last executing test programs: 1m27.276788891s ago: executing program 2 (id=1078): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x24}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x48800) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 1m27.224230814s ago: executing program 2 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x844) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000f5ff0000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000000000000000000f3ffff0014000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) 1m27.160209388s ago: executing program 2 (id=1084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xb}]}}]}, 0x4c}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb000000000000000000000000000f00", 0x26}, {&(0x7f0000000480)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 1m26.820555747s ago: executing program 2 (id=1089): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100003052dbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001400128009000100626f6e640000000004000280080028008e6312"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc0b0) socket$inet(0x2, 0x2, 0x9) 1m25.88955314s ago: executing program 2 (id=1115): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x32, @remote, 0x4e21, 0x1, 'none\x00', 0x0, 0x4, 0x39}, 0x2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0x10fff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r4, 0x0, 0x0, 0xe7c) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) pwrite64(r0, &(0x7f0000000000)="176ec913d926f930f11625b681512aaf24d0e3ae0cc1cd3c957fb97af61dd071451eb7f64760fafd0dedee6b5f0ac3b7689e777344e058d8809bfec9239bee4d90fc07d163e8f4058fb630929b8d69b3309c7c6e04850b58c8f7035d2996824291d2875e4716559b2eaf03ad64764e8e9d98e51e8b7a21b7c1c81be8a0c358174b01d4789727c21d15b2177dea02797e6e481a1d704ddde05d8bfb8ab190fbfb698cb135ab2f8cdfb7672f2926cdd9a9cccb41a129f788", 0xb7, 0xa) utimensat(r0, 0x0, 0x0, 0x0) 1m25.710474851s ago: executing program 2 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000105000300010000002800018007000500637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m9.531829971s ago: executing program 32 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000105000300010000002800018007000500637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 46.532581794s ago: executing program 5 (id=1864): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 45.627890076s ago: executing program 5 (id=1876): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) open(&(0x7f00000000c0)='./file0\x00', 0x440001, 0x45) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pim6reg\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pim6reg\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000080)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 45.526256641s ago: executing program 5 (id=1877): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = eventfd2(0xffffffff, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) write$eventfd(r3, &(0x7f0000000080)=0xffffffff00000000, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) read$eventfd(r3, &(0x7f0000000040), 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='transfd,rfvno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',msize=0x0000000000001000,k']) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xe01, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000002c0), 0x0}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000100005000004855a9ffbf21304000000", @ANYRES32=r10, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e004400028006000200010000000800010001000000080003000300000008000700050000000800010010"], 0x84}}, 0x20008040) 45.320059974s ago: executing program 5 (id=1883): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2, 0x25, 0x8, @void}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000bb719b98fb73e53a0000000600"}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000080)=0x20001, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = syz_open_pts(r3, 0x0) ioctl$TIOCSBRK(r5, 0x5427) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x94022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b]}}]}) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x100, 0x0, 0x25dfdbfd, {{@in6=@mcast2, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x53}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r7 = socket(0x2a, 0x2, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x2, 0x0) splice(r9, 0x0, r7, 0x0, 0x1c, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 44.968335884s ago: executing program 5 (id=1891): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000001a80000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 44.677252941s ago: executing program 5 (id=1898): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f00000000c0)='./mnt\x00', 0x50840, &(0x7f0000000100)={[], [{@appraise_type}]}, 0x1, 0x253, &(0x7f00000017c0)="$eJzs3T1o9HQcB/Bvcnc+9nkOedRFEF9ARHwK5XETXB4XhYKUIiKoUBFxUVqhtri1Ti4OOqt0ciniZnWULsVFEZyqdqiLoMXB4qDDyV1a6Mv5Uq9epPl8IE3SS/JLSL7/ZLj8L0BjXU1yI0kryWSSTpLi6AL3VsPVg9m1ia25pNd78udisFw1Xzlc70qS1SQPJ9ksi7zcTpY3nt39dfvxB95a6tz/wcYzE2M9yAN7uztP7L8/8+bH0w8tf/n1jzNFbqR77LjOXzHkf+0iue2/KPY/UbTr3gP+idnXP/qmn/vbk9w3yH8nZaqT9/biTZudXHvvz9Z956ev7hznvgLnr9fr9O+Bqz2gccok3RTlVJJquiynpqpn+G9bl8tXFhZfm3xpYWn+xbpbKuC8dJOdxz699MmVE/n/oVXlH7i4+vl/anb9u/70fqvuvQHG4q5q1M//5PMrD0b+oXHkH5pL/qG55B+aq8p/5B8a6K/v/8O+tQpcFJ7/obnkHxpiyPtY8g/N1c01+YeGOnr/BwCapXep7jeQgbrU3f4AAAAAAAAAAAAAAAAAAACnrU1szR0O46r5+bvJ3qNV/4Sn67cGv0ec3Dz4e/mX4lg3hsXwbg3P5Ll7RtzAiD6s+e3rW76vt/4Xd9dbf2U+WX0jyfV2+/T1Vxxcf//erX/zeeeFEQuc0cle/R95erz1T/p9vd7609vJZ/325/qw9qfMHYPx8Pan2z9/I9Z/9bcRNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDY/BEAAP//QYps9w==") (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000640), 0x1, 0x0) (async) pwrite64(r1, &(0x7f0000000ac0)="e62eb166972ce298f4681ef5c755f60473b17b78", 0x14, 0xc47) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0xa0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x141ed558, 0x4, @perf_bp={0x0}, 0x0, 0x200000000000000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 44.617030814s ago: executing program 33 (id=1898): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f00000000c0)='./mnt\x00', 0x50840, &(0x7f0000000100)={[], [{@appraise_type}]}, 0x1, 0x253, &(0x7f00000017c0)="$eJzs3T1o9HQcB/Bvcnc+9nkOedRFEF9ARHwK5XETXB4XhYKUIiKoUBFxUVqhtri1Ti4OOqt0ciniZnWULsVFEZyqdqiLoMXB4qDDyV1a6Mv5Uq9epPl8IE3SS/JLSL7/ZLj8L0BjXU1yI0kryWSSTpLi6AL3VsPVg9m1ia25pNd78udisFw1Xzlc70qS1SQPJ9ksi7zcTpY3nt39dfvxB95a6tz/wcYzE2M9yAN7uztP7L8/8+bH0w8tf/n1jzNFbqR77LjOXzHkf+0iue2/KPY/UbTr3gP+idnXP/qmn/vbk9w3yH8nZaqT9/biTZudXHvvz9Z956ev7hznvgLnr9fr9O+Bqz2gccok3RTlVJJquiynpqpn+G9bl8tXFhZfm3xpYWn+xbpbKuC8dJOdxz699MmVE/n/oVXlH7i4+vl/anb9u/70fqvuvQHG4q5q1M//5PMrD0b+oXHkH5pL/qG55B+aq8p/5B8a6K/v/8O+tQpcFJ7/obnkHxpiyPtY8g/N1c01+YeGOnr/BwCapXep7jeQgbrU3f4AAAAAAAAAAAAAAAAAAACnrU1szR0O46r5+bvJ3qNV/4Sn67cGv0ec3Dz4e/mX4lg3hsXwbg3P5Ll7RtzAiD6s+e3rW76vt/4Xd9dbf2U+WX0jyfV2+/T1Vxxcf//erX/zeeeFEQuc0cle/R95erz1T/p9vd7609vJZ/325/qw9qfMHYPx8Pan2z9/I9Z/9bcRNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDY/BEAAP//QYps9w==") (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000640), 0x1, 0x0) (async) pwrite64(r1, &(0x7f0000000ac0)="e62eb166972ce298f4681ef5c755f60473b17b78", 0x14, 0xc47) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0xa0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x141ed558, 0x4, @perf_bp={0x0}, 0x0, 0x200000000000000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 37.947343838s ago: executing program 3 (id=2051): r0 = socket(0x2b, 0x80801, 0x1) getpeername$qrtr(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x6, 0x7, 0x19, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@multicast1, 0x27, 0x12}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd27, 0x3503}, @sadb_sa={0x2, 0x1, 0x4d2, 0xd, 0x43, 0x6e, 0x4, 0x80000000}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb2, 0xe6, {0x6, 0x2b, 0x1, 0x1, 0x0, 0x3ff, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@loopback}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0xc8}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x16, 0x0, 0x4, 0x800001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) socket(0x2b, 0x80801, 0x1) (async) getpeername$qrtr(r0, 0x0, 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x6, 0x7, 0x19, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@multicast1, 0x27, 0x12}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd27, 0x3503}, @sadb_sa={0x2, 0x1, 0x4d2, 0xd, 0x43, 0x6e, 0x4, 0x80000000}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb2, 0xe6, {0x6, 0x2b, 0x1, 0x1, 0x0, 0x3ff, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@loopback}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0xc8}}, 0x58) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x16, 0x0, 0x4, 0x800001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (async) 37.869453792s ago: executing program 3 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) sched_setscheduler(r1, 0x1, &(0x7f00000004c0)=0x3) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x1) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10401c23}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}]}, 0x24}}, 0x10) r4 = socket(0x200000000000011, 0x2, 0xd) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8005}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000240)={0x5, 0x1, 0x5, 0xfffb}) 37.768412247s ago: executing program 3 (id=2057): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000, 0x4) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a"], 0xfc}}, 0x0) 36.868350259s ago: executing program 3 (id=2087): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") (async) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x119) (async) r1 = socket$kcm(0x10, 0x5, 0x4) close(r1) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000200)="5c00000010006bcc9e3be35c6e17aa31076b856c150000007ea20864160af3650c001ac008000a00040008001e618294ff0051f60284c9f4d4938037e786a6d0001000000e4509c5bb0100000053c7e834371ccdd11774738d52317c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) (async) r2 = syz_io_uring_setup(0xd89, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x0, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r8, &(0x7f00000001c0)='m', 0x1, 0x1}]) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x32, 0x2004, @fd=r5, 0x3, 0x2, 0x7, 0x9, 0x0, {0x3, r6}}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r10) (async) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r11, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x4002) pread64(r0, &(0x7f0000000180)=""/222, 0xde, 0x80) (async) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f00000001c0)) 36.645120892s ago: executing program 3 (id=2094): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00", @ANYRES32, @ANYBLOB="00000000000000001c"], 0x44}}, 0x9000000) 36.3398569s ago: executing program 3 (id=2100): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x80000, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) 36.308359832s ago: executing program 34 (id=2100): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x80000, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) 8.707126339s ago: executing program 0 (id=2691): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100050000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 6.536469924s ago: executing program 0 (id=2715): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000009008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) 6.108909018s ago: executing program 0 (id=2722): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x40, 0x12, 0x105, 0x4, 0x25dfdbfe, "", [@address_filter={0x28, 0x1a, {@in=@remote, @in=@private=0xa010100, 0x2, 0x6, 0x10}}, @proto={0x5, 0x19, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) (fail_nth: 7) 6.016291174s ago: executing program 0 (id=2726): r0 = syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @ssrr={0x89, 0xb, 0x77, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000079102804000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x7ffffffe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000600)={0x0, 0x7a120, 0x60, {0x3, 0x103}, 0x0, 0x9}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@resgid}, {@grpid}, {@noblock_validity}]}, 0x8c, 0x497, &(0x7f0000001540)="$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") fallocate(r2, 0x3, 0x4100, 0x8000c62) close(r0) 4.631593374s ago: executing program 0 (id=2743): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000001085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x94) 3.346745047s ago: executing program 6 (id=2764): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x54}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x242, 0x145) write$selinux_user(r3, &(0x7f0000001180)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x25) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000400202010100000000000000000a000007300002802c00018014000300000000000000000000000000000000011400040000000000000000000000ffffac1414aa"], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, &(0x7f00000021c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) fremovexattr(r6, &(0x7f0000000740)=@known='system.posix_acl_default\x00') socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x805, 0x0) getsockopt(r7, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setregid(0xee01, 0xffffffffffffffff) get_robust_list(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x1, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x20000000) r8 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) ptrace$PTRACE_SETSIGMASK(0x420b, r8, 0x8, &(0x7f0000000100)={[0x6]}) 3.012025017s ago: executing program 7 (id=2772): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x48800) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) (fail_nth: 9) 2.949402471s ago: executing program 6 (id=2773): io_uring_setup(0x7, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 64) r1 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) (async) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) (async, rerun: 32) close(0x3) (rerun: 32) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2da, &(0x7f00000007c0)="$eJzs3U9rJEUUAPDX8y8TRWYQL4pggx48hY0evewoKwg5CePFi4ObBZkJC1kYcEXjetkvoEcR/BR79ebZbyDoUfCWPURaero7Mz07M46uyULy+13yUlWv+lUVdE5d+eTVo/Htu0k8OP01ut0kGu24GY+T6EcjKl/HaQAAV8fjLIs/s4hoF78nW2e2GhdXFQBwkYq//4VnXQsAcDl+//HtLwcHB7c+TNNuvNx7OB0mEXH0cDos+gd34rOYxGHciF6cRWTnivj9Dw5uRSvN9eONo5PpcFqbf/BH7M7y96MX/dX5+2mhzB9G5D/b8VykMbjTrqbqxUur899akR/DTrz5+kL9e9GLXz6NuzGJ25HnzvO/2k/T97LvTr/4OH9Mnp80YrgzG1fajcial3YoAAAAAAAAAAAAAAAAAAAAAABceXtpmhTX98zu74mIb8qe5tmsfy+t9Ov38xSjkmgVQXE/UBblFT0nWXxf3a9zI03TrLxYeJ7fildaVTIAAAAAAAAAAAAAAAAAAABcb/c+vz8eTSaHx08dNMejSfmR//ln/dWY5r+c8OZCy2txfzxqLk24MHhnfddysHjbQF7rxsHRasX/sC3/HMRPu3k9a8b8UNZbtjS3W2ke7MwP96MyvTqY/1rqo06RX+t68d3zCtNycLXJ41FSPGt9zd2q69FC1/IjNgVJUmuZne3k8DibbdRZVj/Tbm0z512ddY/4NslXsdX+5EfTeX5l119Zlm23nHd+K86obElmV2xsdzrtMli5wDzoPnnuP6+fcO0ro/lULxwAAAAAAAAAAAAAAAAAAGCt+ofTSx5sTG1cWFEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMnm//+/CroRUW95Ijgpk8uWFzYM7sTxvWe8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6BvwMAAP//NNg/PA==") 2.691896595s ago: executing program 7 (id=2776): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x54, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22000811}, 0x44004080) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xe0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0xc0, 0xe0, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x3}, {{0x8000000000007}, 0x6}, {{0x4}, 0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}, 0xff}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x1, 0x4, 0x6], 0x2, 0x3}, {0x0, [0x4, 0x1, 0x3, 0x3, 0x0, 0x4], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffd, 0x3, 0x5, 0xfffffff8}, @rand_addr=0x64010100, @multicast2, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0xc}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$inet6(0xa, 0x3, 0x7b) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff6}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.500328936s ago: executing program 0 (id=2780): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0xc044}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0xc00000000000000}, 0x0) 2.499044746s ago: executing program 35 (id=2780): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0xc044}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0xc00000000000000}, 0x0) 2.483930937s ago: executing program 7 (id=2784): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 2.404350471s ago: executing program 4 (id=2786): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100400000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.832172934s ago: executing program 6 (id=2789): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) truncate(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x5) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000580)={'veth1_macvtap\x00', &(0x7f0000000540)=@ethtool_eee={0x4b, 0x1, 0x9, 0x3, 0x101, 0x8, 0xc7, 0x9e, [0x7fffffff, 0xeea]}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setpriority(0x2, 0x0, 0x9) unlinkat(0xffffffffffffffff, 0x0, 0x200) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800800010067747000140002800800030001"], 0x40}, 0x1, 0x0, 0x0, 0x20048010}, 0x20000000) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r9, &(0x7f0000000440)=@other={'unlock', ' ', 'io+mem'}, 0xe) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000906010200000000e1bb0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.650718695s ago: executing program 1 (id=2791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {0x6000000}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 1.57289368s ago: executing program 7 (id=2792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001105240300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.529928462s ago: executing program 7 (id=2793): syz_io_uring_setup(0x892, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.436323138s ago: executing program 1 (id=2794): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x24, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x50}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 1.179096982s ago: executing program 1 (id=2795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000080)="d2df03c4ff4f84e5fbd9cb4608008cdd8af46937", 0x0, 0x95b0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 997.601292ms ago: executing program 1 (id=2796): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r3, 0x0, 0x0, 0xe7c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x3, 0x0}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, r6, 0x1, 0x70bd26, 0xfffffffe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x0, 0xffffffffffffffff}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xd, &(0x7f00000005c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000640)='GPL\x00', 0x0, 0x50, &(0x7f0000000680)=""/80, 0x41100, 0x1a, '\x00', r0, @fallback=0x17, r3, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x4, 0x8, 0x5}, 0x10, r4, r7, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x40000007, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7ffffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x7, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x9, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x10, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r9, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) r10 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f00000001c0)=[{&(0x7f0000000500)="580000001400192340834b80043f679a10ff3d425f85b4141691c148c61bcdf1e4220000000001008048244a48fb6cfbe939ca28f23457e792945f64009400050028925aaa000000c600480000000000feff2c707f8f00ff", 0x58}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x2, 0x81, "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", 0xa0, 0x6, 0xff, 0x3, 0x1c, 0x7, 0xf}, r12}}, 0x120) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10}, 0x94) 903.041738ms ago: executing program 4 (id=2797): unshare(0x24060400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x32, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001105000300010024002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 708.378709ms ago: executing program 6 (id=2798): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 649.539173ms ago: executing program 4 (id=2799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x3, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0xe, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 520.56162ms ago: executing program 1 (id=2800): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a002600ad6e911b51818462", 0x26}, {&(0x7f0000000280)="0499", 0x2}], 0x2}, 0x0) 513.564371ms ago: executing program 7 (id=2801): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 439.085584ms ago: executing program 4 (id=2802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x10, 0x12, 0x105, 0x4, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) (fail_nth: 5) 408.341556ms ago: executing program 6 (id=2803): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000500)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000200000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x68}, 0x94) 22.270379ms ago: executing program 6 (id=2804): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x200008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x479, &(0x7f0000000a00)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 15.517639ms ago: executing program 4 (id=2805): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00000000000000000500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) 15.369429ms ago: executing program 4 (id=2806): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0012000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) 0s ago: executing program 1 (id=2807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'perf_event'}]}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000c08000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020ff000000000000000000000000188"], 0xffe) kernel console output (not intermixed with test programs): e code=0x7ffc0000 [ 159.964785][ T29] audit: type=1326 audit(1769754349.745:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729852aeb9 code=0x7ffc0000 [ 160.038083][ T29] audit: type=1326 audit(1769754349.829:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729852aeb9 code=0x7ffc0000 [ 160.061758][ T29] audit: type=1326 audit(1769754349.829:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729852aeb9 code=0x7ffc0000 [ 160.085349][ T29] audit: type=1326 audit(1769754349.839:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f729852aeb9 code=0x7ffc0000 [ 160.108908][ T29] audit: type=1326 audit(1769754349.839:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729852aeb9 code=0x7ffc0000 [ 160.132549][ T29] audit: type=1326 audit(1769754349.839:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729852aeb9 code=0x7ffc0000 [ 160.156184][ T29] audit: type=1326 audit(1769754349.839:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729852aeb9 code=0x7ffc0000 [ 160.204084][T10383] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2262: bad orphan inode 15 [ 160.217218][T10383] ext4_test_bit(bit=14, block=5) = 0 [ 160.249914][T10388] set_capacity_and_notify: 11 callbacks suppressed [ 160.249933][T10388] loop6: detected capacity change from 0 to 512 [ 160.298943][T10388] EXT4-fs: inline encryption not supported [ 160.304828][T10388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.340457][T10397] xt_hashlimit: size too large, truncated to 1048576 [ 160.342711][T10405] netlink: 'syz.4.2267': attribute type 21 has an invalid length. [ 160.355506][T10405] netlink: 'syz.4.2267': attribute type 1 has an invalid length. [ 160.430263][T10409] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 160.466383][T10411] loop4: detected capacity change from 0 to 2048 [ 160.473375][T10388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.481887][T10388] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.570750][T10388] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2265: Failed to acquire dquot type 1 [ 160.596879][T10388] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 160.613116][T10388] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2265: corrupted inode contents [ 160.635409][T10388] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.2265: mark_inode_dirty error [ 160.659719][T10388] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2265: corrupted inode contents [ 160.672491][T10388] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.2265: mark_inode_dirty error [ 160.686351][T10388] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2265: corrupted inode contents [ 160.734754][T10388] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 160.762784][T10388] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2265: corrupted inode contents [ 160.828077][T10388] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.2265: mark_inode_dirty error [ 160.856376][T10454] erspan0: entered promiscuous mode [ 160.863506][T10388] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 160.880258][T10388] EXT4-fs (loop6): 1 truncate cleaned up [ 160.888243][T10455] IPv6: Can't replace route, no match found [ 161.035771][T10482] FAULT_INJECTION: forcing a failure. [ 161.035771][T10482] name failslab, interval 1, probability 0, space 0, times 0 [ 161.048662][T10482] CPU: 0 UID: 0 PID: 10482 Comm: syz.6.2291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.048783][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.048796][T10482] Call Trace: [ 161.048802][T10482] [ 161.048809][T10482] __dump_stack+0x1d/0x30 [ 161.048835][T10482] dump_stack_lvl+0x95/0xd0 [ 161.048862][T10482] dump_stack+0x15/0x1b [ 161.048961][T10482] should_fail_ex+0x263/0x280 [ 161.049102][T10482] should_failslab+0x8c/0xb0 [ 161.049127][T10482] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 161.049158][T10482] ? alloc_workqueue_noprof+0x62b/0x1710 [ 161.049259][T10482] alloc_workqueue_noprof+0x62b/0x1710 [ 161.049353][T10482] bond_init+0x94/0x2a0 [ 161.049443][T10482] register_netdevice+0x23e/0x1000 [ 161.049536][T10482] bond_newlink+0x2f/0xb0 [ 161.049561][T10482] ? __pfx_bond_newlink+0x10/0x10 [ 161.049590][T10482] rtnl_newlink_create+0x1e4/0x650 [ 161.049626][T10482] ? security_capable+0x7b/0x90 [ 161.049741][T10482] ? netlink_ns_capable+0x86/0xa0 [ 161.049797][T10482] rtnl_newlink+0xf5b/0x1370 [ 161.049835][T10482] ? __rcu_read_unlock+0x4e/0x70 [ 161.049916][T10482] ? __memcg_slab_free_hook+0x135/0x230 [ 161.050009][T10482] ? __rcu_read_unlock+0x4e/0x70 [ 161.050047][T10482] ? avc_has_perm_noaudit+0xab/0x130 [ 161.050081][T10482] ? cred_has_capability+0x224/0x290 [ 161.050113][T10482] ? selinux_capable+0x31/0x40 [ 161.050132][T10482] ? security_capable+0x7b/0x90 [ 161.050201][T10482] ? ns_capable+0x7c/0xb0 [ 161.050229][T10482] ? __pfx_rtnl_newlink+0x10/0x10 [ 161.050253][T10482] rtnetlink_rcv_msg+0x64b/0x720 [ 161.050363][T10482] netlink_rcv_skb+0x123/0x220 [ 161.050396][T10482] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.050427][T10482] rtnetlink_rcv+0x1c/0x30 [ 161.050489][T10482] netlink_unicast+0x5c0/0x690 [ 161.050524][T10482] netlink_sendmsg+0x5c8/0x6f0 [ 161.050546][T10482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.050566][T10482] ____sys_sendmsg+0x5af/0x600 [ 161.050621][T10482] ___sys_sendmsg+0x195/0x1e0 [ 161.050654][T10482] __x64_sys_sendmsg+0xd4/0x160 [ 161.050715][T10482] x64_sys_call+0x17ba/0x3000 [ 161.050741][T10482] do_syscall_64+0xc0/0x2a0 [ 161.050774][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.050796][T10482] RIP: 0033:0x7f233144aeb9 [ 161.050812][T10482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.050861][T10482] RSP: 002b:00007f232fea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.050882][T10482] RAX: ffffffffffffffda RBX: 00007f23316c5fa0 RCX: 00007f233144aeb9 [ 161.050896][T10482] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 161.050910][T10482] RBP: 00007f232fea7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.050923][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.051008][T10482] R13: 00007f23316c6038 R14: 00007f23316c5fa0 R15: 00007ffe92251e08 [ 161.051030][T10482] [ 161.052385][T10476] FAULT_INJECTION: forcing a failure. [ 161.052385][T10476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.340285][T10491] gre1: entered allmulticast mode [ 161.342171][T10476] CPU: 0 UID: 0 PID: 10476 Comm: syz.0.2290 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.342249][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.342308][T10476] Call Trace: [ 161.342338][T10476] [ 161.342375][T10476] __dump_stack+0x1d/0x30 [ 161.342475][T10476] dump_stack_lvl+0x95/0xd0 [ 161.342555][T10476] dump_stack+0x15/0x1b [ 161.342619][T10476] should_fail_ex+0x263/0x280 [ 161.342722][T10476] should_fail+0xb/0x20 [ 161.342888][T10476] should_fail_usercopy+0x1a/0x20 [ 161.342980][T10476] _copy_from_iter+0xcf/0xea0 [ 161.342999][T10476] ? __alloc_skb+0x397/0x4b0 [ 161.343094][T10476] ? __alloc_skb+0x219/0x4b0 [ 161.343225][T10476] netlink_sendmsg+0x4ae/0x6f0 [ 161.343301][T10476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.343363][T10476] ____sys_sendmsg+0x5af/0x600 [ 161.343437][T10476] ___sys_sendmsg+0x195/0x1e0 [ 161.343534][T10476] __x64_sys_sendmsg+0xd4/0x160 [ 161.343630][T10476] x64_sys_call+0x17ba/0x3000 [ 161.343741][T10476] do_syscall_64+0xc0/0x2a0 [ 161.343865][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.344021][T10476] RIP: 0033:0x7f6ff61faeb9 [ 161.344074][T10476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.344136][T10476] RSP: 002b:00007f6ff4c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.344199][T10476] RAX: ffffffffffffffda RBX: 00007f6ff6475fa0 RCX: 00007f6ff61faeb9 [ 161.344251][T10476] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 161.344287][T10476] RBP: 00007f6ff4c57090 R08: 0000000000000000 R09: 0000000000000000 [ 161.344418][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.344459][T10476] R13: 00007f6ff6476038 R14: 00007f6ff6475fa0 R15: 00007ffeae7b8fd8 [ 161.344528][T10476] [ 161.423484][T10492] loop4: detected capacity change from 0 to 512 [ 161.553174][T10492] EXT4-fs: Ignoring removed nobh option [ 161.611057][T10492] EXT4-fs: Mount option(s) incompatible with ext2 [ 161.620873][T10509] FAULT_INJECTION: forcing a failure. [ 161.620873][T10509] name failslab, interval 1, probability 0, space 0, times 0 [ 161.633611][T10509] CPU: 0 UID: 0 PID: 10509 Comm: syz.6.2297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.633645][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.633662][T10509] Call Trace: [ 161.633669][T10509] [ 161.633726][T10509] __dump_stack+0x1d/0x30 [ 161.633755][T10509] dump_stack_lvl+0x95/0xd0 [ 161.633783][T10509] dump_stack+0x15/0x1b [ 161.633806][T10509] should_fail_ex+0x263/0x280 [ 161.633882][T10509] should_failslab+0x8c/0xb0 [ 161.633910][T10509] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 161.633944][T10509] ? __alloc_skb+0x2f0/0x4b0 [ 161.634012][T10509] __alloc_skb+0x2f0/0x4b0 [ 161.634049][T10509] ? __alloc_skb+0x219/0x4b0 [ 161.634122][T10509] netlink_alloc_large_skb+0xbf/0xf0 [ 161.634218][T10509] netlink_sendmsg+0x40c/0x6f0 [ 161.634244][T10509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.634268][T10509] ____sys_sendmsg+0x5af/0x600 [ 161.634298][T10509] ___sys_sendmsg+0x195/0x1e0 [ 161.634355][T10509] __x64_sys_sendmsg+0xd4/0x160 [ 161.634380][T10509] x64_sys_call+0x17ba/0x3000 [ 161.634416][T10509] do_syscall_64+0xc0/0x2a0 [ 161.634458][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.634482][T10509] RIP: 0033:0x7f233144aeb9 [ 161.634498][T10509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.634517][T10509] RSP: 002b:00007f232fea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.634547][T10509] RAX: ffffffffffffffda RBX: 00007f23316c5fa0 RCX: 00007f233144aeb9 [ 161.634566][T10509] RDX: 0000000020040840 RSI: 0000200000000080 RDI: 0000000000000003 [ 161.634584][T10509] RBP: 00007f232fea7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.634602][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.634700][T10509] R13: 00007f23316c6038 R14: 00007f23316c5fa0 R15: 00007ffe92251e08 [ 161.634782][T10509] [ 161.639537][T10508] xt_hashlimit: size too large, truncated to 1048576 [ 161.878988][T10521] __nla_validate_parse: 13 callbacks suppressed [ 161.879008][T10521] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2302'. [ 161.904813][T10492] loop4: detected capacity change from 0 to 1024 [ 161.943521][T10492] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.950028][T10492] EXT4-fs: Ignoring removed bh option [ 161.994447][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'. [ 162.006732][T10526] vlan2: entered promiscuous mode [ 162.015345][T10492] EXT4-fs: Ignoring removed nobh option [ 162.098061][T10541] loop7: detected capacity change from 0 to 1024 [ 162.116925][T10492] ------------[ cut here ]------------ [ 162.122446][T10492] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 