: left promiscuous mode [ 789.580218][T28075] vxcan1: left promiscuous mode [ 789.581885][T28075] veth0: left promiscuous mode [ 789.582028][T28075] veth1: left promiscuous mode [ 789.582074][T28075] wg0: left promiscuous mode [ 789.582150][T28075] wg1: left promiscuous mode [ 789.582252][T28075] wg2: left promiscuous mode [ 789.582319][T28075] veth0_to_bridge: left promiscuous mode [ 789.582474][T28075] veth0_to_bond: left promiscuous mode [ 789.582526][T28075] bond_slave_0: left promiscuous mode [ 789.582624][T28075] veth1_to_bond: left promiscuous mode [ 789.582719][T28075] bond_slave_1: left promiscuous mode [ 789.582843][T28075] veth0_to_team: left promiscuous mode [ 789.582942][T28075] team_slave_0: left promiscuous mode [ 789.582990][T28075] veth1_to_team: left promiscuous mode [ 789.583101][T28075] team_slave_1: left promiscuous mode [ 789.583148][T28075] veth0_to_batadv: left promiscuous mode [ 789.584039][T28075] batadv_slave_0: left promiscuous mode [ 789.584093][T28075] veth1_to_batadv: left promiscuous mode [ 789.584320][T28075] batadv_slave_1: left promiscuous mode [ 789.584413][T28075] xfrm0: left promiscuous mode [ 789.584460][T28075] veth0_to_hsr: left promiscuous mode [ 789.584616][T28075] veth1_to_hsr: left promiscuous mode [ 789.584930][T28075] ipip0: left promiscuous mode [ 789.584944][T28075] ipip0: left allmulticast mode [ 789.602760][T28075] bridge0: left allmulticast mode [ 789.602823][T28075] macvlan0: left allmulticast mode [ 789.680880][T28083] xfrm0 speed is unknown, defaulting to 1000 [ 790.259617][T28098] loop4: detected capacity change from 0 to 512 [ 790.300657][T28098] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 790.341342][T28098] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 790.366235][T28098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 790.449907][T20493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.730247][T28125] __nla_validate_parse: 1 callbacks suppressed [ 790.730266][T28125] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7481'. [ 790.805921][T28128] loop3: detected capacity change from 0 to 128 [ 790.813116][T28133] netlink: 'syz.5.7482': attribute type 21 has an invalid length. [ 790.833116][T28128] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 790.915742][T28126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.926639][ T28] audit: type=1400 audit(3350.902:6434): avc: denied { shutdown } for pid=28104 comm="syz.0.7475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 790.961109][T28126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 791.086300][ T28] audit: type=1400 audit(3350.902:6435): avc: denied { setattr } for pid=28104 comm="syz.0.7475" name="/" dev="configfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 791.532877][ T28] audit: type=1400 audit(3351.532:6436): avc: denied { lock } for pid=28134 comm="syz.9.7483" path="socket:[93283]" dev="sockfs" ino=93283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 791.707289][T26017] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 791.763667][T28159] xfrm0 speed is unknown, defaulting to 1000 [ 791.946462][T28159] netlink: 'syz.4.7488': attribute type 5 has an invalid length. [ 791.954431][T28159] netlink: 45 bytes leftover after parsing attributes in process `syz.4.7488'. [ 792.238191][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7491'. [ 792.411883][T28181] macvlan1: entered allmulticast mode [ 792.417373][T28181] bridge0: entered allmulticast mode [ 792.423165][T28181] bridge0: port 2(macvlan1) entered blocking state [ 792.430023][T28181] bridge0: port 2(macvlan1) entered disabled state [ 792.437825][T28181] bridge0: left allmulticast mode [ 792.550156][T28189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7497'. [ 792.556810][T28190] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 792.561407][T28191] xt_hashlimit: size too large, truncated to 1048576 [ 792.578840][T28189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7497'. [ 792.615165][T28189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7497'. [ 792.647368][T28189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7497'. [ 792.664256][T28189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7497'. [ 792.683147][T28189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7497'. [ 792.704360][T28189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7497'. [ 793.503821][T28231] loop3: detected capacity change from 0 to 512 [ 793.535588][T28233] netlink: 'syz.0.7513': attribute type 3 has an invalid length. [ 793.597955][T28231] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.7511: inode has both inline data and extents flags [ 793.911017][T28231] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 793.912274][T28231] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7511: couldn't read orphan inode 15 (err -117) [ 793.921501][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 793.921520][ C0] EXT4-fs (loop3): initial error at time 3353: ext4_orphan_get:1397: inode 15 [ 793.921546][ C0] EXT4-fs (loop3): last error at time 3353: ext4_orphan_get:1397: inode 15 [ 794.006476][T28231] loop3: lost filesystem error report for type 5 error -117 [ 794.007135][T28231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.034984][T28231] EXT4-fs error (device loop3): __ext4_add_entry:2412: inode #2: comm syz.3.7511: Directory hole found for htree leaf block 0 [ 794.277827][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.768418][T28268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28268 comm=syz.5.7517 [ 794.945915][T28274] loop4: detected capacity change from 0 to 512 [ 794.957024][T28274] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 794.979636][T28274] EXT4-fs (loop4): too many log groups per flexible block group [ 794.987523][T28274] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 794.994670][T28274] EXT4-fs (loop4): mount failed [ 795.263368][T28282] loop3: detected capacity change from 0 to 512 [ 795.280377][T28282] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.7531: inode has both inline data and extents flags [ 795.308112][T28282] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 795.309065][T28282] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7531: couldn't read orphan inode 15 (err -117) [ 795.318262][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 795.318287][ C1] EXT4-fs (loop3): initial error at time 3355: ext4_orphan_get:1397: inode 15 [ 795.318330][ C1] EXT4-fs (loop3): last error at time 3355: ext4_orphan_get:1397: inode 15 [ 795.354347][T28282] loop3: lost filesystem error report for type 5 error -117 [ 795.361822][T28282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.391889][T28282] EXT4-fs error (device loop3): __ext4_add_entry:2412: inode #2: comm syz.3.7531: Directory hole found for htree leaf block 0 [ 796.099899][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.425899][T28303] loop4: detected capacity change from 0 to 2048 [ 796.576392][T28306] bond2: left allmulticast mode [ 796.656362][T28310] __nla_validate_parse: 147 callbacks suppressed [ 796.656382][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7542'. [ 796.713838][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7542'. [ 796.732539][T28312] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7543'. [ 796.844897][T28321] xt_TCPMSS: Only works on TCP SYN packets [ 796.857848][T28319] tipc: Enabling of bearer rejected, failed to enable media [ 796.956565][T28325] netlink: 'syz.3.7548': attribute type 13 has an invalid length. [ 796.981689][T28325] netlink: 'syz.3.7548': attribute type 17 has an invalid length. [ 797.060755][T28325] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.098977][T28325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.116018][T28333] No such timeout policy "syz1" [ 797.198919][T28335] netlink: 'syz.9.7552': attribute type 17 has an invalid length. [ 797.215934][T28335] netlink: 148 bytes leftover after parsing attributes in process `syz.9.7552'. [ 797.558699][T28348] tipc: Enabled bearer , priority 10 [ 798.261915][T28361] loop3: detected capacity change from 0 to 512 [ 798.277464][T28361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 798.296271][T28361] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.7560: iget: bad i_size value: 38620345925642 [ 798.309314][T28361] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 798.309513][T28361] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7560: couldn't read orphan inode 15 (err -117) [ 798.318718][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 798.318736][ C1] EXT4-fs (loop3): initial error at time 3358: ext4_orphan_get:1397: inode 15 [ 798.318763][ C1] EXT4-fs (loop3): last error at time 3358: ext4_orphan_get:1397: inode 15 [ 798.411776][T28361] loop3: lost filesystem error report for type 5 error -117 [ 798.412470][T28361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.464676][T28365] lo speed is unknown, defaulting to 1000 [ 798.470538][T28365] lo speed is unknown, defaulting to 1000 [ 798.476798][T28365] lo speed is unknown, defaulting to 1000 [ 798.483515][T28365] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 