last executing test programs: 1m46.657019971s ago: executing program 0 (id=11782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="07010000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r2 = syz_socket_connect_nvme_tcp() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00080000000000000000000000000000000000001fb56e07ca96ef7d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) r4 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/738], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r5, &(0x7f0000000a00)=[{0x0, 0x47}, {&(0x7f0000000080)="9d", 0x1}], 0x2, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0xa04, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1m46.629668475s ago: executing program 0 (id=11783): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) 1m43.454089196s ago: executing program 0 (id=11784): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8001, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4805) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 1m42.664675138s ago: executing program 0 (id=11815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x2, {0x1, 0xff}, {0x2}, 0xfd, 0xfc}, {0x0, 0x0, {0x1, 0xf0, 0x2}, {0x1, 0xf0}, 0xfd}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m41.261773083s ago: executing program 0 (id=11828): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) dup(0xffffffffffffffff) r3 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r3, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000040)=""/178, 0xb2}, {&(0x7f00000002c0)=""/25, 0x19}], 0x2, 0x8, 0xfffffffb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) dup3(r1, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="b2101f7d344a0000eeb9333765000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m38.04855171s ago: executing program 0 (id=11846): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x50) 1m38.022608024s ago: executing program 32 (id=11846): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x50) 33.50089955s ago: executing program 3 (id=12364): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x15, 0x2000000000000216, &(0x7f0000000b80)=ANY=[@ANYRES16=r3, @ANYRES16, @ANYRESDEC=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64, @ANYRESDEC=r3, @ANYRESDEC=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) close_range(0xffffffffffffffff, r4, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x2f, 0x0, 0x452072cc, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r9 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0xb065, 0x10, 0x0, 0x4e}, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, 0x0, 0x0) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f0000000340)=0x3) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/fscreate\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32=r11, @ANYRES32=r0, @ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYRES8=r5, @ANYRES8=r10], 0x20) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000a80)={0x5}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r12 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x1) r13 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181) ioctl$EXT4_IOC_MOVE_EXT(r13, 0x8004587d, &(0x7f0000000080)={0x0, r2, 0x9000200000000000, 0x7ff, 0x85c}) fallocate(r12, 0x10, 0x0, 0x7000000) socket$netlink(0x10, 0x3, 0x12) 32.609705289s ago: executing program 5 (id=12376): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000) 32.577126814s ago: executing program 5 (id=12377): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=r3, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000055ad8461432cf47a2fd2404d8b1b258a000500000001000000010000000004"], 0x50) sendmmsg(r1, 0x0, 0x0, 0x20000800) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x6, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x5, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x49, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x3, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x7, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0x3, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0x80000d}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x853}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x7f, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x5, 0x10000, 0x6, 0x4}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x9, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1d, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x49, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x3, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x7, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x81, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") membarrier(0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 30.904076914s ago: executing program 5 (id=12387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@i_version}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xe4}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) fallocate(r3, 0x8, 0x4000, 0x10000) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) r5 = fsopen(&(0x7f0000000180)='rootfs\x00', 0x0) fsmount(r5, 0x1, 0xc) capset(&(0x7f0000000000)={0x20080522}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, 0x0, 0x0, 0xc0c0) brk(0x800000) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f00000000c0)=""/26) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}]}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x840000000002, 0x3, 0x100) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xffff, 0x0, @private0, 0xfffffffb}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 26.25912641s ago: executing program 1 (id=12394): r0 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xec}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4008800) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @private}}) 25.971794708s ago: executing program 3 (id=12396): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r8, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1, {0x0, r7}}) syz_io_uring_submit(0x0, r6, 0x0, &(0x7f00000007c0)=@IORING_OP_CLOSE={0x13, 0x37, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 25.939128424s ago: executing program 5 (id=12397): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a000100"], 0x870}}, 0x0) 25.915803508s ago: executing program 2 (id=12398): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 25.653862272s ago: executing program 2 (id=12399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000007500)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, r0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000480)={0xffffff81, 0x80020000, 0x81, 0xfffffffe}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001e00110225bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 '], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x106200, 0x7, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f00000001c0)=0x7, 0x4) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {0x0, r7}}, 0x18) close(r3) 25.070311679s ago: executing program 1 (id=12401): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a000100"], 0x870}}, 0x0) 24.986406393s ago: executing program 4 (id=12402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000090000000400000000000012020000000500000000000008050000000700000000000012050000000400000000000000040000000000000e0200000000000000002e30305f2e5f3000"], 0x0, 0x61, 0x0, 0x1, 0x1ffffe}, 0x28) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)={0x0, 0xfb, 0xb2, 0x1, 0x0, "1130315fce7f50ab7ea925a764d20111", "750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe1685f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc901786139a7cfd0695151e82da67f4d398969e317d9181be4"}, 0xb2, 0x3) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) file_setattr(r7, 0x0, &(0x7f0000000380)={0x80020849, 0xfffffffe, 0x1, 0x3, 0xffffff01}, 0x18, 0x100) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 20.065533106s ago: executing program 3 (id=12403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="07010000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r2 = syz_socket_connect_nvme_tcp() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00080000000000000000000000000000000000001fb56e07ca96ef7d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) r4 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r5, &(0x7f0000000a00)=[{0x0, 0x47}, {&(0x7f0000000080)="9d", 0x1}], 0x2, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0xa04, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 19.425114113s ago: executing program 5 (id=12404): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x800, 0x0, 0xff, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0xff, 0x9, 0x8, 0x100}, 0x20) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r2, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x12d27fe2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r7 = getuid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r7, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") 18.970536119s ago: executing program 4 (id=12405): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffefffc, 0x1, @perf_config_ext={0x1fe, 0x3}, 0x102802, 0x2e, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x7, 0x0, 0xffffffffffffffff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a402b, &(0x7f00000000c0)=ANY=[@ANYBLOB='nr_i,\x00'/20]) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000040000000000000affff7f78d009ec000000000000000000000049fc000000000000"], 0xb8}}, 0x800) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0xfff, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xad, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x1, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYRES8=r4, @ANYBLOB="2dd3af2f10750cc5b484a567ca859339743b72ddb73e65f364a90e920caf9666cfab07d2df7352e1713441ac2edbd12f4f735e384feceefe9ff22fa7ec75d5244fd1214216b9aa41481c8eec30011f7cdf2f1e5820a0284d0646fed7ed147efa70c23d19aad25f2246c21512b7160f5c89ce1a9e7f4a8271741529af678857f0cb1202b2905a700dbb26a585a38d078bd1f3939f0a1ded72c2b4f50c4a0cbaf5d023f247", @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) 18.061872141s ago: executing program 2 (id=12406): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r4, &(0x7f00000000c0)=""/41, 0x29) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000380)={0x1, r1, 'id0\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x4c, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x53}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x12, 0x2a, [@channel_switch={0x25, 0x3, {0x10, 0x64, 0xff}}, @mesh_config={0x71, 0x7, {0xf7, 0x0, 0x0, 0x1, 0x0, 0x80, 0x29}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004040) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000400)={r10, @in6={{0xa, 0x4e24, 0x6d, @private0, 0x4}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000001fc0)={0x0, 0x1000, "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"}, &(0x7f0000000500)=0x1008) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r11, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x80805, 0x0) 17.252573656s ago: executing program 1 (id=12407): syz_open_dev$tty20(0xc, 0x4, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 13.881439719s ago: executing program 4 (id=12408): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x210, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x4, 0x9, @remote, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 13.559870873s ago: executing program 1 (id=12409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @initdev}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/2, 0x2, 0x0, &(0x7f0000000080)=""/175, 0xaf}}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, 0x0, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, &(0x7f00000001c0), 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, 0x0) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xd209f6d814827b13) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 13.376166964s ago: executing program 3 (id=12410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d8, 0x198, 0x198, 0xfeffffff, 0x198, 0x268, 0x340, 0x340, 0xffffffff, 0x340, 0x340, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x2, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffb}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @loopback, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, @icmp_id=0x64, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xfffffffffffffe00, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0xb) unshare(0x24060400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000800040063465b9966ba86edbfdef85cf70000040000000200000000000000390baba3ab645c38c73772bda3c61f1cd5a1079cf92529da0e5dbdd2792186d304dd78fa17bc424642", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f00000003c0), 0x0}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0100000000000000452400280265000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5404000090780000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = creat(0x0, 0x19e) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000400)={@empty, r5}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r7 = timerfd_create(0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000900)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, 0x1, 0x2, 0x9, 0x400, 0xd0b, 0x7200062}) timerfd_settime(r7, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r7, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @random="9d1edbd60a2b", @void, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x0, 0x9, 0x5c, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@cipso={0x86, 0x11, 0x2, [{0x5, 0xb, "93b273dd26e01d9ba9"}]}, @end, @timestamp_prespec={0x44, 0xc, 0x89, 0x3, 0x8, [{@loopback, 0x10}]}, @lsrr={0x83, 0xb, 0x4b, [@dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x10}]}, @timestamp={0x44, 0x8, 0xbb, 0x0, 0x2, [0x8001]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 12.610514992s ago: executing program 2 (id=12411): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") 10.934887772s ago: executing program 4 (id=12412): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r5}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, r0}) io_uring_enter(r3, 0x20e9, 0x4604, 0x10, &(0x7f00000000c0)={[0x4]}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 8.549498371s ago: executing program 3 (id=12413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @initdev}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/2, 0x2, 0x0, &(0x7f0000000080)=""/175, 0xaf}}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, 0x0, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, &(0x7f00000001c0), 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, 0x0) sendmsg$can_raw(r3, 0x0, 0xd209f6d814827b13) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 6.207111512s ago: executing program 2 (id=12414): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) dup(0xffffffffffffffff) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r4, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000040)=""/178, 0xb2}, {&(0x7f00000002c0)=""/25, 0x19}], 0x2, 0x8, 0xfffffffb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) dup3(r1, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="b2101f7d344a0000eeb9333765000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.840659124s ago: executing program 1 (id=12415): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000004000000b705000008000006850000006a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000"], 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001340)={0x0, "e2c19094e1650253f72874d1d2dc4cf4"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002340)={r1, 0x0, 0x1, [0x8, 0x9, 0x4, 0x91a7, 0xb1], [0x8, 0x7fff, 0xfa, 0xfffffffffffffff7, 0x7f, 0xba28, 0x1, 0x200, 0x16, 0x9, 0x8, 0x3, 0x4, 0x5, 0x5, 0x486, 0x0, 0x2, 0x8, 0x6, 0x7ff, 0x5, 0x1ff, 0x3, 0x3, 0xfffffffffffffff8, 0x4, 0x100000000000000, 0x7, 0x6, 0xba7, 0xd17, 0xfff, 0x4, 0xfffffffffffffffa, 0x6, 0xd462, 0x7, 0x0, 0x4, 0x7, 0xaf8f, 0x3, 0x9, 0x7f, 0x22, 0x6, 0x3, 0x5, 0x0, 0x3, 0x9, 0xe, 0x2c3, 0x4, 0x90, 0xfffffffffffffffc, 0x6, 0x6, 0xf, 0x3, 0xc2a, 0x100000000, 0x2, 0x0, 0x8, 0xe, 0x4, 0x1c00000000000000, 0x7, 0x1, 0x9, 0x8, 0xfffffffffffffffb, 0x6f, 0x4, 0xf68, 0x8, 0x4afb, 0x7, 0x6, 0x8, 0x7, 0x7cd, 0x7, 0x0, 0x2, 0x5, 0x80000001, 0x8, 0x5, 0xfffffffffffffffc, 0x7, 0x5, 0x8, 0x0, 0x4, 0xfffffffffffffff7, 0x35e, 0x5, 0xffff, 0x80, 0x944d, 0x1, 0x2, 0x0, 0x0, 0x2, 0x4, 0x0, 0x7f, 0x4, 0x5, 0xffffffffffffff7f, 0x3, 0x9, 0x6, 0x0, 0x49c, 0x300000, 0x7fffffff]}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f00000000c0)="b1a328e8d8691d4d4e908a7b942f965c9e8cc377fd4d62d311d21f2b991e5b88d5c926f564b921511f7e3aaed03c23f5ef838eeb817c06fa50302637f458f59f46bcb5101cb1f1ec2f71a7fa55fb95c4b7d88859d98c34d237a231066f9b71e620f6cb1d00c0da54cce08f9d20bd45a1bbf4358d6633df5a167422fb76ae356f741802a67f97b7c6ad58152606560b9cc35ed2dd8af6121b2efc6e3542e4086a", &(0x7f0000000000)=""/3, 