last executing test programs: 11m11.880711274s ago: executing program 2 (id=8): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x400, 0x2, 0x9, 0x8001}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) faccessat2(0xffffffffffffffff, 0x0, 0x46, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="09009e0000040006000400001702004053f19800120000000103370ffb0ae10b15d50a7fafc02437d89a3e2da59c713f13576b77e2560dceb14f3aa448bfa4ac3ae3ae85320a40812b2035d864c33bcd99eadad4c0ac4f024df1d103aa147cc88200bac68b1e30bd1a169e019e0242b733f2d5d6c88816ecbe3fe850241127ab3f5750b0d4c0cb3484f7d5027556b251cf3c808694e637dfdf0b41ab90adb6284349238cbf24c4c107da9c946acf8c72c36ef89ea49dc5db190ba8eb464b5bfa", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r6, 0x7, '\x00', 0x0, r5, 0x0, 0x5}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0xd0}, 0x38) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x4, &(0x7f0000000180)=[{0xfff, 0x3, 0x81}, {0x9, 0x0, 0xd7, 0x4e}, {0xc63, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x2, 0x8}]}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0xc090) 11m10.164720465s ago: executing program 2 (id=11): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004044) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001a00010029bd70000800000002200000000000000020000006001c004e23000008001d008c1e010189001c"], 0xb8}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES16=r7, @ANYBLOB="01002cad7000010000000200000008000300", @ANYBLOB='\b\x00'], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0f38658c432ae1d6778795efa7a386131cdfd6db9d693b149573b69e324dd518", "80f20b589ea815d390be3440806a3dfd", {"68e77bdc832e437bb8b8deadbfca96d4", "8c76aab8000000006700"}}}}}}}}, 0x0) 11m9.08325664s ago: executing program 2 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts={0x2f}]}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x6}, {0x0, 0xfff1}, {0x2, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x2, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x0, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x6, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0xbe, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0xfd, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x5, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0xe, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffe, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x7ffd, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x1000001, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x2006, 0x4f, 0x8, 0xfffffff9, 0x52, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x5, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0xcd0, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0x0, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x2, 0x8, 0x0, 0x8c5, 0x7}, {0x3, 0x1, 0x4, 0x1ff, 0x0, 0x800}, 0x2, 0x8, 0x17f2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7efc5, 0xe8f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffffff, 0xffffffffffff0001}}]}]}]}, 0x50}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xe}}, './file0\x00'}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) r6 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x50, 0xfffffffd, 0xee, 0x3, 0x5, 0x0, 0x9, 0x2, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) bind$llc(r4, &(0x7f00000011c0)={0x1a, 0x0, 0x6, 0x40, 0x5, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x58, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10000, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x15}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000844}, 0x40800) r7 = socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 11m8.833750006s ago: executing program 2 (id=22): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = epoll_create1(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x51, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x2, 0x80000000000002, 0x800, 0x20000}, 0x0, 0x0) write$selinux_access(r3, &(0x7f0000000080)={'system_u:object_r:newrole_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x52f}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xb0000000}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890edd00030109029f0000000000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c13070000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYBLOB="80"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 11m5.660101861s ago: executing program 2 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts={0x2f}]}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x6}, {0x0, 0xfff1}, {0x2, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x2, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x0, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x6, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0xbe, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0xfd, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x5, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0xe, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffe, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x7ffd, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x1000001, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x2006, 0x4f, 0x8, 0xfffffff9, 0x52, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x5, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0xcd0, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0x0, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x2, 0x8, 0x0, 0x8c5, 0x7}, {0x3, 0x1, 0x4, 0x1ff, 0x0, 0x800}, 0x2, 0x8, 0x17f2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7efc5, 0xe8f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffffff, 0xffffffffffff0001}}]}]}]}, 0x50}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xe}}, './file0\x00'}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) r6 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x50, 0xfffffffd, 0xee, 0x3, 0x5, 0x0, 0x9, 0x2, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) bind$llc(r4, &(0x7f00000011c0)={0x1a, 0x0, 0x6, 0x40, 0x5, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x58, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10000, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x15}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000844}, 0x40800) r7 = socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 10m55.876684583s ago: executing program 2 (id=87): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0f38658c432ae1d6778795efa7a386131cdfd6db9d693b149573b69e324dd518", "80f20b589ea815d390be3440806a3dfd", {"68e77bdc832e437bb8b8deadbfca96d4", "8c76aab8000000006700"}}}}}}}}, 0x0) 10m55.867022513s ago: executing program 32 (id=87): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0f38658c432ae1d6778795efa7a386131cdfd6db9d693b149573b69e324dd518", "80f20b589ea815d390be3440806a3dfd", {"68e77bdc832e437bb8b8deadbfca96d4", "8c76aab8000000006700"}}}}}}}}, 0x0) 7.899016865s ago: executing program 5 (id=3337): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="fe11", 0x2}], 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 7.813573387s ago: executing program 3 (id=3340): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x3, 0x9}, 0x6250, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x20000490) open(&(0x7f00000000c0)='./file0\x00', 0x100843, 0x9c) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./file1\x00', 0x44000106) pwrite64(r1, &(0x7f0000000100)="64ec", 0x2, 0x7) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4607fc3c40010001000000000002003e000700000094020000000000004000000000000000dd0100000000000013000000000038000102"], 0x178) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) readv(r3, &(0x7f0000002780)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1) 7.621075731s ago: executing program 3 (id=3342): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f0000000240)="c657d4b8627bf031b662b3df7c8027814904da5b32dbd5b0388a", 0x1a}], 0x2}, 0x40011) 7.590501612s ago: executing program 3 (id=3343): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = epoll_create1(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x51, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x2, 0x80000000000002, 0x800, 0x20000}, 0x0, 0x0) write$selinux_access(r2, &(0x7f0000000080)={'system_u:object_r:newrole_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x52f}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb0000000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890edd00030109029f0000000000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c13070000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYBLOB="80"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 6.663209222s ago: executing program 4 (id=3346): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0xfe}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x44) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) dup2(0xffffffffffffffff, r2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r6, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20040000) ioperm(0x2, 0x7ff, 0x8) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x6, 0x0) socket$inet(0x2, 0x2, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2049884, &(0x7f00000001c0)={[], [{@fowner_eq}]}, 0x1, 0x558, &(0x7f0000000680)="$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") quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) 6.501475646s ago: executing program 1 (id=3348): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffeff}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xff) socket$inet6(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@bh}]}, 0x1, 0x50d, &(0x7f0000000d40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0xee00, 0xee01) 6.160829223s ago: executing program 1 (id=3349): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) gettid() munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001080)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb7ea, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x61, 0xf]}}, 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x200, 0x0, 0x203}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x8000, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x2, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x3, 0x800, 0x101, 0x800, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 5.43725336s ago: executing program 1 (id=3350): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.41625802s ago: executing program 1 (id=3351): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 4.824431353s ago: executing program 4 (id=3353): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x80001200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x86340) r1 = syz_usb_connect$uac1(0x5, 0xba, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x10f5, 0x200, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x9a, 0x120, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1c}, [@mixer_unit={0x9, 0x24, 0x4, 0x1, 0x40, "c489bf56"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x1, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xe, 0x4, 0xce}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x2, 0xf5, "e8"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x76, 0x8, 0xba, {0x7, 0x25, 0x1, 0x4, 0x80, 0x28eb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x2, 0x4, 0xaa, "c03f2779dd5d5d6e41"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x50, 0x3, 0xff, 0x3, "", "8e1e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x1, 0x7, {0x7, 0x25, 0x1, 0xc, 0x1, 0xfffa}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x6, 0x9, 0x1, 0x38, 0xaf}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x4, 0xc215}]}, 0x2, [{0x66, &(0x7f0000000240)=@string={0x66, 0x3, "d5a05dfc80600978621a02c32ea61ea57127f3c4fb710db91692fb8967de9522572c34cfc962da70a60bf841cf39c5a2dff68fe830eb52ea55ec1cb180befdc7d8b6138dc8e35eb1f3f6b6a6ba07329575e7c6ae99694f8ff3a49017e26e6677062680d5"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x23, 0xdf, {0xdf, 0xc, "e89d5982a9509f46fc11cd93a67034f974085ba267605de3b85fbb65bd666efda0ca841ca02270f2307bdd54788c704f652b2ba4f18659623ab24db44a77299ade89ad6630450286ffb004f901c582508af50abaec05a79ec54afd5a7f8234c3c8ce962acdf1e04c6f142d3cc0168bdce9985039b87a4b19e1e2c025e97902cfb01acc94de6d8871731d961d22dcc14de1e67e014fed0ce29318eff91c4465cc5ddd869217f3fec0facd10aaa16472a5ada8dc4db288461b3dabb5dab6e8661345a6440ce13279cf57e3ccaa5f97f017894f8c58779d69b3a02524bbfe"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x60, 0x18, 0xbe, "c37798348323c2c1df023eb6a46346e8b5f4936e80ff615e18570eb5b322fc12f273fb41f5a67d2e499c008bd0149c8d9bac4c389d226d92545dbd29f8d4e823b890c6e5876e620d8433b10da0ee21e2d257d0a3cb856cef1fce465ca47deca6158e77b321cb0541ae798e61577007a494e4ea5b4f8a9b9345f84c3bc70188a28847ecfdd2ea2a5ffc74022b6e4f35a835301814f056b8535cfa4fa1109494c5d1b4273b2506edc0071ec554cf552711dfb386ab7c2c588f2855e6c37eef"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x81, 0x3, "ef3912"}, &(0x7f0000001080)={0x20, 0x82, 0x2, "22e6"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "6faeb6"}, &(0x7f0000000700)={0x20, 0x84, 0x3, "54eb19"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "3d45a2"}}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x303, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xa, 0x40, 0x7fff0000}]}) r4 = socket(0x10, 0x80002, 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000001040)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb", 0x3f}], 0x1) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r5, 0x0, 0x2001c044) close(r3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000000)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a9b2f200af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b6f0be129305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669114e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f141f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e0b231d6f040dc19283b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80425d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203715ba49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a3289d24825642891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb4581f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab9640071550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568009d4afb96d6861aca73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411254c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb57412500005488efeee327415cc19451432c6f14c27693100c3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603f56935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486229e5b2e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc24ab0f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78c8fa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb06afa88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000026347ee80000000000f9ffffff00", 0x1000}}, 0x1006) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) 4.749986775s ago: executing program 5 (id=3354): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0x81, 0x1a) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185942, 0x324) sendfile(r1, r1, 0x0, 0x80000000) 4.556878809s ago: executing program 3 (id=3355): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = epoll_create1(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x51, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x2, 0x80000000000002, 0x800, 0x20000}, 0x0, 0x0) write$selinux_access(r3, &(0x7f0000000080)={'system_u:object_r:newrole_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x52f}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xb0000000}) sendmsg$netlink(r2, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890edd00030109029f0000000000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c13070000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYBLOB="80"], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.440297282s ago: executing program 5 (id=3356): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.312181674s ago: executing program 5 (id=3358): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x8841}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r1, &(0x7f0000000240), 0x10000000000003ac, 0x0, 0x3) io_uring_enter(r0, 0x5e8c, 0x7721, 0x16, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6(0xa, 0x2, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="a60b8045e742caf860e57a2980d1b42cc923fffa1349caa63d2b56ac8fda329954a5ce1b806790da8d7d6768ff15815833b35a285eeaeb96a29b3fd4b93e8e89adc0ad4b47af8e6151e1ff07d80e4be13ba86a5f292074028025d52df058e1c8b390d242f431f6afeddfeed7d2f00fc63b5b17d978d191503ddd267ad3d93fe1db5fb0f11c005f67413da0bc74c4478b2909c02fc1355700"/166]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x405}}, {0x0, 0x0}, {0x0, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4004b901bfae19e432bb0000000000006000000000000009500000c00000000e082818e1b5745a9dfd9084b51cc707c9da7c32a93345de85e666a4b8851af12a2de9221d0e9531b77e7de8d9a278a5ce83983baa63064d969f90c7e4b2adccfcb539c9fb391fc35b2d7da66aca9c1406a4d062ff831f61ddd0ba3a2c8dace4a0d3a8c0eb799823c7d4f0d15ce1615fda8d51e57239bf2b187a9e605f75df0db1bfccf0f7fea49cc9896ec8174682ad37802b4f07e5e9e330277c956b3543346ee0a28cc633347067ad5802c405c7f9264989c6f38e88acd22e150932976b42d6b3ad5465690fccd000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r8, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000042) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xf30, 0xa}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) 3.935526253s ago: executing program 0 (id=3361): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.911830514s ago: executing program 0 (id=3362): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x8841}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r1, &(0x7f0000000240), 0x10000000000003ac, 0x0, 0x3) io_uring_enter(r0, 0x5e8c, 0x7721, 0x16, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6(0xa, 0x2, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="a60b8045e742caf860e57a2980d1b42cc923fffa1349caa63d2b56ac8fda329954a5ce1b806790da8d7d6768ff15815833b35a285eeaeb96a29b3fd4b93e8e89adc0ad4b47af8e6151e1ff07d80e4be13ba86a5f292074028025d52df058e1c8b390d242f431f6afeddfeed7d2f00fc63b5b17d978d191503ddd267ad3d93fe1db5fb0f11c005f67413da0bc74c4478b2909c02fc1355700"/166]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x405}}, {0x0, 0x0}, {0x0, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4004b901bfae19e432bb0000000000006000000000000009500000c00000000e082818e1b5745a9dfd9084b51cc707c9da7c32a93345de85e666a4b8851af12a2de9221d0e9531b77e7de8d9a278a5ce83983baa63064d969f90c7e4b2adccfcb539c9fb391fc35b2d7da66aca9c1406a4d062ff831f61ddd0ba3a2c8dace4a0d3a8c0eb799823c7d4f0d15ce1615fda8d51e57239bf2b187a9e605f75df0db1bfccf0f7fea49cc9896ec8174682ad37802b4f07e5e9e330277c956b3543346ee0a28cc633347067ad5802c405c7f9264989c6f38e88acd22e150932976b42d6b3ad5465690fccd000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r7, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000042) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xf30, 0xa}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) 3.573067611s ago: executing program 5 (id=3363): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 3.15011043s ago: executing program 0 (id=3364): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x3, 0x9}, 0x6250, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20000490) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000180)='./file1\x00', 0x44000106) pwrite64(r4, &(0x7f0000000100)="64ec", 0x2, 0x7) 3.14895986s ago: executing program 4 (id=3365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff84}, {0x8001, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x1b}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000740)="82", 0x1}], 0x1}, 0x5) 2.548076784s ago: executing program 0 (id=3366): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0xfe}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x44) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) dup2(0xffffffffffffffff, r2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r6, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20040000) ioperm(0x2, 0x7ff, 0x8) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x6, 0x0) socket$inet(0x2, 0x2, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2049884, &(0x7f00000001c0)={[], [{@fowner_eq}]}, 0x1, 0x558, &(0x7f0000000680)="$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") quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) 928.308349ms ago: executing program 5 (id=3367): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = epoll_create1(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x51, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x2, 0x80000000000002, 0x800, 0x20000}, 0x0, 0x0) write$selinux_access(r2, &(0x7f0000000080)={'system_u:object_r:newrole_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x52f}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb0000000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890edd00030109029f0000000000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c13070000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYBLOB="80"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 873.885901ms ago: executing program 3 (id=3368): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x401}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r3], 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x394, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x364, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x394}}, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) fstatfs(0xffffffffffffffff, &(0x7f0000000440)=""/190) 752.747983ms ago: executing program 4 (id=3369): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r1, 0x6}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000240)="c657d4b8627bf031b662b3df7c8027814904da5b32dbd5b0388a", 0x1a}], 0x3}, 0x40011) 728.665114ms ago: executing program 4 (id=3370): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffeff}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xff) sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@bh}]}, 0x1, 0x50d, &(0x7f0000000d40)="$eJzs3c1vI2cZAPDHTpw4H23S0gMgaJe2sKDVOom3jaoeoJwQQpUQPYK0DYk3imLHUeyUJuwhPXNFYiVOcOQP4Lwn7lwQ3LgsByQ+ItAGiYPRjCdZb2Jvwiaxs/HvJ408M+/Ez/Nudt43fhL7DWBo3YiIvYgYi4iPI2ImO5/LtvigvSXXPd6/v3ywf385F63WR//Ipe3Juej4msRU9pzFiPjBdyJ+nDsZt7Gzu75UrVa2suO5Zm1zrrGze3uttrRaWa1slMuLC4vz7915t3xhfX2jNpbtffnR7/e+8dMkrensTGc/LlK764WjOInRiPjeZQQbgJGsP2ODToTnko+IVyPizfT+n4mR9LsJAFxnrdZMtGY6jwGA6y6f1sBy+VJWC5iOfL5UatfwXovJfLXeaN66V9/eWGnXymajkL+3Vq3MZ7XC2SjkkuOFdP/JcfnY8Z2IeCUifj4+kR6XluvVlUH+4AMAQ2zq2Pz/7/H2/A8AXHPFQScAAPSd+R8Aho/5HwCGj/kfAIZPe/6fGHQaAEAfef0PAMPn/5v/py4tDwCgL77/4YfJ1jrIPv965ZOd7fX6J7dXKo31Um17ubRc39osrdbrq+ln9tROe75qvb658E5sfzr7zc1Gc66xs3u3Vt/eaN5NP9f7bqWQXrXXh54BAL288sbDP+WSGfn9iXSLjrUcCgPNDLhs+UEnAAzMyKATAAbmnKt9GT7gBXaO1/jKA3BNdFmi9ynFbm8QarVarctLCbhkN7+g/g/DqqP+/+y/AjYYwLWjgAfD65z1f+AF1mrlzrrmf5z1QgDgalPWA3r8/v/V7PE32S8HfrRy/IoHl5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG2H6/+WsrXApyOfL5UiXoqI2Sjk7q1VK/MR8XJE/HG8MJ4cLww4ZwDgvPJ/zWXrf92ceXv6qabXp452xyLiJ7/86BefLjWbW3+IGMv9c/zwfPNBdr7c/+wBgNMdztPpY8cL+cf795cPt37m87dvR0SxHf9gfywOjuKPxmhahihGISIm/5VLjo/kOmoX57H3WUR8vlv/czGd1kDaK58ej5/Efqmv8fNPxc+nbe3H5N/icxeQCwybh8n480G3+y8fN9LH7vd/MR2hzi8b/5KnWj5Ix8An8UezSCM9xr8bZ43xzu++296bONn2WcQXRyMOYx90jD+H8XM94r99xvh//tLrb/Zqa/0q4mZ0j98Za65Z25xr7OzeXqstrVZWKxvl8uLC4vx7d94tz6U16rnes8Hf37/1cq+2pP+TPeIXT+n/V8/Y/1//9+MffuUZ8b/+Vrf4+XjtGfGTOfFrZ4y/NPnbYq+2JP5Kj/6f9v2/dcb4j/6ye2LZcABgcBo7u+tL1Wply46dq7+T/Je9Aml03flWv2KNpT+Jn2z62Vvte/rYV7VazxWr14hxEVU34Co4uukj4j+DTgYAAAAAAAAAAAAAAOiqH+9YGnQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL7+FwAA//8dbM2Y") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0xee00, 0xee01) 368.013122ms ago: executing program 0 (id=3371): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0xf8, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xf8}}, 0x844) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") open(&(0x7f00000000c0)='./file0\x00', 0x100843, 0x9c) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x44000106) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="010000000000fcdbdf2503000000580001800d0001007564703a73797a310000000044000400200001000a004e2600000044ff00000000000000000000000000000100000000200002000a"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) readv(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1) 340.958193ms ago: executing program 1 (id=3372): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 295.881614ms ago: executing program 4 (id=3373): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x8841}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r1, &(0x7f0000000240), 0x10000000000003ac, 0x0, 0x3) io_uring_enter(r0, 0x5e8c, 0x7721, 0x16, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6(0xa, 0x2, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="a60b8045e742caf860e57a2980d1b42cc923fffa1349caa63d2b56ac8fda329954a5ce1b806790da8d7d6768ff15815833b35a285eeaeb96a29b3fd4b93e8e89adc0ad4b47af8e6151e1ff07d80e4be13ba86a5f292074028025d52df058e1c8b390d242f431f6afeddfeed7d2f00fc63b5b17d978d191503ddd267ad3d93fe1db5fb0f11c005f67413da0bc74c4478b2909c02fc1355700"/166]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x405}}, {0x0, 0x0}, {0x0, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4004b901bfae19e432bb0000000000006000000000000009500000c00000000e082818e1b5745a9dfd9084b51cc707c9da7c32a93345de85e666a4b8851af12a2de9221d0e9531b77e7de8d9a278a5ce83983baa63064d969f90c7e4b2adccfcb539c9fb391fc35b2d7da66aca9c1406a4d062ff831f61ddd0ba3a2c8dace4a0d3a8c0eb799823c7d4f0d15ce1615fda8d51e57239bf2b187a9e605f75df0db1bfccf0f7fea49cc9896ec8174682ad37802b4f07e5e9e330277c956b3543346ee0a28cc633347067ad5802c405c7f9264989c6f38e88acd22e150932976b42d6b3ad5465690fccd000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r8, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000042) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xf30, 0xa}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) 293.131054ms ago: executing program 1 (id=3374): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x3, 0x9}, 0x6250, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x20000490) open(0x0, 0x100843, 0x9c) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./file1\x00', 0x44000106) pwrite64(r1, &(0x7f0000000100)="64ec", 0x2, 0x7) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4607fc3c40010001000000000002003e000700000094020000000000004000000000000000dd0100000000000013000000000038000102"], 0x178) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) readv(r3, &(0x7f0000002780)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1) 268.504284ms ago: executing program 3 (id=3375): syz_usbip_server_init(0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x25c, &(0x7f0000002500)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) r1 = open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c11}], 0x1, 0x1a00, 0x0, 0x3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 0s ago: executing program 0 (id=3376): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x80001200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x86340) r2 = syz_usb_connect$uac1(0x5, 0xba, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x10f5, 0x200, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x9a, 0x120, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1c}, [@mixer_unit={0x9, 0x24, 0x4, 0x1, 0x40, "c489bf56"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x1, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xe, 0x4, 0xce}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x2, 0xf5, "e8"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x76, 0x8, 0xba, {0x7, 0x25, 0x1, 0x4, 0x80, 0x28eb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x2, 0x4, 0xaa, "c03f2779dd5d5d6e41"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x50, 0x3, 0xff, 0x3, "", "8e1e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x1, 0x7, {0x7, 0x25, 0x1, 0xc, 0x1, 0xfffa}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x6, 0x9, 0x1, 0x38, 0xaf}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x4, 0xc215}]}, 0x2, [{0x66, &(0x7f0000000240)=@string={0x66, 0x3, "d5a05dfc80600978621a02c32ea61ea57127f3c4fb710db91692fb8967de9522572c34cfc962da70a60bf841cf39c5a2dff68fe830eb52ea55ec1cb180befdc7d8b6138dc8e35eb1f3f6b6a6ba07329575e7c6ae99694f8ff3a49017e26e6677062680d5"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x23, 0xdf, {0xdf, 0xc, "e89d5982a9509f46fc11cd93a67034f974085ba267605de3b85fbb65bd666efda0ca841ca02270f2307bdd54788c704f652b2ba4f18659623ab24db44a77299ade89ad6630450286ffb004f901c582508af50abaec05a79ec54afd5a7f8234c3c8ce962acdf1e04c6f142d3cc0168bdce9985039b87a4b19e1e2c025e97902cfb01acc94de6d8871731d961d22dcc14de1e67e014fed0ce29318eff91c4465cc5ddd869217f3fec0facd10aaa16472a5ada8dc4db288461b3dabb5dab6e8661345a6440ce13279cf57e3ccaa5f97f017894f8c58779d69b3a02524bbfe"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x60, 0x18, 0xbe, "c37798348323c2c1df023eb6a46346e8b5f4936e80ff615e18570eb5b322fc12f273fb41f5a67d2e499c008bd0149c8d9bac4c389d226d92545dbd29f8d4e823b890c6e5876e620d8433b10da0ee21e2d257d0a3cb856cef1fce465ca47deca6158e77b321cb0541ae798e61577007a494e4ea5b4f8a9b9345f84c3bc70188a28847ecfdd2ea2a5ffc74022b6e4f35a835301814f056b8535cfa4fa1109494c5d1b4273b2506edc0071ec554cf552711dfb386ab7c2c588f2855e6c37eef"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x81, 0x3, "ef3912"}, &(0x7f0000001080)={0x20, 0x82, 0x2, "22e6"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "6faeb6"}, &(0x7f0000000700)={0x20, 0x84, 0x3, "54eb19"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "3d45a2"}}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x303, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xa, 0x40, 0x7fff0000}]}) r5 = socket(0x10, 0x80002, 0x0) ioctl$int_out(r3, 0x0, &(0x7f0000001040)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb", 0x3f}], 