798.568827][T20962] tipc: Node number set to 738213888 [ 798.593715][T28365] lo speed is unknown, defaulting to 1000 [ 798.655800][T28365] lo speed is unknown, defaulting to 1000 [ 798.667910][T28366] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7560: bg 0: block 5: invalid block bitmap [ 798.691602][T28365] lo speed is unknown, defaulting to 1000 [ 798.715831][T28366] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 480 with error 28 [ 798.737616][T28376] netlink: 'syz.9.7564': attribute type 17 has an invalid length. [ 798.768347][T28380] bond0: left promiscuous mode [ 798.776075][T28376] netlink: 148 bytes leftover after parsing attributes in process `syz.9.7564'. [ 798.791692][T28366] EXT4-fs (loop3): This should not happen!! Data will be lost [ 798.791692][T28366] [ 798.807713][T28380] dummy0: left promiscuous mode [ 798.826196][T28380] macvlan5: left promiscuous mode [ 798.843757][T28366] EXT4-fs (loop3): Total free blocks count 0 [ 798.871689][T28366] EXT4-fs (loop3): Free/Dirty block details [ 798.892447][T28366] EXT4-fs (loop3): free_blocks=0 [ 798.910378][T28366] EXT4-fs (loop3): dirty_blocks=484 [ 798.928125][T28366] EXT4-fs (loop3): Block reservation details [ 798.946852][T28366] EXT4-fs (loop3): i_reserved_data_blocks=484 [ 799.102869][T26017] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 799.115770][T28365] lo speed is unknown, defaulting to 1000 [ 799.123608][ T30] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.152323][ T30] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.165952][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.189760][T28365] lo speed is unknown, defaulting to 1000 [ 799.195715][ T30] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.215206][T28365] lo speed is unknown, defaulting to 1000 [ 799.225113][ T30] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.244551][T28365] lo speed is unknown, defaulting to 1000 [ 799.255234][T28365] lo speed is unknown, defaulting to 1000 [ 799.411754][T28400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7569'. [ 799.424939][ T58] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.434547][ T58] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.435772][T28403] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7568'. [ 799.452530][ T58] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.479620][ T58] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.605586][T28413] macvlan3: entered allmulticast mode [ 799.617277][T28413] bridge0: entered allmulticast mode [ 799.628797][T28413] bridge0: port 5(macvlan3) entered blocking state [ 799.642748][T28413] bridge0: port 5(macvlan3) entered disabled state [ 799.659387][T28413] bridge0: left allmulticast mode [ 799.763309][T28415] loop4: detected capacity change from 0 to 512 [ 799.876978][ T28] audit: type=1400 audit(3359.863:6437): avc: denied { getopt } for pid=28417 comm="syz.3.7575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 799.899251][T28418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7575'. [ 799.928368][T28415] loop7: detected capacity change from 1024 to 0 [ 799.986581][T28429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7579'. [ 799.995511][T28429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7579'. [ 800.008026][T28427] loop4: detected capacity change from 0 to 128 [ 800.094217][T28432] xfrm0 speed is unknown, defaulting to 1000 [ 800.147156][T28432] lo speed is unknown, defaulting to 1000 [ 800.789915][T28450] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 800.991510][T28474] loop0: detected capacity change from 0 to 512 [ 801.017207][T28474] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7595: inode has both inline data and extents flags [ 801.038364][T28474] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 801.038576][T28474] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7595: couldn't read orphan inode 15 (err -117) [ 801.047803][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 801.047830][ C0] EXT4-fs (loop0): initial error at time 3361: ext4_orphan_get:1397: inode 15 [ 801.047865][ C0] EXT4-fs (loop0): last error at time 3361: ext4_orphan_get:1397: inode 15 [ 801.083939][T28474] loop0: lost filesystem error report for type 5 error -117 [ 801.085747][T28474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.111749][T28474] EXT4-fs error (device loop0): __ext4_add_entry:2412: inode #2: comm syz.0.7595: Directory hole found for htree leaf block 0 [ 801.344889][T28483] xt_TCPMSS: Only works on TCP SYN packets [ 801.417300][T28487] tipc: Enabling of bearer rejected, failed to enable media [ 801.554233][T28494] loop3: detected capacity change from 0 to 4096 [ 801.773873][T28504] lo: entered promiscuous mode [ 801.792096][T28504] tunl0: entered promiscuous mode [ 801.793463][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.797813][T28504] gre0: entered promiscuous mode [ 801.811813][T28504] gretap0: entered promiscuous mode [ 801.817247][T28504] erspan0: entered promiscuous mode [ 801.823159][T28504] ip_vti0: entered promiscuous mode [ 801.851043][T28504] ip6_vti0: entered promiscuous mode [ 801.870694][T28504] sit0: entered promiscuous mode [ 801.876917][T28504] ip6tnl0: entered promiscuous mode [ 801.891985][T28504] ip6gre0: entered promiscuous mode [ 801.907430][T28504] syz_tun: entered promiscuous mode [ 801.923074][T28504] ip6gretap0: entered promiscuous mode [ 801.937188][T28504] bridge0: entered promiscuous mode [ 801.946004][T28504] dummy0: entered promiscuous mode [ 801.954522][T28504] nlmon0: entered promiscuous mode [ 801.964605][T28504] caif0: entered promiscuous mode [ 801.971202][T28504] vxcan0: entered promiscuous mode [ 801.976765][T28504] vxcan1: entered promiscuous mode [ 801.983069][T19932] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.991960][T28504] veth0: entered promiscuous mode [ 801.998115][T28504] veth1: entered promiscuous mode [ 802.003534][T28504] wg0: entered promiscuous mode [ 802.077468][T28504] wg1: entered promiscuous mode [ 802.085808][T28504] wg2: entered promiscuous mode [ 802.099093][T28504] veth0_to_bridge: entered promiscuous mode [ 802.116482][T28504] veth1_to_bridge: entered promiscuous mode [ 802.122649][T28504] veth0_to_bond: entered promiscuous mode [ 802.128618][T28504] bond_slave_0: entered promiscuous mode [ 802.134569][T28504] veth1_to_bond: entered promiscuous mode [ 802.140568][T28504] @0Ù: entered promiscuous mode [ 802.145659][T28504] veth0_to_team: entered promiscuous mode [ 802.151816][T28504] veth1_to_team: entered promiscuous mode [ 802.165895][T28504] veth1_to_batadv: entered promiscuous mode [ 802.172206][T28504] batadv_slave_1: entered promiscuous mode [ 802.179121][T28504] xfrm0: entered promiscuous mode [ 802.184519][T28504] veth0_to_hsr: entered promiscuous mode [ 802.192709][T28504] veth1_to_hsr: entered promiscuous mode [ 802.484015][T28528] loop4: detected capacity change from 0 to 512 [ 802.546663][T28528] EXT4-fs: dax option not supported [ 802.899121][T28528] loop4: detected capacity change from 0 to 764 [ 802.906532][T28533] loop3: detected capacity change from 0 to 256 [ 802.923908][T28528] iso9660: Unknown parameter '€' [ 802.959616][ T28] audit: type=1400 audit(3362.943:6438): avc: denied { remount } for pid=28532 comm="syz.3.7615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 803.108908][ T4048] bridge_slave_0: left allmulticast mode [ 803.143103][ T4048] bridge_slave_0: left promiscuous mode [ 803.162985][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.227396][ T4048] erspan0 (unregistering): left allmulticast mode [ 803.378597][ T4048] bond1 (unregistering): Released all slaves [ 803.416626][ T4048] bond2 (unregistering): (slave lo): Releasing backup interface [ 803.425529][ T4048] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 803.436668][ T4048] bond2 (unregistering): Released all slaves [ 803.445646][T20948] lo speed is unknown, defaulting to 1000 [ 803.453818][T28515] xfrm0 speed is unknown, defaulting to 1000 [ 803.501319][ T4048] tipc: Left network mode [ 803.622813][T28515] lo speed is unknown, defaulting to 1000 [ 803.678459][T28574] __nla_validate_parse: 7 callbacks suppressed [ 803.678525][T28574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7623'. [ 803.741078][ T4048] hsr_slave_0: left promiscuous mode [ 803.757858][ T4048] hsr_slave_1: left promiscuous mode [ 803.774061][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.806567][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.840079][ T4048] team0 (unregistering): Port device team_slave_1 removed [ 803.850351][ T4048] team0 (unregistering): Port device team_slave_0 removed [ 804.033409][T28589] netlink: 'syz.3.7627': attribute type 13 has an invalid length. [ 804.043568][T28589] netlink: 'syz.3.7627': attribute type 17 has an invalid length. [ 804.081729][T28589] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.107775][T28589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 804.127464][ T3040] 8021q: adding VLAN 0 to HW filter on device eth21 [ 804.135599][T28515] chnl_net:caif_netlink_parms(): no params data found [ 