162.147115][T10492] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.4.2295/10492 [ 162.158175][T10492] Modules linked in: [ 162.162160][T10492] CPU: 0 UID: 0 PID: 10492 Comm: syz.4.2295 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.172183][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.182289][T10492] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 162.188621][T10492] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 162.208335][T10492] RSP: 0018:ffffc90003f3b388 EFLAGS: 00010246 [ 162.214459][T10492] RAX: ffff88810b134c90 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 162.222487][T10492] RDX: ffffffff867f0723 RSI: ffffffff866bb4e7 RDI: ffffffff86fb97b0 [ 162.230497][T10492] RBP: ffff88811a8db270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 162.238541][T10492] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811a8db230 [ 162.246550][T10492] R13: 00000000ffffdfcc R14: ffff88811a8db27c R15: ffff88811a8db268 [ 162.254582][T10492] FS: 00007fe3641076c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 162.263721][T10492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.270365][T10492] CR2: 00007f64bfea6000 CR3: 000000015771c000 CR4: 00000000003506f0 [ 162.278479][T10492] DR0: fffffffffffffffc DR1: 0000000000000000 DR2: 0000000000000000 [ 162.286546][T10492] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 162.294543][T10492] Call Trace: [ 162.297936][T10492] [ 162.300946][T10492] reg_set_min_max+0x1c8/0x260 [ 162.305771][T10492] check_cond_jmp_op+0x13bd/0x1a80 [ 162.310967][T10492] do_check+0x440c/0x9060 [ 162.315357][T10492] do_check_common+0xd0f/0x1630 [ 162.320290][T10492] bpf_check+0x2f6d/0xc7e0 [ 162.324747][T10492] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 162.330941][T10492] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 162.336617][T10492] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 162.342668][T10492] ? pcpu_block_update+0x232/0x3b0 [ 162.347874][T10492] ? _find_next_zero_bit+0x64/0xa0 [ 162.353257][T10492] ? pcpu_block_refresh_hint+0x157/0x170 [ 162.358940][T10492] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 162.365163][T10492] ? css_rstat_updated+0xbb/0x280 [ 162.370232][T10492] ? mod_memcg_state+0x182/0x260 [ 162.375301][T10492] ? __rcu_read_unlock+0x4e/0x70 [ 162.380373][T10492] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 162.386218][T10492] ? pcpu_alloc_noprof+0xb08/0x1010 [ 162.391620][T10492] ? should_fail_ex+0x30/0x280 [ 162.396542][T10492] ? __kmalloc_noprof+0x2a3/0x580 [ 162.401620][T10492] ? security_bpf_prog_load+0x60/0x140 [ 162.407279][T10492] ? selinux_bpf_prog_load+0xac/0xd0 [ 162.412624][T10492] ? security_bpf_prog_load+0x9e/0x140 [ 162.418137][T10492] bpf_prog_load+0xf76/0x1140 [ 162.422862][T10492] ? security_bpf+0x2b/0x90 [ 162.427546][T10492] __sys_bpf+0x469/0x7b0 [ 162.431863][T10492] __x64_sys_bpf+0x41/0x50 [ 162.436453][T10492] x64_sys_call+0x28e1/0x3000 [ 162.441171][T10492] do_syscall_64+0xc0/0x2a0 [ 162.445768][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.451756][T10492] RIP: 0033:0x7fe3656aaeb9 [ 162.456226][T10492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.475901][T10492] RSP: 002b:00007fe364107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.484385][T10492] RAX: ffffffffffffffda RBX: 00007fe365925fa0 RCX: 00007fe3656aaeb9 [ 162.492433][T10492] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 162.500466][T10492] RBP: 00007fe365718c1f R08: 0000000000000000 R09: 0000000000000000 [ 162.508470][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.516505][T10492] R13: 00007fe365926038 R14: 00007fe365925fa0 R15: 00007ffe2143b6b8 [ 162.524682][T10492] [ 162.527737][T10492] ---[ end trace 0000000000000000 ]--- [ 162.530992][T10547] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 162.598535][T10552] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.620318][T10557] loop1: detected capacity change from 0 to 512 [ 162.699025][T10567] loop1: detected capacity change from 0 to 128 [ 162.733544][T10567] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.761868][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2313'. [ 162.771820][T10567] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.821619][T10580] loop4: detected capacity change from 0 to 1024 [ 162.828675][T10580] ext4: Unknown parameter 'nojournal' [ 162.842125][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'. [ 162.868925][T10582] veth1_macvtap: left promiscuous mode [ 162.985453][T10594] loop6: detected capacity change from 0 to 512 [ 163.099763][T10602] netlink: 'syz.6.2321': attribute type 3 has an invalid length. [ 163.126284][T10602] netlink: 'syz.6.2321': attribute type 3 has an invalid length. [ 163.142204][T10606] loop4: detected capacity change from 0 to 1024 [ 163.297862][T10624] ext4: Unknown parameter 'smackfsroot' [ 163.377799][T10631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.406858][T10631] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.2333: corrupted in-inode xattr: overlapping e_value [ 163.421111][T10631] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2333: couldn't read orphan inode 15 (err -117) [ 163.494415][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2337'. [ 163.553191][T10643] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2339: bg 0: block 248: padding at end of block bitmap is not set [ 163.589768][T10643] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2339: Failed to acquire dquot type 1 [ 163.612359][T10643] EXT4-fs (loop1): 1 truncate cleaned up [ 163.619602][T10649] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2340'. [ 163.630190][T10651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2341'. [ 163.640131][T10643] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.660148][T10654] netlink: 'syz.0.2342': attribute type 5 has an invalid length. [ 163.664862][T10651] bridge_slave_0: left allmulticast mode [ 163.673720][T10651] bridge_slave_0: left promiscuous mode [ 163.679548][T10651] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.731271][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2345'. [ 163.744352][T10662] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 163.763279][T10662] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.766233][T10660] vlan2: entered promiscuous mode [ 163.774775][T10660] team0: entered promiscuous mode [ 163.779876][T10660] team_slave_0: entered promiscuous mode [ 163.785622][T10660] team_slave_1: entered promiscuous mode [ 163.791687][T10662] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 163.812030][ T52] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 163.824727][T10662] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 163.832788][T10662] EXT4-fs error (device loop0): __ext4_iget:5426: inode #16: block 127754: comm syz.0.2344: invalid block [ 163.847052][T10662] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2344: couldn't read orphan inode 16 (err -117) [ 163.959739][T10675] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2351'. [ 164.045000][ T3306] Alternate GPT is invalid, using primary GPT. [ 164.051473][ T3306] loop4: p2 p3 p7 [ 164.070092][T10687] syzkaller0: entered promiscuous mode [ 164.075647][T10687] syzkaller0: entered allmulticast mode [ 164.120644][T10692] macvtap0: entered promiscuous mode [ 164.132176][T10679] Alternate GPT is invalid, using primary GPT. [ 164.138851][T10679] loop4: p2 p3 p7 [ 164.147303][T10692] macvtap0: left promiscuous mode [ 164.216778][T10697] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.273738][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2361'. [ 164.508547][ T3306] loop6: p2 p3 p4 < > [ 164.512889][ T3306] loop6: p2 size 590592 extends beyond EOD, truncated [ 164.520546][ T3306] loop6: p3 start 589824 is beyond EOD, truncated [ 164.544289][T10710] loop6: p2 p3 p4 < > [ 164.553608][T10710] loop6: p2 size 590592 extends beyond EOD, truncated [ 164.567986][T10710] loop6: p3 start 589824 is beyond EOD, truncated [ 164.761700][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 164.777520][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 164.860059][T10740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.2376: corrupted inode contents [ 164.918574][T10740] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #3: comm syz.6.2376: mark_inode_dirty error [ 164.933222][T10745] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.987621][T10740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.2376: corrupted inode contents [ 165.002649][T10761] syzkaller1: entered promiscuous mode [ 165.008307][T10761] syzkaller1: entered allmulticast mode [ 165.040630][T10740] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2376: mark_inode_dirty error [ 165.066392][T10740] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2376: Failed to acquire dquot type 0 [ 165.085922][T10740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2376: corrupted inode contents [ 165.113407][T10740] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.2376: mark_inode_dirty error [ 165.125526][T10740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2376: corrupted inode contents [ 165.146302][T10740] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2376: mark_inode_dirty error [ 165.184157][T10740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2376: corrupted inode contents [ 165.201117][T10740] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 165.201936][T10773] FAULT_INJECTION: forcing a failure. [ 165.201936][T10773] name failslab, interval 1, probability 0, space 0, times 0 [ 165.210356][T10740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2376: corrupted inode contents [ 165.223762][T10773] CPU: 1 UID: 0 PID: 10773 Comm: syz.0.2386 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.223955][T10773] Tainted: [W]=WARN [ 165.223984][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.224095][T10773] Call Trace: [ 165.224115][T10773] [ 165.224137][T10773] __dump_stack+0x1d/0x30 [ 165.224219][T10773] dump_stack_lvl+0x95/0xd0 [ 165.224313][T10773] dump_stack+0x15/0x1b [ 165.224380][T10773] should_fail_ex+0x263/0x280 [ 165.224482][T10773] should_failslab+0x8c/0xb0 [ 165.224563][T10773] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 165.224716][T10773] ? alloc_unbound_pwq+0x641/0x7e0 [ 165.224802][T10773] alloc_unbound_pwq+0x641/0x7e0 [ 165.224876][T10773] apply_wqattrs_prepare+0x1df/0x840 [ 165.224985][T10773] alloc_workqueue_noprof+0xd3a/0x1710 [ 165.225141][T10773] bond_init+0x94/0x2a0 [ 165.225216][T10773] register_netdevice+0x23e/0x1000 [ 165.225365][T10773] bond_newlink+0x2f/0xb0 [ 165.225495][T10773] ? __pfx_bond_newlink+0x10/0x10 [ 165.225574][T10773] rtnl_newlink_create+0x1e4/0x650 [ 165.225746][T10773] ? security_capable+0x7b/0x90 [ 165.225844][T10773] ? netlink_ns_capable+0x86/0xa0 [ 165.225958][T10773] rtnl_newlink+0xf5b/0x1370 [ 165.225989][T10773] ? xas_load+0x413/0x430 [ 165.226074][T10773] ? __rcu_read_unlock+0x4e/0x70 [ 165.226162][T10773] ? xa_load+0xb1/0xe0 [ 165.226253][T10773] ? __rcu_read_unlock+0x4e/0x70 [ 165.226352][T10773] ? avc_has_perm_noaudit+0xab/0x130 [ 165.226536][T10773] ? cred_has_capability+0x224/0x290 [ 165.226654][T10773] ? selinux_capable+0x31/0x40 [ 165.226738][T10773] ? security_capable+0x7b/0x90 [ 165.226963][T10773] ? ns_capable+0x7c/0xb0 [ 165.227085][T10773] ? __pfx_rtnl_newlink+0x10/0x10 [ 165.227164][T10773] rtnetlink_rcv_msg+0x64b/0x720 [ 165.227237][T10773] ? avc_has_perm_noaudit+0xab/0x130 [ 165.227363][T10773] netlink_rcv_skb+0x123/0x220 [ 165.227514][T10773] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 165.227618][T10773] rtnetlink_rcv+0x1c/0x30 [ 165.227840][T10773] netlink_unicast+0x5c0/0x690 [ 165.227943][T10773] netlink_sendmsg+0x5c8/0x6f0 [ 165.228089][T10773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.228212][T10773] ____sys_sendmsg+0x5af/0x600 [ 165.228284][T10773] ___sys_sendmsg+0x195/0x1e0 [ 165.228363][T10773] __x64_sys_sendmsg+0xd4/0x160 [ 165.228442][T10773] x64_sys_call+0x17ba/0x3000 [ 165.228524][T10773] do_syscall_64+0xc0/0x2a0 [ 165.228626][T10773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.228725][T10773] RIP: 0033:0x7f6ff61faeb9 [ 165.228786][T10773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.228841][T10773] RSP: 002b:00007f6ff4c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.228907][T10773] RAX: ffffffffffffffda RBX: 00007f6ff6475fa0 RCX: 00007f6ff61faeb9 [ 165.229061][T10773] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 165.229103][T10773] RBP: 00007f6ff4c57090 R08: 0000000000000000 R09: 0000000000000000 [ 165.229145][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.229186][T10773] R13: 00007f6ff6476038 R14: 00007f6ff6475fa0 R15: 00007ffeae7b8fd8 [ 165.229253][T10773] [ 165.325027][T10778] FAULT_INJECTION: forcing a failure. [ 165.325027][T10778] name failslab, interval 1, probability 0, space 0, times 0 [ 165.408778][T10740] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.2376: mark_inode_dirty error [ 165.411051][T10778] CPU: 1 UID: 0 PID: 10778 Comm: syz.1.2387 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.411154][T10778] Tainted: [W]=WARN [ 165.411175][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.411268][T10778] Call Trace: [ 165.411337][T10778] [ 165.411360][T10778] __dump_stack+0x1d/0x30 [ 165.411498][T10778] dump_stack_lvl+0x95/0xd0 [ 165.411570][T10778] dump_stack+0x15/0x1b [ 165.411627][T10778] should_fail_ex+0x263/0x280 [ 165.411801][T10778] should_failslab+0x8c/0xb0 [ 165.411889][T10778] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 165.412014][T10778] ? __alloc_skb+0x2f0/0x4b0 [ 165.412144][T10778] __alloc_skb+0x2f0/0x4b0 [ 165.412298][T10778] ? __alloc_skb+0x219/0x4b0 [ 165.412393][T10778] netlink_ack+0xfd/0x500 [ 165.412504][T10778] ? __pfx_nfc_genl_fw_download+0x10/0x10 [ 165.412657][T10778] netlink_rcv_skb+0x192/0x220 [ 165.412791][T10778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.412886][T10778] genl_rcv+0x28/0x40 [ 165.412958][T10778] netlink_unicast+0x5c0/0x690 [ 165.413070][T10778] netlink_sendmsg+0x5c8/0x6f0 [ 165.413213][T10778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.413275][T10778] ____sys_sendmsg+0x5af/0x600 [ 165.413440][T10778] ___sys_sendmsg+0x195/0x1e0 [ 165.413551][T10778] __x64_sys_sendmsg+0xd4/0x160 [ 165.413688][T10778] x64_sys_call+0x17ba/0x3000 [ 165.413772][T10778] do_syscall_64+0xc0/0x2a0 [ 165.413922][T10778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.413995][T10778] RIP: 0033:0x7f729852aeb9 [ 165.414048][T10778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.414109][T10778] RSP: 002b:00007f7296f66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.414173][T10778] RAX: ffffffffffffffda RBX: 00007f72987a6090 RCX: 00007f729852aeb9 [ 165.414222][T10778] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 165.414264][T10778] RBP: 00007f7296f66090 R08: 0000000000000000 R09: 0000000000000000 [ 165.414306][T10778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.414386][T10778] R13: 00007f72987a6128 R14: 00007f72987a6090 R15: 00007fff5a5d98e8 [ 165.414436][T10778] [ 165.504049][T10785] FAULT_INJECTION: forcing a failure. [ 165.504049][T10785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.539778][T10740] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 165.540076][T10740] EXT4-fs (loop6): 1 truncate cleaned up [ 165.541060][T10740] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.548131][T10785] CPU: 1 UID: 0 PID: 10785 Comm: syz.4.2390 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.548342][T10785] Tainted: [W]=WARN [ 165.548365][T10785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.548408][T10785] Call Trace: [ 165.548428][T10785] [ 165.548458][T10785] __dump_stack+0x1d/0x30 [ 165.548539][T10785] dump_stack_lvl+0x95/0xd0 [ 165.548627][T10785] dump_stack+0x15/0x1b [ 165.548691][T10785] should_fail_ex+0x263/0x280 [ 165.548807][T10785] should_fail+0xb/0x20 [ 165.548898][T10785] should_fail_usercopy+0x1a/0x20 [ 165.549038][T10785] _copy_from_iter+0xcf/0xea0 [ 165.549108][T10785] ? __alloc_skb+0x397/0x4b0 [ 165.549199][T10785] ? __alloc_skb+0x219/0x4b0 [ 165.549339][T10785] netlink_sendmsg+0x4ae/0x6f0 [ 165.549410][T10785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.549471][T10785] ____sys_sendmsg+0x5af/0x600 [ 165.549547][T10785] ___sys_sendmsg+0x195/0x1e0 [ 165.549665][T10785] __x64_sys_sendmsg+0xd4/0x160 [ 165.549784][T10785] x64_sys_call+0x17ba/0x3000 [ 165.549873][T10785] do_syscall_64+0xc0/0x2a0 [ 165.549964][T10785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.550034][T10785] RIP: 0033:0x7fe3656aaeb9 [ 165.550091][T10785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.550144][T10785] RSP: 002b:00007fe364107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.550211][T10785] RAX: ffffffffffffffda RBX: 00007fe365925fa0 RCX: 00007fe3656aaeb9 [ 165.550315][T10785] RDX: 0000000020040840 RSI: 0000200000000080 RDI: 0000000000000003 [ 165.550356][T10785] RBP: 00007fe364107090 R08: 0000000000000000 R09: 0000000000000000 [ 165.550403][T10785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.550437][T10785] R13: 00007fe365926038 R14: 00007fe365925fa0 R15: 00007ffe2143b6b8 [ 165.550505][T10785] [ 165.665606][T10790] set_capacity_and_notify: 10 callbacks suppressed [ 165.665656][T10790] loop4: detected capacity change from 0 to 512 [ 165.771229][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 165.771278][ T29] audit: type=1326 audit(1769754355.208:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.7.