0x1) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r6, 0x0, 0x2001c044) close(r4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000000000)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a9b2f200af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b6f0be129305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669114e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f141f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e0b231d6f040dc19283b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80425d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203715ba49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a3289d24825642891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb4581f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab9640071550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568009d4afb96d6861aca73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411254c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb57412500005488efeee327415cc19451432c6f14c27693100c3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603f56935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486229e5b2e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc24ab0f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78c8fa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb06afa88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000026347ee80000000000f9ffffff00", 0x1000}}, 0x1006) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000180)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x5, 0x12, 0x0, 0x10, "7fb54d7ee1ddea21259f52029582a6cb5db40e8bc4ccae55c33e21137813caddc1391cfa52aa259dd6438328d709e7e9078c295a7f0f72f8deb8c3c59b01e275", "9d44116acc76009000008000eaff00e7000d52a052085100", [0x1ff, 0x4]}) socket$tipc(0x1e, 0x2, 0x0) kernel console output (not intermixed with test programs): ] memory+swap: usage 226360kB, limit 9007199254740988kB, failcnt 0 [ 661.445504][T16984] kmem: usage 213696kB, limit 9007199254740988kB, failcnt 0 [ 661.463523][T16984] Memory cgroup stats for /syz4: [ 661.463854][T16984] cache 0 [ 661.482927][T16984] rss 28672 [ 661.486446][T16984] shmem 0 [ 661.510192][ T4740] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.538882][T16658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.561562][T16984] mapped_file 0 [ 661.573964][ T4740] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.575165][T16984] dirty 0 [ 661.587769][T16984] writeback 0 [ 661.591204][T16984] workingset_refault_anon 524 [ 661.596203][T16984] workingset_refault_file 965 [ 661.600986][T16984] swap 1355776 [ 661.604793][T16984] swapcached 7139328 [ 661.617299][T17032] loop1: detected capacity change from 0 to 1024 [ 661.637674][T16984] pgpgin 452087 [ 661.641209][T16984] pgpgout 452074 [ 661.645297][T16984] pgfault 583590 [ 661.650344][T16984] pgmajfault 266 [ 661.656466][T16984] inactive_anon 0 [ 661.660412][T16984] active_anon 53248 [ 661.664485][T16984] inactive_file 0 [ 661.668283][T16984] active_file 0 [ 661.671792][T16984] unevictable 0 [ 661.696790][T16984] hierarchical_memory_limit 314572800 [ 661.702254][T16984] hierarchical_memsw_limit 9223372036854771712 [ 661.709546][T16984] total_cache 0 [ 661.713107][T16984] total_rss 28672 [ 661.717168][T16984] total_shmem 0 [ 661.720659][T16984] total_mapped_file 0 [ 661.725050][T16984] total_dirty 0 [ 661.728621][T16984] total_writeback 0 [ 661.737276][T16984] total_workingset_refault_anon 524 [ 661.742588][T17032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 661.743554][T17038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.756175][T17032] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.770961][T16984] total_workingset_refault_file 965 [ 661.779840][T17038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.790610][T16984] total_swap 1355776 [ 661.796192][T16984] total_swapcached 7139328 [ 661.804897][ T4740] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.807093][T16984] total_pgpgin 452087 [ 661.819517][T16984] total_pgpgout 452074 [ 661.823602][T16984] total_pgfault 583590 [ 661.827392][ T4740] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.829300][T16984] total_pgmajfault 266 [ 661.842281][ T28] audit: type=1400 audit(1783184178.814:752): avc: denied { watch } for pid=17043 comm="syz.5.3144" path="/2/file1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 661.842499][T16984] total_inactive_anon 0 [ 661.869000][T16984] total_active_anon 53248 [ 661.873369][T16984] total_inactive_file 0 [ 661.877613][T16984] total_active_file 0 [ 661.881605][T16984] total_unevictable 0 [ 661.885806][T16984] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3114,pid=16833,uid=0 [ 661.900872][T16984] Memory cgroup out of memory: Killed process 16833 (syz.4.3114) total-vm:98548kB, anon-rss:1244kB, file-rss:24900kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 661.921287][T17032] binfmt_misc: register: failed to install interpreter file ./bus [ 661.935425][T17009] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.945009][T17050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.954431][T17009] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.956110][T17050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.961877][T17009] bridge_slave_0: entered allmulticast mode [ 661.984824][T16985] vhci_hcd: connection reset by peer [ 661.984824][T17009] bridge_slave_0: entered promiscuous mode [ 661.986061][T17009] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.992534][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 661.996376][T17009] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.006206][ T4735] vhci_hcd vhci_hcd.4: stop threads [ 662.012812][T17009] bridge_slave_1: entered allmulticast mode [ 662.024800][ T4735] vhci_hcd vhci_hcd.4: release socket [ 662.031872][T17009] bridge_slave_1: entered promiscuous mode [ 662.036465][ T4735] vhci_hcd vhci_hcd.4: disconnect device [ 662.056808][T17052] loop1: detected capacity change from 0 to 256 [ 662.069133][T17009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.083920][T17009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.111304][T17009] team0: Port device team_slave_0 added [ 662.120884][T17009] team0: Port device team_slave_1 added [ 662.137307][T17009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.144659][T17009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.171331][T17009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.174162][T17055] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 662.188357][T17055] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 662.199369][ T4740] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.209945][ T4740] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.222629][T17055] vhci_hcd vhci_hcd.0: Device attached [ 662.228788][T17009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.236000][T17009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.277931][T17055] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 662.293814][T17009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.316636][ T4740] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.327312][ T4740] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.356039][T17009] hsr_slave_0: entered promiscuous mode [ 662.362405][T17009] hsr_slave_1: entered promiscuous mode [ 662.368788][T17009] debugfs: 'hsr0' already exists in 'hsr' [ 662.375052][T17009] Cannot create hsr debugfs directory [ 662.489149][T17054] syz.4.3147 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 662.500663][T17054] CPU: 0 UID: 0 PID: 17054 Comm: syz.4.3147 Not tainted syzkaller #0 PREEMPT(lazy) [ 662.500701][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.500716][T17054] Call Trace: [ 662.500723][T17054] [ 662.500733][T17054] __dump_stack+0x1d/0x30 [ 662.500762][T17054] dump_stack_lvl+0x95/0xd0 [ 662.500837][T17054] dump_stack+0x15/0x1b [ 662.500859][T17054] dump_header+0x80/0x240 [ 662.500881][T17054] oom_kill_process+0x295/0x350 [ 662.501029][T17054] out_of_memory+0x981/0xbc0 [ 662.501072][T17054] try_charge_memcg+0x621/0xa00 [ 662.501188][T17054] charge_memcg+0x6d/0x120 [ 662.501224][T17054] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 662.501319][T17054] swap_cache_alloc_folio+0x47b/0x5e0 [ 662.501377][T17054] swap_cluster_readahead+0x2b1/0x460 [ 662.501485][T17054] swapin_readahead+0xd8/0x8a0 [ 662.501586][T17054] ? _raw_spin_unlock+0x9/0x30 [ 662.501609][T17054] ? swap_put_entries_cluster+0x49c/0x4c0 [ 662.501642][T17054] ? __entry_text_end+0x11248/0x102179 [ 662.501669][T17054] ? __rcu_read_unlock+0x4e/0x70 [ 662.501777][T17054] ? swap_cache_get_folio+0x1f7/0x200 [ 662.501806][T17054] do_swap_page+0x2a2/0x1ec0 [ 662.501927][T17054] ? __css_rstat_updated+0xbb/0x280 [ 662.501959][T17054] ? __rcu_read_lock+0x36/0x50 [ 662.502028][T17054] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 662.502062][T17054] handle_mm_fault+0xb3c/0x2da0 [ 662.502178][T17054] do_user_addr_fault+0x634/0x1060 [ 662.502269][T17054] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 662.502304][T17054] ? trace_page_fault_user+0x1f/0xa0 [ 662.502406][T17054] exc_page_fault+0x62/0xa0 [ 662.502434][T17054] asm_exc_page_fault+0x26/0x30 [ 662.502469][T17054] RIP: 0033:0x7f821171e976 [ 662.502489][T17054] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 662.502512][T17054] RSP: 002b:00007fffed23fb50 EFLAGS: 00010246 [ 662.502531][T17054] RAX: 00000000000a1b89 RBX: 00007f82119a5fa0 RCX: 00000000000a19f0 [ 662.502549][T17054] RDX: 0000000000000199 RSI: 0000000000000000 RDI: 00000000000003e8 [ 662.502563][T17054] RBP: 00007f82119a7da0 R08: 0000000018685eaa R09: 3fffffffffffffff [ 662.502607][T17054] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000000a26d3 [ 662.502621][T17054] R13: 00007f82119a5fac R14: 00000000000a1b4d R15: 00007f82119a5fa0 [ 662.502639][T17054] [ 662.503274][T17054] memory: usage 307200kB, limit 307200kB, failcnt 2484 [ 662.765197][T17054] memory+swap: usage 3100kB, limit 9007199254740988kB, failcnt 0 [ 662.776521][T17054] kmem: usage 2044kB, limit 9007199254740988kB, failcnt 0 [ 662.786312][T17054] Memory cgroup stats for /syz4: [ 662.786556][T17054] cache 0 [ 662.794835][T17054] rss 0 [ 662.797630][T17054] shmem 0 [ 662.800709][T17054] mapped_file 0 [ 662.807319][ T4740] bridge_slave_1: left allmulticast mode [ 662.813361][ T4740] bridge_slave_1: left promiscuous mode [ 662.822027][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.843453][T17077] loop5: detected capacity change from 0 to 256 [ 662.875945][T17079] loop3: detected capacity change from 0 to 764 [ 662.886695][T17079] iso9660: Unknown parameter '' [ 662.905625][T17079] loop3: detected capacity change from 0 to 512 [ 662.945225][T17054] dirty 0 [ 662.979457][T17054] writeback 4096 [ 662.984169][ T4740] bridge_slave_0: left allmulticast mode [ 663.004954][T17054] workingset_refault_anon 570 [ 663.041055][ T4740] bridge_slave_0: left promiscuous mode [ 663.051670][ T28] audit: type=1400 audit(1783184180.014:753): avc: denied { write } for pid=17066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.084423][T17054] workingset_refault_file 965 [ 663.106762][T17077] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 663.128475][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.142954][T17054] swap 901120 [ 663.167534][T17054] swapcached 7917568 [ 663.182081][T17054] pgpgin 452293 [ 663.188192][T17077] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 663.205709][T17054] pgpgout 452292 [ 663.238157][T17054] pgfault 583865 [ 663.258248][ T28] audit: type=1400 audit(1783184180.234:754): avc: denied { write } for pid=17082 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.312270][T17054] pgmajfault 293 [ 663.316742][T17077] FAT-fs (loop5): Filesystem has been set read-only [ 663.327939][T17054] inactive_anon 0 [ 663.336154][T17054] active_anon 0 [ 663.349695][T17054] inactive_file 0 [ 663.368234][T17054] active_file 0 [ 663.384958][T17054] unevictable 0 [ 663.396304][T17054] hierarchical_memory_limit 314572800 [ 663.419528][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.430773][T17054] hierarchical_memsw_limit 9223372036854771712 [ 663.450835][T17054] total_cache 0 [ 663.454775][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.470827][T17054] total_rss 0 [ 663.482887][T17054] total_shmem 0 [ 663.490284][ T4740] bond0 (unregistering): Released all slaves [ 663.497910][T17088] loop5: detected capacity change from 0 to 256 [ 663.504232][T17054] total_mapped_file 0 [ 663.508365][T17054] total_dirty 0 [ 663.516361][ T4740] bond1 (unregistering): Released all slaves [ 663.522420][T17054] total_writeback 4096 [ 663.660476][T17054] total_workingset_refault_anon 570 [ 663.668592][ T4740] bond2 (unregistering): Released all slaves [ 663.674840][T17054] total_workingset_refault_file 965 [ 663.680930][T17054] total_swap 901120 [ 663.687705][ T4740] bond3 (unregistering): Released all slaves [ 663.693760][T17054] total_swapcached 7917568 [ 663.698334][T17054] total_pgpgin 452293 [ 663.975312][T17054] total_pgpgout 452292 [ 663.982442][T17054] total_pgfault 583865 [ 663.988333][T17054] total_pgmajfault 293 [ 663.995421][T17054] total_inactive_anon 0 [ 664.002795][T17054] total_active_anon 0 [ 664.285680][ T4740] bond4 (unregistering): Released all slaves [ 664.298037][ T4740] bond5 (unregistering): Released all slaves [ 664.309304][ T4740] bond6 (unregistering): Released all slaves [ 664.320079][ T4740] bond7 (unregistering): Released all slaves [ 664.331214][ T4740] bond8 (unregistering): Released all slaves [ 664.350481][T17054] total_inactive_file 0 [ 664.380912][T17054] total_active_file 0 [ 664.403900][T17054] total_unevictable 0 [ 664.424862][ T4740] bond9 (unregistering): Released all slaves [ 664.434170][T17054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3100,pid=16774,uid=0 [ 664.468749][ T4740] bond10 (unregistering): Released all slaves [ 664.497052][T17054] Memory cgroup out of memory: Killed process 16774 (syz.4.3100) total-vm:98548kB, anon-rss:1252kB, file-rss:24900kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 664.535832][T17093] loop1: detected capacity change from 0 to 512 [ 664.544486][T17091] xt_ecn: cannot match TCP bits for non-tcp packets [ 664.562446][ T3025] 8021q: adding VLAN 0 to HW filter on device eth5 [ 664.576832][T17093] EXT4-fs: Ignoring removed bh option [ 665.169386][ T28] audit: type=1400 audit(1783184182.144:755): avc: denied { write } for pid=17097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.268323][T17056] vhci_hcd: connection reset by peer [ 665.278289][ T4730] vhci_hcd vhci_hcd.4: stop threads [ 665.286563][ T4740] tipc: Left network mode [ 665.366616][T17093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.379569][ T4730] vhci_hcd vhci_hcd.4: release socket [ 665.393940][ T4730] vhci_hcd vhci_hcd.4: disconnect device [ 665.400699][T17093] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.415077][ T28] audit: type=1400 audit(1783184182.394:756): avc: denied { write } for pid=17110 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.525240][ T4740] hsr_slave_0: left promiscuous mode [ 665.543044][ T4740] hsr_slave_1: left promiscuous mode [ 665.571346][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.633312][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.677619][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.710397][T17114] loop3: detected capacity change from 0 to 1024 [ 665.717433][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.749046][ T4740] veth1_macvtap: left promiscuous mode [ 665.766571][ T4740] veth0_macvtap: left promiscuous mode [ 665.773472][ T4740] veth1_vlan: left promiscuous mode [ 665.779313][ T4740] veth0_vlan: left promiscuous mode [ 665.799937][T17114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 665.827433][T17114] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.890874][T17114] binfmt_misc: register: failed to install interpreter file ./bus [ 665.927522][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.939303][T15476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 665.972192][T17122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.981330][ T4740] team0 (unregistering): Port device team_slave_1 removed [ 665.984216][T17122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.997681][ T4740] team0 (unregistering): Port device team_slave_0 removed [ 666.019698][T17126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.029690][T17126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.046956][T17126] loop3: detected capacity change from 0 to 2048 [ 666.080431][T17126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.097774][T17128] netlink: 'syz.1.3157': attribute type 27 has an invalid length. [ 666.109356][T17126] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.165373][T17128] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.172678][T17128] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.189067][T17139] loop1: detected capacity change from 0 to 4096 [ 666.195683][ T28] audit: type=1400 audit(1783184183.164:757): avc: denied { write } for pid=17130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.253618][ T28] audit: type=1400 audit(1783184183.214:758): avc: denied { write } for pid=17146 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.259349][T17136] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 666.283455][T17139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 666.321492][T17136] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 666.332855][T17139] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 666.342051][T17136] FAT-fs (loop4): Filesystem has been set read-only [ 666.345277][T17139] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 666.362857][T17128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.378399][T17128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.415050][ T28] audit: type=1400 audit(1783184183.384:759): avc: denied { write } for pid=17148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.449974][T17164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.462090][T17164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.482381][ T28] audit: type=1400 audit(1783184183.454:760): avc: denied { write } for pid=17165 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.509160][T17167] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 666.515730][T17167] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 666.523752][T17167] vhci_hcd vhci_hcd.0: Device attached [ 666.537774][T17139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.548746][T17167] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 666.561039][T17139] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.572943][T17139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.597750][T17139] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.605140][T17139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.615924][T17139] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.623070][T17139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.640284][T17139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.648979][T17139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.724989][T17139] veth1_vlan: left promiscuous mode [ 666.730985][T17139] veth0_vlan: left promiscuous mode [ 666.738092][T17139] veth0_vlan: entered promiscuous mode [ 666.745870][T17139] veth1_vlan: entered promiscuous mode [ 666.754923][T17139] veth1_macvtap: left promiscuous mode [ 666.761058][T17139] veth0_macvtap: left promiscuous mode [ 666.766306][T17167] bio_check_eod: 49 callbacks suppressed [ 666.766335][T17167] syz.4.3162: attempt to access beyond end of device [ 666.766335][T17167] loop4: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 666.767556][T17139] veth0_macvtap: entered promiscuous mode [ 666.772926][T17167] syz.4.3162: attempt to access beyond end of device [ 666.772926][T17167] loop4: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 666.786686][T17139] veth1_macvtap: entered promiscuous mode [ 666.794126][T17167] syz.4.3162: attempt to access beyond end of device [ 666.794126][T17167] loop4: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 666.808942][T17139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 666.835267][T17139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 666.912760][T17175] set_capacity_and_notify: 2 callbacks suppressed [ 666.912883][T17175] loop5: detected capacity change from 0 to 764 [ 666.929206][T17175] iso9660: Unknown parameter '' [ 666.995066][T17175] loop5: detected capacity change from 0 to 512 [ 667.024647][T17167] syz.4.3162: attempt to access beyond end of device [ 667.024647][T17167] loop4: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 667.039736][T17167] syz.4.3162: attempt to access beyond end of device [ 667.039736][T17167] loop4: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 667.057532][T17139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.068085][T17139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.107149][T17167] syz.4.3162: attempt to access beyond end of device [ 667.107149][T17167] loop4: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 667.174695][T17167] syz.4.3162: attempt to access beyond end of device [ 667.174695][T17167] loop4: rw=2049, sector=912, nr_sectors = 32 limit=512 [ 667.222140][T17167] syz.4.3162: attempt to access beyond end of device [ 667.222140][T17167] loop4: rw=2049, sector=976, nr_sectors = 32 limit=512 [ 667.304358][T15476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.314983][T17167] syz.4.3162: attempt to access beyond end of device [ 667.314983][T17167] loop4: rw=2049, sector=1040, nr_sectors = 32 limit=512 [ 667.397618][T17167] syz.4.3162: attempt to access beyond end of device [ 667.397618][T17167] loop4: rw=2049, sector=1104, nr_sectors = 32 limit=512 [ 667.534749][T17168] vhci_hcd: connection reset by peer [ 667.540506][ T4740] vhci_hcd vhci_hcd.4: stop threads [ 667.546418][ T4740] vhci_hcd vhci_hcd.4: release socket [ 667.551987][ T4740] vhci_hcd vhci_hcd.4: disconnect device [ 667.804239][T17177] netlink: 'syz.3.3164': attribute type 1 has an invalid length. [ 667.817873][T17009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 667.828690][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.843380][T17177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 667.852096][T17009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 667.865585][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.876692][T17009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 667.885734][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.893613][T17009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 667.903164][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.941129][T17009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.954762][T17009] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.964613][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.971715][ T4730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.990285][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.997373][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.084812][T17192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17192 comm=syz.4.3166 [ 668.238869][T17196] loop3: detected capacity change from 0 to 512 [ 668.280029][T17196] EXT4-fs: Ignoring removed bh option [ 668.319173][T17009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.339115][T17196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.355005][T17196] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.379773][T17202] loop4: detected capacity change from 0 to 1024 [ 668.433671][T17218] loop5: detected capacity change from 0 to 1024 [ 668.456631][T17009] veth0_vlan: entered promiscuous mode [ 668.463570][T17218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 668.466062][T17009] veth1_vlan: entered promiscuous mode [ 668.475952][T17218] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.490890][T17009] veth0_macvtap: entered promiscuous mode [ 668.511853][T15476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.519134][T17009] veth1_macvtap: entered promiscuous mode [ 668.529018][T17218] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.3170: lblock 0 mapped to illegal pblock 0 (length 1) [ 668.531172][T17202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 668.546923][ T28] audit: type=1400 audit(1783184185.484:761): avc: denied { write } for pid=17215 comm="syz.5.3170" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 668.568974][T17009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.593241][T17202] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.595182][T17009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.613613][ T4730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.616994][T16658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 668.631256][ T4730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.641762][ T4730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.668905][T17227] loop3: detected capacity change from 0 to 256 [ 668.672592][ T4730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.678832][T17226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.710780][T17226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.776696][T17202] binfmt_misc: register: failed to install interpreter file ./bus [ 668.802071][T15986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 668.837230][T17234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.847658][T17234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.868645][T17234] loop0: detected capacity change from 0 to 2048 [ 668.913290][T17234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.927599][T17234] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.999311][ T4730] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.009113][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.019464][ T4730] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.033033][ T4730] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.046460][ T4730] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.080042][T17247] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17247 comm=syz.1.3177 [ 669.175453][T17255] loop1: detected capacity change from 0 to 512 [ 669.185366][T17255] EXT4-fs: Ignoring removed bh option [ 669.198051][T17255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.212241][T17255] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.236480][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.258864][T17259] loop1: detected capacity change from 0 to 256 [ 669.418888][T17259] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 669.458118][T17270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.467175][T17270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.500020][T17272] loop4: detected capacity change from 0 to 256 [ 669.629720][T17274] EXT4-fs: Ignoring removed bh option [ 669.651626][T17259] xt_ecn: cannot match TCP bits for non-tcp packets [ 669.673529][T17274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.697020][T17274] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.742401][T15476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.779728][T17009] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.833342][T17287] netlink: 'syz.3.3190': attribute type 27 has an invalid length. [ 669.856476][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.863822][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.895402][T17287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.904836][T17287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.920853][T17288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 669.936314][T17288] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 670.091135][T17291] iso9660: Unknown parameter '' [ 670.433917][T17293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.530302][T17287] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 670.543011][T17293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.682205][T17300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.728355][T17300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.751894][T17288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.762880][T17305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.777453][T17288] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.784650][T17305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.798595][T17288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.815925][T17288] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.823072][T17288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.835975][T17288] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.843200][T17288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.861311][T17288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.870358][T17288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.886288][T17288] veth1_vlan: left promiscuous mode [ 670.892320][T17288] veth0_vlan: left promiscuous mode [ 670.899016][ T9] usb 9-1: enqueue for inactive port 0 [ 670.899878][T17288] veth0_vlan: entered promiscuous mode [ 670.912926][T17288] veth1_vlan: entered promiscuous mode [ 670.921861][T17288] veth1_macvtap: left promiscuous mode [ 670.928084][T17288] veth0_macvtap: left promiscuous mode [ 670.934742][T17288] veth0_macvtap: entered promiscuous mode [ 670.941478][T17288] veth1_macvtap: entered promiscuous mode [ 670.950629][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 670.959144][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 670.971238][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 670.979878][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 670.983767][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 670.989619][T17288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.004229][T17288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 671.152875][T17308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.163114][T17308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.201198][T17308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.216853][T17308] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.501271][T17313] netlink: 