804.246942][T28515] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.263521][T28515] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.271102][T28515] bridge_slave_0: entered allmulticast mode [ 804.278157][T28515] bridge_slave_0: entered promiscuous mode [ 804.285044][T28515] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.292281][T28515] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.299788][T28515] bridge_slave_1: entered allmulticast mode [ 804.306507][T28515] bridge_slave_1: entered promiscuous mode [ 804.613418][T28515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.715329][T28515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.803007][T28515] team0: Port device team_slave_0 added [ 804.813557][T28515] team0: Port device team_slave_1 added [ 804.863558][T28515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.887291][T28515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.043193][T28515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.088507][T28515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.114552][T28515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.213159][T28515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.355166][ T4048] IPVS: stop unused estimator thread 0... [ 805.441941][T28515] hsr_slave_0: entered promiscuous mode [ 805.457543][T28515] hsr_slave_1: entered promiscuous mode [ 805.875803][T28644] loop3: detected capacity change from 0 to 512 [ 805.905100][T28644] EXT4-fs: dax option not supported [ 806.482647][T28515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 806.583643][T28515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 806.631308][T28515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 806.793814][T28668] loop0: detected capacity change from 0 to 512 [ 806.805931][T28515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 806.818943][T28668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 806.887391][T28515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 806.898775][T28668] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.7642: orphan file block 0: bad magic [ 806.921566][T28668] loop0: lost filesystem error report for type 5 error -117 [ 806.925803][T28668] EXT4-fs (loop0): Remounting filesystem read-only [ 806.929946][T28515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 806.933231][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 806.953270][ C0] EXT4-fs (loop0): initial error at time 3366: ext4_init_orphan_info:618 [ 806.961773][ C0] EXT4-fs (loop0): last error at time 3366: ext4_init_orphan_info:618 [ 806.970451][T28668] EXT4-fs (loop0): mount failed [ 806.987229][T28687] FAULT_INJECTION: forcing a failure. [ 806.987229][T28687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.001927][T28515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 807.028636][T28515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 807.041005][T28687] CPU: 0 UID: 0 PID: 28687 Comm: syz.3.7645 Tainted: G W syzkaller #0 PREEMPT(full) [ 807.041048][T28687] Tainted: [W]=WARN [ 807.041056][T28687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 807.041071][T28687] Call Trace: [ 807.041081][T28687] [ 807.041160][T28687] __dump_stack+0x1d/0x30 [ 807.041257][T28687] dump_stack_lvl+0x95/0xd0 [ 807.041285][T28687] dump_stack+0x15/0x1b [ 807.041313][T28687] should_fail_ex+0x263/0x280 [ 807.041396][T28687] should_fail+0xb/0x20 [ 807.041439][T28687] should_fail_usercopy+0x1a/0x20 [ 807.041475][T28687] _copy_from_user+0x1c/0xb0 [ 807.041513][T28687] do_sock_getsockopt+0x122/0x570 [ 807.041618][T28687] __x64_sys_getsockopt+0x11d/0x1a0 [ 807.041645][T28687] x64_sys_call+0x2dcf/0x3020 [ 807.041705][T28687] do_syscall_64+0x12c/0x3b0 [ 807.041816][T28687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.041842][T28687] RIP: 0033:0x7f4dd12fc819 [ 807.041873][T28687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.041949][T28687] RSP: 002b:00007f4dcfd57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 807.042012][T28687] RAX: ffffffffffffffda RBX: 00007f4dd1575fa0 RCX: 00007f4dd12fc819 [ 807.042036][T28687] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 807.042052][T28687] RBP: 00007f4dcfd57090 R08: 0000000000000000 R09: 0000000000000000 [ 807.042150][T28687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.042165][T28687] R13: 00007f4dd1576038 R14: 00007f4dd1575fa0 R15: 00007ffc7c7230c8 [ 807.042312][T28687] [ 807.228729][T28698] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7647'. [ 807.253620][T28704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7649'. [ 807.262661][T28698] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7647'. [ 807.373757][T28722] netlink: 'syz.0.7652': attribute type 13 has an invalid length. [ 807.391534][T28515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.421253][ T28] audit: type=1400 audit(3367.424:6439): avc: denied { getopt } for pid=28731 comm="syz.9.7655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 807.428193][T28515] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.452763][T28722] netlink: 'syz.0.7652': attribute type 17 has an invalid length. [ 807.480293][T28736] loop3: detected capacity change from 0 to 512 [ 807.488702][T28722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.509559][T28722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.527470][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.534544][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.545588][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.552709][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.570615][T28732] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7655'. [ 807.618266][T28747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7657'. [ 807.635820][T28747] loop4: detected capacity change from 0 to 512 [ 807.647621][T28736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.652526][T28515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.680561][ T28] audit: type=1400 audit(3367.684:6440): avc: denied { setattr } for pid=28735 comm="syz.3.7656" name=".log" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 807.718130][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.765933][T28761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7660'. [ 807.845229][T28515] veth0_vlan: entered promiscuous mode [ 807.853681][T28515] veth1_vlan: entered promiscuous mode [ 807.871594][T28515] veth0_macvtap: entered promiscuous mode [ 807.879294][T28515] veth1_macvtap: entered promiscuous mode [ 807.890907][T28515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.909449][T28515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.925057][ T4842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.946029][ T4842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.957072][ T4842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.971357][ T4842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.020490][T28783] xt_hashlimit: size too large, truncated to 1048576 [ 808.852486][T28800] loop5: detected capacity change from 0 to 512 [ 808.896836][T28800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 808.945931][T28807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7674'. [ 808.964455][T28800] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7670: iget: bogus i_mode (10) [ 808.992297][T28812] loop0: detected capacity change from 0 to 164 [ 809.004349][T28807] macvlan3: entered promiscuous mode [ 809.010312][T28800] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 809.010559][T28800] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7670: couldn't read orphan inode 15 (err -117) [ 809.019733][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 809.019754][ C1] EXT4-fs (loop5): initial error at time 3369: ext4_orphan_get:1397: inode 15 [ 809.019792][ C1] EXT4-fs (loop5): last error at time 3369: ext4_orphan_get:1397: inode 15 [ 809.057013][T28807] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 809.127739][T28800] loop5: lost filesystem error report for type 5 error -117 [ 809.133142][T28800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.281081][T28824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7678'. [ 809.315462][T28824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7678'. [ 809.425477][T28829] 8021q: VLANs not supported on sit0 [ 809.517729][T28800] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7670'. [ 809.569047][T28800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7670'. [ 809.874234][T28837] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7682'. [ 809.932847][T28839] loop3: detected capacity change from 0 to 128 [ 809.957083][T28843] netlink: 'syz.9.7682': attribute type 63 has an invalid length. [ 809.993386][T28843] netlink: 272 bytes leftover after parsing attributes in process `syz.9.7682'. [ 810.127160][T28849] bridge0: entered promiscuous mode [ 810.149506][T28849] macvlan2: entered allmulticast mode [ 810.159265][T28849] bridge0: entered allmulticast mode [ 810.170268][T28849] bridge0: port 3(macvlan2) entered blocking state [ 810.183777][T28849] bridge0: port 3(macvlan2) entered disabled state [ 810.193805][T28849] bridge0: left allmulticast mode [ 810.206365][T28849] bridge0: left promiscuous