0x2}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newsa={0xf0, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}}, 0xf0}}, 0x44050) r7 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0/../file0\x00'}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES64=r3, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r8 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/117, 0x75}], 0x2, 0x1000005, 0x10000) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)) write$UHID_CREATE(r3, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) fchownat(0xffffffffffffffff, &(0x7f0000000100)='./file0/../file0\x00', r1, 0x0, 0x400) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) io_setup(0x2, &(0x7f0000000080)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') 4.264034417s ago: executing program 4 (id=12417): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0xffffffd1, 0x1002, 0x3, 0x831a, 0x3, "040000ffff000800", 0x8, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x42) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.300855193s ago: executing program 2 (id=12418): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x20000400) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x11, 0x67, &(0x7f0000000100), 0x120) socket$kcm(0x11, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0x1000, 0x8c, &(0x7f0000001040)="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", &(0x7f0000002040)=""/140, 0x80000001, 0x0, 0xad, 0xa7, &(0x7f0000002100)="2709b1ffce46dfda9c88062ab82f0d9e93de8ee5120ff4161a3a756832cdde8c1183c672e2488abeb2fb6a2f0c5f6cdf63cd87670ae107829ac3940c0f8e333b9600d5bae907b6dbadfb9e9dbde3d76831ea7683ed4b420d54d250dae06681cf4426f8d24a1d7e80c8df5cea3487c11e1cd95d26c0448c9fd3ae55f2db8fa83511df03b02e4f0dbdfdbd0851c70dbcf59548e50aa40e283bf927e58c7a401c85aa8d94a80d3edc13757a41f3f6", &(0x7f00000021c0)="71446c8897c97b87b1bd176d1d2a67d788e06f1fb51ddfe8a890d913814d668eae600335bf6c7be89f80b5f873f95d1fd29c3d2f52e968bc082b25dc7e9a2a9ff947fdf87390127f4f56c23bd2ad38be6060e7a468a4c9837784e77b8343b7882e282f183e8a6fddd85ef92ef8f58501c025016f0b66373cbcb909795e96ce5b1836a5f362d629f65b0d4b9fb302a9367cc286095010e5d40ffc1534fecf8273de70bee8421649", 0x2, 0x0, 0x5}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xffffffffffff2834) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="02042700ea0e0300000000001eafbcf7", 0x10}, {&(0x7f00000004c0)="1006000000000000ee8df0932b326f8a310f654fb0c4ae439862807a1589836c734d2341f74276871bf8465fc0583fdc0b8a826840d196606f75ef1cbe3bed88eb2291b63c", 0x45}], 0x2}, 0x4040000) close(0x3) 773.341591ms ago: executing program 3 (id=12419): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x102501) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="c699d705fef1ede2d20f1ab8414423784614813318324fb048c21fb75bcf670ee94440063f932b94303b078e757b82fbaa4eae8f4fcb05b932a6b6aed6dbcdd23f5c5ab174848167531c0b5af3a9d139dd0f162a8405f1992f432bca6eb174a33e15efd1bdf8e2a7786eecb99a", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200000000000000000000e900000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) openat$vcs(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="c88077cd0436a09ad0f0e43c474feca7565912ac75d39e081d5285ac20b29956e4cbd5525598fd4dc1af0e3b01b3c269e3c6df1e2dda92531a5b9a45f6a5aef98387cfc9828e140495531481dd672e537134d32b66979f013149667023eb64592c3f910bd7c6e3fb1cc7581348d9aa6e0d07f2b9583b95d36962221c5deedf4a8a6442f032ef6c8ecfdd9788eb607effd9cbf0bbc73c0f7c0b06e540a93e0ee5781cb475e311273949"}], 0x171, 0x0, 0x44}}], 0x400000000000172, 0x24009c40) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40d80, 0x0) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x3938700}}, &(0x7f0000000400)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000002600)={0x8, 0x61, 0x9, 0x9, 0x1, "a9b11f51c5094cd174d7d752ee623d801fbb44"}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000080)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14006989", @ANYRES16=r6, @ANYBLOB="010329bd7000fcdbdf2524000000", @ANYRESHEX, @ANYRESOCT=r5], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x2000040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x1000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) 373.345327ms ago: executing program 1 (id=12420): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000280)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0xff, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2888}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x800}, @IFLA_OPERSTATE={0x5, 0x10, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 0s ago: executing program 4 (id=12421): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x800, 0x0, 0xff, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0xff, 0x9, 0x8, 0x100}, 0x20) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r2, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x12d27fe2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r7 = getuid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r7, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$eJzs3UFvI1cdAPD/jONtdjeLXUCoVKJUtChbwdpJQ9sIISgXOFUCyn0JiRNFseModsomqiAV3wAhgcSJExckPgBS1QMfAFWqBBfEAQECIdjCAQnoINtjmnXsJGydOI1/P+mt35uZvP97Y/l5Zvx2JoCp9WREvBgRhYh4JiJK+fI0T3HYS53t3r7/6monJZFlL/81iSRf1q+rU56JiJv5n81GxNe+HPHN5Hjc1v7B1kq9XtvNy9V2Y6fa2j+4s9lY2aht1LaXlhafX35h+bnlhSz3nvpZ7md+8qXPv/7pb/3u7p9vf7vTrM99JIox0I9x6nW92N0XfZ19tHsewSagkPenOOmGAABwJp1j/A9GxCe6x/+lKHSP5gYUJtEyAAAAYFyyLyTx7yQiAwAAAK6sNCLmIkkr+VyAuUjTa/m1gQ/HjbTebLU/td7c217rrIsoRzFd36zXFvK5wuUoJp3yYj7Htl9+dqC8FBGPRsT3S9e75cpqs7424WsfAAAAMC1uDpz//6OUdvOnG/L/BAAAAIDLqzyyAAAAAFwVTvkBAADg6hs8/399Qu0AAAAAzsVXXnqpk7L+86/XXtnf22q+cmet1tqqNPZWK6vN3Z3KRrO50b1nX+O0+urN5s5nYnvvXrVda7Wrrf2Du43m3nb77uYDj8AGAAAALtCjH3/j10lEHH72ejdFfh9AgAf8YdINAMapMOkGABPz8HfxLo61HcDF8ykGklPWm7wDAADvf/MfPf77f//5/64NwNVmrg8ATB9P8YbpVTQDEKZaGhEf6GUfGbXNyN//f3nWKFkW8Wbp6BLXFwEA4GLNdVOSVv53gJ+mlUrErYi0HMVkfbNeW8jPD35VKj7SKS92t0tOnTMMAAAAAAAAAAAAAAAAAAAAAAAAAPRkWRIZAAAAcKVFpH9Kunfzj5gvPT03eH3gWvLPUvwxL/zo5R/cW2m3dxc7y//WfZbXtYho/zBf/uzIx4cBAAAA45YcjlzVO0/PXxcvtFUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIG377+62k9HlxfOOe5fvhgR5WHxZ2K2+zobxYi48fckZo78XTKmth2+FhGPDYufxDtZlpXzVgzGTyPi+jnHL3d3zej4N8cQH6bZG53x58Vhn780nuy+Dv/8zeTpvRo9/qV55Me649yw8e/WsdoaQ2M8/tbPqiPjvxbx+Mzw8ac//iYj4j91rLZ/ZVl2PMY3vn5wMCp+9uOI+aHfP8kDsartxk61tX9wZ7OxslHbqG0vLS0+v/zC8nPLC9X1zXot/3dojO997OfvnNT/G0Pi//Y3vfH3pP4/ParSAf956979D/WyxWHxbz81+vt3WPxCnj6Zfw901s/384e9/FFP/PTNJ07q/9qI/X/a+3/7jP1/5qvf/f0ZNwUALkBr/2BrpV6v7Z6QmT11m/RM9Vy2zC9mL0Uz/s9M9p3eO3dZ2vOwmc7R6rtL+r16+ApvnUNTswvbG4UYX4WtsdQz0WEJAAA4B+8e9E+6JQAAAAAAAAAAAAAAAAAAADC9LuL2ZoMxDyfTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE/03AAD//4zO3ss=") kernel console output (not intermixed with test programs): [T14695] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1575.232261][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1575.232279][ C0] EXT4-fs (loop4): initial error at time 1776352893: ext4_validate_block_bitmap:441 [ 1575.232320][ C0] EXT4-fs (loop4): last error at time 1776352893: ext4_validate_block_bitmap:441 [ 1575.265448][T14700] EXT4-fs (loop5): 1 orphan inode deleted [ 1575.278799][T14700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1575.284672][T14695] loop4: lost filesystem error report for type 5 error -117 [ 1575.302531][T14700] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1575.330060][T14695] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.12117: attempt to clear invalid blocks 1024 len 1 [ 1575.344696][T20572] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1575.367362][T14695] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1575.367686][T14695] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.12117: invalid indirect mapped block 1819239214 (level 0) [ 1575.369481][T20572] EXT4-fs error (device loop5): ext4_release_dquot:7064: comm kworker/u8:5: Failed to release dquot type 1 [ 1575.402316][T14546] veth0_vlan: entered promiscuous mode [ 1575.411020][T14695] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1575.411405][T14695] EXT4-fs (loop4): 1 truncate cleaned up [ 1575.430999][T20572] EXT4-fs (loop5): Remounting filesystem read-only [ 1575.433942][T14546] veth1_vlan: entered promiscuous mode [ 1575.444425][T14695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.457763][T14700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.487440][T14546] veth0_macvtap: entered promiscuous mode [ 1575.498127][T14546] veth1_macvtap: entered promiscuous mode [ 1575.528852][ T3523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.548089][T14546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.588923][T14546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.600047][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.635760][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.646564][T14724] usb usb7: usbfs: process 14724 (syz.4.12121) did not claim interface 0 before use [ 1575.658624][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.682213][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.753169][T14731] loop4: detected capacity change from 0 to 164 [ 1575.772110][T14731] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1575.910849][T14740] FAULT_INJECTION: forcing a failure. [ 1575.910849][T14740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1575.939240][T14740] CPU: 1 UID: 0 PID: 14740 Comm: syz.4.12126 Tainted: G W syzkaller #0 PREEMPT(full) [ 1575.939271][T14740] Tainted: [W]=WARN [ 1575.939278][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1575.939342][T14740] Call Trace: [ 1575.939349][T14740] [ 1575.939358][T14740] __dump_stack+0x1d/0x30 [ 1575.939452][T14740] dump_stack_lvl+0x95/0xd0 [ 1575.939474][T14740] dump_stack+0x15/0x1b [ 1575.939494][T14740] should_fail_ex+0x263/0x280 [ 1575.939569][T14740] should_fail+0xb/0x20 [ 1575.939654][T14740] should_fail_usercopy+0x1a/0x20 [ 1575.939726][T14740] _copy_from_user+0x1c/0xb0 [ 1575.939752][T14740] ucma_write+0xd8/0x260 [ 1575.939770][T14740] ? __pfx_ucma_write+0x10/0x10 [ 1575.939816][T14740] vfs_write+0x269/0x9f0 [ 1575.939836][T14740] ? __rcu_read_unlock+0x4e/0x70 [ 1575.939856][T14740] ? __fget_files+0x184/0x1c0 [ 1575.939878][T14740] ksys_write+0xdc/0x1a0 [ 1575.939999][T14740] __x64_sys_write+0x40/0x50 [ 1575.940078][T14740] x64_sys_call+0x27e1/0x3020 [ 1575.940144][T14740] do_syscall_64+0x12c/0x3b0 [ 1575.940169][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.940189][T14740] RIP: 0033:0x7f21256cc819 [ 1575.940206][T14740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.940245][T14740] RSP: 002b:00007f212411f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1575.940264][T14740] RAX: ffffffffffffffda RBX: 00007f2125945fa0 RCX: 00007f21256cc819 [ 1575.940279][T14740] RDX: 00000000000000a0 RSI: 0000200000000400 RDI: 0000000000000003 [ 1575.940291][T14740] RBP: 00007f212411f090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.940302][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1575.940312][T14740] R13: 00007f2125946038 R14: 00007f2125945fa0 R15: 00007ffe209c7198 [ 1575.940366][T14740] [ 1576.734148][T14754] loop1: detected capacity change from 0 to 512 [ 1576.840514][T14754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1576.961361][T14757] syz_tun: entered allmulticast mode [ 1576.975248][T14756] syz_tun: left allmulticast mode [ 1577.035558][T14759] loop5: detected capacity change from 0 to 512 [ 1577.047719][T14759] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1577.076731][T14759] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1577.113602][T14759] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.12132: bad orphan inode 4 [ 1577.160125][T14759] loop5: lost filesystem error report for type 5 error -117 [ 1577.160320][T14759] EXT4-fs (loop5): 1 orphan inode deleted [ 1577.173989][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1577.174012][ C0] EXT4-fs (loop5): initial error at time 1776352895: ext4_orphan_get:1423 [ 1577.174030][ C0] EXT4-fs (loop5): last error at time 1776352895: ext4_orphan_get:1423 [ 1577.214232][T14763] loop4: detected capacity change from 0 to 1024 [ 1577.234275][T14763] EXT4-fs: Ignoring removed i_version option [ 1577.262149][T14763] EXT4-fs: Ignoring removed bh option [ 1577.277386][T14763] EXT4-fs (loop4): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 1577.286765][T14759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1577.319714][T14763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1577.345178][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.458135][T14772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12136'. [ 1577.498523][T14776] netlink: 'syz.2.12137': attribute type 13 has an invalid length. [ 1577.512129][T14772] loop3: detected capacity change from 0 to 512 [ 1577.537108][T14772] EXT4-fs (loop3): filesystem is read-only [ 1577.543227][T14778] loop1: detected capacity change from 0 to 1024 [ 1577.553628][T14772] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1577.566783][T14772] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1577.582782][T14778] EXT4-fs: Ignoring removed bh option [ 1577.589037][T14772] EXT4-fs (loop3): mount failed [ 1577.610079][T14778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1577.626624][T13211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.630196][T14778] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1577.654570][ T3523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.672470][T14784] loop3: detected capacity change from 0 to 1024 [ 1577.679412][T14784] EXT4-fs: Ignoring removed i_version option [ 1577.685537][T14784] EXT4-fs: Ignoring removed bh option [ 1577.698608][T14782] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12137'. [ 1577.698648][T14784] EXT4-fs (loop3): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 1577.720365][T14786] FAULT_INJECTION: forcing a failure. [ 1577.720365][T14786] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.733246][T14786] CPU: 0 UID: 0 PID: 14786 Comm: syz.5.12139 Tainted: G W syzkaller #0 PREEMPT(full) [ 1577.733277][T14786] Tainted: [W]=WARN [ 1577.733284][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1577.733296][T14786] Call Trace: [ 1577.733303][T14786] [ 1577.733381][T14786] __dump_stack+0x1d/0x30 [ 1577.733408][T14786] dump_stack_lvl+0x95/0xd0 [ 1577.733429][T14786] dump_stack+0x15/0x1b [ 1577.733449][T14786] should_fail_ex+0x263/0x280 [ 1577.733476][T14786] should_failslab+0x8c/0xb0 [ 1577.733516][T14786] __kmalloc_cache_node_noprof+0x6b/0x470 [ 1577.733536][T14786] ? __get_vm_area_node+0x106/0x1d0 [ 1577.733558][T14786] __get_vm_area_node+0x106/0x1d0 [ 1577.733581][T14786] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 1577.733600][T14786] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1577.733621][T14786] ? selinux_file_open+0x2e6/0x330 [ 1577.733656][T14786] ? cred_has_capability+0x224/0x2a0 [ 1577.733711][T14786] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1577.733734][T14786] __vmalloc_noprof+0xa4/0xf0 [ 1577.733755][T14786] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1577.733815][T14786] bpf_prog_alloc_no_stats+0x47/0x390 [ 1577.733839][T14786] ? bpf_prog_alloc+0x2a/0x150 [ 1577.733933][T14786] bpf_prog_alloc+0x3c/0x150 [ 1577.733959][T14786] bpf_prog_load+0x506/0x1140 [ 1577.734066][T14786] ? security_bpf+0x2b/0x90 [ 1577.734086][T14786] __sys_bpf+0x505/0x7e0 [ 1577.734114][T14786] __x64_sys_bpf+0x41/0x50 [ 1577.734233][T14786] x64_sys_call+0x10cb/0x3020 [ 1577.734253][T14786] do_syscall_64+0x12c/0x3b0 [ 1577.734276][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.734330][T14786] RIP: 0033:0x7f5490f4c819 [ 1577.734401][T14786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.734417][T14786] RSP: 002b:00007f548f9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1577.734434][T14786] RAX: ffffffffffffffda RBX: 00007f54911c5fa0 RCX: 00007f5490f4c819 [ 1577.734448][T14786] RDX: 0000000000000094 RSI: 0000200000001800 RDI: 0000000000000005 [ 1577.734461][T14786] RBP: 00007f548f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.734474][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1577.734548][T14786] R13: 00007f54911c6038 R14: 00007f54911c5fa0 R15: 00007ffddab313a8 [ 1577.734563][T14786] [ 1577.734570][T14786] syz.5.12139: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1577.735543][T14787] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.12138: Freeing blocks not in datazone - block = 0, count = 16 [ 1577.745632][T14786] ,cpuset=/,mems_allowed=0 [ 1577.837270][T14787] EXT4-fs (loop1): Remounting filesystem read-only [ 1577.840961][T14786] CPU: 0 UID: 0 PID: 14786 Comm: syz.5.12139 Tainted: G W syzkaller #0 PREEMPT(full) [ 1577.841035][T14786] Tainted: [W]=WARN [ 