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 165.938387][T10795] vlan2: entered promiscuous mode [ 166.098750][T10804] loop6: detected capacity change from 0 to 128 [ 166.101640][T10790] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.168343][T10812] loop1: detected capacity change from 0 to 128 [ 166.177536][ T29] audit: type=1400 audit(1769754355.619:2656): avc: denied { create } for pid=10803 comm="syz.6.2395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 166.199085][T10812] vfat: Unknown parameter '' [ 166.262535][ T29] audit: type=1400 audit(1769754355.657:2657): avc: denied { write } for pid=10803 comm="syz.6.2395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 166.283535][ T29] audit: type=1400 audit(1769754355.657:2658): avc: denied { nlmsg_read } for pid=10803 comm="syz.6.2395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 166.290636][T10814] xt_hashlimit: size too large, truncated to 1048576 [ 166.329240][T10820] bridge0: port 1(macvlan1) entered blocking state [ 166.335845][T10820] bridge0: port 1(macvlan1) entered disabled state [ 166.343173][T10820] macvlan1: entered allmulticast mode [ 166.355097][T10820] macvlan1: entered promiscuous mode [ 166.378422][T10825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.387014][T10820] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 166.537003][ T29] audit: type=1326 audit(1769754355.965:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.6.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233144aeb9 code=0x7ffc0000 [ 166.568807][ T29] audit: type=1326 audit(1769754355.965:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.6.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233144aeb9 code=0x7ffc0000 [ 166.592415][ T29] audit: type=1326 audit(1769754355.993:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.6.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233144aeb9 code=0x7ffc0000 [ 166.616009][ T29] audit: type=1326 audit(1769754355.993:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.6.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233144aeb9 code=0x7ffc0000 [ 166.639608][ T29] audit: type=1326 audit(1769754355.993:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.6.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f233144aeb9 code=0x7ffc0000 [ 166.668009][ T29] audit: type=1326 audit(1769754356.078:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.6.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233144aeb9 code=0x7ffc0000 [ 166.947771][T10876] netlink: 'syz.6.2426': attribute type 12 has an invalid length. [ 166.955758][T10876] netlink: 'syz.6.2426': attribute type 29 has an invalid length. [ 166.963744][T10876] netlink: 'syz.6.2426': attribute type 3 has an invalid length. [ 166.972295][T10876] netlink: 'syz.6.2426': attribute type 2 has an invalid length. [ 167.085181][T10891] veth3: entered promiscuous mode [ 167.090361][T10891] veth3: entered allmulticast mode [ 167.093899][T10892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10892 comm=syz.6.2430 [ 167.439987][T10907] netlink: 'syz.0.2439': attribute type 27 has an invalid length. [ 167.448298][T10907] erspan0: left promiscuous mode [ 167.454486][T10907] dummy0: left allmulticast mode [ 167.496708][T10907] syzkaller0: left promiscuous mode [ 167.502152][T10907] syzkaller0: left allmulticast mode [ 167.510348][T10907] team1: left promiscuous mode [ 167.516929][T10907] team1: left allmulticast mode [ 167.522113][T10907] ip6tnl1: left allmulticast mode [ 167.577125][T10911] 8021q: adding VLAN 0 to HW filter on device .` [ 167.619393][T10911] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.672022][T10911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.688387][ T7908] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.703346][T10907] bridge_slave_1: left allmulticast mode [ 167.709100][T10907] bridge_slave_1: left promiscuous mode [ 167.714831][T10907] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.750081][T10907] .`: (slave bond_slave_0): Releasing backup interface [ 167.774004][T10907] .`: (slave bond_slave_1): Releasing backup interface [ 167.813542][T10907] team_slave_0: left promiscuous mode [ 167.820803][T10907] team0: Port device team_slave_0 removed [ 167.830898][T10907] team_slave_1: left promiscuous mode [ 167.837404][T10907] team0: Port device team_slave_1 removed [ 167.843768][T10907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.852452][T10907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.860096][T10907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.876120][ T7908] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.893926][ T7908] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.909962][ T7908] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.959822][T10944] __nla_validate_parse: 11 callbacks suppressed [ 167.959844][T10944] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2457'. [ 167.976098][T10944] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2457'. [ 168.101444][T10957] FAULT_INJECTION: forcing a failure. [ 168.101444][T10957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.114616][T10957] CPU: 0 UID: 0 PID: 10957 Comm: syz.7.2449 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.114649][T10957] Tainted: [W]=WARN [ 168.114658][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.114675][T10957] Call Trace: [ 168.114682][T10957] [ 168.114691][T10957] __dump_stack+0x1d/0x30 [ 168.114724][T10957] dump_stack_lvl+0x95/0xd0 [ 168.114814][T10957] dump_stack+0x15/0x1b [ 168.114840][T10957] should_fail_ex+0x263/0x280 [ 168.114881][T10957] should_fail+0xb/0x20 [ 168.114962][T10957] should_fail_usercopy+0x1a/0x20 [ 168.114999][T10957] _copy_from_user+0x1c/0xb0 [ 168.115034][T10957] ___sys_sendmsg+0xc1/0x1e0 [ 168.115069][T10957] __x64_sys_sendmsg+0xd4/0x160 [ 168.115174][T10957] x64_sys_call+0x17ba/0x3000 [ 168.115208][T10957] do_syscall_64+0xc0/0x2a0 [ 168.115257][T10957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.115279][T10957] RIP: 0033:0x7f64c97eaeb9 [ 168.115295][T10957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.115320][T10957] RSP: 002b:00007f64c8247028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.115346][T10957] RAX: ffffffffffffffda RBX: 00007f64c9a65fa0 RCX: 00007f64c97eaeb9 [ 168.115389][T10957] RDX: 0000000020040840 RSI: 0000200000000080 RDI: 0000000000000003 [ 168.115406][T10957] RBP: 00007f64c8247090 R08: 0000000000000000 R09: 0000000000000000 [ 168.115421][T10957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.115434][T10957] R13: 00007f64c9a66038 R14: 00007f64c9a65fa0 R15: 00007ffd5460f108 [ 168.115454][T10957] [ 168.296846][T10966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.317009][T10966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.357159][T10966] loop6: detected capacity change from 0 to 136 [ 168.379031][T10972] syzkaller0: entered promiscuous mode [ 168.384735][T10972] syzkaller0: entered allmulticast mode [ 168.392537][T10966] Attempt to read inode for relocated directory [ 168.413897][T10966] netlink: 'syz.6.2452': attribute type 1 has an invalid length. [ 168.421698][T10966] netlink: 'syz.6.2452': attribute type 4 has an invalid length. [ 168.429543][T10966] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2452'. [ 168.457579][T10966] netlink: 'syz.6.2452': attribute type 1 has an invalid length. [ 168.465463][T10966] netlink: 'syz.6.2452': attribute type 4 has an invalid length. [ 168.473289][T10966] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2452'. [ 168.490540][T10975] loop0: detected capacity change from 0 to 256 [ 168.508046][T10977] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2456'. [ 168.517185][T10977] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2456'. [ 168.528392][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2456'. [ 168.530556][T10975] xt_hashlimit: size too large, truncated to 1048576 [ 168.543675][T10977] bond0: entered promiscuous mode [ 168.550978][T10977] gretap0: entered promiscuous mode [ 168.557094][T10977] hsr1: entered promiscuous mode [ 168.739077][T10990] FAULT_INJECTION: forcing a failure. [ 168.739077][T10990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.752223][T10990] CPU: 0 UID: 0 PID: 10990 Comm: syz.7.2461 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.752252][T10990] Tainted: [W]=WARN [ 168.752258][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.752333][T10990] Call Trace: [ 168.752339][T10990] [ 168.752346][T10990] __dump_stack+0x1d/0x30 [ 168.752368][T10990] dump_stack_lvl+0x95/0xd0 [ 168.752408][T10990] dump_stack+0x15/0x1b [ 168.752426][T10990] should_fail_ex+0x263/0x280 [ 168.752455][T10990] should_fail+0xb/0x20 [ 168.752537][T10990] should_fail_usercopy+0x1a/0x20 [ 168.752567][T10990] strncpy_from_user+0x27/0x250 [ 168.752595][T10990] getname_flags+0xad/0x3b0 [ 168.752665][T10990] __x64_sys_rmdir+0x21/0x40 [ 168.752683][T10990] x64_sys_call+0x2469/0x3000 [ 168.752775][T10990] do_syscall_64+0xc0/0x2a0 [ 168.752804][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.752823][T10990] RIP: 0033:0x7f64c97eaeb9 [ 168.752897][T10990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.752984][T10990] RSP: 002b:00007f64c8247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 168.753015][T10990] RAX: ffffffffffffffda RBX: 00007f64c9a65fa0 RCX: 00007f64c97eaeb9 [ 168.753028][T10990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 168.753040][T10990] RBP: 00007f64c8247090 R08: 0000000000000000 R09: 0000000000000000 [ 168.753051][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.753063][T10990] R13: 00007f64c9a66038 R14: 00007f64c9a65fa0 R15: 00007ffd5460f108 [ 168.753152][T10990] [ 168.990718][T11001] netlink: 'syz.7.2465': attribute type 29 has an invalid length. [ 169.199092][T11031] loop1: detected capacity change from 0 to 512 [ 169.217627][T11031] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 169.225718][T11031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 169.234971][T11031] EXT4-fs (loop1): orphan cleanup on readonly fs [ 169.241461][T11031] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.2473: iget: bad i_size value: 12154761577498 [ 169.254570][T11031] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2473: couldn't read orphan inode 13 (err -117) [ 169.268964][T11031] EXT4-fs mount: 32 callbacks suppressed [ 169.268979][T11031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 169.305035][T11031] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.2473: dx entry: limit 65535 != root limit 120 [ 169.317907][T11031] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2473: Corrupt directory, running e2fsck is recommended [ 169.390859][T11048] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2476'. [ 169.427599][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.472062][T11057] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2480'. [ 169.481964][T11057] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 169.521028][T11059] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.528333][T11059] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.579560][T11062] program syz.7.2482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.583042][T11065] serio: Serial port ptm1 [ 169.714298][T11081] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 169.864380][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2491'. [ 169.886877][T11100] vlan2: entered promiscuous mode [ 169.903118][T11100] dummy0: entered promiscuous mode [ 169.993991][T11110] tipc: Enabling of bearer rejected, already enabled [ 170.022653][T11104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.046158][T11114] macvlan1: left allmulticast mode [ 170.051505][T11114] macvlan1: left promiscuous mode [ 170.056907][T11114] bridge0: port 1(macvlan1) entered disabled state [ 170.124331][T11123] FAULT_INJECTION: forcing a failure. [ 170.124331][T11123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.137535][T11123] CPU: 1 UID: 0 PID: 11123 Comm: syz.4.2500 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.137581][T11123] Tainted: [W]=WARN [ 170.137588][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.137649][T11123] Call Trace: [ 170.137654][T11123] [ 170.137660][T11123] __dump_stack+0x1d/0x30 [ 170.137706][T11123] dump_stack_lvl+0x95/0xd0 [ 170.137725][T11123] dump_stack+0x15/0x1b [ 170.137820][T11123] should_fail_ex+0x263/0x280 [ 170.137853][T11123] should_fail+0xb/0x20 [ 170.137877][T11123] should_fail_usercopy+0x1a/0x20 [ 170.137907][T11123] _copy_from_user+0x1c/0xb0 [ 170.137925][T11123] __copy_msghdr+0x244/0x300 [ 170.137984][T11123] ___sys_sendmsg+0x10c/0x1e0 [ 170.138093][T11123] __x64_sys_sendmsg+0xd4/0x160 [ 170.138114][T11123] x64_sys_call+0x17ba/0x3000 [ 170.138136][T11123] do_syscall_64+0xc0/0x2a0 [ 170.138199][T11123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.138245][T11123] RIP: 0033:0x7fe3656aaeb9 [ 170.138258][T11123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.138275][T11123] RSP: 002b:00007fe364107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.138342][T11123] RAX: ffffffffffffffda RBX: 00007fe365925fa0 RCX: 00007fe3656aaeb9 [ 170.138411][T11123] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 170.138423][T11123] RBP: 00007fe364107090 R08: 0000000000000000 R09: 0000000000000000 [ 170.138434][T11123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.138445][T11123] R13: 00007fe365926038 R14: 00007fe365925fa0 R15: 00007ffe2143b6b8 [ 170.138509][T11123] [ 170.443092][T11137] loop6: detected capacity change from 0 to 512 [ 170.459541][T11137] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 170.512462][T11137] EXT4-fs (loop6): orphan cleanup on readonly fs [ 170.534073][T11137] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2508: Block bitmap for bg 0 marked uninitialized [ 170.575951][T11137] EXT4-fs (loop6): Remounting filesystem read-only [ 170.583043][T11147] loop1: detected capacity change from 0 to 512 [ 170.603207][T11147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.619453][T11137] EXT4-fs (loop6): 1 orphan inode deleted [ 170.649078][T11147] EXT4-fs (loop1): 1 truncate cleaned up [ 170.651149][T11137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.655506][T11147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.730233][ T9130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.830105][T11151] loop6: detected capacity change from 0 to 2048 [ 170.863609][T11151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.978854][T11151] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 171.024870][T11151] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 414 with error 28 [ 171.037346][T11151] EXT4-fs (loop6): This should not happen!! Data will be lost [ 171.037346][T11151] [ 171.047066][T11151] EXT4-fs (loop6): Total free blocks count 0 [ 171.053180][T11151] EXT4-fs (loop6): Free/Dirty block details [ 171.059103][T11151] EXT4-fs (loop6): free_blocks=2415919504 [ 171.064884][T11151] EXT4-fs (loop6): dirty_blocks=416 [ 171.070103][T11151] EXT4-fs (loop6): Block reservation details [ 171.076213][T11151] EXT4-fs (loop6): i_reserved_data_blocks=26 [ 171.132904][T11171] loop7: detected capacity change from 0 to 1024 [ 171.139878][ T52] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 171.185004][T11171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.193413][T11175] loop6: detected capacity change from 0 to 512 [ 171.211085][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 171.211104][ T29] audit: type=1400 audit(1769754360.334:2984): avc: denied { read } for pid=11170 comm="syz.7.2518" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 171.240157][ T29] audit: type=1400 