mode [ 810.256665][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.334000][T28857] loop4: detected capacity change from 0 to 128 [ 810.363432][T28855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7689'. [ 810.409172][T28862] loop4: detected capacity change from 0 to 1024 [ 810.418895][T28855] loop3: detected capacity change from 0 to 512 [ 810.449142][T28855] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.7689: inode has both inline data and extents flags [ 810.470619][T28855] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 810.470767][T28855] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7689: couldn't read orphan inode 15 (err -117) [ 810.506318][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 810.512806][ C0] EXT4-fs (loop3): initial error at time 3370: ext4_orphan_get:1397: inode 15 [ 810.521732][ C0] EXT4-fs (loop3): last error at time 3370: ext4_orphan_get:1397: inode 15 [ 810.606488][T28855] loop3: lost filesystem error report for type 5 error -117 [ 810.627201][T28855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.688024][T28855] EXT4-fs error (device loop3): __ext4_add_entry:2412: inode #2: comm syz.3.7689: Directory hole found for htree leaf block 0 [ 810.716667][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.786363][T28882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 811.431394][T28885] loop4: detected capacity change from 0 to 4096 [ 811.470998][T28894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.523480][T28894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.957275][T28880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7698'. [ 811.985677][T28880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7698'. [ 812.588990][T28880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=28880 comm=syz.4.7698 [ 812.655713][T28910] loop5: detected capacity change from 0 to 512 [ 812.875322][T28910] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7707: inode has both inline data and extents flags [ 812.906229][T28910] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 812.906384][T28910] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7707: couldn't read orphan inode 15 (err -117) [ 812.927887][T28910] loop5: lost filesystem error report for type 5 error -117 [ 812.928625][T28910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.964949][T28910] EXT4-fs error (device loop5): __ext4_add_entry:2412: inode #2: comm syz.5.7707: Directory hole found for htree leaf block 0 [ 813.012006][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.118441][T28919] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28919 comm=syz.5.7710 [ 813.735693][T28925] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.743109][T28925] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.995086][T28928] loop4: detected capacity change from 0 to 2048 [ 814.018915][T28925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.069370][T28925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.165637][ T4842] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.195518][ T4842] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.227514][ T4842] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.255882][ T4842] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.066156][T28945] xfrm0 speed is unknown, defaulting to 1000 [ 815.110933][T28952] loop0: detected capacity change from 0 to 128 [ 815.123900][ T28] audit: type=1326 audit(3375.125:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28953 comm="syz.4.7721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff912fc819 code=0x0 [ 815.138418][T28952] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 815.279022][T28960] netlink: 'syz.3.7722': attribute type 13 has an invalid length. [ 815.288768][T28960] netlink: 'syz.3.7722': attribute type 17 has an invalid length. [ 815.311193][T28960] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.341130][T28963] __nla_validate_parse: 3 callbacks suppressed [ 815.341151][T28963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7723'. [ 815.360383][T28960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 815.430111][T28963] loop5: detected capacity change from 0 to 512 [ 815.463278][T28975] can: request_module (can-proto-4) failed. [ 815.470548][T28963] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7723: inode has both inline data and extents flags [ 815.491058][T28963] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 815.493310][T28963] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7723: couldn't read orphan inode 15 (err -117) [ 815.502596][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 815.502621][ C0] EXT4-fs (loop5): initial error at time 3375: ext4_orphan_get:1397: inode 15 [ 815.502654][ C0] EXT4-fs (loop5): last error at time 3375: ext4_orphan_get:1397: inode 15 [ 815.538798][T28963] loop5: lost filesystem error report for type 5 error -117 [ 815.540633][T28963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.564632][T28968] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7725'. [ 815.585838][T28963] EXT4-fs error (device loop5): __ext4_add_entry:2412: inode #2: comm syz.5.7723: Directory hole found for htree leaf block 0 [ 815.589124][T28984] loop4: detected capacity change from 0 to 2048 [ 815.650954][ T36] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 815.674219][T28989] loop4: detected capacity change from 0 to 1024 [ 815.715121][T28992] bridge0: entered promiscuous mode [ 815.734759][T28992] macvlan6: entered allmulticast mode [ 815.740365][T28992] bridge0: entered allmulticast mode [ 815.746267][T28992] bridge0: port 1(macvlan6) entered blocking state [ 815.753047][T28992] bridge0: port 1(macvlan6) entered disabled state [ 815.761874][T28992] bridge0: left allmulticast mode [ 815.767524][T28992] bridge0: left promiscuous mode [ 815.850485][ T4058] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.862986][ T4058] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.872461][T29004] netlink: 'syz.4.7736': attribute type 13 has an invalid length. [ 815.906823][T29004] netlink: 'syz.4.7736': attribute type 17 has an invalid length. [ 815.910431][T29008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7739'. [ 815.923650][ T4058] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.933532][ T4058] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.942658][T29004] lo: left promiscuous mode [ 815.949119][T29004] tunl0: left promiscuous mode [ 815.954623][T29004] gre0: left promiscuous mode [ 815.962452][T29004] gretap0: left promiscuous mode [ 815.969515][T29004] erspan0: left promiscuous mode [ 815.975957][T29004] ip_vti0: left promiscuous mode [ 815.984691][T29004] ip6_vti0: left promiscuous mode [ 815.990840][T29004] sit0: left promiscuous mode [ 815.998041][T29004] ip6tnl0: left promiscuous mode [ 816.003820][T29004] ip6gre0: left promiscuous mode [ 816.009755][T29004] syz_tun: left promiscuous mode [ 816.015728][T29004] ip6gretap0: left promiscuous mode [ 816.022266][T29004] bridge0: left promiscuous mode [ 816.029032][T29004] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.040923][T29004] dummy0: left promiscuous mode [ 816.053649][T29004] nlmon0: left promiscuous mode [ 816.062437][T29004] caif0: left promiscuous mode [ 816.068840][T29004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.096774][T29017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7742'. [ 816.105834][T29017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7742'. [ 816.131951][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.141515][T29012] xfrm0 speed is unknown, defaulting to 1000 [ 816.217020][T29023] FAULT_INJECTION: forcing a failure. [ 816.217020][T29023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.238863][T29023] CPU: 0 UID: 0 PID: 29023 Comm: syz.5.7745 Tainted: G W syzkaller #0 PREEMPT(full) [ 816.238967][T29023] Tainted: [W]=WARN [ 816.238974][T29023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 816.238986][T29023] Call Trace: [ 816.239001][T29023] [ 816.239012][T29023] __dump_stack+0x1d/0x30 [ 816.239125][T29023] dump_stack_lvl+0x95/0xd0 [ 816.239180][T29023] dump_stack+0x15/0x1b [ 816.239209][T29023] should_fail_ex+0x263/0x280 [ 816.239246][T29023] should_fail+0xb/0x20 [ 816.239278][T29023] should_fail_usercopy+0x1a/0x20 [ 816.239339][T29023] copy_folio_from_iter_atomic+0x24d/0x10b0 [ 816.239385][T29023] ? shmem_write_begin+0xfc/0x1f0 [ 816.239478][T29023] ? shmem_write_begin+0x135/0x1f0 [ 816.239504][T29023] generic_perform_write+0x2c1/0x490 [ 816.239611][T29023] shmem_file_write_iter+0xc5/0xf0 [ 816.239642][T29023] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 816.239710][T29023] vfs_write+0x5a6/0x9f0 [ 816.239770][T29023] ksys_write+0xdc/0x1a0 [ 816.239807][T29023] __x64_sys_write+0x40/0x50 [ 816.239844][T29023] x64_sys_call+0x27e1/0x3020 [ 816.239926][T29023] do_syscall_64+0x12c/0x3b0 [ 816.240022][T29023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.240048][T29023] RIP: 0033:0x7fe9d8ebd04e [ 816.240069][T29023] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 816.240092][T29023] RSP: 002b:00007fe9d794eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 