1577.841042][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1577.841053][T14786] Call Trace: [ 1577.841059][T14786] [ 1577.841067][T14786] __dump_stack+0x1d/0x30 [ 1577.841147][T14786] dump_stack_lvl+0x95/0xd0 [ 1577.841168][T14786] dump_stack+0x15/0x1b [ 1577.841293][T14786] warn_alloc+0x145/0x1c0 [ 1577.841317][T14786] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 1577.841338][T14786] ? selinux_file_open+0x2e6/0x330 [ 1577.841428][T14786] ? cred_has_capability+0x224/0x2a0 [ 1577.841452][T14786] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1577.841475][T14786] __vmalloc_noprof+0xa4/0xf0 [ 1577.841495][T14786] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1577.841647][T14786] bpf_prog_alloc_no_stats+0x47/0x390 [ 1577.841669][T14786] ? bpf_prog_alloc+0x2a/0x150 [ 1577.841691][T14786] bpf_prog_alloc+0x3c/0x150 [ 1577.841762][T14786] bpf_prog_load+0x506/0x1140 [ 1577.841815][T14786] ? security_bpf+0x2b/0x90 [ 1577.841863][T14786] __sys_bpf+0x505/0x7e0 [ 1577.841927][T14786] __x64_sys_bpf+0x41/0x50 [ 1577.841948][T14786] x64_sys_call+0x10cb/0x3020 [ 1577.841970][T14786] do_syscall_64+0x12c/0x3b0 [ 1577.842018][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.842038][T14786] RIP: 0033:0x7f5490f4c819 [ 1577.842053][T14786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.842070][T14786] RSP: 002b:00007f548f9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1577.842088][T14786] RAX: ffffffffffffffda RBX: 00007f54911c5fa0 RCX: 00007f5490f4c819 [ 1577.842202][T14786] RDX: 0000000000000094 RSI: 0000200000001800 RDI: 0000000000000005 [ 1577.842214][T14786] RBP: 00007f548f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.842226][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1577.842312][T14786] R13: 00007f54911c6038 R14: 00007f54911c5fa0 R15: 00007ffddab313a8 [ 1577.842330][T14786] [ 1577.842382][T14786] Mem-Info: [ 1577.853486][T14784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1577.858458][T14786] active_anon:16812 inactive_anon:0 isolated_anon:0 [ 1577.858458][T14786] active_file:8274 inactive_file:3965 isolated_file:0 [ 1577.858458][T14786] unevictable:0 dirty:337 writeback:0 [ 1577.858458][T14786] slab_reclaimable:3823 slab_unreclaimable:60120 [ 1577.858458][T14786] mapped:29782 shmem:479 pagetables:3401 [ 1577.858458][T14786] sec_pagetables:0 bounce:0 [ 1577.858458][T14786] kernel_misc_reclaimable:0 [ 1577.858458][T14786] free:1740707 free_pcp:76258 free_cma:0 [ 1577.858636][T14786] Node 0 active_anon:67248kB inactive_anon:0kB active_file:33096kB inactive_file:15860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119128kB dirty:1348kB writeback:0kB shmem:1916kB kernel_stack:3968kB pagetables:13604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1577.858765][T14786] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1577.859011][T14786] lowmem_reserve[]: 0 2878 7857 7857 [ 1577.859342][T14786] Node 0 DMA32 free:2943936kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947460kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 1577.859479][T14786] lowmem_reserve[]: 0 0 4978 4978 [ 1577.859780][T14786] Node 0 Normal free:4003532kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67248kB inactive_anon:0kB active_file:33096kB inactive_file:15860kB unevictable:0kB writepending:1348kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:301508kB local_pcp:165152kB free_cma:0kB [ 1577.859984][T14786] lowmem_reserve[]: 0 0 0 0 [ 1577.860261][T14786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1577.860967][T14786] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 5*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2943936kB [ 1577.862022][T14786] Node 0 Normal: 2213*4kB (UME) 2667*8kB (UME) 2136*16kB (UME) 1701*32kB (UME) 1015*64kB (UM) 538*128kB (UME) 602*256kB (UME) 441*512kB (UME) 360*1024kB (UME) 296*2048kB (UME) 585*4096kB (UM) = 4003532kB [ 1577.863181][T14786] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1577.863222][T14786] 12657 total pagecache pages [ 1577.863240][T14786] 4 pages in swap cache [ 1577.863392][T14786] Free swap = 124780kB [ 1577.863410][T14786] Total swap = 124996kB [ 1577.863456][T14786] 2097051 pages RAM [ 1577.863474][T14786] 0 pages HighMem/MovableOnly [ 1577.863498][T14786] 81787 pages reserved [ 1577.935934][T14793] blktrace: Concurrent blktraces are not allowed on loop8 [ 1578.062226][ T28] audit: type=1400 audit(1776352896.215:4235): avc: denied { write } for pid=14774 comm="syz.2.12137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1578.240512][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1578.736087][T13046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.931444][T14790] syz.4.12141 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1578.944024][ T35] hid_parser_main: 394 callbacks suppressed [ 1578.944042][ T35] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1578.957430][ T3644] hid-generic 0000:0000:0004.0028: unknown main item tag 0x0 [ 1578.975699][ T3644] hid-generic 0000:0000:0004.0028: unknown main item tag 0x0 [ 1578.978624][ T35] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1578.995356][ T3644] hid-generic 0000:0000:0004.0028: unknown main item tag 0x0 [ 1579.009403][T14790] CPU: 0 UID: 0 PID: 14790 Comm: syz.4.12141 Tainted: G W syzkaller #0 PREEMPT(full) [ 1579.009518][T14790] Tainted: [W]=WARN [ 1579.009524][T14790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1579.009535][T14790] Call Trace: [ 1579.009541][T14790] [ 1579.009547][T14790] __dump_stack+0x1d/0x30 [ 1579.009601][T14790] dump_stack_lvl+0x95/0xd0 [ 1579.009620][T14790] dump_stack+0x15/0x1b [ 1579.009642][T14790] dump_header+0x80/0x240 [ 1579.009767][T14790] oom_kill_process+0x295/0x350 [ 1579.009872][T14790] out_of_memory+0x97d/0xb80 [ 1579.009899][T14790] try_charge_memcg+0x62f/0xa10 [ 1579.009932][T14790] __memcg_kmem_charge_page+0x139/0x2b0 [ 1579.009954][T14790] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1579.010018][T14790] alloc_pages_mpol+0xb3/0x260 [ 1579.010043][T14790] alloc_pages_noprof+0x8f/0x140 [ 1579.010066][T14790] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1579.010092][T14790] __kvmalloc_node_noprof+0x3d4/0x640 [ 1579.010133][T14790] ? futex_hash_allocate+0x190/0x9a0 [ 1579.010149][T14790] ? futex_hash_allocate+0x190/0x9a0 [ 1579.010297][T14790] futex_hash_allocate+0x190/0x9a0 [ 1579.010317][T14790] ? cap_task_prctl+0x13f/0x6b0 [ 1579.010339][T14790] futex_hash_prctl+0xd8/0xf0 [ 1579.010403][T14790] __se_sys_prctl+0x4f4/0x1400 [ 1579.010429][T14790] __x64_sys_prctl+0x67/0x80 [ 1579.010513][T14790] x64_sys_call+0x2533/0x3020 [ 1579.010534][T14790] do_syscall_64+0x12c/0x3b0 [ 1579.010554][T14790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.010633][T14790] RIP: 0033:0x7f21256cc819 [ 1579.010650][T14790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.010669][T14790] RSP: 002b:00007f212411f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1579.010758][T14790] RAX: ffffffffffffffda RBX: 00007f2125945fa0 RCX: 00007f21256cc819 [ 1579.010780][T14790] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1579.010792][T14790] RBP: 00007f2125762c91 R08: 0000000000000000 R09: 0000000000000000 [ 1579.010803][T14790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1579.010816][T14790] R13: 00007f2125946038 R14: 00007f2125945fa0 R15: 00007ffe209c7198 [ 1579.010836][T14790] [ 1579.011680][ T3644] hid-generic 0000:0000:0004.0028: unknown main item tag 0x0 [ 1579.033572][ T35] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1579.044724][T14790] memory: usage 307200kB, limit 307200kB, failcnt 2573 [ 1579.049481][T14815] blktrace: Concurrent blktraces are not allowed on loop6 [ 1579.071412][T14790] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 1579.071430][T14790] kmem: usage 307040kB, limit 9007199254740988kB, failcnt 0 [ 1579.071441][T14790] Memory cgroup stats for /syz4 [ 1579.094206][ T35] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1579.104200][ T3644] hid-generic 0000:0000:0004.0028: unknown main item tag 0x0 [ 1579.126728][ T35] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1579.162956][ T3644] hid-generic 0000:0000:0004.0028: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1579.180235][T14790] : [ 1579.239080][T14819] fido_id[14819]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1579.241767][ T35] hid-generic 0000:0000:0004.0027: hidraw1: HID v0.03 Device [syz0] on syz1 [ 1579.251734][T14790] cache 4096 [ 1579.357870][T14821] loop2: detected capacity change from 0 to 512 [ 1579.468792][T14821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1579.569773][T14790] rss 0 [ 1579.572723][T14790] shmem 0 [ 1579.577084][T14790] mapped_file 4096 [ 1579.581207][T14790] dirty 0 [ 1579.587514][T14790] writeback 0 [ 1579.595033][T14790] workingset_refault_anon 512 [ 1579.600614][T14790] workingset_refault_file 7297 [ 1579.605848][T14790] swap 200704 [ 1579.625188][T14790] swapcached 9957376 [ 1579.635544][T14790] pgpgin 1265450 [ 1579.654164][T14790] pgpgout 1265426 [ 1579.662453][T14790] pgfault 1502555 [ 1579.673722][T14790] pgmajfault 1345 [ 1579.691041][T14790] inactive_anon 0 [ 1579.699866][T14790] active_anon 8192 [ 1579.724682][T14790] inactive_file 0 [ 1579.738593][T14790] active_file 86016 [ 1579.751591][T14790] unevictable 0 [ 1579.765510][T14790] hierarchical_memory_limit 314572800 [ 1579.779610][T14790] hierarchical_memsw_limit 9223372036854771712 [ 1579.801031][T14546] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.819483][T14790] total_cache 4096 [ 1579.837796][T14790] total_rss 0 [ 1579.847539][T14790] total_shmem 0 [ 1579.875258][T14830] can0: slcan on ptm0. [ 1579.885782][T14790] total_mapped_file 4096 [ 1579.890317][T14790] total_dirty 0 [ 1579.894006][T14790] total_writeback 0 [ 1579.908895][T14790] total_workingset_refault_anon 512 [ 1579.922803][T14790] total_workingset_refault_file 7297 [ 1579.928292][T14790] total_swap 200704 [ 1579.932370][T14790] total_swapcached 9957376 [ 1579.936959][T14790] total_pgpgin 1265450 [ 1579.941034][T14790] total_pgpgout 1265426 [ 1580.031320][T14790] total_pgfault 1502555 [ 1580.144059][T14790] total_pgmajfault 1345 [ 1580.200629][T14790] total_inactive_anon 0 [ 1580.246429][T14790] total_active_anon 8192 [ 1580.276327][T14790] total_inactive_file 0 [ 1580.342279][T14790] total_active_file 86016 [ 1580.396787][T14790] total_unevictable 0 [ 1580.446260][T14790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.12141,pid=14789,uid=0 [ 1580.461912][T14790] Memory cgroup out of memory: Killed process 14790 (syz.4.12141) total-vm:100580kB, anon-rss:1228kB, file-rss:26464kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1580.791752][T14868] hub 8-0:1.0: USB hub found [ 1580.796779][T14868] hub 8-0:1.0: 8 ports detected [ 1580.814355][T14829] can0 (unregistered): slcan off ptm0. [ 1580.910439][ T35] hid-generic 0000:0000:0004.0029: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1581.108058][T14872] fido_id[14872]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1581.191902][T14880] FAULT_INJECTION: forcing a failure. [ 1581.191902][T14880] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.267840][T14880] CPU: 1 UID: 0 PID: 14880 Comm: syz.2.12163 Tainted: G W syzkaller #0 PREEMPT(full) [ 1581.267871][T14880] Tainted: [W]=WARN [ 1581.267877][T14880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1581.267959][T14880] Call Trace: [ 1581.267979][T14880] [ 1581.267988][T14880] __dump_stack+0x1d/0x30 [ 1581.268048][T14880] dump_stack_lvl+0x95/0xd0 [ 1581.268071][T14880] dump_stack+0x15/0x1b [ 1581.268091][T14880] should_fail_ex+0x263/0x280 [ 1581.268143][T14880] should_failslab+0x8c/0xb0 [ 1581.268285][T14880] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1581.268312][T14880] ? __alloc_skb+0x2d6/0x690 [ 1581.268381][T14880] __alloc_skb+0x2d6/0x690 [ 1581.268402][T14880] ? __alloc_skb+0x200/0x690 [ 1581.268424][T14880] create_monitor_ctrl_open+0x11b/0x4b0 [ 1581.268449][T14880] hci_sock_ioctl+0x2ae/0x7f0 [ 1581.268466][T14880] sock_do_ioctl+0x73/0x230 [ 1581.268496][T14880] sock_ioctl+0x41b/0x610 [ 1581.268520][T14880] ? mutex_lock+0x57/0x90 [ 1581.268625][T14880] ? __pfx_sock_ioctl+0x10/0x10 [ 1581.268651][T14880] __se_sys_ioctl+0xce/0x140 [ 1581.268676][T14880] __x64_sys_ioctl+0x43/0x50 [ 1581.268736][T14880] x64_sys_call+0x1563/0x3020 [ 1581.268759][T14880] do_syscall_64+0x12c/0x3b0 [ 1581.268780][T14880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.268798][T14880] RIP: 0033:0x7f21c32fc819 [ 1581.268822][T14880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.268838][T14880] RSP: 002b:00007f21c1d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1581.268858][T14880] RAX: ffffffffffffffda RBX: 00007f21c3575fa0 RCX: 00007f21c32fc819 [ 1581.268887][T14880] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000004 [ 1581.268897][T14880] RBP: 00007f21c1d57090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.268913][T14880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.268926][T14880] R13: 00007f21c3576038 R14: 00007f21c3575fa0 R15: 00007ffddf003088 [ 1581.268945][T14880] [ 1581.535439][T14893] loop1: detected capacity change from 0 to 512 [ 1581.596923][ T3371] hid-generic 0000:0000:0004.002A: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1581.623720][T14893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1581.650200][T14902] loop2: detected capacity change from 0 to 1024 [ 1581.670977][T14902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1581.690359][T14910] No such timeout policy "syz1" [ 1581.699206][T14910] loop3: detected capacity change from 0 to 512 [ 1581.708368][T14902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.736856][T14910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.752978][T14910] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1581.795719][ T28] audit: type=1400 audit(1776352899.790:4236): avc: denied { create } for pid=14909 comm="syz.3.12168" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1581.880844][T14546] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.891448][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.958385][T14927] syz_tun: entered allmulticast mode [ 1581.972612][T14925] syz_tun: left allmulticast mode [ 1582.041983][ T9] hid-generic 0000:0000:0004.002B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1582.110638][T14943] FAULT_INJECTION: forcing a failure. [ 1582.110638][T14943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.124706][T14943] CPU: 0 UID: 0 PID: 14943 Comm: syz.5.12177 Tainted: G W syzkaller #0 PREEMPT(full) [ 1582.124738][T14943] Tainted: [W]=WARN [ 1582.124746][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1582.124758][T14943] Call Trace: [ 1582.124822][T14943] [ 1582.124830][T14943] __dump_stack+0x1d/0x30 [ 1582.124928][T14943] dump_stack_lvl+0x95/0xd0 [ 1582.124950][T14943] dump_stack+0x15/0x1b [ 1582.124975][T14943] should_fail_ex+0x263/0x280 [ 1582.125002][T14943] should_fail+0xb/0x20 [ 1582.125043][T14943] should_fail_usercopy+0x1a/0x20 [ 1582.125069][T14943] _copy_to_user+0x20/0xa0 [ 1582.125146][T14943] simple_read_from_buffer+0xb5/0x130 [ 1582.125214][T14943] proc_fail_nth_read+0x10e/0x150 [ 1582.125317][T14943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1582.125415][T14943] vfs_read+0x1ab/0x7f0 [ 1582.125440][T14943] ? __rcu_read_unlock+0x4e/0x70 [ 1582.125533][T14943] ? __fget_files+0x184/0x1c0 [ 1582.125553][T14943] ? mutex_lock+0x57/0x90 [ 1582.125581][T14943] ksys_read+0xdc/0x1a0 [ 1582.125605][T14943] __x64_sys_read+0x40/0x50 [ 1582.125635][T14943] x64_sys_call+0x2886/0x3020 [ 1582.125654][T14943] do_syscall_64+0x12c/0x3b0 [ 1582.125747][T14943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.125763][T14943] RIP: 0033:0x7f5490f0d04e [ 1582.125776][T14943] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1582.125789][T14943] RSP: 002b:00007f548f9a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1582.125804][T14943] RAX: ffffffffffffffda RBX: 00007f548f9a76c0 RCX: 00007f5490f0d04e [ 1582.125863][T14943] RDX: 000000000000000f RSI: 00007f548f9a70a0 RDI: 0000000000000004 [ 1582.125873][T14943] RBP: 00007f548f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.125882][T14943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.125891][T14943] R13: 00007f54911c6038 R14: 00007f54911c5fa0 R15: 00007ffddab313a8 [ 1582.125905][T14943] [ 1582.391430][T14948] loop5: detected capacity change from 0 to 512 [ 1582.406453][T14948] EXT4-fs (loop5): 1 orphan inode deleted [ 1582.412876][T14948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1582.427396][T14949] loop1: detected capacity change from 0 to 512 [ 1582.486240][T14949] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1582.495228][T14949] System zones: 0-2, 18-18, 34-34 [ 1582.504004][T14949] EXT4-fs (loop1): 1 orphan inode deleted [ 