audit(1769754360.334:2985): avc: denied { open } for pid=11170 comm="syz.7.2518" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 171.330230][T11175] EXT4-fs: Invalid want_extra_isize 2154 [ 171.439142][ T9819] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.455509][T11189] FAULT_INJECTION: forcing a failure. [ 171.455509][T11189] name failslab, interval 1, probability 0, space 0, times 0 [ 171.468236][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.0.2525 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.468303][T11189] Tainted: [W]=WARN [ 171.468312][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.468392][T11189] Call Trace: [ 171.468401][T11189] [ 171.468411][T11189] __dump_stack+0x1d/0x30 [ 171.468482][T11189] dump_stack_lvl+0x95/0xd0 [ 171.468511][T11189] dump_stack+0x15/0x1b [ 171.468538][T11189] should_fail_ex+0x263/0x280 [ 171.468645][T11189] should_failslab+0x8c/0xb0 [ 171.468676][T11189] kmem_cache_alloc_noprof+0x68/0x490 [ 171.468710][T11189] ? xfrm_state_alloc+0x2c/0x190 [ 171.468777][T11189] xfrm_state_alloc+0x2c/0x190 [ 171.468800][T11189] pfkey_add+0x3e5/0x1330 [ 171.468864][T11189] pfkey_sendmsg+0x876/0x9b0 [ 171.468907][T11189] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 171.468933][T11189] ____sys_sendmsg+0x5af/0x600 [ 171.469037][T11189] ___sys_sendmsg+0x195/0x1e0 [ 171.469078][T11189] __sys_sendmmsg+0x185/0x320 [ 171.469112][T11189] __x64_sys_sendmmsg+0x57/0x70 [ 171.469134][T11189] x64_sys_call+0x1e28/0x3000 [ 171.469206][T11189] do_syscall_64+0xc0/0x2a0 [ 171.469269][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.469351][T11189] RIP: 0033:0x7f6ff61faeb9 [ 171.469370][T11189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.469394][T11189] RSP: 002b:00007f6ff4c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.469422][T11189] RAX: ffffffffffffffda RBX: 00007f6ff6475fa0 RCX: 00007f6ff61faeb9 [ 171.469441][T11189] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000005 [ 171.469518][T11189] RBP: 00007f6ff4c57090 R08: 0000000000000000 R09: 0000000000000000 [ 171.469535][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.469552][T11189] R13: 00007f6ff6476038 R14: 00007f6ff6475fa0 R15: 00007ffeae7b8fd8 [ 171.469579][T11189] [ 171.773757][T11200] loop7: detected capacity change from 0 to 512 [ 171.790844][T11200] ext4: Unknown parameter 'fowner>00000000000000000000' [ 171.815603][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.880874][T11207] bond3: entered promiscuous mode [ 171.886108][T11207] bond3: entered allmulticast mode [ 171.896479][T11207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.941757][T11210] netlink: 'syz.7.2526': attribute type 10 has an invalid length. [ 172.049895][T11227] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.061730][ T29] audit: type=1400 audit(1769754361.138:2986): avc: denied { ioctl } for pid=11228 comm="syz.0.2539" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 172.205548][T11240] FAULT_INJECTION: forcing a failure. [ 172.205548][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 172.218358][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.0.2544 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.218410][T11240] Tainted: [W]=WARN [ 172.218420][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.218445][T11240] Call Trace: [ 172.218454][T11240] [ 172.218464][T11240] __dump_stack+0x1d/0x30 [ 172.218495][T11240] dump_stack_lvl+0x95/0xd0 [ 172.218590][T11240] dump_stack+0x15/0x1b [ 172.218635][T11240] should_fail_ex+0x263/0x280 [ 172.218678][T11240] should_failslab+0x8c/0xb0 [ 172.218707][T11240] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 172.218734][T11240] ? __alloc_skb+0x2f0/0x4b0 [ 172.218922][T11240] __alloc_skb+0x2f0/0x4b0 [ 172.218953][T11240] ? __alloc_skb+0x219/0x4b0 [ 172.219033][T11240] netlink_alloc_large_skb+0xbf/0xf0 [ 172.219073][T11240] netlink_sendmsg+0x40c/0x6f0 [ 172.219095][T11240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.219115][T11240] ____sys_sendmsg+0x5af/0x600 [ 172.219169][T11240] ___sys_sendmsg+0x195/0x1e0 [ 172.219205][T11240] __x64_sys_sendmsg+0xd4/0x160 [ 172.219311][T11240] x64_sys_call+0x17ba/0x3000 [ 172.219344][T11240] do_syscall_64+0xc0/0x2a0 [ 172.219381][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.219466][T11240] RIP: 0033:0x7f6ff61faeb9 [ 172.219482][T11240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.219503][T11240] RSP: 002b:00007f6ff4c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.219530][T11240] RAX: ffffffffffffffda RBX: 00007f6ff6475fa0 RCX: 00007f6ff61faeb9 [ 172.219548][T11240] RDX: 0000000020040840 RSI: 0000200000000080 RDI: 0000000000000003 [ 172.219619][T11240] RBP: 00007f6ff4c57090 R08: 0000000000000000 R09: 0000000000000000 [ 172.219637][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.219654][T11240] R13: 00007f6ff6476038 R14: 00007f6ff6475fa0 R15: 00007ffeae7b8fd8 [ 172.219676][T11240] [ 172.754963][T11263] FAULT_INJECTION: forcing a failure. [ 172.754963][T11263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.768252][T11263] CPU: 1 UID: 0 PID: 11263 Comm: syz.4.2554 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.768285][T11263] Tainted: [W]=WARN [ 172.768292][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.768303][T11263] Call Trace: [ 172.768309][T11263] [ 172.768316][T11263] __dump_stack+0x1d/0x30 [ 172.768472][T11263] dump_stack_lvl+0x95/0xd0 [ 172.768498][T11263] dump_stack+0x15/0x1b [ 172.768522][T11263] should_fail_ex+0x263/0x280 [ 172.768598][T11263] should_fail+0xb/0x20 [ 172.768667][T11263] should_fail_usercopy+0x1a/0x20 [ 172.768705][T11263] _copy_to_user+0x20/0xa0 [ 172.768729][T11263] simple_read_from_buffer+0xb5/0x130 [ 172.768801][T11263] proc_fail_nth_read+0x10e/0x150 [ 172.768868][T11263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.768897][T11263] vfs_read+0x1ab/0x7f0 [ 172.768919][T11263] ? __rcu_read_unlock+0x4e/0x70 [ 172.768960][T11263] ? __fget_files+0x184/0x1c0 [ 172.769118][T11263] ? kmem_cache_free+0xdf/0x380 [ 172.769140][T11263] ? mutex_lock+0x57/0x90 [ 172.769161][T11263] ksys_read+0xdc/0x1a0 [ 172.769179][T11263] __x64_sys_read+0x40/0x50 [ 172.769274][T11263] x64_sys_call+0x2889/0x3000 [ 172.769307][T11263] do_syscall_64+0xc0/0x2a0 [ 172.769371][T11263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.769400][T11263] RIP: 0033:0x7fe36566b78e [ 172.769444][T11263] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.769469][T11263] RSP: 002b:00007fe364106fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.769495][T11263] RAX: ffffffffffffffda RBX: 00007fe3641076c0 RCX: 00007fe36566b78e [ 172.769648][T11263] RDX: 000000000000000f RSI: 00007fe3641070a0 RDI: 0000000000000007 [ 172.769700][T11263] RBP: 00007fe364107090 R08: 0000000000000000 R09: 0000000000000000 [ 172.769717][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.769748][T11263] R13: 00007fe365926038 R14: 00007fe365925fa0 R15: 00007ffe2143b6b8 [ 172.769775][T11263] [ 172.979743][T11266] loop7: detected capacity change from 0 to 512 [ 172.986554][T11266] EXT4-fs: Ignoring removed nobh option [ 172.992268][T11266] ext3: Unknown parameter 'grpquota..' [ 173.411571][T11274] syzkaller1: entered promiscuous mode [ 173.417151][T11274] syzkaller1: entered allmulticast mode [ 173.437496][ T29] audit: type=1400 audit(1769754362.429:2987): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 173.803290][T11287] FAULT_INJECTION: forcing a failure. [ 173.803290][T11287] name failslab, interval 1, probability 0, space 0, times 0 [ 173.813728][T11289] x_tables: unsorted underflow at hook 3 [ 173.816141][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.4.2563 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.816324][T11287] Tainted: [W]=WARN [ 173.816345][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.816386][T11287] Call Trace: [ 173.816406][T11287] [ 173.816434][T11287] __dump_stack+0x1d/0x30 [ 173.816514][T11287] dump_stack_lvl+0x95/0xd0 [ 173.816588][T11287] dump_stack+0x15/0x1b [ 173.816657][T11287] should_fail_ex+0x263/0x280 [ 173.816753][T11287] should_failslab+0x8c/0xb0 [ 173.816835][T11287] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 173.816913][T11287] ? init_rescuer+0x93/0x290 [ 173.817001][T11287] init_rescuer+0x93/0x290 [ 173.817140][T11287] ? move_to_free_list+0xb0/0xd0 [ 173.817255][T11287] alloc_workqueue_noprof+0x157b/0x1710 [ 173.817425][T11287] bond_init+0x94/0x2a0 [ 173.817534][T11287] register_netdevice+0x23e/0x1000 [ 173.817669][T11287] bond_newlink+0x2f/0xb0 [ 173.817746][T11287] ? __pfx_bond_newlink+0x10/0x10 [ 173.817909][T11287] rtnl_newlink_create+0x1e4/0x650 [ 173.817998][T11287] ? security_capable+0x7b/0x90 [ 173.818102][T11287] ? netlink_ns_capable+0x86/0xa0 [ 173.818220][T11287] rtnl_newlink+0xf5b/0x1370 [ 173.818361][T11287] ? xas_load+0x413/0x430 [ 173.818422][T11287] ? __rcu_read_unlock+0x4e/0x70 [ 173.818664][T11287] ? xa_load+0xb1/0xe0 [ 173.818757][T11287] ? __rcu_read_unlock+0x4e/0x70 [ 173.818873][T11287] ? avc_has_perm_noaudit+0xab/0x130 [ 173.819050][T11287] ? cred_has_capability+0x224/0x290 [ 173.819299][T11287] ? selinux_capable+0x31/0x40 [ 173.819325][T11287] ? security_capable+0x7b/0x90 [ 173.819353][T11287] ? ns_capable+0x7c/0xb0 [ 173.819461][T11287] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.819536][T11287] rtnetlink_rcv_msg+0x64b/0x720 [ 173.819640][T11287] ? avc_has_perm_noaudit+0xab/0x130 [ 173.819764][T11287] netlink_rcv_skb+0x123/0x220 [ 173.819891][T11287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.819994][T11287] rtnetlink_rcv+0x1c/0x30 [ 173.820069][T11287] netlink_unicast+0x5c0/0x690 [ 173.820196][T11287] netlink_sendmsg+0x5c8/0x6f0 [ 173.820324][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.820381][T11287] ____sys_sendmsg+0x5af/0x600 [ 173.820457][T11287] ___sys_sendmsg+0x195/0x1e0 [ 173.820574][T11287] __x64_sys_sendmsg+0xd4/0x160 [ 173.820650][T11287] x64_sys_call+0x17ba/0x3000 [ 173.820805][T11287] do_syscall_64+0xc0/0x2a0 [ 173.820903][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.820970][T11287] RIP: 0033:0x7fe3656aaeb9 [ 173.821016][T11287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.821149][T11287] RSP: 002b:00007fe364107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.821230][T11287] RAX: ffffffffffffffda RBX: 00007fe365925fa0 RCX: 00007fe3656aaeb9 [ 173.821274][T11287] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 173.821316][T11287] RBP: 00007fe364107090 R08: 0000000000000000 R09: 0000000000000000 [ 173.821357][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.821436][T11287] R13: 00007fe365926038 R14: 00007fe365925fa0 R15: 00007ffe2143b6b8 [ 173.821500][T11287] [ 173.821604][T11287] workqueue: Failed to allocate a rescuer for wq "bond3" [ 174.033426][T11296] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 174.203474][T11307] __nla_validate_parse: 10 callbacks suppressed [ 174.203543][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2567'. [ 174.266172][T11296] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2567'. [ 174.352361][T11323] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2578'. [ 174.373431][T11323] veth5: entered promiscuous mode [ 174.379361][T11323] veth5: entered allmulticast mode [ 174.418202][ T29] audit: type=1400 audit(1769754363.336:2988): avc: denied { write } for pid=11329 comm="syz.0.2581" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 174.458923][T11331] loop4: detected capacity change from 0 to 512 [ 174.479126][T11331] EXT4-fs: Ignoring removed nobh option [ 174.484923][T11331] ext3: Unknown parameter 'grpquota..' [ 174.521541][T11338] loop7: detected capacity change from 0 to 128 [ 174.618912][T11350] netlink: 'syz.1.2587': attribute type 3 has an invalid length. [ 174.635232][T11350] netlink: 'syz.1.2587': attribute type 3 has an invalid length. [ 174.657355][T11352] FAULT_INJECTION: forcing a failure. [ 174.657355][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 174.670054][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.0.2590 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.670164][T11352] Tainted: [W]=WARN [ 174.670174][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.670188][T11352] Call Trace: [ 174.670194][T11352] [ 174.670202][T11352] __dump_stack+0x1d/0x30 [ 174.670228][T11352] dump_stack_lvl+0x95/0xd0 [ 174.670252][T11352] dump_stack+0x15/0x1b [ 174.670279][T11352] should_fail_ex+0x263/0x280 [ 174.670340][T11352] should_failslab+0x8c/0xb0 [ 174.670412][T11352] __kmalloc_noprof+0xb8/0x580 [ 174.670442][T11352] ? io_cache_alloc_new+0x2a/0xb0 [ 174.670519][T11352] io_cache_alloc_new+0x2a/0xb0 [ 174.670545][T11352] __io_prep_rw+0x118/0x710 [ 174.670572][T11352] ? __rcu_read_unlock+0x4e/0x70 [ 174.670603][T11352] io_prep_rwv+0x33/0x260 [ 174.670631][T11352] io_prep_writev+0x22/0x30 [ 174.670695][T11352] io_submit_sqes+0x70e/0x11b0 [ 174.670734][T11352] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 174.670771][T11352] ? __rcu_read_unlock+0x4e/0x70 [ 174.670887][T11352] ? get_pid_task+0x96/0xd0 [ 174.670924][T11352] ? proc_fail_nth_write+0x13b/0x160 [ 174.670962][T11352] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.671006][T11352] ? vfs_write+0x86e/0x9f0 [ 174.671043][T11352] ? __rcu_read_unlock+0x4e/0x70 [ 174.671081][T11352] ? __fget_files+0x184/0x1c0 [ 174.671134][T11352] ? mutex_lock+0x57/0x90 [ 174.671161][T11352] ? mutex_unlock+0x4e/0x90 [ 174.671189][T11352] ? fput+0x8f/0xc0 [ 174.671225][T11352] __x64_sys_io_uring_enter+0x78/0x90 [ 174.671339][T11352] x64_sys_call+0x27e4/0x3000 [ 174.671417][T11352] do_syscall_64+0xc0/0x2a0 [ 174.671456][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.671483][T11352] RIP: 0033:0x7f6ff61faeb9 [ 174.671503][T11352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.671590][T11352] RSP: 002b:00007f6ff4c57028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 174.671621][T11352] RAX: ffffffffffffffda RBX: 00007f6ff6475fa0 RCX: 00007f6ff61faeb9 [ 174.671639][T11352] RDX: 0000000000000002 RSI: 0000000000004d10 RDI: 0000000000000004 [ 174.671656][T11352] RBP: 00007f6ff4c57090 R08: 0000000000000000 R09: 0000000000000000 [ 174.671673][T11352] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 174.671689][T11352] R13: 00007f6ff6476038 R14: 00007f6ff6475fa0 R15: 00007ffeae7b8fd8 [ 174.671758][T11352] [ 174.940704][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2593'. [ 175.061543][T11372] blktrace: Concurrent blktraces are not allowed on loop5 [ 175.114932][T11382] loop4: detected capacity change from 0 to 512 [ 175.121752][T11382] EXT4-fs: Ignoring removed nobh option [ 175.127383][T11382] ext3: Unknown parameter 'grpquota..' [ 175.179313][ T29] audit: type=1400 audit(1769754364.019:2989): avc: denied { connect } for pid=11385 comm="syz.7.