816.240114][T29023] RAX: ffffffffffffffda RBX: 00007fe9d794f6c0 RCX: 00007fe9d8ebd04e [ 816.240159][T29023] RDX: 0000000000010000 RSI: 00007fe9cf52f000 RDI: 0000000000000004 [ 816.240173][T29023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 816.240186][T29023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 816.240198][T29023] R13: 00007fe9d794eee0 R14: 00007fe9d794eea0 R15: 00007fe9cf52f000 [ 816.240218][T29023] [ 816.242912][T29023] loop5: detected capacity change from 0 to 128 [ 816.416315][T29031] xfrm0 speed is unknown, defaulting to 1000 [ 816.440647][T29023] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000006) [ 816.477523][T29023] FAT-fs (loop5): Filesystem has been set read-only [ 816.523048][T29036] loop5: detected capacity change from 0 to 512 [ 816.529933][T29036] EXT4-fs: dax option not supported [ 816.551867][T29038] loop0: detected capacity change from 0 to 512 [ 816.588216][T29038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 816.622247][T29038] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7750: iget: bogus i_mode (10) [ 816.655220][T29038] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 816.655437][T29038] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7750: couldn't read orphan inode 15 (err -117) [ 816.655567][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 816.683057][ C1] EXT4-fs (loop0): initial error at time 3376: ext4_orphan_get:1397: inode 15 [ 816.691991][ C1] EXT4-fs (loop0): last error at time 3376: ext4_orphan_get:1397: inode 15 [ 816.703402][T29038] loop0: lost filesystem error report for type 5 error -117 [ 816.704056][T29038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.800809][T29047] netlink: 'syz.9.7754': attribute type 13 has an invalid length. [ 816.860722][T29047] netlink: 'syz.9.7754': attribute type 17 has an invalid length. [ 817.027913][T29047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.046083][T29047] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.077210][T29047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.423440][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.650003][T29064] loop5: detected capacity change from 0 to 8192 [ 817.665199][T29064] FAT-fs (loop5): bogus sectors per cluster 0 [ 817.675586][T29064] FAT-fs (loop5): Can't find a valid FAT filesystem [ 817.812893][T29087] loop4: detected capacity change from 0 to 512 [ 818.206868][T29064] xfrm0 speed is unknown, defaulting to 1000 [ 818.593615][T29107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7774'. [ 818.639405][T29107] loop5: detected capacity change from 0 to 512 [ 818.661103][T29103] xfrm0 speed is unknown, defaulting to 1000 [ 818.670781][T29107] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7774: inode has both inline data and extents flags [ 818.697376][T29107] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 818.712461][T29115] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7777'. [ 818.720025][T29107] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7774: couldn't read orphan inode 15 (err -117) [ 818.745296][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 818.745355][T29107] loop5: lost filesystem error report for type 5 error -117 [ 818.751761][ C1] EXT4-fs (loop5): initial error at time 3378: ext4_orphan_get:1397 [ 818.752935][T29116] netlink: 'syz.0.7776': attribute type 13 has an invalid length. [ 818.759134][ C1] : inode 15 [ 818.759153][ C1] EXT4-fs (loop5): last error at time 3378: ext4_orphan_get:1397: inode 15 [ 818.787129][T29115] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7777'. [ 818.788558][T29106] loop3: detected capacity change from 0 to 2048 [ 818.803172][T29116] netlink: 'syz.0.7776': attribute type 17 has an invalid length. [ 818.809105][T29107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.913478][T29107] EXT4-fs error (device loop5): __ext4_add_entry:2412: inode #2: comm syz.5.7774: Directory hole found for htree leaf block 0 [ 818.972298][T29116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.982974][T29116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 819.107362][T29122] tipc: Enabling of bearer rejected, already enabled [ 819.289281][T29133] loop3: detected capacity change from 0 to 512 [ 819.310429][T29133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 819.333707][T29133] EXT4-fs (loop3): 1 truncate cleaned up [ 819.340384][T29133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.358097][T29133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=29133 comm=syz.3.7784 [ 819.371785][T28979] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 819.398090][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.408315][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.446408][T29135] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7783'. [ 819.486470][T29141] xt_hashlimit: size too large, truncated to 1048576 [ 820.303839][T29157] vxcan0: left promiscuous mode [ 820.330089][T29157] vxcan1: left promiscuous mode [ 820.335412][T29157] veth0: left promiscuous mode [ 820.340947][T29157] veth1: left promiscuous mode [ 820.346073][T29157] wg0: left promiscuous mode [ 820.350998][T29157] wg1: left promiscuous mode [ 820.355802][T29157] wg2: left promiscuous mode [ 820.361162][T29157] veth0_to_bridge: left promiscuous mode [ 820.367834][T29157] veth1_to_bridge: left promiscuous mode [ 820.374401][T29157] veth0_to_bond: left promiscuous mode [ 820.380406][T29157] bond_slave_0: left promiscuous mode [ 820.386107][T29157] veth1_to_bond: left promiscuous mode [ 820.392023][T29157] @0Ù: left promiscuous mode [ 820.397459][T29157] veth0_to_team: left promiscuous mode [ 820.403480][T29157] veth1_to_team: left promiscuous mode [ 820.409571][T29157] veth1_to_batadv: left promiscuous mode [ 820.415986][T29157] batadv_slave_1: left promiscuous mode [ 820.668876][T29157] xfrm0: left promiscuous mode [ 820.674490][T29157] veth0_to_hsr: left promiscuous mode [ 820.680522][T29157] veth1_to_hsr: left promiscuous mode [ 820.865689][T29170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7794'. [ 820.939829][T29170] macvlan4: entered promiscuous mode [ 820.940755][T29174] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7796'. [ 820.971482][T29170] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 821.084710][T29168] loop5: detected capacity change from 0 to 512 [ 821.345722][T29168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.611366][T29185] netlink: 'syz.4.7799': attribute type 13 has an invalid length. [ 821.682954][T29185] netlink: 'syz.4.7799': attribute type 17 has an invalid length. [ 821.716931][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.852624][T29185] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.869024][T29195] loop5: detected capacity change from 0 to 512 [ 821.900790][T29185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.918280][T29199] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7804'. [ 821.929332][T29195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 821.961795][T29195] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7803: iget: bogus i_mode (10) [ 821.991739][T29195] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.994922][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 822.010592][ C1] EXT4-fs (loop5): initial error at time 3381: ext4_orphan_get:1397: inode 15 [ 822.019651][ C1] EXT4-fs (loop5): last error at time 3381: ext4_orphan_get:1397: inode 15 [ 822.028415][T29195] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7803: couldn't read orphan inode 15 (err -117) [ 822.040751][T29195] loop5: lost filesystem error report for type 5 error -117 [ 822.043114][T29195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.068512][T29208] FAULT_INJECTION: forcing a failure. [ 822.068512][T29208] name failslab, interval 1, probability 0, space 0, times 0 [ 822.081639][T29208] CPU: 0 UID: 0 PID: 29208 Comm: syz.0.7807 Tainted: G W syzkaller #0 PREEMPT(full) [ 822.081678][T29208] Tainted: [W]=WARN [ 822.081688][T29208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 822.081757][T29208] Call Trace: [ 822.081777][T29208] [ 822.081796][T29208] __dump_stack+0x1d/0x30 [ 822.081830][T29208] dump_stack_lvl+0x95/0xd0 [ 822.081858][T29208] dump_stack+0x15/0x1b [ 822.081890][T29208] should_fail_ex+0x263/0x280 [ 822.081928][T29208] ? __inet_diag_dump_start+0x53/0x850 [ 822.081960][T29208] should_failslab+0x8c/0xb0 [ 822.081980][T29208] __kmalloc_cache_noprof+0x5f/0x400 [ 822.082071][T29208] __inet_diag_dump_start+0x53/0x850 [ 822.082103][T29208] ? __rcu_read_unlock+0x33/0x70 [ 822.082132][T29208] ? __netlink_lookup+0x276/0x2b0 [ 822.082165][T29208] inet_diag_dump_start+0x1a/0x30 [ 822.082276][T29208] __netlink_dump_start+0x334/0x520 [ 822.082313][T29208] inet_diag_handler_cmd+0xf3/0x140 [ 822.082437][T29208] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 822.082467][T29208] ? __pfx_inet_diag_dump+0x10/0x10 [ 822.082628][T29208] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 822.082663][T29208] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 822.082692][T29208] sock_diag_rcv_msg+0x288/0x2c0 [ 822.082828][T29208] netlink_rcv_skb+0x123/0x220 [ 822.082856][T29208] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 822.082945][T29208] sock_diag_rcv+0x1c/0x30 [ 822.082968][T29208] netlink_unicast+0x5a8/0x680 [ 822.083041][T29208] netlink_sendmsg+0x5c8/0x6f0 [ 822.083072][T29208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.083101][T29208] sock_write_iter+0x2e8/0x320 [ 822.083133][T29208] do_iter_readv_writev+0x4fd/0x5a0 [ 822.083205][T29208] vfs_writev+0x2e1/0x900 [ 822.083264][T29208] do_writev+0xe9/0x210 [ 822.083292][T29208] __x64_sys_writev+0x45/0x50 [ 822.083315][T29208] x64_sys_call+0x1c0c/0x3020 [ 822.083349][T29208] do_syscall_64+0x12c/0x3b0 [ 822.083460][T29208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.083487][T29208] RIP: 0033:0x7f14cfd8c819 [ 822.083565][T29208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.083589][T29208] RSP: 002b:00007f14ce7df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 822.083614][T29208] RAX: ffffffffffffffda RBX: 00007f14d0005fa0 RCX: 00007f14cfd8c819 [ 822.083633][T29208] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 822.083648][T29208] RBP: 00007f14ce7df090 R08: 0000000000000000 R09: 0000000000000000 [ 822.083702][T29208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.083715][T29208] R13: 00007f14d0006038 R14: 00007f14d0005fa0 R15: 00007ffe71ab8168 [ 822.083734][T29208] [ 822.494039][T29222] netlink: 'syz.4.7814': attribute type 1 has an invalid length. [ 822.494432][ T28] audit: type=1400 audit(3382.486:6442): avc: denied { create } for pid=29220 comm="syz.4.7814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 822.502130][T29223] netlink: 'syz.4.7814': attribute type 1 has an invalid length. [ 822.570230][T29222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 822.579341][ T28] audit: type=1400 audit(3382.586:6443): avc: denied { write } for pid=29220 comm="syz.4.7814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 822.678787][T29233] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 823.290299][T29252] xfrm0 speed is unknown, defaulting to 1000 [ 823.322216][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.855647][T29257] netlink: 'syz.5.7821': attribute type 13 has an invalid length. [ 824.096437][T29257] netlink: 'syz.5.7821': attribute type 17 has an invalid length. [ 825.052364][T29268] loop4: detected capacity change from 0 to 128 [ 825.238086][T29257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.251032][ T28] audit: type=1326 audit(3385.246:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29251 comm="syz.3.7820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dd12fc819 code=0x0 [ 825.304416][T29257] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.334270][T29257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 825.354076][T29277] loop3: detected capacity change from 0 to 128 [ 825.613658][T29291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7830'. [ 825.674391][T29291] loop0: detected capacity change from 0 to 512 [ 825.707901][T29291] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7830: inode has both inline data and extents flags [ 825.783273][T29291] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 825.783424][T29291] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7830: couldn't read orphan inode 15 (err -117) [ 825.792675][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 825.792693][ C0] EXT4-fs (loop0): initial error at time 3385: ext4_orphan_get:1397: inode 15 [ 825.792727][ C0] EXT4-fs (loop0): last error at time 3385: ext4_orphan_get:1397: inode 15 [ 825.992944][T29291] loop0: lost filesystem error report for type 5 error -117 [ 825.993581][T29291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.079849][T29291] EXT4-fs error (device loop0): __ext4_add_entry:2412: inode #2: comm syz.0.7830: Directory hole found for htree leaf block 0 [ 826.353421][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.421051][T29271] Set syz1 is full, maxelem 65536 reached [ 826.877126][T29317] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29317 comm=syz.5.7838 [ 826.947232][T29315] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7837'. [ 826.985906][T29319] loop5: detected capacity change from 0 to 1024 [ 827.022077][T29319] EXT4-fs: test_dummy_encryption option not supported [ 827.336987][T29320] loop5: detected capacity change from 0 to 512 [ 827.367402][T29320] EXT4-fs (loop5): 1 orphan inode deleted [ 827.373745][T29320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.386859][ T36] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 827.406604][ T3380] IPVS: starting estimator thread 0... [ 827.459970][ T36] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 827.504457][T29324] IPVS: using max 2592 ests per chain, 129600 per kthread [ 827.588262][T29327] loop0: detected capacity change from 0 to 512 [ 827.617557][T29327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 827.668713][T29327] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7840: iget: bogus i_mode (10) [ 827.743717][T29327] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 827.743984][T29327] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7840: couldn't read orphan inode 15 (err -117) [ 827.753369][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 827.753397][ C0] EXT4-fs (loop0): initial error at time 3387: ext4_orphan_get:1397: inode 15 [ 827.753439][ C0] EXT4-fs (loop0): last error at time 3387: ext4_orphan_get:1397: inode 15 [ 827.865107][T29327] loop0: lost filesystem error report for type 5 error -117 [ 827.865729][T29327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.286172][T29332] žÿ: renamed from team_slave_1 [ 828.820130][T29343] netlink: 'syz.3.7844': attribute type 3 has an invalid length. [ 828.854957][T29340] syzkaller0: entered promiscuous mode [ 828.875819][T29340] syzkaller0: entered allmulticast mode [ 828.900380][T29327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7840'. [ 828.910186][T29327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7840'. [ 828.944578][T29349] RDS: rds_bind could not find a transport for 7230::f2b7:0:0:0, load rds_tcp or rds_rdma? [ 828.968088][ T28] audit: type=1326 audit(3388.967:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.032855][ T28] audit: type=1326 audit(3388.967:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.050706][T29352] netlink: 'syz.9.7847': attribute type 13 has an invalid length. [ 829.096678][ T28] audit: type=1326 audit(3388.997:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.119780][T29352] netlink: 'syz.9.7847': attribute type 17 has an invalid length. [ 829.149687][ T28] audit: type=1326 audit(3388.997:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.192693][ T28] audit: type=1326 audit(3388.997:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.237052][T29352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.243759][ T28] audit: type=1326 audit(3388.997:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.268778][T29352] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.279245][ T28] audit: type=1326 audit(3388.997:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.304904][T29352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.305783][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.321598][ T28] audit: type=1326 audit(3388.997:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.360402][ T28] audit: type=1326 audit(3388.997:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.385167][T29358] loop3: detected capacity change from 0 to 128 [ 829.399653][ T28] audit: type=1326 audit(3388.997:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.3.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd12fc819 code=0x7ffc0000 [ 829.472711][T29361] loop4: detected capacity change from 0 to 8192 [ 829.543845][T29363] loop0: detected capacity change from 0 to 8192 [ 829.565421][T29363] FAT-fs (loop0): bogus sectors per cluster 0 [ 829.580242][T29363] FAT-fs (loop0): Can't find a valid FAT filesystem [ 829.775378][T29371] xfrm0 speed is unknown, defaulting to 1000 [ 830.214097][T29385] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7858'. [ 830.276551][T29387] xfrm0 speed is unknown, defaulting to 1000 [ 830.384056][T29391] loop3: detected capacity change from 0 to 512 [ 830.391020][T29391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 830.404224][T29391] EXT4-fs (loop3): 1 truncate cleaned up [ 830.416992][T29391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.281572][T29409] netlink: 'syz.0.7865': attribute type 13 has an invalid length. [ 831.306810][T29409] netlink: 'syz.0.7865': attribute type 17 has an invalid length. [ 831.396320][T29409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.456914][T29409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 831.569292][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.679224][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.679277][T29417] loop4: detected capacity change from 0 to 512 [ 831.697161][T29417] ext4: Unknown parameter 'subj_role' [ 831.721402][T29421] FAULT_INJECTION: forcing a failure. [ 831.721402][T29421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.735562][T29421] CPU: 