1582.510994][T14949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1582.535058][T14949] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1582.548854][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1582.564849][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7064: comm kworker/u8:0: Failed to release dquot type 1 [ 1582.577419][ T12] EXT4-fs (loop1): Remounting filesystem read-only [ 1582.585226][T13046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.647451][T14949] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.687370][T14958] FAULT_INJECTION: forcing a failure. [ 1582.687370][T14958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.705704][T14958] CPU: 1 UID: 0 PID: 14958 Comm: syz.3.12182 Tainted: G W syzkaller #0 PREEMPT(full) [ 1582.705736][T14958] Tainted: [W]=WARN [ 1582.705743][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1582.705823][T14958] Call Trace: [ 1582.705829][T14958] [ 1582.705837][T14958] __dump_stack+0x1d/0x30 [ 1582.705863][T14958] dump_stack_lvl+0x95/0xd0 [ 1582.705885][T14958] dump_stack+0x15/0x1b [ 1582.705905][T14958] should_fail_ex+0x263/0x280 [ 1582.705949][T14958] ? __pfx_ucma_create_id+0x10/0x10 [ 1582.705969][T14958] should_fail+0xb/0x20 [ 1582.706063][T14958] should_fail_usercopy+0x1a/0x20 [ 1582.706102][T14958] _copy_from_user+0x1c/0xb0 [ 1582.706167][T14958] ucma_create_id+0x7f/0x280 [ 1582.706186][T14958] ? __pfx_ucma_create_id+0x10/0x10 [ 1582.706204][T14958] ucma_write+0x1c9/0x260 [ 1582.706330][T14958] ? __pfx_ucma_write+0x10/0x10 [ 1582.706347][T14958] vfs_write+0x269/0x9f0 [ 1582.706372][T14958] ? __rcu_read_unlock+0x4e/0x70 [ 1582.706448][T14958] ? __fget_files+0x184/0x1c0 [ 1582.706516][T14958] ksys_write+0xdc/0x1a0 [ 1582.706543][T14958] __x64_sys_write+0x40/0x50 [ 1582.706603][T14958] x64_sys_call+0x27e1/0x3020 [ 1582.706627][T14958] do_syscall_64+0x12c/0x3b0 [ 1582.706676][T14958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.706697][T14958] RIP: 0033:0x7f581aa3c819 [ 1582.706713][T14958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.706730][T14958] RSP: 002b:00007f581948f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1582.706766][T14958] RAX: ffffffffffffffda RBX: 00007f581acb5fa0 RCX: 00007f581aa3c819 [ 1582.706780][T14958] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000005 [ 1582.706793][T14958] RBP: 00007f581948f090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.706806][T14958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.706818][T14958] R13: 00007f581acb6038 R14: 00007f581acb5fa0 R15: 00007ffeaf343978 [ 1582.706836][T14958] [ 1582.926497][T14958] loop3: detected capacity change from 0 to 512 [ 1582.937277][T14958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1582.955981][T14958] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.12182: invalid indirect mapped block 4294967295 (level 1) [ 1582.970337][T14958] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1582.970512][T14958] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.12182: invalid indirect mapped block 4294967295 (level 1) [ 1582.994559][T14958] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1582.994885][T14958] EXT4-fs (loop3): 2 truncates cleaned up [ 1583.010879][T14958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1583.061300][T14964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12184'. [ 1583.090740][T13046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.186511][T13211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.211697][T14985] loop5: detected capacity change from 0 to 1024 [ 1583.218997][T14985] EXT4-fs: Ignoring removed bh option [ 1583.241981][T14985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1583.259044][T14985] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1583.270423][T14989] loop3: detected capacity change from 0 to 1024 [ 1583.277797][T14989] EXT4-fs: test_dummy_encryption option not supported [ 1583.355572][T14991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1583.675538][T14990] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.12190: Freeing blocks not in datazone - block = 0, count = 16 [ 1583.972779][T14994] loop3: detected capacity change from 0 to 512 [ 1584.093405][T14990] EXT4-fs (loop5): Remounting filesystem read-only [ 1584.122512][T14994] EXT4-fs (loop3): 1 orphan inode deleted [ 1584.129186][T14994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1584.142945][T14994] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1584.179409][T14994] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1584.446428][T14998] loop4: detected capacity change from 0 to 1024 [ 1584.482033][T15000] EXT4-fs (loop2): 1 orphan inode deleted [ 1584.511022][T14998] EXT4-fs: Ignoring removed bh option [ 1584.572906][T14998] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1584.656487][T15004] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.12192: Freeing blocks not in datazone - block = 0, count = 16 [ 1584.670226][ T36] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1584.681684][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7064: comm kworker/u8:2: Failed to release dquot type 1 [ 1584.785138][T15004] EXT4-fs (loop4): Remounting filesystem read-only [ 1584.844106][T15010] EXT4-fs: test_dummy_encryption option not supported [ 1585.139865][T15018] FAULT_INJECTION: forcing a failure. [ 1585.139865][T15018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1585.153477][T15018] CPU: 1 UID: 0 PID: 15018 Comm: syz.4.12199 Tainted: G W syzkaller #0 PREEMPT(full) [ 1585.153567][T15018] Tainted: [W]=WARN [ 1585.153574][T15018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1585.153584][T15018] Call Trace: [ 1585.153591][T15018] [ 1585.153599][T15018] __dump_stack+0x1d/0x30 [ 1585.153620][T15018] dump_stack_lvl+0x95/0xd0 [ 1585.153641][T15018] dump_stack+0x15/0x1b [ 1585.153692][T15018] should_fail_ex+0x263/0x280 [ 1585.153780][T15018] should_fail+0xb/0x20 [ 1585.153802][T15018] should_fail_usercopy+0x1a/0x20 [ 1585.153899][T15018] _copy_to_user+0x20/0xa0 [ 1585.153923][T15018] simple_read_from_buffer+0xb5/0x130 [ 1585.153976][T15018] proc_fail_nth_read+0x10e/0x150 [ 1585.153998][T15018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1585.154024][T15018] vfs_read+0x1ab/0x7f0 [ 1585.154122][T15018] ? __rcu_read_unlock+0x4e/0x70 [ 1585.154164][T15018] ? __fget_files+0x184/0x1c0 [ 1585.154180][T15018] ? mutex_lock+0x57/0x90 [ 1585.154205][T15018] ksys_read+0xdc/0x1a0 [ 1585.154307][T15018] __x64_sys_read+0x40/0x50 [ 1585.154329][T15018] x64_sys_call+0x2886/0x3020 [ 1585.154349][T15018] do_syscall_64+0x12c/0x3b0 [ 1585.154371][T15018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.154388][T15018] RIP: 0033:0x7f212568d04e [ 1585.154401][T15018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1585.154473][T15018] RSP: 002b:00007f212411efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1585.154489][T15018] RAX: ffffffffffffffda RBX: 00007f212411f6c0 RCX: 00007f212568d04e [ 1585.154504][T15018] RDX: 000000000000000f RSI: 00007f212411f0a0 RDI: 0000000000000004 [ 1585.154517][T15018] RBP: 00007f212411f090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.154527][T15018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.154540][T15018] R13: 00007f2125946038 R14: 00007f2125945fa0 R15: 00007ffe209c7198 [ 1585.154621][T15018] [ 1585.474035][T15026] FAULT_INJECTION: forcing a failure. [ 1585.474035][T15026] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.487215][T15026] CPU: 1 UID: 0 PID: 15026 Comm: syz.3.12201 Tainted: G W syzkaller #0 PREEMPT(full) [ 1585.487247][T15026] Tainted: [W]=WARN [ 1585.487290][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1585.487368][T15026] Call Trace: [ 1585.487375][T15026] [ 1585.487382][T15026] __dump_stack+0x1d/0x30 [ 1585.487415][T15026] dump_stack_lvl+0x95/0xd0 [ 1585.487437][T15026] dump_stack+0x15/0x1b [ 1585.487457][T15026] should_fail_ex+0x263/0x280 [ 1585.487530][T15026] should_failslab+0x8c/0xb0 [ 1585.487620][T15026] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1585.487639][T15026] ? __alloc_skb+0x2d6/0x690 [ 1585.487662][T15026] __alloc_skb+0x2d6/0x690 [ 1585.487681][T15026] ? __alloc_skb+0x200/0x690 [ 1585.487779][T15026] netlink_alloc_large_skb+0xbf/0xf0 [ 1585.487805][T15026] netlink_sendmsg+0x40c/0x6f0 [ 1585.487834][T15026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1585.487886][T15026] ____sys_sendmsg+0x563/0x5b0 [ 1585.487914][T15026] ___sys_sendmsg+0x195/0x1e0 [ 1585.487946][T15026] __x64_sys_sendmsg+0xd4/0x160 [ 1585.488037][T15026] x64_sys_call+0x194c/0x3020 [ 1585.488129][T15026] do_syscall_64+0x12c/0x3b0 [ 1585.488152][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.488172][T15026] RIP: 0033:0x7f581aa3c819 [ 1585.488189][T15026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.488272][T15026] RSP: 002b:00007f581948f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1585.488292][T15026] RAX: ffffffffffffffda RBX: 00007f581acb5fa0 RCX: 00007f581aa3c819 [ 1585.488306][T15026] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1585.488319][T15026] RBP: 00007f581948f090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.488332][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.488361][T15026] R13: 00007f581acb6038 R14: 00007f581acb5fa0 R15: 00007ffeaf343978 [ 1585.488378][T15026] [ 1585.491453][T15020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12200'. [ 1585.791288][T15037] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1585.800185][T15037] mroute: pending queue full, dropping entries [ 1585.810855][T15035] can0: slcan on ptm0. [ 1585.844607][T15039] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1585.856253][T15042] can1: slcan on ptm1. [ 1585.874620][T15039] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1585.910883][T15049] SELinux: Context Q'6q͇rv Q|H߆Я~4٧) V4[9?;dHC0Sx8͠]E蠖YLp ~#: is not valid (left unmapped). [ 1586.148050][T15090] EXT4-fs: Ignoring removed i_version option [ 1586.154605][T15090] EXT4-fs: Ignoring removed bh option [ 1586.171479][T15090] EXT4-fs (loop4): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 1586.323232][ T3371] hid_parser_main: 495 callbacks suppressed [ 1586.323329][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.343538][ T28] audit: type=1400 audit(1776352904.048:4237): avc: denied { connect } for pid=15098 comm="syz.5.12216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1586.344474][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.374377][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.386213][T15101] FAULT_INJECTION: forcing a failure. [ 1586.386213][T15101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.392344][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.400343][T15101] CPU: 1 UID: 0 PID: 15101 Comm: syz.5.12218 Tainted: G W syzkaller #0 PREEMPT(full) [ 1586.400387][T15101] Tainted: [W]=WARN [ 1586.400460][T15101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1586.400471][T15101] Call Trace: [ 1586.400478][T15101] [ 1586.400486][T15101] __dump_stack+0x1d/0x30 [ 1586.400510][T15101] dump_stack_lvl+0x95/0xd0 [ 1586.400588][T15101] dump_stack+0x15/0x1b [ 1586.400607][T15101] should_fail_ex+0x263/0x280 [ 1586.400631][T15101] should_fail+0xb/0x20 [ 1586.400652][T15101] should_fail_usercopy+0x1a/0x20 [ 1586.400776][T15101] _copy_from_user+0x1c/0xb0 [ 1586.400842][T15101] __copy_msghdr+0x244/0x300 [ 1586.400881][T15101] ___sys_sendmsg+0x10c/0x1e0 [ 1586.400913][T15101] __x64_sys_sendmsg+0xd4/0x160 [ 1586.400995][T15101] x64_sys_call+0x194c/0x3020 [ 1586.401018][T15101] do_syscall_64+0x12c/0x3b0 [ 1586.401118][T15101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.401138][T15101] RIP: 0033:0x7f5490f4c819 [ 1586.401153][T15101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.401170][T15101] RSP: 002b:00007f548f9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.401188][T15101] RAX: ffffffffffffffda RBX: 00007f54911c5fa0 RCX: 00007f5490f4c819 [ 1586.401205][T15101] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1586.401217][T15101] RBP: 00007f548f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.401269][T15101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.401281][T15101] R13: 00007f54911c6038 R14: 00007f54911c5fa0 R15: 00007ffddab313a8 [ 1586.401299][T15101] [ 1586.478564][T15108] EXT4-fs: test_dummy_encryption option not supported [ 1586.480245][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.529804][T15108] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1586.530919][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.543562][T15108] EXT4-fs (loop4): 1 truncate cleaned up [ 1586.548447][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.615834][T15112] ext4: Unknown parameter 'syzkaller' [ 1586.619712][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.619811][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.619834][ T3371] hid-generic 0000:0000:0004.002C: unknown main item tag 0x0 [ 1586.657230][ T3371] hid-generic 0000:0000:0004.002C: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1586.674766][T15115] EXT4-fs: test_dummy_encryption option not supported [ 1586.709165][T15117] fido_id[15117]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1586.734214][T15034] can0 (unregistered): slcan off ptm0. [ 1586.751254][T15121] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 1586.798934][T15041] can1 (unregistered): slcan off ptm1. [ 1586.816122][T15125] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.937535][T15143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12228'. [ 1586.999617][T15151] set_capacity_and_notify: 10 callbacks suppressed [ 1586.999636][T15151] loop5: detected capacity change from 0 to 512 [ 1587.020310][T15151] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1587.037499][ T28] audit: type=1400 audit(1776352904.703:4238): avc: denied { watch } for pid=15155 comm="syz.2.12232" path="/18/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1587.051575][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12232'. [ 1587.073316][T15151] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1587.103699][T15158] hsr_slave_1 (unregistering): left promiscuous mode [ 1587.295703][T15155] Process accounting resumed [ 1587.296025][T15200] tmpfs: Bad value for 'nr_inodes' [ 1587.354011][T15211] loop2: detected capacity change from 0 to 1024 [ 1587.363303][T15211] EXT4-fs: test_dummy_encryption option not supported [ 1587.632980][T15228] loop4: detected capacity change from 0 to 1024 [ 1587.640662][T15228] EXT4-fs: test_dummy_encryption option not supported [ 1587.808630][T15229] loop2: detected capacity change from 0 to 512 [ 1588.737616][T15233] loop4: detected capacity change from 0 to 512 [ 1588.745662][T15229] EXT4-fs (loop2): 1 orphan inode deleted [ 1588.965567][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1589.020984][T15229] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1589.717792][ T1353] Bluetooth: hci0: Frame reassembly failed (-84) [ 1589.756049][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7064: comm kworker/u8:0: Failed to release dquot type 1 [ 1590.606033][T15233] EXT4-fs (loop4): 1 orphan inode deleted [ 1590.613204][T15233] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1590.660978][T15247] hub 8-0:1.0: USB hub found [ 1590.805095][T15247] hub 8-0:1.0: 8 ports detected [ 1590.811835][ T3644] IPVS: starting estimator thread 0... [ 1590.817738][T20572] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1590.834683][T20572] EXT4-fs error (device loop4): ext4_release_dquot:7064: comm kworker/u8:5: Failed to release dquot type 1 [ 1590.945604][T15248] IPVS: using max 2688 ests per chain, 134400 per kthread [ 1591.106720][T15260] loop2: detected capacity change from 0 to 512 [ 1591.155370][T15259] loop4: detected capacity change from 0 to 512 [ 1591.206645][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1591.207425][T15263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.220523][T15263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.232480][T15259] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1591.260146][T15270] loop3: detected capacity change from 0 to 736 [ 1591.262250][T15260] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1591.268089][T15259] System zones: 0-2, 18-18, 34-34 [ 1591.309886][T15260] System zones: 0-2, 18-18, 34-34 [ 1591.322123][T15259] EXT4-fs (loop4): 1 orphan inode deleted [ 1591.331920][T15263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.347982][T15263] veth0_vlan: left allmulticast mode [ 1591.355331][T15260] EXT4-fs (loop2): 1 orphan inode deleted [ 1591.362200][T15259] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.380880][ T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1591.395931][T15260] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.408552][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7064: comm kworker/u8:2: Failed to release dquot type 1 [ 1591.430044][ T36] EXT4-fs (loop4): Remounting filesystem