'syz.0.3199': attribute type 27 has an invalid length. [ 671.527580][T17313] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.535394][T17313] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.552908][T17314] binfmt_misc: register: failed to install interpreter file ./file2 [ 671.576422][T17313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.586261][T17313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.617317][T17317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.661807][T17317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.711563][T17313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.719640][T17313] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.731653][T17313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.754643][T17313] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.761821][T17313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.773142][T17313] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.780269][T17313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.808722][T17313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.816923][T15986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.827770][T17313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.843899][T17313] veth1_vlan: left promiscuous mode [ 671.850547][T17313] veth0_vlan: left promiscuous mode [ 671.858047][T17313] veth0_vlan: entered promiscuous mode [ 671.869075][T17313] veth1_vlan: entered promiscuous mode [ 671.880177][T17313] veth1_macvtap: left promiscuous mode [ 671.886094][T17326] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3204'. [ 671.896207][T17313] veth0_macvtap: left promiscuous mode [ 671.902628][T17313] veth0_macvtap: entered promiscuous mode [ 671.910256][T17313] veth1_macvtap: entered promiscuous mode [ 671.921013][T17313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.930905][T17313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.939581][T17313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 671.949087][T17313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 671.978408][T17331] set_capacity_and_notify: 6 callbacks suppressed [ 671.978432][T17331] loop4: detected capacity change from 0 to 256 [ 672.004804][T17331] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 672.023433][T17326] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 672.031474][T17331] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 672.050444][T17331] FAT-fs (loop4): Filesystem has been set read-only [ 672.198304][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 672.207529][T17341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3211'. [ 672.222375][T17343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.239888][T17343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.277474][T17347] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 672.286530][T17347] SELinux: failed to load policy [ 672.333144][T17348] loop4: detected capacity change from 0 to 764 [ 672.343755][T17348] iso9660: Unknown parameter '' [ 672.378449][T17348] loop4: detected capacity change from 0 to 512 [ 672.490126][T17350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.508328][T17350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.537963][T17350] loop1: detected capacity change from 0 to 2048 [ 672.548485][T17350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.562424][T17350] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.035191][T17354] loop5: detected capacity change from 0 to 512 [ 673.068589][T17354] EXT4-fs: Ignoring removed bh option [ 673.106414][T17354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.120620][T17354] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.253676][T15476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.270562][T16658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.425848][T17362] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3218'. [ 673.435838][T17362] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 673.465827][T17363] netlink: 'syz.3.3217': attribute type 27 has an invalid length. [ 673.510513][T17363] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.517721][T17363] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.628489][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3222'. [ 673.637670][T17372] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3222'. [ 673.638452][T17368] loop3: detected capacity change from 0 to 4096 [ 673.691165][T17368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 673.711092][T17363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.723636][T17368] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 673.732908][T17363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.742676][T17368] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 673.798831][T17368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.828552][T17368] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.838847][T17363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.851251][T17368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.858729][T17363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.877874][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.912037][T17377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.916122][T17368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.929109][T17368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.939806][T17368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.941899][T17377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.950532][T17368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.970406][T17368] veth1_vlan: left promiscuous mode [ 673.976297][T17368] veth0_vlan: left promiscuous mode [ 673.982684][T17368] veth0_vlan: entered promiscuous mode [ 673.989163][T17368] veth1_vlan: entered promiscuous mode [ 673.996787][T17368] veth1_macvtap: left promiscuous mode [ 674.002723][T17368] veth0_macvtap: left promiscuous mode [ 674.008707][T17368] veth0_macvtap: entered promiscuous mode [ 674.015253][T17368] veth1_macvtap: entered promiscuous mode [ 674.024017][T17368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.032305][T17368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.040496][T17368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.048815][T17368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.057940][T17368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 674.065833][T17368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 674.076887][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.084011][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.092532][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.099694][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.158705][T17379] syzkaller0: entered promiscuous mode [ 674.164289][T17379] syzkaller0: entered allmulticast mode [ 674.301037][T17388] netlink: 'syz.1.3226': attribute type 27 has an invalid length. [ 674.320783][T17388] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.328016][T17388] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.352554][T17389] binfmt_misc: register: failed to install interpreter file ./file2 [ 674.354238][T17388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.369711][T17388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.407572][T17389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.415694][T17389] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.425443][T17389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.443857][T17389] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.448785][T17388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.450956][T17389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.460875][T17388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.488225][T17389] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.495427][T17389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.510858][T17389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.519420][T17389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.531817][T17389] veth1_vlan: left promiscuous mode [ 674.537642][T17389] veth0_vlan: left promiscuous mode [ 674.544459][T17389] veth0_vlan: entered promiscuous mode [ 674.551381][T17389] veth1_vlan: entered promiscuous mode [ 674.560416][T17389] veth1_macvtap: left promiscuous mode [ 674.566743][T17389] veth0_macvtap: left promiscuous mode [ 674.573093][T17389] veth0_macvtap: entered promiscuous mode [ 674.580114][T17389] veth1_macvtap: entered promiscuous mode [ 674.590369][T17389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.601778][T17389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.612487][T17389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.621574][T17389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.698263][T17391] loop5: detected capacity change from 0 to 1024 [ 674.734954][T17391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 674.746644][T17397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3229'. [ 674.750353][T17391] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.770747][T17397] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 674.820999][ T28] audit: type=1400 audit(1783184191.784:762): avc: denied { write } for pid=17390 comm="syz.5.3227" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 674.852117][T17391] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.3227: lblock 0 mapped to illegal pblock 0 (length 1) [ 674.867242][T17401] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 674.873814][T17401] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 674.882152][T17401] vhci_hcd vhci_hcd.0: Device attached [ 674.949004][T16658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 674.981309][T17406] loop4: detected capacity change from 0 to 512 [ 675.003320][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3233'. [ 675.014369][T17409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3233'. [ 675.105353][T17412] loop0: detected capacity change from 0 to 764 [ 675.112455][T17412] iso9660: Unknown parameter '' [ 675.127329][T17412] loop0: detected capacity change from 0 to 512 [ 675.247399][T17411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.340718][T17411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.473869][T17411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.581029][T17411] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.808860][T17400] syz.4.3231 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 675.870539][T17400] CPU: 1 UID: 0 PID: 17400 Comm: syz.4.3231 Not tainted syzkaller #0 PREEMPT(lazy) [ 675.870575][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.870614][T17400] Call Trace: [ 675.870621][T17400] [ 675.870629][T17400] __dump_stack+0x1d/0x30 [ 675.870669][T17400] dump_stack_lvl+0x95/0xd0 [ 675.870693][T17400] dump_stack+0x15/0x1b [ 675.870718][T17400] dump_header+0x80/0x240 [ 675.870770][T17400] oom_kill_process+0x295/0x350 [ 675.870831][T17400] out_of_memory+0x981/0xbc0 [ 675.870862][T17400] try_charge_memcg+0x621/0xa00 [ 675.870925][T17400] charge_memcg+0x6d/0x120 [ 675.870959][T17400] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 675.871050][T17400] swap_cache_alloc_folio+0x47b/0x5e0 [ 675.871103][T17400] swap_cluster_readahead+0x3d2/0x460 [ 675.871144][T17400] swapin_readahead+0xd8/0x8a0 [ 675.871177][T17400] ? _raw_spin_unlock+0x9/0x30 [ 675.871201][T17400] ? swap_put_entries_cluster+0x49c/0x4c0 [ 675.871279][T17400] ? __entry_text_end+0x11248/0x102179 [ 675.871306][T17400] ? __rcu_read_unlock+0x4e/0x70 [ 675.871332][T17400] ? swap_cache_get_folio+0x1f7/0x200 [ 675.871436][T17400] do_swap_page+0x2a2/0x1ec0 [ 675.871532][T17400] ? __css_rstat_updated+0xbb/0x280 [ 675.871571][T17400] ? __rcu_read_lock+0x36/0x50 [ 675.871602][T17400] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 675.871631][T17400] handle_mm_fault+0xb3c/0x2da0 [ 675.871673][T17400] do_user_addr_fault+0x634/0x1060 [ 675.871771][T17400] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 675.871805][T17400] ? trace_page_fault_user+0x1f/0xa0 [ 675.871834][T17400] exc_page_fault+0x62/0xa0 [ 675.871859][T17400] asm_exc_page_fault+0x26/0x30 [ 675.871913][T17400] RIP: 0033:0x7f82115d17fc [ 675.871930][T17400] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 675.871951][T17400] RSP: 002b:00007fffed23fa58 EFLAGS: 00010246 [ 675.871971][T17400] RAX: 0000000000000000 RBX: ffffffff81980596 RCX: 0000000000000000 [ 675.872032][T17400] RDX: 0000000000000596 RSI: ffffffff81980596 RDI: 000000000000000b [ 675.872046][T17400] RBP: 0000000000000000 R08: 00007f8211990000 R09: 00007f8211992000 [ 675.872060][T17400] R10: 000000008198059a R11: 000000000000000b R12: 00007f82119a6218 [ 675.872076][T17400] R13: 0000000000000009 R14: ffffffff81980195 R15: 00007f82124d5720 [ 675.872094][T17400] ? build_open_flags+0x405/0x450 [ 675.872171][T17400] ? file_open_root+0x126/0x130 [ 675.872205][T17400] ? file_open_root+0x126/0x130 [ 675.872260][T17400] [ 675.988285][ T4882] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 675.995230][T17400] memory: usage 273248kB, limit 307200kB, failcnt 2663 [ 676.063783][ T4882] usb 9-1: new full-speed USB device number 6 using vhci_hcd [ 676.124334][T17400] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 676.271723][T17400] kmem: usage 116268kB, limit 9007199254740988kB, failcnt 0 [ 676.302130][T17400] Memory cgroup stats for /syz4: [ 676.302489][T17400] cache 16384 [ 676.319435][T17400] rss 4096 [ 676.327447][T17400] shmem 0 [ 676.333489][T17400] mapped_file 0 [ 676.342074][T17400] dirty 0 [ 676.348176][T17400] writeback 0 [ 676.355008][T17400] workingset_refault_anon 715 [ 676.364471][T17400] workingset_refault_file 967 [ 676.375748][T17400] swap 475136 [ 676.382190][T17400] swapcached 8896512 [ 676.391055][T17400] pgpgin 462164 [ 676.410416][T16658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.422638][T17400] pgpgout 462159 [ 676.431018][T17400] pgfault 596022 [ 676.439624][T17400] pgmajfault 380 [ 676.446488][T17400] inactive_anon 0 [ 676.454384][T17400] active_anon 4096 [ 676.462125][T17400] inactive_file 0 [ 676.470394][T17400] active_file 16384 [ 676.477633][T17400] unevictable 0 [ 676.497998][T17400] hierarchical_memory_limit 314572800 [ 676.510222][T17400] hierarchical_memsw_limit 9223372036854771712 [ 676.525058][T17400] total_cache 16384 [ 676.531865][T17400] total_rss 4096 [ 676.540201][T17400] total_shmem 0 [ 676.548358][T17400] total_mapped_file 0 [ 676.555448][T17400] total_dirty 0 [ 676.565890][T17400] total_writeback 0 [ 676.572619][T17400] total_workingset_refault_anon 715 [ 676.584308][T17400] total_workingset_refault_file 967 [ 676.596233][T17400] total_swap 475136 [ 676.603058][T17400] total_swapcached 8896512 [ 676.612606][T17400] total_pgpgin 462164 [ 676.623888][T17400] total_pgpgout 462159 [ 676.631939][T17400] total_pgfault 596022 [ 676.638315][T17400] total_pgmajfault 380 [ 676.642537][T17400] total_inactive_anon 