0 UID: 0 PID: 29421 Comm: syz.5.7869 Tainted: G W syzkaller #0 PREEMPT(full) [ 831.735611][T29421] Tainted: [W]=WARN [ 831.735618][T29421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 831.735666][T29421] Call Trace: [ 831.735673][T29421] [ 831.735683][T29421] __dump_stack+0x1d/0x30 [ 831.735715][T29421] dump_stack_lvl+0x95/0xd0 [ 831.735743][T29421] dump_stack+0x15/0x1b [ 831.735855][T29421] should_fail_ex+0x263/0x280 [ 831.735926][T29421] should_fail+0xb/0x20 [ 831.735957][T29421] should_fail_usercopy+0x1a/0x20 [ 831.736006][T29421] _copy_to_user+0x20/0xa0 [ 831.736089][T29421] simple_read_from_buffer+0xb5/0x130 [ 831.736190][T29421] proc_fail_nth_read+0x10e/0x150 [ 831.736335][T29421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 831.736372][T29421] vfs_read+0x1ab/0x7f0 [ 831.736439][T29421] ? vfs_write+0x929/0x9f0 [ 831.736474][T29421] ? putname+0x7c/0xc0 [ 831.736500][T29421] ksys_read+0xdc/0x1a0 [ 831.736535][T29421] __x64_sys_read+0x40/0x50 [ 831.736607][T29421] x64_sys_call+0x2886/0x3020 [ 831.736647][T29421] do_syscall_64+0x12c/0x3b0 [ 831.736712][T29421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.736796][T29421] RIP: 0033:0x7fe9d8ebd04e [ 831.736815][T29421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 831.736834][T29421] RSP: 002b:00007fe9d794efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 831.736912][T29421] RAX: ffffffffffffffda RBX: 00007fe9d794f6c0 RCX: 00007fe9d8ebd04e [ 831.736929][T29421] RDX: 000000000000000f RSI: 00007fe9d794f0a0 RDI: 0000000000000004 [ 831.736946][T29421] RBP: 00007fe9d794f090 R08: 0000000000000000 R09: 0000000000000000 [ 831.737013][T29421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.737029][T29421] R13: 00007fe9d9176038 R14: 00007fe9d9175fa0 R15: 00007ffdfac77e28 [ 831.737050][T29421] [ 831.966687][T29424] netlink: 'syz.4.7870': attribute type 1 has an invalid length. [ 832.015281][T29429] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7872'. [ 832.028886][T29424] bond4: (slave bridge6): Enslaving as a backup interface with an up link [ 832.048530][T29424] macvlan5: entered promiscuous mode [ 832.067470][T29424] macvlan5: entered allmulticast mode [ 832.077447][T29424] bond4: entered promiscuous mode [ 832.082747][T29424] bridge6: entered promiscuous mode [ 832.088416][T29424] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 832.099253][T20953] kernel read not supported for file /1634/net/fib_triestat (pid: 20953 comm: kworker/1:1) [ 832.111187][T29433] loop5: detected capacity change from 0 to 512 [ 832.126496][T29424] bond4: left promiscuous mode [ 832.131395][T29424] bridge6: left promiscuous mode [ 832.148987][T29433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 832.169238][T29433] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7874: iget: bogus i_mode (10) [ 832.180942][T29433] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 832.181165][T29433] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7874: couldn't read orphan inode 15 (err -117) [ 832.190337][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 832.190361][ C0] EXT4-fs (loop5): initial error at time 3392: ext4_orphan_get:1397: inode 15 [ 832.190390][ C0] EXT4-fs (loop5): last error at time 3392: ext4_orphan_get:1397: inode 15 [ 832.226845][T29433] loop5: lost filesystem error report for type 5 error -117 [ 832.227580][T29433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.235732][T29439] xt_TPROXY: Can be used only with -p tcp or -p udp [ 832.345666][T29440] loop0: detected capacity change from 0 to 512 [ 832.376963][T29440] loop0: detected capacity change from 0 to 2048 [ 832.555152][T29440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.661305][T29444] xfrm0 speed is unknown, defaulting to 1000 [ 832.857876][T29447] loop3: detected capacity change from 0 to 256 [ 833.077704][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.206935][T29441] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7874'. [ 833.226399][T29433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7874'. [ 834.088409][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.123990][T29479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7883'. [ 834.124495][T29460] xfrm0 speed is unknown, defaulting to 1000 [ 834.287180][T29481] tipc: Enabled bearer , priority 10 [ 834.431482][T29485] netlink: 'syz.0.7885': attribute type 13 has an invalid length. [ 834.455709][T29485] netlink: 'syz.0.7885': attribute type 17 has an invalid length. [ 834.562399][T29485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.631992][T29485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 834.737124][T29460] chnl_net:caif_netlink_parms(): no params data found [ 834.830767][T29460] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.844010][T29460] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.851359][T29460] bridge_slave_0: entered allmulticast mode [ 834.863303][T29460] bridge_slave_0: entered promiscuous mode [ 834.884677][T29460] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.897562][T29460] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.909707][T29460] bridge_slave_1: entered allmulticast mode [ 834.925599][T29460] bridge_slave_1: entered promiscuous mode [ 834.951859][T29460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.963085][T29460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.984690][T29460] team0: Port device team_slave_0 added [ 834.991760][T29460] team0: Port device team_slave_1 added [ 835.007609][T29507] loop5: detected capacity change from 0 to 512 [ 835.009241][T29460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.018969][T29507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 835.021045][T29460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.055873][T29460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.067625][T29507] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7891: iget: bogus i_mode (10) [ 835.087090][T29507] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 835.087370][T29507] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7891: couldn't read orphan inode 15 (err -117) [ 835.096559][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 835.096583][ C1] EXT4-fs (loop5): initial error at time 3395: ext4_orphan_get:1397: inode 15 [ 835.096615][ C1] EXT4-fs (loop5): last error at time 3395: ext4_orphan_get:1397: inode 15 [ 835.133572][T29507] loop5: lost filesystem error report for type 5 error -117 [ 835.134734][T29507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.134916][T29460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.161947][T29460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.188421][T29460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.241673][T29460] hsr_slave_0: entered promiscuous mode [ 835.248180][T29460] hsr_slave_1: entered promiscuous mode [ 835.254413][T29460] debugfs: 'hsr0' already exists in 'hsr' [ 835.260174][T29460] Cannot create hsr debugfs directory [ 835.348532][T29507] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7891'. [ 835.373627][T29507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7891'. [ 835.863838][T29460] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 835.924149][T29460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 836.003443][T29510] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 836.039790][T29460] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 836.122326][T29524] loop3: detected capacity change from 0 to 512 [ 836.160027][T29460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 836.194474][T29524] EXT4-fs: Ignoring removed nobh option [ 836.251979][T29524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 836.266230][T29460] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 836.276510][T29460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 836.300895][T29460] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 836.318209][T29460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 836.339555][T20950] tipc: Node number set to 3758161918 [ 836.368352][T29524] EXT4-fs (loop3): 1 truncate cleaned up [ 836.375113][T29524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 836.601863][T26017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.613746][T29460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.655494][T29460] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.674281][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.681448][ T4851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.690393][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.697540][ T4851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.743250][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.941162][T29546] syzkaller0: entered promiscuous mode [ 836.962485][T29546] syzkaller0: entered allmulticast mode [ 837.084095][T29460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.346003][T29460] veth0_vlan: entered promiscuous mode [ 837.357072][T29460] veth1_vlan: entered promiscuous mode [ 837.389476][T29460] veth0_macvtap: entered promiscuous mode [ 837.398320][T29460] veth1_macvtap: entered promiscuous mode [ 