read-only [ 1591.447323][ T1353] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1591.447413][ T1353] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.447455][ T1353] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1591.447481][ T1353] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.447651][ T1353] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1591.447673][ T1353] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.447701][ T1353] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1591.447794][ T1353] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.456221][ T36] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1591.481267][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12251'. [ 1591.495978][ T36] EXT4-fs error (device loop2): ext4_release_dquot:7064: comm kworker/u8:2: Failed to release dquot type 1 [ 1591.507676][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12251'. [ 1591.523643][T15281] syz_tun: entered allmulticast mode [ 1591.540687][ T36] EXT4-fs (loop2): Remounting filesystem read-only [ 1591.583625][ T1353] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1591.583779][ T1353] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1591.583813][ T1353] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1591.583846][ T1353] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1591.597386][T15279] loop1: detected capacity change from 0 to 128 [ 1591.626316][T15279] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.636792][T15282] loop3: detected capacity change from 0 to 512 [ 1591.637104][T15282] EXT4-fs: Ignoring removed nobh option [ 1591.713385][T15286] netlink: 'syz.5.12252': attribute type 10 has an invalid length. [ 1591.725239][T15286] team0: Device xfrm0 is of different type [ 1591.739131][T15286] delete_channel: no stack [ 1591.747476][T15286] delete_channel: no stack [ 1591.761159][T15282] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #3: comm syz.3.12248: corrupted inode contents [ 1591.761476][T15289] EXT4-fs: test_dummy_encryption option not supported [ 1591.773691][T15282] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1591.779453][T15282] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #3: comm syz.3.12248: mark_inode_dirty error [ 1591.803235][T15282] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1591.803682][T15282] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #3: comm syz.3.12248: corrupted inode contents [ 1591.825733][T15282] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1591.825905][T15282] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.12248: mark_inode_dirty error [ 1591.846740][T15282] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1591.846960][T15282] Quota error (device loop3): write_blk: dquota write failed [ 1591.864325][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 1591.864386][ C1] EXT4-fs (loop3): initial error at time 1776352909: ext4_do_update_inode:5604: inode 3 [ 1591.864452][ C1] EXT4-fs (loop3): last error at time 1776352909: __ext4_ext_dirty:207: inode 3 [ 1591.916540][T15282] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1591.933760][T15282] EXT4-fs error (device loop3): ext4_acquire_dquot:7028: comm syz.3.12248: Failed to acquire dquot type 0 [ 1591.946601][T15282] loop3: lost filesystem error report for type 5 error -117 [ 1591.950272][T15282] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.12248: corrupted inode contents [ 1591.988144][T15282] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1591.988775][T15282] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #16: comm syz.3.12248: mark_inode_dirty error [ 1592.022956][T15298] EXT4-fs: Ignoring removed bh option [ 1592.030175][T15282] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1592.030547][T15282] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.12248: corrupted inode contents [ 1592.112047][T15299] EXT4-fs (loop1): 1 orphan inode deleted [ 1592.118813][T15299] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.141460][T15299] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1592.154048][T30879] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1592.195434][T30879] EXT4-fs error (device loop1): ext4_release_dquot:7064: comm kworker/u8:10: Failed to release dquot type 1 [ 1592.250696][T15298] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.276277][T15282] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1592.281071][T15282] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.12248: mark_inode_dirty error [ 1592.394010][T15309] FAULT_INJECTION: forcing a failure. [ 1592.394010][T15309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.462303][T15311] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.12256: Freeing blocks not in datazone - block = 0, count = 16 [ 1592.478873][T15282] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1592.480622][T15282] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.12248: corrupted inode contents [ 1592.514486][T15309] CPU: 0 UID: 0 PID: 15309 Comm: syz.5.12257 Tainted: G W syzkaller #0 PREEMPT(full) [ 1592.514615][T15309] Tainted: [W]=WARN [ 1592.514621][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1592.514630][T15309] Call Trace: [ 1592.514637][T15309] [ 1592.514644][T15309] __dump_stack+0x1d/0x30 [ 1592.514713][T15309] dump_stack_lvl+0x95/0xd0 [ 1592.514735][T15309] dump_stack+0x15/0x1b [ 1592.514754][T15309] should_fail_ex+0x263/0x280 [ 1592.514788][T15309] should_fail+0xb/0x20 [ 1592.514810][T15309] should_fail_usercopy+0x1a/0x20 [ 1592.514897][T15309] _copy_from_user+0x1c/0xb0 [ 1592.514920][T15309] ___sys_sendmsg+0xc1/0x1e0 [ 1592.514955][T15309] __x64_sys_sendmsg+0xd4/0x160 [ 1592.515002][T15309] x64_sys_call+0x194c/0x3020 [ 1592.515021][T15309] do_syscall_64+0x12c/0x3b0 [ 1592.515116][T15309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.515137][T15309] RIP: 0033:0x7f5490f4c819 [ 1592.515202][T15309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.515216][T15309] RSP: 002b:00007f548f9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.515234][T15309] RAX: ffffffffffffffda RBX: 00007f54911c5fa0 RCX: 00007f5490f4c819 [ 1592.515249][T15309] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1592.515262][T15309] RBP: 00007f548f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.515344][T15309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.515356][T15309] R13: 00007f54911c6038 R14: 00007f54911c5fa0 R15: 00007ffddab313a8 [ 1592.515372][T15309] [ 1592.725599][T15282] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1592.731167][T15282] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1592.751880][T15311] EXT4-fs (loop2): Remounting filesystem read-only [ 1592.758964][T15282] loop3: lost filesystem error report for type 5 error -117 [ 1592.759698][T15282] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.12248: corrupted inode contents [ 1592.801299][T14546] EXT4-fs unmount: 24 callbacks suppressed [ 1592.801314][T14546] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1592.826306][T15282] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1592.828739][T15282] EXT4-fs error (device loop3): ext4_truncate:4604: inode #16: comm syz.3.12248: mark_inode_dirty error [ 1592.924012][ T3523] syz_tun (unregistering): left allmulticast mode [ 1592.938108][T15282] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1593.095246][T15282] loop3: lost filesystem error report for type 5 error -117 [ 1593.101819][T15282] EXT4-fs (loop3): 1 truncate cleaned up [ 1593.160244][T15282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1593.196175][T15321] set_capacity_and_notify: 3 callbacks suppressed [ 1593.196190][T15321] loop2: detected capacity change from 0 to 8192 [ 1593.213211][T15321] FAT-fs (loop2): bogus logical sector size 0 [ 1593.219691][T15321] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1593.247839][T15321] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1593.281156][T15282] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1593.321022][T15328] can0: slcan on ptm0. [ 1593.446816][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.504010][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12265'. [ 1593.517194][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12265'. [ 1593.528980][T13046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.530631][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12265'. [ 1593.595054][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12265'. [ 1593.607692][T15352] loop2: detected capacity change from 0 to 512 [ 1593.621148][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12265'. [ 1593.631049][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12265'. [ 1593.643454][ T36] bridge_slave_1: left allmulticast mode [ 1593.649672][ T36] bridge_slave_1: left promiscuous mode [ 1593.660631][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.665141][T15352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1593.680052][T15352] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1593.690085][ T36] batadv0: left allmulticast mode [ 1593.695490][ T36] batadv0: left promiscuous mode [ 1593.701208][ T36] : port 1(batadv0) entered disabled state [ 1593.711151][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12265'. [ 1593.724455][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12265'. [ 1593.794623][ T28] audit: type=1400 audit(1776352911.010:4239): avc: denied { shutdown } for pid=15361 comm="syz.2.12269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1593.816087][ T28] audit: type=1400 audit(1776352911.010:4240): avc: denied { read } for pid=15361 comm="syz.2.12269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1593.883512][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.894038][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.903202][ T36] bond0 (unregistering): Released all slaves [ 1593.912920][ T36] bond1 (unregistering): Released all slaves [ 1593.931671][T15322] chnl_net:caif_netlink_parms(): no params data found [ 1593.949388][T15359] can1: slcan on ptm1. [ 1593.965031][T15369] FAULT_INJECTION: forcing a failure. [ 1593.965031][T15369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.978547][T15369] CPU: 0 UID: 0 PID: 15369 Comm: syz.1.12271 Tainted: G W syzkaller #0 PREEMPT(full) [ 1593.978614][T15369] Tainted: [W]=WARN [ 1593.978620][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1593.978630][T15369] Call Trace: [ 1593.978635][T15369] [ 1593.978641][T15369] __dump_stack+0x1d/0x30 [ 1593.978664][T15369] dump_stack_lvl+0x95/0xd0 [ 1593.978738][T15369] dump_stack+0x15/0x1b [ 1593.978759][T15369] should_fail_ex+0x263/0x280 [ 1593.978781][T15369] should_fail+0xb/0x20 [ 1593.978820][T15369] should_fail_usercopy+0x1a/0x20 [ 1593.978841][T15369] _copy_to_user+0x20/0xa0 [ 1593.978916][T15369] simple_read_from_buffer+0xb5/0x130 [ 1593.978938][T15369] proc_fail_nth_read+0x10e/0x150 [ 1593.978960][T15369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1593.979057][T15369] vfs_read+0x1ab/0x7f0 [ 1593.979079][T15369] ? __rcu_read_unlock+0x4e/0x70 [ 1593.979142][T15369] ? __fget_files+0x184/0x1c0 [ 1593.979158][T15369] ? mutex_lock+0x57/0x90 [ 1593.979183][T15369] ksys_read+0xdc/0x1a0 [ 1593.979278][T15369] __x64_sys_read+0x40/0x50 [ 1593.979353][T15369] x64_sys_call+0x2886/0x3020 [ 1593.979377][T15369] do_syscall_64+0x12c/0x3b0 [ 1593.979420][T15369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.979439][T15369] RIP: 0033:0x7fa8c0c4d04e [ 1593.979487][T15369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1593.979534][T15369] RSP: 002b:00007fa8bf6e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1593.979551][T15369] RAX: ffffffffffffffda RBX: 00007fa8bf6e76c0 RCX: 00007fa8c0c4d04e [ 1593.979595][T15369] RDX: 000000000000000f RSI: 00007fa8bf6e70a0 RDI: 0000000000000004 [ 1593.979608][T15369] RBP: 00007fa8bf6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.979621][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.979631][T15369] R13: 00007fa8c0f06038 R14: 00007fa8c0f05fa0 R15: 00007ffe2c01ac58 [ 1593.979646][T15369] [ 1594.230802][T15376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.238372][T15376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.247383][T15327] can0 (unregistered): slcan off ptm0. [ 1594.260561][ T28] audit: type=1400 audit(1776352911.459:4241): avc: denied { read } for pid=15373 comm="syz.2.12272" path="socket:[170215]" dev="sockfs" ino=170215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1594.442483][T15376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1594.460454][T15376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1594.506517][ T36] hsr_slave_0: left promiscuous mode [ 1594.512342][ T36] hsr_slave_1: left promiscuous mode [ 1594.518421][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1594.526326][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.585327][ T3039] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1594.593389][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.608368][T15322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.615623][T15322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.624325][T15322] bridge_slave_0: entered allmulticast mode [ 1594.631092][T15322] bridge_slave_0: entered promiscuous mode [ 1594.640243][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.650088][T15322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.657811][T15322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.665529][T15322] bridge_slave_1: entered allmulticast mode [ 1594.672138][T15322] bridge_slave_1: entered promiscuous mode [ 1594.684530][T15358] can1 (unregistered): slcan off ptm1. [ 1594.688353][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.699434][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.712038][T15322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.723593][T15322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.745739][T15322] team0: Port device team_slave_0 added [ 1594.752583][T15322] team0: Port device team_slave_1 added [ 1594.768296][T15322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.776021][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.807088][T15322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.819339][T15322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.826588][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.853579][T15322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.867034][ T3039] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1594.892264][T15322] hsr_slave_0: entered promiscuous mode [ 1594.898649][T15322] hsr_slave_1: entered promiscuous mode [ 1594.905014][T15322] debugfs: 'hsr0' already exists in 'hsr' [ 1594.910898][T15322] Cannot create hsr debugfs directory [ 1594.924901][ T36] IPVS: stop unused estimator thread 0... [ 1595.510934][T15322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1595.573663][T15469] loop1: detected capacity change from 0 to 512 [ 1595.602727][T15322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1595.624343][T15469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1595.676053][T15322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1595.725103][T15469] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1595.755890][T15322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1595.858516][T15322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1595.933304][T15322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1595.981495][T15481] tipc: Invalid UDP bearer configuration [ 1595.981610][T15481] tipc: Enabling of bearer rejected, failed to enable media [ 1596.148199][ T28] audit: type=1400 audit(1776352913.059:4242): avc: denied { bind } for pid=15479 comm="syz.3.12281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1596.196932][T15322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1596.217649][T15322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1596.292720][T15493] FAULT_INJECTION: forcing a failure. [ 1596.292720][T15493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.306562][T15493] CPU: 0 UID: 0 PID: 15493 Comm: syz.1.12282 Tainted: G W syzkaller #0 PREEMPT(full) [ 1596.306727][T15493] Tainted: [W]=WARN [ 1596.306734][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1596.306746][T15493] Call Trace: [ 1596.306753][T15493] [ 1596.306762][T15493] __dump_stack+0x1d/0x30 [ 1596.306795][T15493] dump_stack_lvl+0x95/0xd0 [ 1596.306834][T15493] dump_stack+0x15/0x1b [ 1596.306851][T15493] should_fail_ex+0x263/0x280 [ 1596.306872][T15493] should_fail+0xb/0x20 [ 1596.306926][T15493] should_fail_usercopy+0x1a/0x20 [ 1596.306947][T15493] _copy_from_iter+0xcf/0xea0 [ 1596.306969][T15493] ? alloc_pages_mpol+0x217/0x260 [ 1596.307088][T15493] copy_page_from_iter+0x161/0x1f0 [ 1596.307142][T15493] tun_get_user+0xbe3/0x27e0 [ 1596.307168][T15493] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1596.307233][T15493] tun_chr_write_iter+0x15e/0x210 [ 1596.307280][T15493] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1596.307310][T15493] vfs_write+0x5a6/0x9f0 [ 1596.307356][T15493] ksys_write+0xdc/0x1a0 [ 1596.307381][T15493] __x64_sys_write+0x40/0x50 [ 1596.307455][T15493] x64_sys_call+0x27e1/0x3020 [ 1596.307478][T15493] do_syscall_64+0x12c/0x3b0 [ 1596.307499][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.307550][T15493] RIP: 0033:0x7fa8c0c4d04e [ 1596.307563][T15493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1596.307588][T15493] RSP: 002b:00007fa8bf6e6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1596.307608][T15493] RAX: ffffffffffffffda RBX: 00007fa8bf6e76c0 RCX: 00007fa8c0c4d04e [ 1596.307620][T15493] RDX: 000000000000003e RSI: 0000200000000040 RDI: 00000000000000c8 [ 1596.307709][T15493] RBP: 00007fa8bf6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.307719][T15493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.307729][T15493] R13: 00007fa8c0f06038 R14: 00007fa8c0f05fa0 R15: 00007ffe2c01ac58 [ 1596.307744][T15493] [ 1596.328551][T15495] loop1: detected capacity change from 0 to 256 [ 1596.594836][T15322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.605488][T15322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.620897][T15322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1596.631495][T15322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1596.645855][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.653644][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1596.662654][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.670047][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1596.694535][T15495] vfat: Unknown parameter '' [ 1596.768104][T15505] can0: slcan on ptm0. [ 1596.779287][T15507] FAULT_INJECTION: forcing a failure. [ 1596.779287][T15507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.809820][T15507] CPU: 0 UID: 0 PID: 15507 Comm: syz.1.12286 Tainted: G W syzkaller #0 PREEMPT(full) [ 1596.809848][T15507] Tainted: [W]=WARN [ 1596.809854][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1596.809863][T15507] Call Trace: [ 1596.809869][T15507] [ 1596.809876][T15507] __dump_stack+0x1d/0x30 [ 1596.809898][T15507] dump_stack_lvl+0x95/0xd0 [ 1596.809987][T15507] dump_stack+0x15/0x1b [ 1596.810056][T15507] should_fail_ex+0x263/0x280 [ 1596.810082][T15507] should_fail+0xb/0x20 [ 1596.810103][T15507] should_fail_usercopy+0x1a/0x20 [ 1596.810156][T15507] _copy_to_user+0x20/0xa0 [ 1596.810199][T15507] simple_read_from_buffer+0xb5/0x130 [ 1596.810219][T15507] proc_fail_nth_read+0x10e/0x150 [ 1596.810242][T15507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1596.810302][T15507] vfs_read+0x1ab/0x7f0 [ 1596.810324][T15507] ? __rcu_read_unlock+0x4e/0x70 [ 1596.810399][T15507] ? __fget_files+0x184/0x1c0 [ 1596.810417][T15507] ? mutex_lock+0x57/0x90 [ 1596.810441][T15507] ksys_read+0xdc/0x1a0 [ 1596.810475][T15507] __x64_sys_read+0x40/0x50 [ 1596.810496][T15507] x64_sys_call+0x2886/0x3020 [ 1596.810515][T15507] do_syscall_64+0x12c/0x3b0 [ 1596.810537][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.810608][T15507] RIP: 0033:0x7fa8c0c4d04e [ 1596.810707][T15507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1596.810753][T15507] RSP: 002b:00007fa8bf6e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1596.810770][T15507] RAX: ffffffffffffffda RBX: 00007fa8bf6e76c0 RCX: 00007fa8c0c4d04e [ 1596.810783][T15507] RDX: 000000000000000f RSI: 00007fa8bf6e70a0 RDI: 0000000000000003 [ 1596.810795][T15507] RBP: 00007fa8bf6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.810805][T15507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.810876][T15507] R13: 00007fa8c0f06038 R14: 00007fa8c0f05fa0 R15: 00007ffe2c01ac58 [ 1596.810951][T15507] [ 1596.829745][T15322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.142981][T15540] loop5: detected capacity change from 0 to 512 [ 1597.152374][T15529] loop2: detected capacity change from 0 to 512 [ 1597.174639][T15540] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1597.180449][T15529] EXT4-fs (loop2): 1 orphan inode deleted [ 1597.192011][T15529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1597.214336][T15540] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1597.327038][T15322] veth0_vlan: entered promiscuous mode [ 1597.335330][T15322] veth1_vlan: entered promiscuous mode [ 1597.372188][T15322] veth0_macvtap: entered promiscuous mode [ 1597.383938][T15322] veth1_macvtap: entered promiscuous mode [ 1597.400571][T15322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.422937][T15322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.434494][ T380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.453490][ T380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.462601][ T380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.472050][ T380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.590330][T15580] loop4: detected capacity change from 0 to 512 [ 1597.612562][T15504] can0 (unregistered): slcan off ptm0. [ 1597.644953][T15580] EXT4-fs: test_dummy_encryption option not supported [ 1597.759167][T15597] FAULT_INJECTION: forcing a failure. [ 1597.759167][T15597] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.773591][T15597] CPU: 0 UID: 0 PID: 15597 Comm: syz.3.12296 Tainted: G W syzkaller #0 PREEMPT(full) [ 1597.773622][T15597] Tainted: [W]=WARN [ 1597.773629][T15597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1597.773649][T15597] Call Trace: [ 1597.773655][T15597] [ 1597.773662][T15597] __dump_stack+0x1d/0x30 [ 1597.773692][T15597] dump_stack_lvl+0x95/0xd0 [ 1597.773718][T15597] dump_stack+0x15/0x1b [ 1597.773813][T15597] should_fail_ex+0x263/0x280 [ 1597.773890][T15597] should_failslab+0x8c/0xb0 [ 1597.773936][T15597] __kmalloc_noprof+0xb8/0x4d0 [ 1597.773953][T15597] ? alloc_pipe_info+0x1c8/0x340 [ 1597.773979][T15597] alloc_pipe_info+0x1c8/0x340 [ 1597.774006][T15597] splice_direct_to_actor+0x591/0x670 [ 1597.774042][T15597] ? kstrtouint_from_user+0xa8/0xf0 [ 1597.774067][T15597] ? __pfx_direct_splice_actor+0x10/0x10 [ 1597.774086][T15597] ? __rcu_read_unlock+0x4e/0x70 [ 1597.774122][T15597] ? get_pid_task+0x96/0xd0 [ 1597.774202][T15597] ? avc_policy_seqno+0x15/0x30 [ 1597.774226][T15597] ? selinux_file_permission+0x1e1/0x320 [ 1597.774260][T15597] do_splice_direct+0x119/0x1a0 [ 1597.774278][T15597] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1597.774325][T15597] do_sendfile+0x382/0x650 [ 1597.774404][T15597] __x64_sys_sendfile64+0x105/0x150 [ 1597.774436][T15597] x64_sys_call+0x2dc4/0x3020 [ 1597.774463][T15597] do_syscall_64+0x12c/0x3b0 [ 1597.774487][T15597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.774559][T15597] RIP: 0033:0x7f581aa3c819 [ 1597.774575][T15597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.774591][T15597] RSP: 002b:00007f581948f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1597.774653][T15597] RAX: ffffffffffffffda RBX: 00007f581acb5fa0 RCX: 00007f581aa3c819 [ 1597.774667][T15597] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1597.774679][T15597] RBP: 00007f581948f090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.774691][T15597] R10: 0000000008000002 R11: 0000000000000246 R12: 0000000000000001 [ 1597.774703][T15597] R13: 00007f581acb6038 R14: 00007f581acb5fa0 R15: 00007ffeaf343978 [ 1597.774785][T15597] [ 1598.009241][T15599] FAULT_INJECTION: forcing a failure. [ 1598.009241][T15599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.027109][T15599] CPU: 1 UID: 0 PID: 15599 Comm: syz.3.12297 Tainted: G W syzkaller #0 PREEMPT(full) [ 1598.027140][T15599] Tainted: [W]=WARN [ 1598.027186][T15599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1598.027198][T15599] Call Trace: [ 1598.027204][T15599] [ 1598.027213][T15599] __dump_stack+0x1d/0x30 [ 1598.027241][T15599] dump_stack_lvl+0x95/0xd0 [ 1598.027262][T15599] dump_stack+0x15/0x1b [ 1598.027319][T15599] should_fail_ex+0x263/0x280 [ 1598.027340][T15599] should_fail+0xb/0x20 [ 1598.027357][T15599] should_fail_usercopy+0x1a/0x20 [ 1598.027449][T15599] _copy_to_user+0x20/0xa0 [ 1598.027513][T15599] simple_read_from_buffer+0xb5/0x130 [ 1598.027533][T15599] proc_fail_nth_read+0x10e/0x150 [ 1598.027558][T15599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1598.027633][T15599] vfs_read+0x1ab/0x7f0 [ 1598.027653][T15599] ? __rcu_read_unlock+0x4e/0x70 [ 1598.027671][T15599] ? __fget_files+0x184/0x1c0 [ 1598.027760][T15599] ? mutex_lock+0x57/0x90 [ 1598.027791][T15599] ksys_read+0xdc/0x1a0 [ 1598.027905][T15599] __x64_sys_read+0x40/0x50 [ 1598.027924][T15599] x64_sys_call+0x2886/0x3020 [ 1598.027944][T15599] do_syscall_64+0x12c/0x3b0 [ 1598.028015][T15599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.028031][T15599] RIP: 0033:0x7f581a9fd04e [ 1598.028045][T15599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1598.028143][T15599] RSP: 002b:00007f581948efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1598.028224][T15599] RAX: ffffffffffffffda RBX: 00007f581948f6c0 RCX: 00007f581a9fd04e [ 1598.028236][T15599] RDX: 000000000000000f RSI: 00007f581948f0a0 RDI: 0000000000000004 [ 1598.028324][T15599] RBP: 00007f581948f090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.028336][T15599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1598.028348][T15599] R13: 00007f581acb6038 R14: 00007f581acb5fa0 R15: 00007ffeaf343978 [ 1598.028416][T15599] [ 1598.239526][T15600] __nla_validate_parse: 11 callbacks suppressed [ 1598.239563][T15600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12295'. [ 1598.256535][T15594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12295'. [ 1598.313677][T15602] loop1: detected capacity change from 0 to 512 [ 1598.354346][T15602] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1598.355034][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12299'. [ 1598.378904][T15602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 1598.393921][T15602] System zones: 1-12 [ 1598.397964][T15602] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1598.404897][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12299'. [ 1598.414859][T15602] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.12298: iget: bad i_size value: 12154761577498 [ 1598.424665][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12299'. [ 1598.428391][T15602] fserror_report: 1 callbacks suppressed [ 1598.428404][T15602] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1598.443686][T15602] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.12298: couldn't read orphan inode 13 (err -117) [ 1598.453064][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1598.453082][ C0] EXT4-fs (loop1): initial error at time 1776352915: ext4_orphan_get:1397: inode 13 [ 1598.453123][ C0] EXT4-fs (loop1): last error at time 1776352915: ext4_orphan_get:1397: inode 13 [ 1598.491877][T15602] loop1: lost filesystem error report for type 5 error -117 [ 1598.499819][T15602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1598.522489][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12299'. [ 1598.526685][T15602] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.12298: lblock 0 mapped to illegal pblock 3 (length 1) [ 1598.532933][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12299'. [ 1598.547502][T15602] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.12298: error -117 reading directory block [ 1598.574271][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12299'. [ 1598.614976][T15611] loop5: detected capacity change from 0 to 512 [ 1598.634710][T15611] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1598.640900][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12299'. [ 1598.653541][T15614] loop4: detected capacity change from 0 to 512 [ 1598.664857][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12299'. [ 1598.677996][T15611] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1598.678777][T15614] EXT4-fs: Ignoring removed bh option [ 1598.691169][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1598.720996][T15614] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1598.775226][T15614] EXT4-fs (loop4): 1 truncate cleaned up [ 1598.794178][T15614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1598.811379][T15620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.819555][ T12] bond0: (slave bond_slave_0): interface is now down [ 1598.826430][ T12] bond0: (slave bond_slave_1): interface is now down [ 1598.833483][ T12] bond0: now running without any active interface! [ 1598.884665][T15322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1598.923221][T15622] can0: slcan on ptm0. [ 1598.933674][ T28] audit: type=1400 audit(1776352915.829:4243): avc: denied { map } for pid=15624 comm="syz.4.12305" path="socket:[169550]" dev="sockfs" ino=169550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1598.985568][T15630] loop4: detected capacity change from 0 to 1024 [ 1599.001955][T15630] EXT4-fs: Ignoring removed bh option [ 1599.035814][T15635] 9pnet_fd: Insufficient options for proto=fd [ 1599.072408][T15635] tmpfs: Bad value for 'mpol' [ 1599.135265][T15635] loop3: detected capacity change from 0 to 2048 [ 1599.142685][T15635] EXT4-fs: Ignoring removed i_version option [ 1599.166756][T15630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1599.188216][T15635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.209652][T15630] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1599.230448][T15635] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1599.312757][T15656] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.12308: Freeing blocks not in datazone - block = 0, count = 16 [ 1599.327265][T15656] EXT4-fs (loop4): Remounting filesystem read-only [ 1599.373975][T15322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1599.582863][T13046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.846285][T15621] can0 (unregistered): slcan off ptm0. [ 1600.374390][T15702] FAULT_INJECTION: forcing a failure. [ 1600.374390][T15702] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.388746][T14546] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.409709][T15702] CPU: 0 UID: 0 PID: 15702 Comm: syz.5.12317 Tainted: G W syzkaller #0 PREEMPT(full) [ 1600.409741][T15702] Tainted: [W]=WARN [ 1600.409794][T15702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1600.409804][T15702] Call Trace: [ 1600.409810][T15702] [ 1600.409817][T15702] __dump_stack+0x1d/0x30 [ 1600.409888][T15702] dump_stack_lvl+0x95/0xd0 [ 1600.409911][T15702] dump_stack+0x15/0x1b [ 1600.409932][T15702] should_fail_ex+0x263/0x280 [ 1600.409959][T15702] should_failslab+0x8c/0xb0 [ 1600.410046][T15702] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1600.410066][T15702] ? __alloc_skb+0x2d6/0x690 [ 1600.410129][T15702] __alloc_skb+0x2d6/0x690 [ 1600.410174][T15702] ? __alloc_skb+0x200/0x690 [ 1600.410191][T15702] _sctp_make_chunk+0x59/0x210 [ 1600.410212][T15702] sctp_make_datafrag_empty+0xaf/0x130 [ 1600.410235][T15702] sctp_datamsg_from_user+0x575/0x950 [ 1600.410309][T15702] ? __sk_mem_schedule+0x80/0xc0 [ 1600.410337][T15702] sctp_sendmsg_to_asoc+0xa7a/0xf50 [ 1600.410367][T15702] ? __lock_sock+0xdf/0x110 [ 1600.410407][T15702] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1600.410426][T15702] ? _raw_spin_unlock_bh+0x18/0x20 [ 1600.410564][T15702] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 1600.410588][T15702] sctp_sendmsg+0x13b9/0x1d60 [ 1600.410612][T15702] ? selinux_socket_sendmsg+0x192/0x1c0 [ 1600.410665][T15702] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1600.410689][T15702] ? __pfx_inet_sendmsg+0x10/0x10 [ 1600.410758][T15702] inet_sendmsg+0xc5/0xd0 [ 1600.410778][T15702] sock_write_iter+0x2c7/0x320 [ 1600.410845][T15702] ? __pfx_sock_write_iter+0x10/0x10 [ 1600.410869][T15702] vfs_write+0x5a6/0x9f0 [ 1600.410895][T15702] ksys_write+0xdc/0x1a0 [ 1600.410980][T15702] __x64_sys_write+0x40/0x50 [ 1600.411034][T15702] x64_sys_call+0x27e1/0x3020 [ 1600.411056][T15702] do_syscall_64+0x12c/0x3b0 [ 1600.411078][T15702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.411154][T15702] RIP: 0033:0x7f5490f4c819 [ 1600.411182][T15702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.411200][T15702] RSP: 002b:00007f548f986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1600.411219][T15702] RAX: ffffffffffffffda RBX: 00007f54911c6090 RCX: 00007f5490f4c819 [ 1600.411230][T15702] RDX: 000000000000ff37 RSI: 0000200000000140 RDI: 0000000000000004 [ 1600.411242][T15702] RBP: 00007f548f986090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.411252][T15702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.411263][T15702] R13: 00007f54911c6128 R14: 00007f54911c6090 R15: 00007ffddab313a8 [ 1600.411332][T15702] [ 1600.782039][T15698] FAULT_INJECTION: forcing a failure. [ 1600.782039][T15698] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1600.796189][T15698] CPU: 