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 175.199111][ T29] audit: type=1400 audit(1769754364.019:2990): avc: denied { setattr } for pid=11383 comm="syz.1.2601" name="RAW" dev="sockfs" ino=40192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.295681][T11396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.324795][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 175.395878][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2612'. [ 175.406161][ T29] audit: type=1400 audit(1769754364.253:2991): avc: denied { ioctl } for pid=11411 comm="syz.6.2612" path="socket:[39470]" dev="sockfs" ino=39470 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.420683][T11417] loop1: detected capacity change from 0 to 128 [ 175.465776][T11412] loop6: detected capacity change from 0 to 2048 [ 175.512579][ T4238] Alternate GPT is invalid, using primary GPT. [ 175.519002][ T4238] loop6: p2 p3 p7 [ 175.519302][T11426] loop0: detected capacity change from 0 to 512 [ 175.540840][T11412] Alternate GPT is invalid, using primary GPT. [ 175.547271][T11412] loop6: p2 p3 p7 [ 175.564550][ T29] audit: type=1400 audit(1769754364.421:2992): avc: denied { read write } for pid=11411 comm="syz.6.2612" name="loop6p3" dev="devtmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.588767][ T29] audit: type=1400 audit(1769754364.421:2993): avc: denied { open } for pid=11411 comm="syz.6.2612" path="/dev/loop6p3" dev="devtmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.642175][T11426] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 175.682373][T11426] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 175.695997][T11426] EXT4-fs (loop0): 1 truncate cleaned up [ 175.702307][T11426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.771375][T11441] EXT4-fs: Ignoring removed nobh option [ 175.777823][T11441] ext3: Unknown parameter 'grpquota..' [ 175.919584][T11454] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 175.952609][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.975882][T11454] xt_CT: No such helper "snmp_trap" [ 176.119418][ T3306] loop0: p2 p3 [ 176.123582][ T3306] loop0: p3 start 331777 is beyond EOD, truncated [ 176.139743][T11461] loop0: p2 p3 [ 176.144327][T11461] loop0: p3 start 331777 is beyond EOD, truncated [ 176.172843][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 176.199919][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 176.211495][T11467] tmpfs: Bad value for 'size' [ 176.305167][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'. [ 176.314361][T11475] erspan0: entered promiscuous mode [ 176.331220][T11482] EXT4-fs: Ignoring removed nobh option [ 176.336914][T11482] ext3: Unknown parameter 'grpquota..' [ 176.392884][T11485] EXT4-fs: Ignoring removed oldalloc option [ 176.399120][T11485] EXT4-fs: Ignoring removed orlov option [ 176.422617][T11485] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 176.434866][T11485] System zones: 0-1, 3-12 [ 176.440279][T11485] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.504532][T11497] set_capacity_and_notify: 5 callbacks suppressed [ 176.504570][T11497] loop1: detected capacity change from 0 to 128 [ 176.520895][T11497] vfat: Unknown parameter '˙' [ 176.544124][ T9819] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 176.671563][T11511] loop1: detected capacity change from 0 to 512 [ 176.687374][T11513] loop0: detected capacity change from 0 to 512 [ 176.689201][T11511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.708905][T11511] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.730798][T11513] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.740704][T11513] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 176.766305][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 176.766323][ T29] audit: type=1400 audit(1769754365.535:3020): avc: denied { read } for pid=11512 comm="syz.0.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.840658][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.873361][ T29] audit: type=1400 audit(1769754365.591:3021): avc: denied { ioctl } for pid=11512 comm="syz.0.2653" path="socket:[40429]" dev="sockfs" ino=40429 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.935155][T11523] loop1: detected capacity change from 0 to 512 [ 176.955170][T11523] EXT4-fs: Ignoring removed nobh option [ 176.960829][T11523] ext3: Unknown parameter 'grpquota..' [ 177.242921][ T29] audit: type=1400 audit(1769754365.984:3022): avc: denied { bind } for pid=11544 comm="syz.6.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.405833][T11553] netlink: 5236 bytes leftover after parsing attributes in process `syz.6.2668'. [ 177.415124][T11553] netlink: 5236 bytes leftover after parsing attributes in process `syz.6.2668'. [ 177.526306][T11553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=523 sclass=netlink_route_socket pid=11553 comm=syz.6.2668 [ 177.597278][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2669'. [ 177.629970][T11555] veth5: entered promiscuous mode [ 177.635081][T11555] veth5: entered allmulticast mode [ 177.808042][T11570] loop6: detected capacity change from 0 to 8192 [ 177.816554][T11570] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.836390][T11572] loop1: detected capacity change from 0 to 1024 [ 177.843495][ T29] audit: type=1400 audit(1769754366.554:3023): avc: denied { watch watch_reads } for pid=11569 comm="syz.6.2674" path="/157/file1/file1" dev="loop6" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 177.876821][T11575] loop0: detected capacity change from 0 to 128 [ 177.897188][T11575] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.931397][T11575] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.937802][T11572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.002227][T11585] vlan3: entered promiscuous mode [ 178.008051][ T29] audit: type=1400 audit(1769754366.694:3024): avc: denied { setattr } for pid=11573 comm="syz.0.2677" path="/587/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 178.055250][T11588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.069696][T11588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.119373][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.237623][T11600] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 178.245557][T11600] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 178.281241][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.343073][T11604] loop1: detected capacity change from 0 to 2048 [ 178.375524][ T3306] loop1: p1 < > p4 [ 178.382116][ T3306] loop1: p4 start 268435456 is beyond EOD, truncated [ 178.444730][T11604] loop1: p1 < > p4 [ 178.456739][T11604] loop1: p4 start 268435456 is beyond EOD, truncated [ 178.480585][T11611] loop0: detected capacity change from 0 to 512 [ 178.528529][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 178.530243][T11618] loop1: detected capacity change from 0 to 512 [ 178.548758][T11619] EXT4-fs: Ignoring removed orlov option [ 178.558696][T11619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.561326][T11611] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2691: corrupted inode contents [ 178.582565][T11619] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.601689][T11611] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.2691: mark_inode_dirty error [ 178.624837][T11619] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2692: bg 0: block 248: padding at end of block bitmap is not set [ 178.663711][T11619] Quota error (device loop4): write_blk: dquota write failed [ 178.671158][T11619] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 178.681381][T11619] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2692: Failed to acquire dquot type 1 [ 178.717292][T11618] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 178.726818][T11619] EXT4-fs (loop4): 1 truncate cleaned up [ 178.741069][T11611] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2691: corrupted inode contents [ 178.756179][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 178.824790][T11627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.845373][T11618] EXT4-fs (loop1): orphan cleanup on readonly fs [ 178.854345][T11619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.879515][T11618] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 178.898272][T11613] EXT4-fs: Ignoring removed orlov option [ 178.929663][T11618] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 178.938241][T11613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.961343][T11618] EXT4-fs error (device loop1): __ext4_iget:5426: inode #16: block 127754: comm syz.1.2693: invalid block [ 178.981116][T11613] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 178.995209][T11611] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2691: mark_inode_dirty error [ 179.011246][T11618] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2693: couldn't read orphan inode 16 (err -117) [ 179.027645][T11618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.042589][T11613] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.2692: Abort forced by user [ 179.062230][T11613] EXT4-fs (loop4): Remounting filesystem read-only [ 179.062926][T11611] Quota error (device loop0): write_blk: dquota write failed [ 179.068814][T11613] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 179.097480][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.106225][T11613] ext4 filesystem being remounted at /562/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.123264][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.145562][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.157672][ T29] audit: type=1326 audit(1769754367.779:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.7.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 179.160226][T11611] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 179.227232][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.244646][T11611] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2691: Failed to acquire dquot type 0 [ 179.263179][T11611] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2691: corrupted inode contents [ 179.307382][T11648] ext4: Unknown parameter 'smackfsroot' [ 179.388182][T11611] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.2691: mark_inode_dirty error [ 179.396626][T11656] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 179.451595][T11611] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2691: corrupted inode contents [ 179.485448][T11611] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2691: mark_inode_dirty error [ 179.572251][T11611] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2691: corrupted inode contents [ 179.678072][T11674] __nla_validate_parse: 2 callbacks suppressed [ 179.678089][T11674] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2711'. [ 179.693599][T11674] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 179.725515][T11611] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 179.735320][T11611] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2691: corrupted inode contents [ 179.747416][T11608] syz.0.2691 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 179.747793][T11611] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.2691: mark_inode_dirty error [ 179.761977][T11608] CPU: 1 UID: 0 PID: 11608 Comm: syz.0.2691 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.762112][T11608] Tainted: [W]=WARN [ 179.762142][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.762199][T11608] Call Trace: [ 179.762220][T11608] [ 179.762243][T11608] __dump_stack+0x1d/0x30 [ 179.762365][T11608] dump_stack_lvl+0x95/0xd0 [ 179.762445][T11608] dump_stack+0x15/0x1b [ 179.762512][T11608] dump_header+0x80/0x240 [ 179.762589][T11608] oom_kill_process+0x295/0x350 [ 179.762674][T11608] out_of_memory+0x97d/0xb80 [ 179.762870][T11608] try_charge_memcg+0x62e/0xa10 [ 179.762963][T11608] obj_cgroup_charge_pages+0x23/0xc0 [ 179.763072][T11608] __memcg_kmem_charge_page+0x9e/0x170 [ 179.763184][T11608] __alloc_frozen_pages_noprof+0x18a/0x350 [ 179.763302][T11608] alloc_pages_mpol+0xb3/0x260 [ 179.763460][T11608] alloc_pages_noprof+0x8f/0x130 [ 179.763660][T11608] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 179.763794][T11608] __kvmalloc_node_noprof+0x471/0x680 [ 179.763894][T11608] ? ip_set_alloc+0x24/0x30 [ 179.764023][T11608] ? ip_set_alloc+0x24/0x30 [ 179.764187][T11608] ip_set_alloc+0x24/0x30 [ 179.764290][T11608] hash_netiface_create+0x282/0x740 [ 179.764491][T11608] ? __pfx_hash_netiface_create+0x10/0x10 [ 179.764638][T11608] ip_set_create+0x3cf/0x970 [ 179.764732][T11608] ? __nla_parse+0x40/0x60 [ 179.764802][T11608] nfnetlink_rcv_msg+0x509/0x5d0 [ 179.764982][T11608] netlink_rcv_skb+0x123/0x220 [ 179.765149][T11608] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 179.765230][T11608] nfnetlink_rcv+0x167/0x1720 [ 179.765260][T11608] ? __kfree_skb+0x109/0x150 [ 179.765314][T11608] ? nlmon_xmit+0x4f/0x60 [ 179.765398][T11608] ? consume_skb+0x49/0x140 [ 179.765472][T11608] ? nlmon_xmit+0x4f/0x60 [ 179.765583][T11608] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 179.765778][T11608] ? __dev_queue_xmit+0x139a/0x1f20 [ 179.765914][T11608] ? __dev_queue_xmit+0x148/0x1f20 [ 179.766038][T11608] ? ref_tracker_free+0x37d/0x3e0 [ 179.766161][T11608] ? __netlink_deliver_tap+0x4dc/0x500 [ 179.766397][T11608] netlink_unicast+0x5c0/0x690 [ 179.766509][T11608] netlink_sendmsg+0x5c8/0x6f0 [ 179.766583][T11608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.766715][T11608] ____sys_sendmsg+0x5af/0x600 [ 179.766788][T11608] ___sys_sendmsg+0x195/0x1e0 [ 179.766959][T11608] __x64_sys_sendmsg+0xd4/0x160 [ 179.767028][T11608] x64_sys_call+0x17ba/0x3000 [ 179.767111][T11608] do_syscall_64+0xc0/0x2a0 [ 179.767222][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.767295][T11608] RIP: 0033:0x7f6ff61faeb9 [ 179.767388][T11608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.767451][T11608] RSP: 002b:00007f6ff4c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.767515][T11608] RAX: ffffffffffffffda RBX: 00007f6ff6475fa0 RCX: 00007f6ff61faeb9 [ 179.767566][T11608] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 179.767651][T11608] RBP: 00007f6ff6268c1f R08: 0000000000000000 R09: 0000000000000000 [ 179.767709][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.767764][T11608] R13: 00007f6ff6476038 R14: 00007f6ff6475fa0 R15: 00007ffeae7b8fd8 [ 179.767828][T11608] [ 179.769596][T11608] memory: usage 307200kB, limit 307200kB, failcnt 205 [ 179.855627][T11611] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 179.856062][T11611] EXT4-fs (loop0): 1 truncate cleaned up [ 179.860775][T11608] memory+swap: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 179.860826][T11608] kmem: usage 227228kB, limit 9007199254740988kB, failcnt 0 [ 179.860843][T11608] Memory cgroup stats for /syz0: [ 179.947164][T11608] cache 81199104 [ 180.147021][T11608] rss 688128 [ 180.150969][T11608] shmem 69664768 [ 180.154529][T11608] mapped_file 339968 [ 180.158444][T11608] dirty 4096 [ 180.161697][T11608] writeback 0 [ 180.165008][T11608] workingset_refault_anon 0 [ 180.169529][T11608] workingset_refault_file 2239 [ 180.175094][T11608] swap 0 [ 180.177977][T11608] swapcached 0 [ 180.181384][T11608] pgpgin 139560 [ 180.184886][T11608] pgpgout 119568 [ 180.188447][T11608] pgfault 121654 [ 180.192016][T11608] pgmajfault 9 [ 180.196088][T11608] inactive_anon 69808128 [ 180.200353][T11608] active_anon 544768 [ 180.204309][T11608] inactive_file 0 [ 180.207994][T11608] active_file 11534336 [ 180.212105][T11608] unevictable 0 [ 180.216373][T11608] hierarchical_memory_limit 314572800 [ 180.221768][T11608] hierarchical_memsw_limit 9223372036854771712 [ 180.227995][T11608] total_cache 81199104 [ 180.232084][T11608] total_rss 688128 [ 180.236562][T11608] total_shmem 69664768 [ 180.240657][T11608] total_mapped_file 339968 [ 180.245101][T11608] total_dirty 4096 [ 180.248878][T11608] total_writeback 0 [ 180.252718][T11608] total_workingset_refault_anon 0 [ 180.258403][T11608] total_workingset_refault_file 2239 [ 180.258697][T11611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.263701][T11608] total_swap 0 [ 180.263713][T11608] total_swapcached 0 [ 180.263723][T11608] total_pgpgin 139560 [ 180.288319][T11608] total_pgpgout 119568 [ 180.292494][T11608] total_pgfault 121654 [ 180.296579][T11608] total_pgmajfault 9 [ 180.301290][T11608] total_inactive_anon 69808128 [ 180.306149][T11608] total_active_anon 544768 [ 180.310607][T11608] total_inactive_file 0 [ 180.314778][T11608] total_active_file 11534336 [ 180.319383][T11608] total_unevictable 0 [ 180.324130][T11608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2691,pid=11607,uid=0 [ 180.338915][T11608] Memory cgroup out of memory: Killed process 11607 (syz.0.2691) total-vm:94132kB, anon-rss:1336kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 180.411093][T11611] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.503357][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.644092][T11695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11695 comm=syz.0.2715 [ 180.691389][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 180.706640][T11692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.720629][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2719'. [ 180.830565][T11703] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 180.855232][T11703] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 610 with error 28 [ 180.867712][T11703] EXT4-fs (loop4): This should not happen!! Data will be lost [ 180.867712][T11703] [ 180.877402][T11703] EXT4-fs (loop4): Total free blocks count 0 [ 180.883406][T11703] EXT4-fs (loop4): Free/Dirty block details [ 180.889368][T11703] EXT4-fs (loop4): free_blocks=2415919504 [ 180.892400][T11704] syzkaller0: entered promiscuous mode [ 180.895114][T11703] EXT4-fs (loop4): dirty_blocks=624 [ 180.900620][T11704] syzkaller0: entered allmulticast mode [ 180.911681][T11703] EXT4-fs (loop4): Block reservation details [ 180.917738][T11703] EXT4-fs (loop4): i_reserved_data_blocks=39 [ 180.920691][T11706] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.934149][T11706] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.943212][T11706] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 180.995241][T11711] FAULT_INJECTION: forcing a failure. [ 180.995241][T11711] name failslab, interval 1, probability 0, space 0, times 0 [ 181.007951][T11711] CPU: 1 UID: 0 PID: 11711 Comm: syz.0.2722 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.008034][T11711] Tainted: [W]=WARN [ 181.008043][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.008060][T11711] Call Trace: [ 181.008068][T11711] [ 181.008077][T11711] __dump_stack+0x1d/0x30 [ 181.008110][T11711] dump_stack_lvl+0x95/0xd0 [ 181.008169][T11711] dump_stack+0x15/0x1b [ 181.008234][T11711] should_fail_ex+0x263/0x280 [ 181.008267][T11711] should_failslab+0x8c/0xb0 [ 181.008448][T11711] kmem_cache_alloc_noprof+0x68/0x490 [ 181.008555][T11711] ? skb_clone+0x151/0x1f0 [ 181.008577][T11711] skb_clone+0x151/0x1f0 [ 181.008599][T11711] __netlink_deliver_tap+0x2c9/0x500 [ 181.008648][T11711] __netlink_sendskb+0xc3/0xd0 [ 181.008687][T11711] netlink_dump+0x72b/0x8a0 [ 181.008779][T11711] __netlink_dump_start+0x43e/0x520 [ 181.008883][T11711] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 181.008911][T11711] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 181.008946][T11711] xfrm_user_rcv_msg+0x2b4/0x670 [ 181.009020][T11711] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 181.009052][T11711] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 181.009125][T11711] netlink_rcv_skb+0x123/0x220 [ 181.009163][T11711] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 181.009240][T11711] xfrm_netlink_rcv+0x48/0x60 [ 181.009273][T11711] netlink_unicast+0x5c0/0x690 [ 181.009392][T11711] netlink_sendmsg+0x5c8/0x6f0 [ 181.009414][T11711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.009435][T11711] ____sys_sendmsg+0x5af/0x600 [ 181.009465][T11711] ___sys_sendmsg+0x195/0x1e0 [ 181.009529][T11711] __x64_sys_sendmsg+0xd4/0x160 [ 181.009564][T11711] x64_sys_call+0x17ba/0x3000 [ 181.009595][T11711] do_syscall_64+0xc0/0x2a0 [ 181.009686][T11711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.009708][T11711] RIP: 0033:0x7f6ff61faeb9 [ 181.009725][T11711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.009750][T11711] RSP: 002b:00007f6ff4c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.009776][T11711] RAX: ffffffffffffffda RBX: 00007f6ff6475fa0 RCX: 00007f6ff61faeb9 [ 181.009814][T11711] RDX: 0000000020040840 RSI: 0000200000000080 RDI: 0000000000000003 [ 181.009828][T11711] RBP: 00007f6ff4c57090 R08: 0000000000000000 R09: 0000000000000000 [ 181.009842][T11711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.009858][T11711] R13: 00007f6ff6476038 R14: 00007f6ff6475fa0 R15: 00007ffeae7b8fd8 [ 181.009885][T11711] [ 181.012896][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 181.277119][T11716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.394818][T11728] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 181.420613][T11725] FAULT_INJECTION: forcing a failure. [ 181.420613][T11725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.434542][T11725] CPU: 1 UID: 0 PID: 11725 Comm: syz.7.2728 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.434575][T11725] Tainted: [W]=WARN [ 181.434582][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.434645][T11725] Call Trace: [ 181.434660][T11725] [ 181.434670][T11725] __dump_stack+0x1d/0x30 [ 181.434704][T11725] dump_stack_lvl+0x95/0xd0 [ 181.434807][T11725] dump_stack+0x15/0x1b [ 181.434833][T11725] should_fail_ex+0x263/0x280 [ 181.434866][T11725] should_fail+0xb/0x20 [ 181.434894][T11725] should_fail_usercopy+0x1a/0x20 [ 181.434938][T11725] _copy_from_iter+0xcf/0xea0 [ 181.434980][T11725] ? __alloc_skb+0x397/0x4b0 [ 181.435019][T11725] ? __alloc_skb+0x219/0x4b0 [ 181.435126][T11725] netlink_sendmsg+0x4ae/0x6f0 [ 181.435154][T11725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.435239][T11725] ____sys_sendmsg+0x5af/0x600 [ 181.435262][T11725] ___sys_sendmsg+0x195/0x1e0 [ 181.435301][T11725] __x64_sys_sendmsg+0xd4/0x160 [ 181.435412][T11725] x64_sys_call+0x17ba/0x3000 [ 181.435440][T11725] do_syscall_64+0xc0/0x2a0 [ 181.435480][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.435509][T11725] RIP: 0033:0x7f64c97eaeb9 [ 181.435530][T11725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.435625][T11725] RSP: 002b:00007f64c8247028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.435645][T11725] RAX: ffffffffffffffda RBX: 00007f64c9a65fa0 RCX: 00007f64c97eaeb9 [ 181.435659][T11725] RDX: 0000000020040840 RSI: 0000200000000080 RDI: 0000000000000003 [ 181.435672][T11725] RBP: 00007f64c8247090 R08: 0000000000000000 R09: 0000000000000000 [ 181.435685][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.435703][T11725] R13: 00007f64c9a66038 R14: 00007f64c9a65fa0 R15: 00007ffd5460f108 [ 181.435807][T11725] [ 181.728999][T11736] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 181.805277][T11742] syzkaller1: entered promiscuous mode [ 181.820110][T11742] syzkaller1: entered allmulticast mode [ 182.005046][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2739'. [ 182.084959][T11758] lo speed is unknown, defaulting to 1000 [ 182.090814][T11758] lo speed is unknown, defaulting to 1000 [ 182.097640][T11758] lo speed is unknown, defaulting to 1000 [ 182.104195][T11758] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.112158][T11758] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 182.160183][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 182.160201][ T29] audit: type=1326 audit(1769754370.511:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.190747][ T29] audit: type=1326 audit(1769754370.511:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.216253][T11758] lo speed is unknown, defaulting to 1000 [ 182.222645][T11758] lo speed is unknown, defaulting to 1000 [ 182.229142][T11758] lo speed is unknown, defaulting to 1000 [ 182.236457][T11758] lo speed is unknown, defaulting to 1000 [ 182.242807][T11758] lo speed is unknown, defaulting to 1000 [ 182.400325][T11763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.456324][ T3319] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /594/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 182.546881][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2745'. [ 182.555971][ T29] audit: type=1326 audit(1769754370.670:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.578754][ T3319] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 182.579700][ T29] audit: type=1326 audit(1769754370.717:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.621812][ T29] audit: type=1326 audit(1769754370.717:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.639889][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 182.645724][ T29] audit: type=1326 audit(1769754370.717:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.645759][ T29] audit: type=1326 audit(1769754370.717:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.645787][ T29] audit: type=1326 audit(1769754370.717:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.645828][ T29] audit: type=1326 audit(1769754370.717:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.645855][ T29] audit: type=1326 audit(1769754370.726:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c97eaeb9 code=0x7ffc0000 [ 182.742573][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2747'. [ 182.772549][ T3319] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /594/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 182.833530][ T3319] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 182.854719][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 182.867314][ T3319] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /594/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 182.902258][T11779] FAULT_INJECTION: forcing a failure. [ 182.902258][T11779] name failslab, interval 1, probability 0, space 0, times 0 [ 182.915730][T11779] CPU: 1 UID: 0 PID: 11779 Comm: syz.1.2748 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.915769][T11779] Tainted: [W]=WARN [ 182.915779][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.915796][T11779] Call Trace: [ 182.915804][T11779] [ 182.915815][T11779] __dump_stack+0x1d/0x30 [ 182.915859][T11779] dump_stack_lvl+0x95/0xd0 [ 182.915914][T11779] dump_stack+0x15/0x1b [ 182.915952][T11779] should_fail_ex+0x263/0x280 [ 182.915992][T11779] should_failslab+0x8c/0xb0 [ 182.916082][T11779] __kmalloc_noprof+0xb8/0x580 [ 182.916185][T11779] ? io_cache_alloc_new+0x2a/0xb0 [ 182.916214][T11779] io_cache_alloc_new+0x2a/0xb0 [ 182.916308][T11779] io_arm_apoll+0x20e/0x410 [ 182.916350][T11779] io_arm_poll_handler+0x131/0x160 [ 182.916404][T11779] io_queue_async+0x25d/0x2d0 [ 182.916445][T11779] io_submit_sqes+0xb8f/0x11b0 [ 182.916518][T11779] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 182.916600][T11779] ? __rcu_read_unlock+0x4e/0x70 [ 182.916634][T11779] ? get_pid_task+0x96/0xd0 [ 182.916686][T11779] ? proc_fail_nth_write+0x13b/0x160 [ 182.916723][T11779] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.916756][T11779] ? vfs_write+0x86e/0x9f0 [ 182.916778][T11779] ? __rcu_read_unlock+0x4e/0x70 [ 182.916849][T11779] ? __fget_files+0x184/0x1c0 [ 182.916888][T11779] ? mutex_lock+0x57/0x90 [ 182.916913][T11779] ? mutex_unlock+0x4e/0x90 [ 182.916935][T11779] ? fput+0x8f/0xc0 [ 182.917040][T11779] __x64_sys_io_uring_enter+0x78/0x90 [ 182.917073][T11779] x64_sys_call+0x27e4/0x3000 [ 182.917180][T11779] do_syscall_64+0xc0/0x2a0 [ 182.917269][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.917297][T11779] RIP: 0033:0x7f729852aeb9 [ 182.917316][T11779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.917348][T11779] RSP: 002b:00007f7296f87028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 182.917374][T11779] RAX: ffffffffffffffda RBX: 00007f72987a5fa0 RCX: 00007f729852aeb9 [ 182.917392][T11779] RDX: 0000000000000002 RSI: 0000000000004d10 RDI: 0000000000000004 [ 182.917407][T11779] RBP: 00007f7296f87090 R08: 0000000000000000 R09: 0000000000000000 [ 182.917472][T11779] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 182.917488][T11779] R13: 00007f72987a6038 R14: 00007f72987a5fa0 R15: 00007fff5a5d98e8 [ 182.917512][T11779] [ 182.921434][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2749'. [ 182.957686][ T3319] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 183.032966][T11780] vlan3: entered promiscuous mode [ 183.191459][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 183.207875][ T3319] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /594/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 183.229915][ T3319] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 183.265360][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 183.278590][ T3319] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /594/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 183.311944][T11796] set_capacity_and_notify: 7 callbacks suppressed [ 183.312009][T11796] loop1: detected capacity change from 0 to 512 [ 183.333911][ T3319] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 183.362602][T11797] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2755'. [ 183.365075][T11796] EXT4-fs: inline encryption not supported [ 183.371717][T11797] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 183.377574][T11796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.414929][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 183.438273][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 183.461643][T11796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.470236][T11796] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.482008][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 183.494550][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 183.498482][T11796] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2754: Failed to acquire dquot type 1 [ 183.521398][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 183.523739][T11808] xt_TPROXY: Can be used only with -p tcp or -p udp [ 183.540784][T11796] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 183.561034][ T3319] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 183.589936][T11796] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2754: corrupted inode contents [ 183.602288][T11796] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.2754: mark_inode_dirty error [ 183.614394][T11796] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2754: corrupted inode contents [ 183.626779][T11796] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2754: mark_inode_dirty error [ 183.646591][T11796] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2754: corrupted inode contents [ 183.659398][T11796] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 183.678756][T11796] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2754: corrupted inode contents [ 183.692547][T11796] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.2754: mark_inode_dirty error [ 183.704014][T11817] netlink: 'syz.4.2763': attribute type 1 has an invalid length. [ 183.741208][T11796] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 183.762569][T11796] EXT4-fs (loop1): 1 truncate cleaned up [ 183.787181][T11796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.833328][T11817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.877732][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.911149][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2769'. [ 183.986303][T11839] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2771'. [ 183.995470][T11839] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 184.036099][T11841] FAULT_INJECTION: forcing a failure. [ 184.036099][T11841] name failslab, interval 1, probability 0, space 0, times 0 [ 184.048804][T11841] CPU: 0 UID: 0 PID: 11841 Comm: syz.7.2772 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.048907][T11841] Tainted: [W]=WARN [ 184.048927][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.048945][T11841] Call Trace: [ 184.048967][T11841] [ 184.048977][T11841] __dump_stack+0x1d/0x30 [ 184.049010][T11841] dump_stack_lvl+0x95/0xd0 [ 184.049039][T11841] dump_stack+0x15/0x1b [ 184.049066][T11841] should_fail_ex+0x263/0x280 [ 184.049185][T11841] should_failslab+0x8c/0xb0 [ 184.049311][T11841] __kmalloc_node_noprof+0xbd/0x590 [ 184.049399][T11841] ? crypto_create_tfm_node+0x5c/0x250 [ 184.049435][T11841] crypto_create_tfm_node+0x5c/0x250 [ 184.049461][T11841] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 184.049492][T11841] crypto_alloc_tfm_node+0xdc/0x2b0 [ 184.049528][T11841] crypto_alloc_acomp+0x2d/0x40 [ 184.049635][T11841] ipcomp_init_state+0xea/0x1c0 [ 184.049703][T11841] ipcomp6_init_state+0x8e/0x460 [ 184.049734][T11841] ? pfkey_add+0xbaf/0x1330 [ 184.049764][T11841] __xfrm_init_state+0x77d/0xbf0 [ 184.049830][T11841] xfrm_init_state+0x1a/0x80 [ 184.049869][T11841] pfkey_add+0xec9/0x1330 [ 184.049901][T11841] pfkey_sendmsg+0x876/0x9b0 [ 184.049956][T11841] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 184.050025][T11841] ____sys_sendmsg+0x5af/0x600 [ 184.050096][T11841] ___sys_sendmsg+0x195/0x1e0 [ 184.050155][T11841] __sys_sendmmsg+0x185/0x320 [ 184.050192][T11841] __x64_sys_sendmmsg+0x57/0x70 [ 184.050270][T11841] x64_sys_call+0x1e28/0x3000 [ 184.050334][T11841] do_syscall_64+0xc0/0x2a0 [ 184.050390][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.050430][T11841] RIP: 0033:0x7f64c97eaeb9 [ 184.050445][T11841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.050464][T11841] RSP: 002b:00007f64c8247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 184.050483][T11841] RAX: ffffffffffffffda RBX: 00007f64c9a65fa0 RCX: 00007f64c97eaeb9 [ 184.050561][T11841] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000005 [ 184.050578][T11841] RBP: 00007f64c8247090 R08: 0000000000000000 R09: 0000000000000000 [ 184.050599][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.050613][T11841] R13: 00007f64c9a66038 R14: 00007f64c9a65fa0 R15: 00007ffd5460f108 [ 184.050633][T11841] [ 184.294982][T11847] loop6: detected capacity change from 0 to 256 [ 184.331466][T11847] FAT-fs (loop6): bogus number of directory entries (5) [ 184.338541][T11847] FAT-fs (loop6): Can't find a valid FAT filesystem [ 184.367556][T11850] loop4: detected capacity change from 0 to 1024 [ 184.408986][ T3882] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.418778][T11855] Cannot find set identified by id 0 to match [ 184.425105][T11848] xt_CT: No such helper "snmp_trap" [ 184.431048][T11850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.451554][T11850] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.2775: inode #778331508: comm syz.4.2775: iget: illegal inode # [ 184.467816][T11850] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2775: error while reading EA inode 778331508 err=-117 [ 184.483222][T11850] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #15: comm syz.4.2775: corrupted xattr block 113: invalid header [ 184.519553][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.750139][T11885] loop4: detected capacity change from 0 to 512 [ 184.788191][T11885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.2786: corrupted inode contents [ 184.807130][T11875] lo speed is unknown, defaulting to 1000 [ 184.862762][T11885] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #3: comm syz.4.2786: mark_inode_dirty error [ 184.913065][T11885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.2786: corrupted inode contents [ 184.966903][T11885] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2786: mark_inode_dirty error [ 184.994484][T11885] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2786: Failed to acquire dquot type 0 [ 185.017181][T11885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2786: corrupted inode contents [ 185.029369][T11885] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.2786: mark_inode_dirty error [ 185.041286][T11885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2786: corrupted inode contents [ 185.053574][T11885] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2786: mark_inode_dirty error [ 185.065139][T11885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2786: corrupted inode contents [ 185.071778][ T37] .