837.417797][T29588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7903'. [ 837.428532][T29460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.442564][T29592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7912'. [ 837.457930][T29460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.478482][T29588] loop0: detected capacity change from 0 to 512 [ 837.501919][ T4048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.517111][ T4048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.532616][ T4048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.533296][T29588] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7903: inode has both inline data and extents flags [ 837.545535][ T4048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.564531][T29588] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 837.564669][T29588] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7903: couldn't read orphan inode 15 (err -117) [ 837.574190][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 837.574215][ C1] EXT4-fs (loop0): initial error at time 3397: ext4_orphan_get:1397: inode 15 [ 837.574249][ C1] EXT4-fs (loop0): last error at time 3397: ext4_orphan_get:1397: inode 15 [ 837.612261][T29588] loop0: lost filesystem error report for type 5 error -117 [ 837.612884][T29588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.657328][T29588] EXT4-fs error (device loop0): __ext4_add_entry:2412: inode #2: comm syz.0.7903: Directory hole found for htree leaf block 0 [ 837.757131][T29627] loop4: detected capacity change from 0 to 128 [ 837.835102][T29630] loop4: detected capacity change from 0 to 512 [ 837.848128][T29631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7925'. [ 837.987011][T29645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7931'. [ 837.996415][T29645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7931'. [ 838.026125][T29644] loop4: detected capacity change from 0 to 1024 [ 838.053545][T29649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7934'. [ 838.136786][T22866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.301408][T29679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29679 comm=syz.5.7943 [ 839.620014][T29696] FAULT_INJECTION: forcing a failure. [ 839.620014][T29696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.661744][T29693] loop3: detected capacity change from 0 to 128 [ 839.742897][T29696] CPU: 1 UID: 0 PID: 29696 Comm: syz.4.7950 Tainted: G W syzkaller #0 PREEMPT(full) [ 839.742944][T29696] Tainted: [W]=WARN [ 839.742953][T29696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 839.742968][T29696] Call Trace: [ 839.742976][T29696] [ 839.742986][T29696] __dump_stack+0x1d/0x30 [ 839.743038][T29696] dump_stack_lvl+0x95/0xd0 [ 839.743068][T29696] dump_stack+0x15/0x1b [ 839.743097][T29696] should_fail_ex+0x263/0x280 [ 839.743150][T29696] should_fail+0xb/0x20 [ 839.743249][T29696] should_fail_usercopy+0x1a/0x20 [ 839.743285][T29696] _copy_to_user+0x20/0xa0 [ 839.743411][T29696] simple_read_from_buffer+0xb5/0x130 [ 839.743548][T29696] proc_fail_nth_read+0x10e/0x150 [ 839.743579][T29696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.743680][T29696] vfs_read+0x1ab/0x7f0 [ 839.743714][T29696] ? __rcu_read_unlock+0x4e/0x70 [ 839.743742][T29696] ? __fget_files+0x184/0x1c0 [ 839.743819][T29696] ? mutex_lock+0x57/0x90 [ 839.743860][T29696] ksys_read+0xdc/0x1a0 [ 839.743953][T29696] __x64_sys_read+0x40/0x50 [ 839.743984][T29696] x64_sys_call+0x2886/0x3020 [ 839.744074][T29696] do_syscall_64+0x12c/0x3b0 [ 839.744110][T29696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.744190][T29696] RIP: 0033:0x7f954317d04e [ 839.744207][T29696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 839.744306][T29696] RSP: 002b:00007f9541c0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 839.744332][T29696] RAX: ffffffffffffffda RBX: 00007f9541c0f6c0 RCX: 00007f954317d04e [ 839.744402][T29696] RDX: 000000000000000f RSI: 00007f9541c0f0a0 RDI: 0000000000000005 [ 839.744419][T29696] RBP: 00007f9541c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 839.744504][T29696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.744518][T29696] R13: 00007f9543436038 R14: 00007f9543435fa0 R15: 00007fffe986c268 [ 839.744620][T29696] [ 840.536441][T29713] loop4: detected capacity change from 0 to 512 [ 840.721308][T29719] lo speed is unknown, defaulting to 1000 [ 840.744879][T29719] lo speed is unknown, defaulting to 1000 [ 840.751284][T29719] lo speed is unknown, defaulting to 1000 [ 840.790766][T29719] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 840.814418][T29728] macvlan4: entered allmulticast mode [ 840.825756][T29728] bridge0: entered allmulticast mode [ 840.834924][T29728] bridge0: port 4(macvlan4) entered blocking state [ 840.841628][T29728] bridge0: port 4(macvlan4) entered disabled state [ 840.850112][T29728] bridge0: left allmulticast mode [ 840.865090][T29719] lo speed is unknown, defaulting to 1000 [ 840.875286][T29719] lo speed is unknown, defaulting to 1000 [ 840.884917][T29719] lo speed is unknown, defaulting to 1000 [ 840.891150][T29719] lo speed is unknown, defaulting to 1000 [ 840.897666][T29719] lo speed is unknown, defaulting to 1000 [ 840.910646][T29719] lo speed is unknown, defaulting to 1000 [ 840.922370][T29719] lo speed is unknown, defaulting to 1000 [ 840.922555][T29741] loop5: detected capacity change from 0 to 512 [ 840.930083][T29719] lo speed is unknown, defaulting to 1000 [ 840.941362][T29719] lo speed is unknown, defaulting to 1000 [ 840.966753][T29741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.990189][T29746] netlink: 'syz.9.7967': attribute type 13 has an invalid length. [ 841.006236][T29746] netlink: 'syz.9.7967': attribute type 17 has an invalid length. [ 841.034650][T29746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.043970][T29746] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.056424][T29746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.093382][T29741] ================================================================== [ 841.101616][T29741] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 841.108785][T29741] [ 841.111126][T29741] read-write to 0xffff88811bace910 of 8 bytes by task 29749 on cpu 0: [ 841.119296][T29741] xas_set_mark+0x82/0x140 [ 841.123743][T29741] tag_pages_for_writeback+0xe3/0x2e0 [ 841.129137][T29741] ext4_do_writepages+0x6a8/0x2770 [ 841.134257][T29741] ext4_writepages+0x18f/0x320 [ 841.139035][T29741] do_writepages+0x1c6/0x310 [ 841.143640][T29741] filemap_write_and_wait_range+0x166/0x370 [ 841.149553][T29741] ext4_fileattr_set+0x4e6/0xe40 [ 841.154503][T29741] vfs_fileattr_set+0x666/0x6b0 [ 841.159447][T29741] ioctl_setflags+0x14b/0x180 [ 841.164219][T29741] do_vfs_ioctl+0x661/0xe70 [ 841.168746][T29741] __se_sys_ioctl+0x82/0x140 [ 841.173357][T29741] __x64_sys_ioctl+0x43/0x50 [ 841.177967][T29741] x64_sys_call+0x1563/0x3020 [ 841.182662][T29741] do_syscall_64+0x12c/0x3b0 [ 841.187283][T29741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.193186][T29741] [ 841.195603][T29741] read to 0xffff88811bace910 of 8 bytes by task 29741 on cpu 1: [ 841.203245][T29741] xas_find_marked+0x213/0x620 [ 841.208038][T29741] filemap_get_folios_tag+0xfa/0x430 [ 841.213332][T29741] mpage_prepare_extent_to_map+0x328/0xc50 [ 841.219154][T29741] ext4_do_writepages+0x6fe/0x2770 [ 841.224361][T29741] ext4_writepages+0x18f/0x320 [ 841.229134][T29741] do_writepages+0x1c6/0x310 [ 841.233738][T29741] file_write_and_wait_range+0x178/0x2f0 [ 841.239393][T29741] mmb_fsync_noflush+0x48/0x140 [ 841.244275][T29741] ext4_sync_file+0x1f1/0x6b0 [ 841.248993][T29741] vfs_fsync_range+0xc5/0xe0 [ 841.253610][T29741] ext4_buffered_write_iter+0x447/0x4c0 [ 841.259176][T29741] ext4_file_write_iter+0x380/0xfa0 [ 841.264394][T29741] do_iter_readv_writev+0x4fd/0x5a0 [ 841.269638][T29741] vfs_writev+0x2e1/0x900 [ 841.273989][T29741] __se_sys_pwritev2+0xfc/0x1c0 [ 841.278870][T29741] __x64_sys_pwritev2+0x67/0x80 [ 841.283730][T29741] x64_sys_call+0xe07/0x3020 [ 841.288339][T29741] do_syscall_64+0x12c/0x3b0 [ 841.292949][T29741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.298854][T29741] [ 841.301182][T29741] value changed: 0x0007ffffffffffe1 -> 0x0007ffffffffffc0 [ 841.308299][T29741] [ 841.310650][T29741] Reported by Kernel Concurrency Sanitizer on: [ 841.316810][T29741] CPU: 1 UID: 0 PID: 29741 Comm: syz.5.7966 Tainted: G W syzkaller #0 PREEMPT(full) [ 841.327761][T29741] Tainted: [W]=WARN [ 841.331571][T29741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 841.341649][T29741] ================================================================== [ 841.381275][T29755] xfrm0 speed is unknown, defaulting to 1000 [ 841.477879][T28515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.500695][T29755] lo speed is unknown, defaulting to 1000 [ 841.507700][T29756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7970'. [ 841.517139][T29756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7970'. [ 841.526924][T29756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7970'. [ 841.543616][T29756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7970'. [ 841.575901][T29754] loop3: detected capacity change from 0 to 512