1 UID: 0 PID: 15698 Comm: syz.1.12316 Tainted: G W syzkaller #0 PREEMPT(full) [ 1600.796292][T15698] Tainted: [W]=WARN [ 1600.796300][T15698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1600.796311][T15698] Call Trace: [ 1600.796318][T15698] [ 1600.796325][T15698] __dump_stack+0x1d/0x30 [ 1600.796361][T15698] dump_stack_lvl+0x95/0xd0 [ 1600.796379][T15698] dump_stack+0x15/0x1b [ 1600.796397][T15698] should_fail_ex+0x263/0x280 [ 1600.796421][T15698] should_fail+0xb/0x20 [ 1600.796442][T15698] get_futex_key+0x5cd/0xb50 [ 1600.796523][T15698] futex_wake+0x84/0x380 [ 1600.796589][T15698] ? perf_lock_task_context+0x25a/0x2d0 [ 1600.796611][T15698] ? tcp_remove_empty_skb+0x49/0x3e0 [ 1600.796634][T15698] do_futex+0x323/0x380 [ 1600.796651][T15698] mm_release+0x9f/0x180 [ 1600.796722][T15698] exit_mm_release+0x25/0x30 [ 1600.796813][T15698] exit_mm+0x37/0x1a0 [ 1600.796886][T15698] do_exit+0x442/0x1530 [ 1600.796984][T15698] do_group_exit+0xfe/0x140 [ 1600.797004][T15698] ? get_signal+0xe28/0xf20 [ 1600.797023][T15698] get_signal+0xe30/0xf20 [ 1600.797105][T15698] ? __sys_sendto+0x3a2/0x490 [ 1600.797125][T15698] arch_do_signal_or_restart+0x96/0x450 [ 1600.797152][T15698] exit_to_user_mode_loop+0x6a/0x6f0 [ 1600.797172][T15698] ? __x64_sys_sendto+0x76/0x90 [ 1600.797240][T15698] do_syscall_64+0x232/0x3b0 [ 1600.797337][T15698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.797366][T15698] RIP: 0033:0x7fa8c0c8c819 [ 1600.797382][T15698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.797399][T15698] RSP: 002b:00007fa8bf6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1600.797417][T15698] RAX: fffffffffffffe00 RBX: 00007fa8c0f06090 RCX: 00007fa8c0c8c819 [ 1600.797444][T15698] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 1600.797524][T15698] RBP: 00007fa8bf6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.797534][T15698] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.797547][T15698] R13: 00007fa8c0f06128 R14: 00007fa8c0f06090 R15: 00007ffe2c01ac58 [ 1600.797564][T15698] [ 1601.022192][T15710] loop2: detected capacity change from 0 to 512 [ 1601.049481][T15710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1601.074373][T15710] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1601.142615][T15715] loop1: detected capacity change from 0 to 1024 [ 1601.161537][T15715] EXT4-fs: Ignoring removed bh option [ 1601.190840][T15715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.210642][T15715] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1601.376963][T15728] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.12323: Freeing blocks not in datazone - block = 0, count = 16 [ 1601.394418][T15729] loop5: detected capacity change from 0 to 512 [ 1601.403077][T15732] can0: slcan on ptm0. [ 1601.437746][T15729] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1601.445968][T15729] System zones: 0-2, 18-18, 34-34 [ 1601.449508][T15728] EXT4-fs (loop1): Remounting filesystem read-only [ 1601.484189][T15729] EXT4-fs (loop5): 1 orphan inode deleted [ 1601.494426][T15729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.513445][ T30] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1601.552151][ T30] EXT4-fs error (device loop5): ext4_release_dquot:7064: comm kworker/u8:1: Failed to release dquot type 1 [ 1601.568831][T15729] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1601.595286][ T30] EXT4-fs (loop5): Remounting filesystem read-only [ 1601.623140][T15729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1601.687641][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1601.747892][T15754] loop2: detected capacity change from 0 to 512 [ 1601.773947][T15754] EXT4-fs (loop2): 1 orphan inode deleted [ 1601.790515][T15754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1601.938495][T15759] hub 8-0:1.0: USB hub found [ 1601.962211][T15759] hub 8-0:1.0: 8 ports detected [ 1602.271772][T15731] can0 (unregistered): slcan off ptm0. [ 1602.513240][T15782] loop3: detected capacity change from 0 to 512 [ 1602.884678][T15807] loop3: detected capacity change from 0 to 512 [ 1602.913255][T15807] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1602.934362][T15807] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1603.060342][T15813] 9p: Unknown uid 00000000004294967295 [ 1603.096269][T15815] EXT4-fs: test_dummy_encryption option not supported [ 1603.129561][ T3392] hid_parser_main: 91 callbacks suppressed [ 1603.129581][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.144918][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.153155][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.162030][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.169627][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.177382][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.185271][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.224898][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.232602][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.240332][ T3392] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1603.249274][ T3392] hid-generic 0000:0000:0004.002D: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1603.418923][T15819] EXT4-fs (loop3): 1 orphan inode deleted [ 1603.426104][T15819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.440016][ T1353] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1603.464122][ T1353] EXT4-fs error (device loop3): ext4_release_dquot:7064: comm kworker/u8:7: Failed to release dquot type 1 [ 1603.479927][ T1353] loop3: lost filesystem error report for type 5 error -117 [ 1603.480357][T15819] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.524533][T15819] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1603.816378][T15829] EXT4-fs: test_dummy_encryption option not supported [ 1603.859833][T15827] EXT4-fs: Ignoring removed i_version option [ 1603.866986][T15827] EXT4-fs: Ignoring removed bh option [ 1603.874180][T15827] EXT4-fs (loop4): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 1603.940477][T15827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1604.270038][T15322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.295069][T15841] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1604.312446][T15841] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1604.322026][T15841] veth0_to_bridge: entered allmulticast mode [ 1604.329396][T15841] veth0_to_bridge: entered promiscuous mode [ 1604.336268][T15841] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1604.349551][T15841] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1604.356716][T15841] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1604.367134][T15844] set_capacity_and_notify: 5 callbacks suppressed [ 1604.367148][T15844] loop4: detected capacity change from 0 to 128 [ 1604.398584][ T28] audit: type=1400 audit(1776352920.920:4244): avc: denied { read } for pid=15842 comm="syz.4.12348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1604.443343][T15849] netlink: 'syz.4.12349': attribute type 12 has an invalid length. [ 1604.453588][T15849] netlink: 'syz.4.12349': attribute type 29 has an invalid length. [ 1604.462696][T15849] __nla_validate_parse: 4 callbacks suppressed [ 1604.462712][T15849] netlink: 148 bytes leftover after parsing attributes in process `syz.4.12349'. [ 1604.479355][T15849] netlink: 59 bytes leftover after parsing attributes in process `syz.4.12349'. [ 1604.511279][T15851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12350'. [ 1604.549291][T15853] loop4: detected capacity change from 0 to 512 [ 1604.558082][T15853] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1604.574923][T15853] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1604.796295][T15864] loop1: detected capacity change from 0 to 512 [ 1604.841656][T14546] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.853288][T13046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.892932][T15864] EXT4-fs (loop1): 1 orphan inode deleted [ 1604.913332][T15864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1604.992379][T15873] loop4: detected capacity change from 0 to 512 [ 1604.999353][T15873] EXT4-fs: test_dummy_encryption option not supported [ 1605.030230][T15874] loop2: detected capacity change from 0 to 512 [ 1605.133034][T15874] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1605.144563][T15874] System zones: 0-2, 18-18, 34-34 [ 1605.161035][T15874] EXT4-fs (loop2): 1 orphan inode deleted [ 1605.172254][T15874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1605.231765][T15881] hub 8-0:1.0: USB hub found [ 1605.237138][T15881] hub 8-0:1.0: 8 ports detected [ 1605.275734][T15874] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1605.358704][T15883] FAULT_INJECTION: forcing a failure. [ 1605.358704][T15883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.408475][T15883] CPU: 1 UID: 0 PID: 15883 Comm: syz.5.12359 Tainted: G W syzkaller #0 PREEMPT(full) [ 1605.408506][T15883] Tainted: [W]=WARN [ 1605.408540][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1605.408551][T15883] Call Trace: [ 1605.408557][T15883] [ 1605.408565][T15883] __dump_stack+0x1d/0x30 [ 1605.408587][T15883] dump_stack_lvl+0x95/0xd0 [ 1605.408606][T15883] dump_stack+0x15/0x1b [ 1605.408623][T15883] should_fail_ex+0x263/0x280 [ 1605.408651][T15883] should_fail+0xb/0x20 [ 1605.408675][T15883] should_fail_usercopy+0x1a/0x20 [ 1605.408753][T15883] _copy_from_user+0x1c/0xb0 [ 1605.408777][T15883] ___sys_sendmsg+0xc1/0x1e0 [ 1605.408875][T15883] __x64_sys_sendmsg+0xd4/0x160 [ 1605.408903][T15883] x64_sys_call+0x194c/0x3020 [ 1605.408927][T15883] do_syscall_64+0x12c/0x3b0 [ 1605.408948][T15883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.409014][T15883] RIP: 0033:0x7f5490f4c819 [ 1605.409031][T15883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.409095][T15883] RSP: 002b:00007f548f9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1605.409116][T15883] RAX: ffffffffffffffda RBX: 00007f54911c5fa0 RCX: 00007f5490f4c819 [ 1605.409131][T15883] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1605.409143][T15883] RBP: 00007f548f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.409157][T15883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.409223][T15883] R13: 00007f54911c6038 R14: 00007f54911c5fa0 R15: 00007ffddab313a8 [ 1605.409283][T15883] [ 1605.582042][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1605.593756][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7064: comm kworker/u8:0: Failed to release dquot type 1 [ 1605.606947][ T12] EXT4-fs (loop2): Remounting filesystem read-only [ 1605.619884][T15874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.636510][T15885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.648547][T15885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.890865][T15891] loop3: detected capacity change from 0 to 1024 [ 1605.898215][T15891] EXT4-fs: Ignoring removed i_version option [ 1605.905316][T15891] EXT4-fs: Ignoring removed bh option [ 1605.920602][T15891] EXT4-fs (loop3): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 1606.014564][T15891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1606.102727][T13046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.209657][T15902] syz_tun: entered allmulticast mode [ 1606.215821][T15901] syz_tun: left allmulticast mode [ 1606.244145][T15905] loop2: detected capacity change from 0 to 1024 [ 1606.252251][T15905] EXT4-fs: Ignoring removed bh option [ 1606.272395][T15905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1606.311006][T15905] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1606.397527][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12372'. [ 1606.409398][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12372'. [ 1606.418732][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12372'. [ 1606.433390][T15925] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.12368: Freeing blocks not in datazone - block = 0, count = 16 [ 1606.446992][T15919] loop3: detected capacity change from 0 to 2048 [ 1606.447239][T15925] EXT4-fs (loop2): Remounting filesystem read-only [ 1606.464416][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12372'. [ 1606.486559][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12372'. [ 1606.496029][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12372'. [ 1606.497012][T14546] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1606.524329][T15929] FAULT_INJECTION: forcing a failure. [ 1606.524329][T15929] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.547765][T15929] CPU: 1 UID: 0 PID: 15929 Comm: syz.2.12373 Tainted: G W syzkaller #0 PREEMPT(full) [ 1606.547794][T15929] Tainted: [W]=WARN [ 1606.547866][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1606.547878][T15929] Call Trace: [ 1606.547890][T15929] [ 1606.547898][T15929] __dump_stack+0x1d/0x30 [ 1606.547999][T15929] dump_stack_lvl+0x95/0xd0 [ 1606.548022][T15929] dump_stack+0x15/0x1b [ 1606.548040][T15929] should_fail_ex+0x263/0x280 [ 1606.548064][T15929] should_failslab+0x8c/0xb0 [ 1606.548151][T15929] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1606.548197][T15929] ? __alloc_skb+0x2d6/0x690 [ 1606.548292][T15929] __alloc_skb+0x2d6/0x690 [ 1606.548314][T15929] ? __alloc_skb+0x200/0x690 [ 1606.548353][T15929] netlink_alloc_large_skb+0xbf/0xf0 [ 1606.548428][T15929] netlink_sendmsg+0x40c/0x6f0 [ 1606.548455][T15929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1606.548548][T15929] ____sys_sendmsg+0x563/0x5b0 [ 1606.548577][T15929] ___sys_sendmsg+0x195/0x1e0 [ 1606.548627][T15929] __x64_sys_sendmsg+0xd4/0x160 [ 1606.548668][T15929] x64_sys_call+0x194c/0x3020 [ 1606.548736][T15929] do_syscall_64+0x12c/0x3b0 [ 1606.548756][T15929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.548853][T15929] RIP: 0033:0x7f21c32fc819 [ 1606.548869][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.548887][T15929] RSP: 002b:00007f21c1d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1606.548906][T15929] RAX: ffffffffffffffda RBX: 00007f21c3575fa0 RCX: 00007f21c32fc819 [ 1606.548995][T15929] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 1606.549008][T15929] RBP: 00007f21c1d57090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.549021][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.549034][T15929] R13: 00007f21c3576038 R14: 00007f21c3575fa0 R15: 00007ffddf003088 [ 1606.549052][T15929] [ 1606.559868][T15919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1606.586381][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12372'. [ 1606.606190][T15934] syz_tun: entered allmulticast mode [ 1606.725649][T15919] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1606.846198][T15937] loop5: detected capacity change from 0 to 1024 [ 1606.848518][T15919] EXT4-fs (loop3): shut down requested (0) [ 1606.853485][T15937] EXT4-fs: Ignoring removed i_version option [ 1606.869334][T15937] EXT4-fs: Ignoring removed bh option [ 1606.881643][T15937] EXT4-fs (loop5): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 1606.945311][T15937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1606.995148][T13211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.262511][T15947] loop5: detected capacity change from 0 to 1024 [ 1607.520405][T15947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1607.529808][T15947] System zones: 0-1, 3-36 [ 1607.541457][T15947] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.12377: bad orphan inode 134217728 [ 1607.553135][T15947] loop5: lost filesystem error report for type 5 error -117 [ 1607.559943][T15947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1607.607505][T15935] syz_tun: left allmulticast mode [ 1607.799448][T15954] EXT4-fs: test_dummy_encryption option not supported [ 1608.064091][T15956] tmpfs: Unknown parameter 'nr_i' [ 1608.153134][T15958] hub 8-0:1.0: USB hub found [ 1608.163980][ T4673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1608.188903][T15958] hub 8-0:1.0: 8 ports detected [ 1608.226898][T15961] syz_tun: entered allmulticast mode [ 1608.239585][T15961] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1608.248671][T15961] mroute: pending queue full, dropping entries [ 1608.273594][T15960] syz_tun: left allmulticast mode [ 1608.534348][T15970] EXT4-fs: test_dummy_encryption option not supported [ 1608.669544][T13211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1608.734664][T15975] EXT4-fs: Ignoring removed i_version option [ 1608.741211][T15975] EXT4-fs: Ignoring removed bh option [ 1608.919164][T15975] EXT4-fs (loop5): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 1609.023895][T15978] EXT4-fs (loop4): 1 orphan inode deleted [ 1609.030544][T15978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1609.044013][T15978] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1609.061780][T20572] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1609.106166][T20572] EXT4-fs