` (unregistering): Released all slaves [ 185.077712][T11885] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 185.091744][T11885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2786: corrupted inode contents [ 185.103996][T11885] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.2786: mark_inode_dirty error [ 185.108904][ T37] bond1 (unregistering): Released all slaves [ 185.115398][T11885] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 185.115827][T11885] EXT4-fs (loop4): 1 truncate cleaned up [ 185.116652][T11885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.143381][ T37] bond0 (unregistering): Released all slaves [ 185.153663][T11885] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.170728][ T37] bond2 (unregistering): Released all slaves [ 185.179427][ T37] bond3 (unregistering): Released all slaves [ 185.238155][ T37] tipc: Disabling bearer [ 185.243242][ T37] tipc: Left network mode [ 185.265431][T11898] netlink: 'syz.6.2789': attribute type 1 has an invalid length. [ 185.303471][T11898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.316365][ T37] hsr_slave_0: left promiscuous mode [ 185.328525][ T37] hsr_slave_1: left promiscuous mode [ 185.463136][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2789'. [ 185.510386][T11898] bond1: (slave geneve2): making interface the new active one [ 185.532386][T11898] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 185.557212][T11878] syz.4.2786 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 185.571748][T11878] CPU: 0 UID: 0 PID: 11878 Comm: syz.4.2786 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.571786][T11878] Tainted: [W]=WARN [ 185.571805][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.571864][T11878] Call Trace: [ 185.571871][T11878] [ 185.571879][T11878] __dump_stack+0x1d/0x30 [ 185.571909][T11878] dump_stack_lvl+0x95/0xd0 [ 185.571935][T11878] dump_stack+0x15/0x1b [ 185.571960][T11878] dump_header+0x80/0x240 [ 185.572026][T11878] oom_kill_process+0x295/0x350 [ 185.572060][T11878] out_of_memory+0x97d/0xb80 [ 185.572095][T11878] try_charge_memcg+0x62e/0xa10 [ 185.572194][T11878] obj_cgroup_charge_pages+0x23/0xc0 [ 185.572302][T11878] __memcg_kmem_charge_page+0x9e/0x170 [ 185.572403][T11878] __alloc_frozen_pages_noprof+0x18a/0x350 [ 185.572495][T11878] alloc_pages_mpol+0xb3/0x260 [ 185.572539][T11878] alloc_pages_noprof+0x8f/0x130 [ 185.572618][T11878] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 185.572672][T11878] __kvmalloc_node_noprof+0x471/0x680 [ 185.572722][T11878] ? ip_set_alloc+0x24/0x30 [ 185.572762][T11878] ? ip_set_alloc+0x24/0x30 [ 185.572852][T11878] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 185.572890][T11878] ip_set_alloc+0x24/0x30 [ 185.573062][T11878] hash_netiface_create+0x282/0x740 [ 185.573105][T11878] ? __pfx_hash_netiface_create+0x10/0x10 [ 185.573147][T11878] ip_set_create+0x3cf/0x970 [ 185.573308][T11878] ? __nla_parse+0x40/0x60 [ 185.573334][T11878] nfnetlink_rcv_msg+0x509/0x5d0 [ 185.573398][T11878] netlink_rcv_skb+0x123/0x220 [ 185.573523][T11878] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 185.573571][T11878] nfnetlink_rcv+0x167/0x1720 [ 185.573632][T11878] ? mas_next_slot+0x69b/0x6f0 [ 185.573745][T11878] ? __rcu_read_unlock+0x4e/0x70 [ 185.573858][T11878] ? mt_find+0x291/0x3b0 [ 185.573928][T11878] ? cmp_ex_search+0x25/0x40 [ 185.573968][T11878] ? bsearch+0x95/0xc0 [ 185.573996][T11878] ? __pfx_cmp_ex_search+0x10/0x10 [ 185.574081][T11878] ? __import_iovec+0x12b/0x530 [ 185.574113][T11878] ? search_extable+0x53/0x80 [ 185.574158][T11878] ? __import_iovec+0x12b/0x530 [ 185.574265][T11878] ? _raw_spin_lock_bh+0x56/0xb0 [ 185.574346][T11878] ? should_fail_ex+0x30/0x280 [ 185.574479][T11878] ? selinux_nlmsg_lookup+0x99/0x890 [ 185.574509][T11878] ? __rcu_read_unlock+0x33/0x70 [ 185.574550][T11878] ? __netlink_lookup+0x276/0x2b0 [ 185.574582][T11878] netlink_unicast+0x5c0/0x690 [ 185.574633][T11878] netlink_sendmsg+0x5c8/0x6f0 [ 185.574664][T11878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.574766][T11878] ____sys_sendmsg+0x5af/0x600 [ 185.574814][T11878] ___sys_sendmsg+0x195/0x1e0 [ 185.574885][T11878] __x64_sys_sendmsg+0xd4/0x160 [ 185.574912][T11878] x64_sys_call+0x17ba/0x3000 [ 185.574943][T11878] do_syscall_64+0xc0/0x2a0 [ 185.575003][T11878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.575029][T11878] RIP: 0033:0x7fe3656aaeb9 [ 185.575109][T11878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.575135][T11878] RSP: 002b:00007fe364107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.575162][T11878] RAX: ffffffffffffffda RBX: 00007fe365925fa0 RCX: 00007fe3656aaeb9 [ 185.575181][T11878] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 185.575199][T11878] RBP: 00007fe365718c1f R08: 0000000000000000 R09: 0000000000000000 [ 185.575268][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.575286][T11878] R13: 00007fe365926038 R14: 00007fe365925fa0 R15: 00007ffe2143b6b8 [ 185.575323][T11878] [ 185.575333][T11878] memory: usage 307200kB, limit 307200kB, failcnt 536 [ 185.585826][T11875] chnl_net:caif_netlink_parms(): no params data found [ 185.586974][T11878] memory+swap: usage 317212kB, limit 9007199254740988kB, failcnt 0 [ 185.836474][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.837686][T11878] kmem: usage 241244kB, limit 9007199254740988kB, failcnt 0 [ 185.837705][T11878] Memory cgroup stats for /syz4: [ 185.853372][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2793'. [ 185.853702][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.906748][T11878] cache 67063808 [ 185.909136][T11875] bridge_slave_0: entered allmulticast mode [ 185.915272][T11878] rss 462848 [ 185.915283][T11878] shmem 57839616 [ 185.915293][T11878] mapped_file 274432 [ 185.915316][T11878] dirty 28672 [ 185.915324][T11878] writeback 0 [ 185.915331][T11878] workingset_refault_anon 0 [ 185.915339][T11878] workingset_refault_file 2492 [ 185.915412][T11878] swap 10252288 [ 185.915418][T11878] swapcached 0 [ 185.915425][T11878] pgpgin 125792 [ 185.915433][T11878] pgpgout 109303 [ 185.915442][T11878] pgfault 109738 [ 185.915450][T11878] pgmajfault 11 [ 185.915539][T11878] inactive_anon 57589760 [ 185.915549][T11878] active_anon 712704 [ 185.915558][T11878] inactive_file 0 [ 185.915567][T11878] active_file 9236480 [ 185.915576][T11878] unevictable 0 [ 185.915586][T11878] hierarchical_memory_limit 314572800 [ 185.915618][T11878] hierarchical_memsw_limit 9223372036854771712 [ 185.915643][T11878] total_cache 67063808 [ 185.915652][T11878] total_rss 462848 [ 185.915662][T11878] total_shmem 57839616 [ 185.915672][T11878] total_mapped_file 274432 [ 185.915683][T11878] total_dirty 28672 [ 185.915752][T11878] total_writeback 0 [ 185.915760][T11878] total_workingset_refault_anon 0 [ 185.915769][T11878] total_workingset_refault_file 2492 [ 185.915786][T11878] total_swap 10252288 [ 185.915796][T11878] total_swapcached 0 [ 185.915805][T11878] total_pgpgin 125792 [ 185.915815][T11878] total_pgpgout 109303 [ 185.915971][T11878] total_pgfault 109738 [ 185.915979][T11878] total_pgmajfault 11 [ 185.915986][T11878] total_inactive_anon 57589760 [ 185.915994][T11878] total_active_anon 712704 [ 185.916002][T11878] total_inactive_file 0 [ 185.925428][T11875] bridge_slave_0: entered promiscuous mode [ 185.927111][T11878] total_active_file 9236480 [ 185.938003][T11875] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.940705][T11878] total_unevictable 0 [ 185.948674][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.948970][T11875] bridge_slave_1: entered allmulticast mode [ 185.955770][T11878] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2786,pid=11877,uid=0 [ 185.955924][T11878] Memory cgroup out of memory: Killed process 11878 (syz.4.2786) total-vm:94132kB, anon-rss:1332kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 186.231280][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.237618][T11875] bridge_slave_1: entered promiscuous mode [ 186.266856][T11933] erspan0: entered promiscuous mode [ 186.302156][T11939] tipc: Enabling of bearer rejected, failed to enable media [ 186.332765][T11930] lo speed is unknown, defaulting to 1000 [ 186.338914][T11875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.414124][T11953] lo speed is unknown, defaulting to 1000 [ 186.421415][T11939] loop1: detected capacity change from 0 to 4096 [ 186.436520][T11875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.472687][T11939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.517847][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.537598][T11875] team0: Port device team_slave_0 added [ 186.576927][T11875] team0: Port device team_slave_1 added [ 186.675637][T11972] FAULT_INJECTION: forcing a failure. [ 186.675637][T11972] name failslab, interval 1, probability 0, space 0, times 0 [ 186.688408][T11972] CPU: 0 UID: 0 PID: 11972 Comm: syz.4.2802 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.688443][T11972] Tainted: [W]=WARN [ 186.688452][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.688500][T11972] Call Trace: [ 186.688562][T11972] [ 186.688572][T11972] __dump_stack+0x1d/0x30 [ 186.688645][T11972] dump_stack_lvl+0x95/0xd0 [ 186.688692][T11972] dump_stack+0x15/0x1b [ 186.688719][T11972] should_fail_ex+0x263/0x280 [ 186.688757][T11972] should_failslab+0x8c/0xb0 [ 186.688780][T11972] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 186.688850][T11972] ? __alloc_skb+0x2f0/0x4b0 [ 186.688888][T11972] __alloc_skb+0x2f0/0x4b0 [ 186.688969][T11972] ? __alloc_skb+0x219/0x4b0 [ 186.689005][T11972] netlink_dump+0x10d/0x8a0 [ 186.689134][T11972] ? cred_has_capability+0x224/0x290 [ 186.689166][T11972] __netlink_dump_start+0x43e/0x520 [ 186.689232][T11972] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 186.689260][T11972] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 186.689292][T11972] xfrm_user_rcv_msg+0x2b4/0x670 [ 186.689319][T11972] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 186.689347][T11972] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 186.689503][T11972] netlink_rcv_skb+0x123/0x220 [ 186.689543][T11972] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 186.689617][T11972] xfrm_netlink_rcv+0x48/0x60 [ 186.689644][T11972] netlink_unicast+0x5c0/0x690 [ 186.689684][T11972] netlink_sendmsg+0x5c8/0x6f0 [ 186.689713][T11972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.689737][T11972] ____sys_sendmsg+0x5af/0x600 [ 186.689795][T11972] ___sys_sendmsg+0x195/0x1e0 [ 186.689835][T11972] __x64_sys_sendmsg+0xd4/0x160 [ 186.689863][T11972] x64_sys_call+0x17ba/0x3000 [ 186.689903][T11972] do_syscall_64+0xc0/0x2a0 [ 186.689952][T11972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.690040][T11972] RIP: 0033:0x7fe3656aaeb9 [ 186.690059][T11972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.690080][T11972] RSP: 002b:00007fe364107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.690099][T11972] RAX: ffffffffffffffda RBX: 00007fe365925fa0 RCX: 00007fe3656aaeb9 [ 186.690167][T11972] RDX: 0000000020040840 RSI: 0000200000000080 RDI: 0000000000000003 [ 186.690183][T11972] RBP: 00007fe364107090 R08: 0000000000000000 R09: 0000000000000000 [ 186.690198][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.690212][T11972] R13: 00007fe365926038 R14: 00007fe365925fa0 R15: 00007ffe2143b6b8 [ 186.690280][T11972] [ 186.942201][T11875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.949259][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.975984][T11875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.029135][T11980] loop6: detected capacity change from 0 to 512 [ 187.046214][T11983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2806'. [ 187.047928][T11980] EXT4-fs: Ignoring removed nobh option [ 187.060864][T11980] ext3: Unknown parameter 'grpquota..' [ 187.101077][T11983] veth7: entered allmulticast mode [ 187.107244][T11875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.114254][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.140891][T11875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.152956][ T3003] ================================================================== [ 187.161114][ T3003] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 187.168229][ T3003] [ 187.170577][ T3003] read-write to 0xffff888107ef7a80 of 4 bytes by task 3306 on cpu 1: [ 187.179106][ T3003] d_delete+0xbe/0xe0 [ 187.183132][ T3003] d_delete_notify+0x32/0x100 [ 187.187840][ T3003] vfs_unlink+0x331/0x440 [ 187.192205][ T3003] do_unlinkat+0x1e2/0x4b0 [ 187.196651][ T3003] __x64_sys_unlink+0x2e/0x40 [ 187.201357][ T3003] x64_sys_call+0x2f48/0x3000 [ 187.204740][T11875] hsr_slave_0: entered promiscuous mode [ 187.206102][ T3003] do_syscall_64+0xc0/0x2a0 [ 187.206139][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.206167][ T3003] [ 187.206175][ T3003] read to 0xffff888107ef7a80 of 4 bytes by task 3003 on cpu 0: [ 187.213377][T11875] hsr_slave_1: entered promiscuous mode [ 187.216350][ T3003] step_into_slowpath+0x139/0x4c0 [ 187.216388][ T3003] path_lookupat+0x330/0x500 [ 187.216419][ T3003] filename_lookup+0x190/0x390 [ 187.216447][ T3003] do_readlinkat+0x7d/0x340 [ 187.216480][ T3003] __x64_sys_readlink+0x47/0x60 [ 187.216511][ T3003] x64_sys_call+0x2af1/0x3000 [ 187.216542][ T3003] do_syscall_64+0xc0/0x2a0 [ 187.216577][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.216600][ T3003] [ 187.216604][ T3003] value changed: 0x00300180 -> 0x00004080 [ 187.216618][ T3003] [ 187.216623][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 187.216640][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.216678][ T3003] Tainted: [W]=WARN [ 187.216685][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.216698][ T3003] ================================================================== [ 187.336835][T11875] debugfs: 'hsr0' already exists in 'hsr' [ 187.342727][T11875] Cannot create hsr debugfs directory [ 187.403073][T11991] syzkaller1: entered promiscuous mode [ 187.409331][T11991] syzkaller1: entered allmulticast mode [ 187.499371][T11875] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 187.508950][T11875] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 187.518360][T11875] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 187.530003][T11875] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 187.575553][T11875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.590015][T11875] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.601474][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.608561][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.627057][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.634332][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.712740][T11875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.834080][T11875] veth0_vlan: entered promiscuous mode [ 187.842605][T11875] veth1_vlan: entered promiscuous mode [ 187.859741][T11875] veth0_macvtap: entered promiscuous mode [ 187.867011][T11875] veth1_macvtap: entered promiscuous mode [ 187.878406][T11875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.891168][T11875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.903095][ T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.914437][ T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.924492][ T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.933650][ T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0