error (device loop4): ext4_release_dquot:7064: comm kworker/u8:5: Failed to release dquot type 1 [ 1610.016243][T15975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1611.364882][T15322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.541970][T16007] set_capacity_and_notify: 4 callbacks suppressed [ 1613.541994][T16007] loop6: detected capacity change from 0 to 7 [ 1613.589822][T16010] syz_tun: entered allmulticast mode [ 1613.599263][T13046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.612446][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.621745][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.634238][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.643870][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.653550][T16007] loop6: unable to read partition table [ 1613.670003][T13211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.676270][T16007] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 1613.682904][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.682946][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.683451][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.683501][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.683716][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.683739][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.683872][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.683901][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.684022][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.684046][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.712809][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.712839][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.712975][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.713000][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.713130][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.713152][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1613.718158][T16014] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1613.892074][T16016] loop3: detected capacity change from 0 to 1024 [ 1613.918710][T16016] EXT4-fs: test_dummy_encryption option not supported [ 1613.977680][T16021] loop4: detected capacity change from 0 to 512 [ 1613.990155][T16022] __nla_validate_parse: 11 callbacks suppressed [ 1613.990170][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12397'. [ 1614.006882][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12397'. [ 1614.018193][T16021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1614.033655][T16021] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1614.118051][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12397'. [ 1614.342443][T16026] loop3: detected capacity change from 0 to 512 [ 1614.402051][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12397'. [ 1614.420777][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12397'. [ 1614.441327][T16026] EXT4-fs (loop3): 1 orphan inode deleted [ 1614.447950][T16026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1614.461355][T30879] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1614.475079][T16026] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1614.494209][T16026] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1614.520888][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12397'. [ 1614.539065][T30879] EXT4-fs error (device loop3): ext4_release_dquot:7064: comm kworker/u8:10: Failed to release dquot type 1 [ 1614.578308][T16032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12401'. [ 1614.630115][T16032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12401'. [ 1614.639913][T16032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12401'. [ 1614.678661][T16032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12401'. [ 1615.169899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1615.182475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1615.194882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1615.207747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1615.220247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1615.232557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1615.245162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1615.257813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1619.023406][T13046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.059337][ C0] net_ratelimit: 19175 callbacks suppressed [ 1619.059354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1619.059682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1619.065441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1619.078311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1619.090320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1619.103105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1619.115577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1619.129362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1619.140299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1619.152681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1623.418681][T16057] lo: Caught tx_queue_len zero misconfig [ 1623.837055][ T28] audit: type=1400 audit(1776352939.084:4245): avc: denied { setopt } for pid=16053 comm="syz.2.12406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1624.200825][ T28] audit: type=1400 audit(1776352939.449:4246): avc: denied { read } for pid=16053 comm="syz.2.12406" path="socket:[171441]" dev="sockfs" ino=171441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1624.413032][ C0] net_ratelimit: 55097 callbacks suppressed [ 1624.413050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1624.413123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1624.419226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1624.431749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1624.443723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1624.456144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1624.467997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1624.480510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1624.492692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1624.505017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.098873][T16063] loop5: detected capacity change from 0 to 512 [ 1626.604602][T16073] syz_tun: entered allmulticast mode [ 1627.272993][T16080] xt_TCPMSS: Only works on TCP SYN packets [ 1627.326570][T16063] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1628.073733][T16063] System zones: 0-2, 18-18, 34-34 [ 1628.184868][T16063] EXT4-fs: error -4 creating inode table initialization thread [ 1628.300819][T16084] __nla_validate_parse: 8 callbacks suppressed [ 1628.300836][T16084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12410'. [ 1628.427515][T16063] EXT4-fs (loop5): mount failed [ 1629.034474][T16089] loop2: detected capacity change from 0 to 1024 [ 1629.315257][T16089] EXT4-fs: test_dummy_encryption option not supported [ 1629.766796][ C0] net_ratelimit: 57269 callbacks suppressed [ 1629.766814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1629.766897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1629.772997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1629.785323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1629.797231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1629.809661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1629.821996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1629.834991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1629.846979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1629.859264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1632.041540][T16094] loop4: detected capacity change from 0 to 512 [ 1633.057549][T16094] EXT4-fs (loop4): 1 orphan inode deleted [ 1633.064276][T16094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1635.120489][ C0] net_ratelimit: 55015 callbacks suppressed [ 1635.120507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1635.120540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1635.126782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1635.139564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1635.152505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1635.165571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1635.177790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1635.190019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1635.202067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1635.214393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1635.320869][T15322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1638.667658][T16001] hid_parser_main: 91 callbacks suppressed [ 1638.667687][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1638.953053][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1639.093005][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1639.164780][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1639.370696][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1639.426277][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1639.572216][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1639.652521][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1639.742034][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1639.836881][T16001] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0 [ 1640.057746][T16001] hid-generic 0000:0000:0004.002E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1640.474224][ C0] net_ratelimit: 59426 callbacks suppressed [ 1640.474243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1640.474329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.480837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1640.493814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.506340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1640.519288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1640.532283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1640.545320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.557819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1640.570791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1640.904097][T16125] fido_id[16125]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1641.431773][T16128] loop1: detected capacity change from 0 to 512 [ 1641.592374][T16128] EXT4-fs: test_dummy_encryption option not supported [ 1642.038455][T16128] loop1: detected capacity change from 0 to 512 [ 1642.868859][T16128] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1642.998911][T16128] EXT4-fs (loop1): 1 truncate cleaned up [ 1643.116291][T16128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.676041][T16133] ext4: Unknown parameter 'syzkaller' [ 1644.355715][T16152] loop4: detected capacity change from 0 to 512 [ 1644.702659][T16146] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1645.640454][T16137] slcan: can't register candev [ 1645.827873][ C0] net_ratelimit: 56016 callbacks suppressed [ 1645.827890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1645.828080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1645.834121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1645.846803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.858661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1645.871218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.883643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1645.896571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1645.908900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1645.921657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.041657][ C0] ================================================================== [ 1646.050036][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 1646.057640][ C0] [ 1646.060224][ C0] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 1: [ 1646.068605][ C0] wq_worker_tick+0x64/0x240 [ 1646.073752][ C0] sched_tick+0xbc/0x1f0 [ 1646.078400][ C0] update_process_times+0x15e/0x190 [ 1646.084228][ C0] tick_nohz_handler+0x275/0x3d0 [ 1646.089621][ C0] __hrtimer_run_queues+0x276/0x4f0 [ 1646.095143][ C0] hrtimer_interrupt+0x261/0x850 [ 1646.100192][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 1646.106455][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 1646.112296][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1646.118395][ C0] __find_rr_leaf+0x68/0x500 [ 1646.123083][ C0] fib6_table_lookup+0x1db/0x610 [ 1646.128661][ C0] ip6_pol_route+0xbf/0xeb0 [ 1646.133350][ C0] ip6_pol_route_input+0x42/0x60 [ 1646.138827][ C0] fib6_rule_lookup+0x366/0x4c0 [ 1646.143941][ C0] ip6_route_input+0x512/0x620 [ 1646.148899][ C0] ip6_rcv_finish+0x1be/0x330 [ 1646.153691][ C0] ipv6_rcv+0x72/0x170 [ 1646.157960][ C0] process_backlog+0x2a5/0x670 [ 1646.162722][ C0] __napi_poll+0x61/0x300 [ 1646.167331][ C0] net_rx_action+0x452/0x930 [ 1646.172097][ C0] handle_softirqs+0xb9/0x280 [ 1646.176984][ C0] do_softirq+0x45/0x60 [ 1646.181410][ C0] __local_bh_enable_ip+0x70/0x80 [ 1646.186612][ C0] __alloc_skb+0x658/0x690 [ 1646.191130][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 1646.196866][ C0] process_scheduled_works+0x4f0/0x9c0 [ 1646.202510][ C0] worker_thread+0x58a/0x780 [ 1646.207201][ C0] kthread+0x22a/0x280 [ 1646.211365][ C0] ret_from_fork+0x146/0x330 [ 1646.215995][ C0] ret_from_fork_asm+0x1a/0x30 [ 1646.221203][ C0] [ 1646.223610][ C0] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 0: [ 1646.231769][ C0] wq_worker_tick+0x64/0x240 [ 1646.236463][ C0] sched_tick+0xbc/0x1f0 [ 1646.240921][ C0] update_process_times+0x15e/0x190 [ 1646.246316][ C0] tick_nohz_handler+0x275/0x3d0 [ 1646.251355][ C0] __hrtimer_run_queues+0x276/0x4f0 [ 1646.256910][ C0] hrtimer_interrupt+0x261/0x850 [ 1646.262416][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 1646.268411][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 1646.274144][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1646.280306][ C0] __sanitizer_cov_trace_switch+0x13/0x130 [ 1646.286230][ C0] netlbl_skbuff_getattr+0x25/0xd0 [ 1646.291528][ C0] selinux_netlbl_skbuff_getsid+0x6d/0x320 [ 1646.297521][ C0] selinux_ip_postroute+0x603/0xba0 [ 1646.302913][ C0] nf_hook_slow+0x78/0x180 [ 1646.307505][ C0] br_nf_post_routing+0x890/0x990 [ 1646.312699][ C0] nf_hook_slow+0x78/0x180 [ 1646.317299][ C0] br_forward_finish+0x148/0x190 [ 1646.322331][ C0] br_nf_forward_finish+0x6ff/0x780 [ 1646.327711][ C0] br_nf_forward_ip+0x5fe/0x620 [ 1646.332667][ C0] br_nf_forward+0x5a2/0xeb0 [ 1646.338172][ C0] nf_hook_slow+0x78/0x180 [ 1646.342954][ C0] __br_forward+0x282/0x360 [ 1646.347726][ C0] br_flood+0x451/0x6d0 [ 1646.352191][ C0] br_handle_frame_finish+0xe04/0x1080 [ 1646.357923][ C0] br_nf_hook_thresh+0x233/0x270 [ 1646.363068][ C0] br_nf_pre_routing_finish_ipv6+0x51d/0x540 [ 1646.369326][ C0] br_nf_pre_routing_ipv6+0x1fa/0x2e0 [ 1646.374966][ C0] br_nf_pre_routing+0x56a/0xbe0 [ 1646.380089][ C0] br_handle_frame+0x85f/0xa60 [ 1646.384978][ C0] __netif_receive_skb_core+0x5b1/0x1950 [ 1646.390804][ C0] process_backlog+0x25b/0x670 [ 1646.395843][ C0] __napi_poll+0x61/0x300 [ 1646.400448][ C0] net_rx_action+0x452/0x930 [ 1646.405300][ C0] handle_softirqs+0xb9/0x280 [ 1646.410103][ C0] do_softirq+0x45/0x60 [ 1646.414359][ C0] __local_bh_enable_ip+0x70/0x80 [ 1646.419562][ C0] __alloc_skb+0x2b6/0x690 [ 1646.424069][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 1646.430070][ C0] process_scheduled_works+0x4f0/0x9c0 [ 1646.435892][ C0] worker_thread+0x58a/0x780 [ 1646.440764][ C0] kthread+0x22a/0x280 [ 1646.445115][ C0] ret_from_fork+0x146/0x330 [ 1646.450143][ C0] ret_from_fork_asm+0x1a/0x30 [ 1646.455107][ C0] [ 1646.457518][ C0] value changed: 0x0000000000b34a70 -> 0x0000000000b37180 [ 1646.465110][ C0] [ 1646.467444][ C0] Reported by Kernel Concurrency Sanitizer on: [ 1646.473957][ C0] CPU: 0 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 1646.485295][ C0] Tainted: [W]=WARN [ 1646.489267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1646.499759][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1646.506631][ C0] ================================================================== [ 1651.181657][ C1] net_ratelimit: 54194 callbacks suppressed [ 1651.181657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1651.181674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1651.188092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1651.201074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.213220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1651.225293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.237677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1651.250188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1651.262186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:83:29:31:5a, vlan:0) [ 1651.274587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)