0 [ 676.646723][T17400] total_active_anon 4096 [ 676.650971][T17400] total_inactive_file 0 [ 676.655576][T17400] total_active_file 16384 [ 676.660074][T17400] total_unevictable 0 [ 676.664206][T17400] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3231,pid=17400,uid=0 [ 676.679050][T17400] Memory cgroup out of memory: Killed process 17400 (syz.4.3231) total-vm:96360kB, anon-rss:1240kB, file-rss:22460kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 676.700339][T17420] syzkaller0: entered promiscuous mode [ 676.706872][T17420] syzkaller0: entered allmulticast mode [ 676.785231][T15476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.797788][T17403] vhci_hcd: connection reset by peer [ 676.827045][ T4730] vhci_hcd vhci_hcd.4: stop threads [ 676.842124][ T4730] vhci_hcd vhci_hcd.4: release socket [ 676.956721][T17425] iso9660: Unknown parameter '' [ 676.987037][ T4730] vhci_hcd vhci_hcd.4: disconnect device [ 677.059825][T17426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.092211][T17426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.551592][T17429] set_capacity_and_notify: 3 callbacks suppressed [ 677.551608][T17429] loop3: detected capacity change from 0 to 256 [ 677.931672][T17431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.941271][T17431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.959179][T17431] loop4: detected capacity change from 0 to 2048 [ 678.406623][T17436] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 678.481481][T17431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.541187][T17442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3241'. [ 678.620449][T17431] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.639718][T17442] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 678.672896][T17434] xt_ecn: cannot match TCP bits for non-tcp packets [ 678.701647][T17446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.714231][T17446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.008185][T17451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3244'. [ 679.008344][T17451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3244'. [ 679.071283][T17453] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 679.071308][T17453] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 679.071355][T17453] vhci_hcd vhci_hcd.0: Device attached [ 679.160485][T17456] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 679.245242][ T4889] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 679.303753][ T4889] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 679.325197][T17456] loop1: detected capacity change from 0 to 512 [ 679.566881][T17458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.595437][T17458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.759826][T17453] syz.1.3245 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 679.800035][T17453] CPU: 1 UID: 0 PID: 17453 Comm: syz.1.3245 Not tainted syzkaller #0 PREEMPT(lazy) [ 679.800070][T17453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 679.800085][T17453] Call Trace: [ 679.800093][T17453] [ 679.800103][T17453] __dump_stack+0x1d/0x30 [ 679.800184][T17453] dump_stack_lvl+0x95/0xd0 [ 679.800205][T17453] dump_stack+0x15/0x1b [ 679.800229][T17453] dump_header+0x80/0x240 [ 679.800255][T17453] oom_kill_process+0x295/0x350 [ 679.800315][T17453] out_of_memory+0x981/0xbc0 [ 679.800355][T17453] try_charge_memcg+0x621/0xa00 [ 679.800402][T17453] __memcg_kmem_charge_page+0x199/0x3a0 [ 679.800481][T17453] __alloc_frozen_pages_noprof+0x18a/0x350 [ 679.800511][T17453] alloc_pages_mpol+0xa9/0x1d0 [ 679.800600][T17453] alloc_pages_noprof+0x8f/0x140 [ 679.800709][T17453] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 679.800755][T17453] __kvmalloc_node_noprof+0x3a0/0x590 [ 679.800813][T17453] ? futex_hash_allocate+0x192/0x920 [ 679.800835][T17453] ? futex_hash_allocate+0x192/0x920 [ 679.800938][T17453] ? futex_hash_allocate+0x192/0x920 [ 679.800964][T17453] futex_hash_allocate+0x192/0x920 [ 679.800989][T17453] ? cap_task_prctl+0x13f/0x6b0 [ 679.801051][T17453] futex_hash_prctl+0xd8/0xf0 [ 679.801077][T17453] __se_sys_prctl+0x4f4/0x13b0 [ 679.801116][T17453] __x64_sys_prctl+0x67/0x80 [ 679.801175][T17453] x64_sys_call+0x2533/0x3020 [ 679.801224][T17453] do_syscall_64+0x136/0x3c0 [ 679.801256][T17453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.801324][T17453] RIP: 0033:0x7fde5007de59 [ 679.801340][T17453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.801362][T17453] RSP: 002b:00007fde4ead7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 679.801387][T17453] RAX: ffffffffffffffda RBX: 00007fde50305fa0 RCX: 00007fde5007de59 [ 679.801473][T17453] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 679.801490][T17453] RBP: 00007fde50113e6f R08: 0000000000000000 R09: 0000000000000000 [ 679.801505][T17453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.801518][T17453] R13: 00007fde50306038 R14: 00007fde50305fa0 R15: 00007fff740b13f8 [ 679.801583][T17453] [ 679.803098][T17453] memory: usage 271052kB, limit 307200kB, failcnt 1821 [ 680.034847][T17453] memory+swap: usage 271460kB, limit 9007199254740988kB, failcnt 0 [ 680.052522][T17453] kmem: usage 228088kB, limit 9007199254740988kB, failcnt 0 [ 680.060471][T17453] Memory cgroup stats for /syz1: [ 680.060837][T17453] cache 544768 [ 680.070355][T17453] rss 32768 [ 680.073532][T17453] shmem 0 [ 680.073623][T17460] loop3: detected capacity change from 0 to 256 [ 680.076862][T17453] mapped_file 65536 [ 680.087266][T17453] dirty 0 [ 680.090283][T17453] writeback 0 [ 680.094194][T17453] workingset_refault_anon 453 [ 680.100894][T17453] workingset_refault_file 2934 [ 680.106200][T17453] swap 417792 [ 680.109702][T17453] swapcached 4964352 [ 680.121137][T17453] pgpgin 443697 [ 680.129686][T17453] pgpgout 443552 [ 680.136731][T17453] pgfault 608076 [ 680.144052][T17453] pgmajfault 260 [ 680.148893][T17453] inactive_anon 45056 [ 680.153015][T17453] active_anon 4096 [ 680.160051][T17453] inactive_file 528384 [ 680.164471][T17453] active_file 16384 [ 680.168353][T17453] unevictable 0 [ 680.172239][T17453] hierarchical_memory_limit 314572800 [ 680.173961][T17460] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 680.178128][T17453] hierarchical_memsw_limit 9223372036854771712 [ 680.200893][T17463] netlink: 'syz.5.3248': attribute type 27 has an invalid length. [ 680.216076][T15986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.225257][T17453] total_cache 544768 [ 680.234373][T17453] total_rss 32768 [ 680.248330][T17453] total_shmem 0 [ 680.259270][T17453] total_mapped_file 65536 [ 680.270878][T17453] total_dirty 0 [ 680.277087][T17466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.285844][T17464] loop5: detected capacity change from 0 to 4096 [ 680.286412][T17453] total_writeback 0 [ 680.295764][T17466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.296696][T17453] total_workingset_refault_anon 453 [ 680.306161][T17463] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.309837][T17453] total_workingset_refault_file 2934 [ 680.316246][T17463] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.321847][T17453] total_swap 417792 [ 680.332541][T17453] total_swapcached 4964352 [ 680.337223][T17453] total_pgpgin 443697 [ 680.341371][T17453] total_pgpgout 443552 [ 680.345730][T17453] total_pgfault 608076 [ 680.350015][T17453] total_pgmajfault 260 [ 680.354391][T17453] total_inactive_anon 45056 [ 680.359322][T17453] total_active_anon 4096 [ 680.364847][T17464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 680.377486][T17453] total_inactive_file 528384 [ 680.382136][T17453] total_active_file 16384 [ 680.382162][T17463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.389639][T17453] total_unevictable 0 [ 680.396498][T17463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.399893][T17453] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 680.411001][T17460] xt_ecn: cannot match TCP bits for non-tcp packets [ 680.421319][T17453] ,cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3245,pid=17452,uid=0 [ 680.428643][T17464] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 680.436013][T17453] Memory cgroup out of memory: Killed process 17452 (syz.1.3245) total-vm:96228kB, anon-rss:1268kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 680.464156][T17469] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 680.482850][ T4730] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.492096][ T4730] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.501371][ T4730] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.510399][ T4730] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.523604][T17454] vhci_hcd: connection reset by peer [ 680.531059][T17464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.539066][T17464] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.539549][ T4743] vhci_hcd vhci_hcd.1: stop threads [ 680.546700][T17463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.552753][ T4743] vhci_hcd vhci_hcd.1: release socket [ 680.565562][ T4743] vhci_hcd vhci_hcd.1: disconnect device [ 680.574699][T17464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.578187][T17463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.590797][T17471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.600178][T17471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.621969][T17464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.630331][T17464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.640432][T17464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 680.651028][T17464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.663122][T17464] veth1_vlan: left promiscuous mode [ 680.669121][T17464] veth0_vlan: left promiscuous mode [ 680.675547][T17464] veth0_vlan: entered promiscuous mode [ 680.681936][T17464] veth1_vlan: entered promiscuous mode [ 680.690137][T17464] veth1_macvtap: left promiscuous mode [ 680.696181][T17464] veth0_macvtap: left promiscuous mode [ 680.702234][T17464] veth0_macvtap: entered promiscuous mode [ 680.708535][T17464] veth1_macvtap: entered promiscuous mode [ 680.717381][T17464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 680.726076][T17464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 680.734289][T17464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 680.742491][T17464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.751335][ T4730] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.760561][ T4730] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.770710][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.778519][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.786929][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.794054][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.834278][ T4730] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.843058][ T4730] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.035721][T17475] loop4: detected capacity change from 0 to 512 [ 681.043202][T17475] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 681.071183][T17475] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 681.086833][T17475] Quota error (device loop4): write_blk: dquota write failed [ 681.095389][T17475] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 681.105439][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 681.105490][ C1] EXT4-fs (loop4): initial error at time 1783184198: ext4_mb_generate_buddy:1317 [ 681.105569][ C1] EXT4-fs (loop4): last error at time 1783184198: ext4_mb_generate_buddy:1317 [ 681.141864][T17475] Quota error (device loop4): write_blk: dquota write failed [ 681.150602][T17475] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 681.161752][T17475] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.3251: Failed to acquire dquot type 1 [ 681.178258][T17475] loop4: lost filesystem error report for type 5 error -28 [ 681.181374][T17475] EXT4-fs (loop4): 1 truncate cleaned up [ 681.236651][T17475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.267672][T17475] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 681.279405][T17483] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3254'. [ 681.292535][T17483] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 681.363742][T17479] loop0: detected capacity change from 0 to 512 [ 681.366187][T17485] loop3: detected capacity change from 0 to 512 [ 681.374613][T17479] EXT4-fs: Ignoring removed bh option [ 681.388356][T17485] EXT4-fs: Ignoring removed bh option [ 681.406700][T17487] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 681.413252][T17487] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 681.426048][T17487] vhci_hcd vhci_hcd.0: Device attached [ 681.434154][T17479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.449533][T17479] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.460043][T17485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.521125][T17494] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 681.537571][T17485] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.550099][T17494] loop1: detected capacity change from 0 to 512 [ 681.573445][T17009] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.602562][T17496] loop0: detected capacity change from 0 to 256 [ 681.622739][T15476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.685137][ T4882] usb 9-1: enqueue for inactive port 0 [ 681.690817][ T4882] usb 9-1: enqueue for inactive port 0 [ 681.758628][T17501] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 681.772928][T17501] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 681.786215][T17501] FAT-fs (loop3): Filesystem has been set read-only [ 681.899703][T17502] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 682.038570][T15986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.197403][T17502] xt_ecn: cannot match TCP bits for non-tcp packets [ 682.735744][ T4882] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 682.951964][T17487] syz.1.3256 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 682.966529][T17487] CPU: 0 UID: 0 PID: 17487 Comm: syz.1.3256 Not tainted syzkaller #0 PREEMPT(lazy) [ 682.966561][T17487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 682.966574][T17487] Call Trace: [ 682.966583][T17487] [ 682.966615][T17487] __dump_stack+0x1d/0x30 [ 682.966664][T17487] dump_stack_lvl+0x95/0xd0 [ 682.966691][T17487] dump_stack+0x15/0x1b [ 682.966715][T17487] dump_header+0x80/0x240 [ 682.966741][T17487] oom_kill_process+0x295/0x350 [ 682.966781][T17487] out_of_memory+0x981/0xbc0 [ 682.966820][T17487] try_charge_memcg+0x621/0xa00 [ 682.966896][T17487] __memcg_kmem_charge_page+0x199/0x3a0 [ 682.967070][T17487] __alloc_frozen_pages_noprof+0x18a/0x350 [ 682.967103][T17487] alloc_pages_mpol+0xa9/0x1d0 [ 682.967140][T17487] alloc_pages_noprof+0x8f/0x140 [ 682.967218][T17487] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 682.967260][T17487] __kvmalloc_node_noprof+0x3a0/0x590 [ 682.967349][T17487] ? futex_hash_allocate+0x192/0x920 [ 682.967372][T17487] ? futex_hash_allocate+0x192/0x920 [ 682.967393][T17487] ? futex_hash_allocate+0x192/0x920 [ 682.967415][T17487] futex_hash_allocate+0x192/0x920 [ 682.967438][T17487] ? cap_task_prctl+0x13f/0x6b0 [ 682.967617][T17487] futex_hash_prctl+0xd8/0xf0 [ 682.967638][T17487] __se_sys_prctl+0x4f4/0x13b0 [ 682.967667][T17487] __x64_sys_prctl+0x67/0x80 [ 682.967765][T17487] x64_sys_call+0x2533/0x3020 [ 682.967795][T17487] do_syscall_64+0x136/0x3c0 [ 682.967843][T17487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.967951][T17487] RIP: 0033:0x7fde5007de59 [ 682.967972][T17487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.967992][T17487] RSP: 002b:00007fde4ead7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 682.968014][T17487] RAX: ffffffffffffffda RBX: 00007fde50305fa0 RCX: 00007fde5007de59 [ 682.968094][T17487] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 682.968108][T17487] RBP: 00007fde50113e6f R08: 0000000000000000 R09: 0000000000000000 [ 682.968121][T17487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.968135][T17487] R13: 00007fde50306038 R14: 00007fde50305fa0 R15: 00007fff740b13f8 [ 682.968156][T17487] [ 682.968192][T17487] memory: usage 307200kB, limit 307200kB, failcnt 1989 [ 683.199481][T16658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.211074][T17487] memory+swap: usage 17452kB, limit 9007199254740988kB, failcnt 0 [ 683.254034][T17487] kmem: usage 2048kB, limit 9007199254740988kB, failcnt 0 [ 683.275324][T17487] Memory cgroup stats for /syz1: [ 683.275594][T17487] cache 4096 [ 683.295922][T17487] rss 32768 [ 683.300683][T17487] shmem 0 [ 683.306755][T17487] mapped_file 4096 [ 683.314248][T17487] dirty 0 [ 683.337112][T17487] writeback 0 [ 683.351609][T17487] workingset_refault_anon 523 [ 683.371049][T17487] workingset_refault_file 3828 [ 683.384138][T17510] set_capacity_and_notify: 1 callbacks suppressed [ 683.384154][T17510] loop3: detected capacity change from 0 to 764 [ 683.400173][T17510] iso9660: Unknown parameter '' [ 683.427767][T17510] loop3: detected capacity change from 0 to 512 [ 683.476455][T17487] swap 421888 [ 683.488936][T17487] swapcached 5611520 [ 683.503216][T17487] pgpgin 444830 [ 683.519674][T17487] pgpgout 444818 [ 683.538900][T17487] pgfault 608436 [ 683.564474][T17487] pgmajfault 296 [ 683.575576][T17487] inactive_anon 40960 [ 683.588251][T17487] active_anon 4096 [ 683.598517][T17487] inactive_file 0 [ 683.602170][T17487] active_file 4096 [ 683.605896][T17487] unevictable 0 [ 683.609384][T17487] hierarchical_memory_limit 314572800 [ 683.671747][T17487] hierarchical_memsw_limit 9223372036854771712 [ 683.693678][T17487] total_cache 4096 [ 683.705482][T17487] total_rss 32768 [ 683.724052][T17487] total_shmem 0 [ 683.727740][T17487] total_mapped_file 4096 [ 683.732279][T17487] total_dirty 0 [ 683.736286][T17487] total_writeback 0 [ 683.740250][T17487] total_workingset_refault_anon 523 [ 683.745647][T17487] total_workingset_refault_file 3828 [ 683.751052][T17487] total_swap 421888 [ 683.754938][T17487] total_swapcached 5611520 [ 683.759424][T17487] total_pgpgin 444830 [ 683.763849][T17487] total_pgpgout 444818 [ 683.768044][T17487] total_pgfault 608436 [ 683.772129][T17487] total_pgmajfault 296 [ 683.776398][T17487] total_inactive_anon 40960 [ 683.781232][T17487] total_active_anon 4096 [ 683.785708][T17487] total_inactive_file 0 [ 683.787373][T17512] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 683.789879][T17487] total_active_file 4096 [ 683.796357][T17512] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 683.808541][T17487] total_unevictable 0 [ 683.812559][T17487] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3256,pid=17486,uid=0 [ 683.824532][T17516] syzkaller0: entered promiscuous mode [ 683.827449][T17487] Memory cgroup out of memory: Killed process 17486 (syz.1.3256) total-vm:96228kB, anon-rss:1268kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 683.852381][T17512] vhci_hcd vhci_hcd.0: Device attached [ 683.858327][T17516] syzkaller0: entered allmulticast mode [ 683.889944][T17488] vhci_hcd: connection closed [ 683.890990][ T4740] vhci_hcd vhci_hcd.1: stop threads [ 683.910228][ T4740] vhci_hcd vhci_hcd.1: release socket [ 683.930888][ T4740] vhci_hcd vhci_hcd.1: disconnect device [ 683.938471][T17519] loop1: detected capacity change from 0 to 256 [ 683.945566][T17517] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 684.034358][T17519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 684.060378][ T3615] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 684.076394][T17517] loop0: detected capacity change from 0 to 512 [ 684.141954][T17525] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3265'. [ 684.151060][ T3615] usb 1-1: new full-speed USB device number 8 using vhci_hcd [ 684.159620][T17525] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 684.208375][T17528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.228536][T17528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.278961][T17519] xt_ecn: cannot match TCP bits for non-tcp packets [ 684.324979][ T4889] usb 3-1: enqueue for inactive port 0 [ 684.347349][ T4889] usb 3-1: enqueue for inactive port 0 [ 684.434894][ T4889] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 684.465168][T17530] loop4: detected capacity change from 0 to 256 [ 684.522885][T17530] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 684.538199][T17530] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 684.560712][T17530] FAT-fs (loop4): Filesystem has been set read-only [ 684.837759][T17538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.852810][T17541] syzkaller0: entered promiscuous mode [ 684.853803][T17538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.863749][T17541] syzkaller0: entered allmulticast mode [ 684.924596][T17538] loop5: detected capacity change from 0 to 2048 [ 684.985967][T17538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.009088][T17547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.020369][T17538] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.052731][T17547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.062161][T17549] syzkaller0: entered promiscuous mode [ 685.082268][T17549] syzkaller0: entered allmulticast mode [ 685.138165][T17512] syz.0.3263 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 685.152555][T17512] CPU: 0 UID: 0 PID: 17512 Comm: syz.0.3263 Not tainted syzkaller #0 PREEMPT(lazy) [ 685.152596][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.152612][T17512] Call Trace: [ 685.152620][T17512] [ 685.152628][T17512] __dump_stack+0x1d/0x30 [ 685.152653][T17512] dump_stack_lvl+0x95/0xd0 [ 685.152681][T17512] dump_stack+0x15/0x1b [ 685.152704][T17512] dump_header+0x80/0x240 [ 685.152781][T17512] oom_kill_process+0x295/0x350 [ 685.152822][T17512] out_of_memory+0x981/0xbc0 [ 685.152856][T17512] try_charge_memcg+0x621/0xa00 [ 685.152952][T17512] __memcg_kmem_charge_page+0x199/0x3a0 [ 685.152991][T17512] __alloc_frozen_pages_noprof+0x18a/0x350 [ 685.153104][T17512] alloc_pages_mpol+0xa9/0x1d0 [ 685.153134][T17512] alloc_pages_noprof+0x8f/0x140 [ 685.153166][T17512] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 685.153287][T17512] __kvmalloc_node_noprof+0x3a0/0x590 [ 685.153315][T17512] ? futex_hash_allocate+0x192/0x920 [ 685.153337][T17512] ? futex_hash_allocate+0x192/0x920 [ 685.153358][T17512] ? futex_hash_allocate+0x192/0x920 [ 685.153394][T17512] futex_hash_allocate+0x192/0x920 [ 685.153417][T17512] ? cap_task_prctl+0x13f/0x6b0 [ 685.153451][T17512] futex_hash_prctl+0xd8/0xf0 [ 685.153472][T17512] __se_sys_prctl+0x4f4/0x13b0 [ 685.153545][T17512] __x64_sys_prctl+0x67/0x80 [ 685.153576][T17512] x64_sys_call+0x2533/0x3020 [ 685.153625][T17512] do_syscall_64+0x136/0x3c0 [ 685.153770][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.153794][T17512] RIP: 0033:0x7f64008ede59 [ 685.153813][T17512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.153905][T17512] RSP: 002b:00007f63ff347028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 685.153930][T17512] RAX: ffffffffffffffda RBX: 00007f6400b75fa0 RCX: 00007f64008ede59 [ 685.153947][T17512] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 685.153960][T17512] RBP: 00007f6400983e6f R08: 0000000000000000 R09: 0000000000000000 [ 685.153974][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.154039][T17512] R13: 00007f6400b76038 R14: 00007f6400b75fa0 R15: 00007fffd9fe1d88 [ 685.154062][T17512] [ 685.378151][T17512] memory: usage 307200kB, limit 307200kB, failcnt 3681 [ 685.385104][T17512] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 685.393020][T17512] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 685.400447][T17512] Memory cgroup stats for /syz0: [ 685.400659][T17512] cache 0 [ 685.408831][T17512] rss 0 [ 685.411655][T17512] shmem 0 [ 685.414681][T17512] mapped_file 0 [ 685.418274][T17512] dirty 0 [ 685.421274][T17512] writeback 0 [ 685.424605][T17512] workingset_refault_anon 786 [ 685.429330][T17512] workingset_refault_file 4211 [ 685.434105][T17512] swap 475136 [ 685.434113][T17550] loop0: detected capacity change from 512 to 511 [ 685.445682][T17512] swapcached 12427264 [ 685.449722][T17512] pgpgin 473957 [ 685.453168][T17512] pgpgout 473956 [ 685.457188][T17512] pgfault 626565 [ 685.460824][T17512] pgmajfault 452 [ 685.464717][T17512] inactive_anon 0 [ 685.468364][T17512] active_anon 0 [ 685.471864][T17512] inactive_file 0 [ 685.475768][T17512] active_file 0 [ 685.479236][T17512] unevictable 0 [ 685.482841][T17512] hierarchical_memory_limit 314572800 [ 685.490959][T17512] hierarchical_memsw_limit 9223372036854771712 [ 685.497316][T17512] total_cache 0 [ 685.500854][T17512] total_rss 0 [ 685.504442][T17512] total_shmem 0 [ 685.507902][T17512] total_mapped_file 0 [ 685.511881][T17512] total_dirty 0 [ 685.515719][T17512] total_writeback 0 [ 685.519570][T17512] total_workingset_refault_anon 786 [ 685.525503][T17512] total_workingset_refault_file 4211 [ 685.530790][T17512] total_swap 475136 [ 685.534799][T17512] total_swapcached 12427264 [ 685.539397][T17512] total_pgpgin 473957 [ 685.543389][T17512] total_pgpgout 473956 [ 685.547690][T17512] total_pgfault 626565 [ 685.551758][T17512] total_pgmajfault 452 [ 685.556097][T17512] total_inactive_anon 0 [ 685.560342][T17512] total_active_anon 0 [ 685.564608][T17512] total_inactive_file 0 [ 685.569609][T17512] total_active_file 0 [ 685.575594][T17512] total_unevictable 0 [ 685.580340][T17512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3263,pid=17511,uid=0 [ 685.597604][T17512] Memory cgroup out of memory: Killed process 17511 (syz.0.3263) total-vm:96360kB, anon-rss:1244kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 685.734730][T17513] vhci_hcd: connection reset by peer [ 685.742909][ T4754] vhci_hcd vhci_hcd.0: stop threads [ 685.748185][ T4754] vhci_hcd vhci_hcd.0: release socket [ 685.756043][ T4754] vhci_hcd vhci_hcd.0: disconnect device [ 685.799786][T17554] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 685.806328][T17554] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 685.833063][T17558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3276'. [ 685.857521][T17554] vhci_hcd vhci_hcd.0: Device attached [ 685.866843][T17558] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 685.910564][T17554] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 685.940337][T17552] loop1: detected capacity change from 0 to 512 [ 685.980080][T17552] EXT4-fs: Ignoring removed bh option [ 686.033766][ T4875] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 686.034058][T16658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.059907][T17554] loop4: detected capacity change from 0 to 512 [ 686.061506][T17563] loop0: detected capacity change from 0 to 256 [ 686.093936][ T4875] usb 9-1: new full-speed USB device number 7 using vhci_hcd [ 686.121093][T17567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.133858][T17563] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 686.147519][T17552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.158922][T17563] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 686.171589][T17563] FAT-fs (loop0): Filesystem has been set read-only [ 686.188843][T17567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.197033][T17552] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.269008][T17573] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 686.275558][T17573] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 686.286307][T17573] vhci_hcd vhci_hcd.0: Device attached [ 686.296972][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.334845][ T4754] bio_check_eod: 18 callbacks suppressed [ 686.334884][ T4754] kworker/u8:29: attempt to access beyond end of device [ 686.334884][ T4754] loop4: rw=1, sector=528, nr_sectors = 32 limit=512 [ 686.350255][T17576] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 686.392448][ T4754] kworker/u8:29: attempt to access beyond end of device [ 686.392448][ T4754] loop4: rw=1, sector=592, nr_sectors = 32 limit=512 [ 686.401216][T17578] syzkaller0: entered promiscuous mode [ 686.421296][T17578] syzkaller0: entered allmulticast mode [ 686.429283][ T4754] kworker/u8:29: attempt to access beyond end of device [ 686.429283][ T4754] loop4: rw=1, sector=656, nr_sectors = 32 limit=512 [ 686.459862][ T4754] kworker/u8:29: attempt to access beyond end of device [ 686.459862][ T4754] loop4: rw=1, sector=720, nr_sectors = 32 limit=512 [ 686.474387][ T4754] kworker/u8:29: attempt to access beyond end of device [ 686.474387][ T4754] loop4: rw=1, sector=784, nr_sectors = 32 limit=512 [ 686.494416][ T4754] kworker/u8:29: attempt to access beyond end of device [ 686.494416][ T4754] loop4: rw=1, sector=848, nr_sectors = 32 limit=512 [ 686.509688][ T4754] kworker/u8:29: attempt to access beyond end of device [ 686.509688][ T4754] loop4: rw=1, sector=912, nr_sectors = 32 limit=512 [ 686.533879][ T4754] kworker/u8:29: attempt to access beyond end of device [ 686.533879][ T4754] loop4: rw=1, sector=976, nr_sectors = 32 limit=512 [ 686.548555][ T4754] kworker/u8:29: attempt to access beyond end of device [ 686.548555][ T4754] loop4: rw=1, sector=1040, nr_sectors = 24 limit=512 [ 686.589592][ T4730] kworker/u8:17: attempt to access beyond end of device [ 686.589592][ T4730] loop4: rw=1, sector=1064, nr_sectors = 8 limit=512 [ 686.639381][T17573] syz.0.3283 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 686.723976][T17573] CPU: 0 UID: 0 PID: 17573 Comm: syz.0.3283 Not tainted syzkaller #0 PREEMPT(lazy) [ 686.724008][T17573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.724025][T17573] Call Trace: [ 686.724032][T17573] [ 686.724040][T17573] __dump_stack+0x1d/0x30 [ 686.724065][T17573] dump_stack_lvl+0x95/0xd0 [ 686.724131][T17573] dump_stack+0x15/0x1b [ 686.724150][T17573] dump_header+0x80/0x240 [ 686.724177][T17573] oom_kill_process+0x295/0x350 [ 686.724267][T17573] out_of_memory+0x981/0xbc0 [ 686.724299][T17573] try_charge_memcg+0x621/0xa00 [ 686.724343][T17573] __memcg_kmem_charge_page+0x199/0x3a0 [ 686.724374][T17573] __alloc_frozen_pages_noprof+0x18a/0x350 [ 686.724420][T17573] alloc_pages_mpol+0xa9/0x1d0 [ 686.724483][T17573] alloc_pages_noprof+0x8f/0x140 [ 686.724512][T17573] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 686.724546][T17573] __kvmalloc_node_noprof+0x3a0/0x590 [ 686.724649][T17573] ? futex_hash_allocate+0x192/0x920 [ 686.724671][T17573] ? futex_hash_allocate+0x192/0x920 [ 686.724692][T17573] ? futex_hash_allocate+0x192/0x920 [ 686.724717][T17573] futex_hash_allocate+0x192/0x920 [ 686.724756][T17573] ? cap_task_prctl+0x13f/0x6b0 [ 686.724790][T17573] futex_hash_prctl+0xd8/0xf0 [ 686.724870][T17573] __se_sys_prctl+0x4f4/0x13b0 [ 686.724905][T17573] __x64_sys_prctl+0x67/0x80 [ 686.724932][T17573] x64_sys_call+0x2533/0x3020 [ 686.724957][T17573] do_syscall_64+0x136/0x3c0 [ 686.725035][T17573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.725168][T17573] RIP: 0033:0x7f64008ede59 [ 686.725184][T17573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.725207][T17573] RSP: 002b:00007f63ff347028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 686.725232][T17573] RAX: ffffffffffffffda RBX: 00007f6400b75fa0 RCX: 00007f64008ede59 [ 686.725311][T17573] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 686.725364][T17573] RBP: 00007f6400983e6f R08: 0000000000000000 R09: 0000000000000000 [ 686.725377][T17573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.725390][T17573] R13: 00007f6400b76038 R14: 00007f6400b75fa0 R15: 00007fffd9fe1d88 [ 686.725409][T17573] [ 686.731807][T17573] memory: usage 307200kB, limit 307200kB, failcnt 4008 [ 686.969191][T17573] memory+swap: usage 9868kB, limit 9007199254740988kB, failcnt 0 [ 686.977391][T17573] kmem: usage 3620kB, limit 9007199254740988kB, failcnt 0 [ 686.984663][T17573] Memory cgroup stats for /syz0: [ 686.984915][T17573] cache 0 [ 686.993037][T17573] rss 32768 [ 687.015285][T17573] shmem 0 [ 687.018335][T17573] mapped_file 0 [ 687.024058][T17573] dirty 0 [ 687.033754][T17573] writeback 0 [ 687.044661][T17573] workingset_refault_anon 875 [ 687.049664][T17573] workingset_refault_file 4240 [ 687.054631][T17582] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 687.062310][T17587] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 687.062706][T17573] swap 1175552 [ 687.068827][T17587] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 687.088138][T17584] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 687.109659][T17587] vhci_hcd vhci_hcd.0: Device attached [ 687.116866][T17573] swapcached 13938688 [ 687.126347][T17573] pgpgin 474543 [ 687.131543][T17573] pgpgout 474535 [ 687.140180][T17573] pgfault 627411 [ 687.144628][T17584] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 687.147024][T17573] pgmajfault 511 [ 687.162131][T17591] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 687.170878][T17573] inactive_anon 0 [ 687.176255][T17573] active_anon 32768 [ 687.182086][T17554] Buffer I/O error on dev loop4, logical block 551, lost async page write [ 687.183101][T17573] inactive_file 0 [ 687.193631][T17584] FAT-fs (loop5): Filesystem has been set read-only [ 687.210768][T17573] active_file 0 [ 687.217454][T17573] unevictable 0 [ 687.222527][T17573] hierarchical_memory_limit 314572800 [ 687.251929][T17573] hierarchical_memsw_limit 9223372036854771712 [ 687.270240][T17573] total_cache 0 [ 687.275829][T17573] total_rss 32768 [ 687.282771][T17573] total_shmem 0 [ 687.284907][T17582] xt_ecn: cannot match TCP bits for non-tcp packets [ 687.292972][T17573] total_mapped_file 0 [ 687.294325][ T4889] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 687.297444][T17573] total_dirty 0 [ 687.328702][T17573] total_writeback 0 [ 687.336138][T17573] total_workingset_refault_anon 875 [ 687.341924][T17573] total_workingset_refault_file 4240 [ 687.359915][T17573] total_swap 1175552 [ 687.363933][ T4889] usb 7-1: new full-speed USB device number 7 using vhci_hcd [ 687.371433][T17573] total_swapcached 13938688 [ 687.382059][T17573] total_pgpgin 474543 [ 687.392116][T17573] total_pgpgout 474535 [ 687.402203][T17573] total_pgfault 627411 [ 687.411598][T17573] total_pgmajfault 511 [ 687.419925][T17573] total_inactive_anon 0 [ 687.427391][T17573] total_active_anon 32768 [ 687.436240][T17573] total_inactive_file 0 [ 687.448776][T17573] total_active_file 0 [ 687.456144][T17573] total_unevictable 0 [ 687.464261][T17573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3283,pid=17572,uid=0 [ 687.485589][T17573] Memory cgroup out of memory: Killed process 17572 (syz.0.3283) total-vm:96228kB, anon-rss:1272kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 687.537970][T17594] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 687.586914][T17574] vhci_hcd: connection closed [ 687.589342][ T4754] vhci_hcd vhci_hcd.0: stop threads [ 687.596120][T17553] syz.4.3278 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 687.611966][T17594] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 687.633917][ T4754] vhci_hcd vhci_hcd.0: release socket [ 687.649604][ T4754] vhci_hcd vhci_hcd.0: disconnect device [ 687.653979][T17553] CPU: 0 UID: 0 PID: 17553 Comm: syz.4.3278 Not tainted syzkaller #0 PREEMPT(lazy) [ 687.654011][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 687.654087][T17553] Call Trace: [ 687.654094][T17553] [ 687.654102][T17553] __dump_stack+0x1d/0x30 [ 687.654174][T17553] dump_stack_lvl+0x95/0xd0 [ 687.654197][T17553] dump_stack+0x15/0x1b [ 687.654218][T17553] dump_header+0x80/0x240 [ 687.654317][T17553] oom_kill_process+0x295/0x350 [ 687.654352][T17553] out_of_memory+0x981/0xbc0 [ 687.654417][T17553] try_charge_memcg+0x621/0xa00 [ 687.654466][T17553] charge_memcg+0x6d/0x120 [ 687.654499][T17553] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 687.654541][T17553] swap_cache_alloc_folio+0x47b/0x5e0 [ 687.654581][T17553] swap_cluster_readahead+0x2b1/0x460 [ 687.654618][T17553] swapin_readahead+0xd8/0x8a0 [ 687.654716][T17553] ? _raw_spin_unlock+0x9/0x30 [ 687.654755][T17553] ? swap_put_entries_cluster+0x49c/0x4c0 [ 687.654789][T17553] ? __entry_text_end+0x11248/0x102179 [ 687.654818][T17553] ? __rcu_read_unlock+0x4e/0x70 [ 687.654876][T17553] ? swap_cache_get_folio+0x1f7/0x200 [ 687.654907][T17553] do_swap_page+0x2a2/0x1ec0 [ 687.654939][T17553] ? __css_rstat_updated+0xbb/0x280 [ 687.655046][T17553] ? __rcu_read_lock+0x36/0x50 [ 687.655086][T17553] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 687.655115][T17553] handle_mm_fault+0xb3c/0x2da0 [ 687.655156][T17553] do_user_addr_fault+0x634/0x1060 [ 687.655260][T17553] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 687.655285][T17553] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 687.655356][T17553] ? trace_page_fault_user+0x1f/0xa0 [ 687.655397][T17553] exc_page_fault+0x62/0xa0 [ 687.655426][T17553] asm_exc_page_fault+0x26/0x30 [ 687.655485][T17553] RIP: 0033:0x7f82115eb7d0 [ 687.655504][T17553] Code: c4 4c 0f 42 e0 83 3d fa c5 3b 00 00 0f 8e d9 fd ff ff e8 23 80 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d be 9e ee 00 e8 03 00 00 48 8d 1d bf a7 3b 00 e8 8a 31 13 00 [ 687.655525][T17553] RSP: 002b:00007fffed23fb80 EFLAGS: 00010216 [ 687.655544][T17553] RAX: 00000000000a7dc8 RBX: 00007f82119a7da0 RCX: 00000000000a7b98 [ 687.655560][T17553] RDX: 0000000000000230 RSI: 00007fffed23fb60 RDI: 0000000000000001 [ 687.655576][T17553] RBP: 00007f82119a7da0 R08: 000000002163f76f R09: 3fffffffffffffff [ 687.655610][T17553] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000000a8422 [ 687.655625][T17553] R13: 00007f82119a618c R14: 00000000000a789c R15: 00007f82119a6180 [ 687.655646][T17553] [ 687.658549][T17596] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3289'. [ 687.676034][T17594] FAT-fs (loop5): Filesystem has been set read-only [ 687.695574][T17553] memory: usage 307200kB, limit 307200kB, failcnt 1572 [ 687.695596][T17553] memory+swap: usage 308060kB, limit 9007199254740988kB, failcnt 0 [ 687.695612][T17553] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 687.695628][T17553] Memory cgroup stats for /syz3: [ 687.695894][T17553] cache 4096 [ 687.695904][T17553] rss 0 [ 687.695912][T17553] shmem 0 [ 687.695982][T17553] mapped_file 0 [ 687.695991][T17553] dirty 4096 [ 687.696000][T17553] writeback 0 [ 687.696009][T17553] workingset_refault_anon 1674 [ 687.696019][T17553] workingset_refault_file 1853 [ 687.696029][T17553] swap 880640 [ 687.696036][T17553] swapcached 9154560 [ 687.696043][T17553] pgpgin 441340 [ 687.696051][T17553] pgpgout 441339 [ 687.696113][T17553] pgfault 567624 [ 687.696122][T17553] pgmajfault 200 [ 687.696187][T17553] inactive_anon 0 [ 687.696197][T17553] active_anon 0 [ 687.696205][T17553] inactive_file 0 [ 687.696284][T17553] active_file 4096 [ 687.696293][T17553] unevictable 0 [ 687.696302][T17553] hierarchical_memory_limit 314572800 [ 687.696313][T17553] hierarchical_memsw_limit 9223372036854771712 [ 687.696324][T17553] total_cache 4096 [ 687.696333][T17553] total_rss 0 [ 687.696378][T17553] total_shmem 0 [ 687.696393][T17553] total_mapped_file 0 [ 687.696403][T17553] total_dirty 4096 [ 687.696412][T17553] total_writeback 0 [ 687.696421][T17553] total_workingset_refault_anon 1674 [ 687.696432][T17553] total_workingset_refault_file 1853 [ 687.696442][T17553] total_swap 880640 [ 687.696452][T17553] total_swapcached 9154560 [ 687.696462][T17553] total_pgpgin 441340 [ 687.696471][T17553] total_pgpgout 441339 [ 687.696547][T17553] total_pgfault 567624 [ 687.696628][T17553] total_pgmajfault 200 [ 687.696684][T17553] total_inactive_anon 0 [ 687.696693][T17553] total_active_anon 0 [ 687.696701][T17553] total_inactive_file 0 [ 687.696709][T17553] total_active_file 4096 [ 687.696719][T17553] total_unevictable 0 [ 687.696773][T17553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3287,pid=17586,uid=0 [ 687.696860][T17553] Memory cgroup out of memory: Killed process 17586 (syz.3.3287) total-vm:96360kB, anon-rss:1232kB, file-rss:22576kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 687.855232][T17596] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 687.868306][T15986] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 687.872947][T17588] vhci_hcd: connection reset by peer [ 687.994920][T15986] CPU: 1 UID: 0 PID: 15986 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 687.995030][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 687.995097][T15986] Call Trace: [ 687.995105][T15986] [ 687.995117][T15986] __dump_stack+0x1d/0x30 [ 687.995177][T15986] dump_stack_lvl+0x95/0xd0 [ 687.995201][T15986] dump_stack+0x15/0x1b [ 687.995222][T15986] dump_header+0x80/0x240 [ 687.995279][T15986] oom_kill_process+0x295/0x350 [ 687.995343][T15986] out_of_memory+0x981/0xbc0 [ 687.995382][T15986] try_charge_memcg+0x621/0xa00 [ 687.995425][T15986] charge_memcg+0x6d/0x120 [ 687.995518][T15986] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 687.995651][T15986] swap_cache_alloc_folio+0x47b/0x5e0 [ 687.995755][T15986] swap_cluster_readahead+0x2b1/0x460 [ 687.995858][T15986] swapin_readahead+0xd8/0x8a0 [ 687.995891][T15986] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 687.996026][T15986] ? hrtimer_start_range_ns+0x108/0x120 [ 687.996058][T15986] ? __rcu_read_unlock+0x4e/0x70 [ 687.996085][T15986] ? swap_cache_get_folio+0x1f7/0x200 [ 687.996116][T15986] do_swap_page+0x2a2/0x1ec0 [ 687.996207][T15986] ? __schedule+0x799/0xd10 [ 687.996230][T15986] ? __rcu_read_lock+0x36/0x50 [ 687.996257][T15986] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 687.996287][T15986] handle_mm_fault+0xb3c/0x2da0 [ 687.996459][T15986] do_user_addr_fault+0x634/0x1060 [ 687.996569][T15986] ? trace_page_fault_user+0x1f/0xa0 [ 687.996601][T15986] exc_page_fault+0x62/0xa0 [ 687.996629][T15986] asm_exc_page_fault+0x26/0x30 [ 687.996706][T15986] RIP: 0033:0x7f82116d8fd7 [ 687.996760][T15986] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 687.996781][T15986] RSP: 002b:00007fffed23fd10 EFLAGS: 00010202 [ 687.996799][T15986] RAX: 0000000000000000 RBX: 00005555733a4500 RCX: 00007f82116d8fd7 [ 687.996815][T15986] RDX: 00007fffed23fd50 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.996830][T15986] RBP: 00007fffed23fdbc R08: 0000000000000000 R09: 0000000000000000 [ 687.996863][T15986] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 687.996877][T15986] R13: 00000000000927c0 R14: 00000000000a7d48 R15: 00007fffed23fe10 [ 687.996897][T15986] [ 687.997075][T15986] memory: usage 307200kB, limit 307200kB, failcnt 2787 [ 688.343863][ T4754] vhci_hcd vhci_hcd.3: stop threads [ 688.354896][T15986] memory+swap: usage 180784kB, limit 9007199254740988kB, failcnt 0 [ 688.369932][ T4754] vhci_hcd vhci_hcd.3: release socket [ 688.429564][T15986] kmem: usage 145248kB, limit 9007199254740988kB, failcnt 0 [ 688.448998][T17601] set_capacity_and_notify: 4 callbacks suppressed [ 688.449014][T17601] loop5: detected capacity change from 0 to 256 [ 688.462085][T15986] Memory cgroup stats for /syz4: [ 688.462318][T15986] cache 0 [ 688.481331][T15986] rss 4096 [ 688.489475][T15986] shmem 0 [ 688.500054][T15986] mapped_file 0 [ 688.551113][ T4754] vhci_hcd vhci_hcd.3: disconnect device [ 688.584435][T15986] dirty 0 [ 688.587439][T15986] writeback 0 [ 688.590808][T15986] workingset_refault_anon 850 [ 688.638247][T17610] netlink: 'syz.3.3294': attribute type 1 has an invalid length. [ 688.745292][T17611] loop0: detected capacity change from 0 to 764 [ 688.751759][T17611] iso9660: Unknown parameter '' [ 689.254539][T17611] loop0: detected capacity change from 0 to 512 [ 689.504402][T15986] workingset_refault_file 972 [ 689.511982][T15986] swap 475136 [ 689.522239][T15986] swapcached 9854976 [ 689.526355][T15986] pgpgin 466464 [ 689.531299][T15986] pgpgout 466463 [ 689.543420][T17610] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.596280][ T3615] usb 1-1: enqueue for inactive port 0 [ 689.601865][ T3615] usb 1-1: enqueue for inactive port 0 [ 689.644017][T15986] pgfault 600990 [ 689.653538][T15986] pgmajfault 441 [ 689.660353][T15986] inactive_anon 0 [ 689.667029][T15986] active_anon 0 [ 690.525474][T15986] inactive_file 0 [ 690.538145][T15986] active_file 0 [ 690.546570][T15986] unevictable 0 [ 690.558987][T15986] hierarchical_memory_limit 314572800 [ 690.596754][ T3615] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 690.736828][T15986] hierarchical_memsw_limit 9223372036854771712 [ 690.747795][T15986] total_cache 0 [ 690.752704][T15986] total_rss 4096 [ 690.759166][T15986] total_shmem 0 [ 690.765591][T15986] total_mapped_file 0 [ 691.325414][T17613] xt_ecn: cannot match TCP bits for non-tcp packets [ 691.506485][T15986] total_dirty 0 [ 691.510024][T15986] total_writeback 0 [ 691.514003][T15986] total_workingset_refault_anon 850 [ 691.519231][T15986] total_workingset_refault_file 972 [ 691.527586][T15986] total_swap 475136 [ 691.531448][T15986] total_swapcached 9854976 [ 691.536031][T15986] total_pgpgin 466464 [ 691.540066][T15986] total_pgpgout 466463 [ 691.803960][T15986] total_pgfault 600990 [ 691.817843][T15986] total_pgmajfault 441 [ 691.829984][T15986] total_inactive_anon 0 [ 692.197672][T15986] total_active_anon 0 [ 692.340011][T17620] syzkaller0: entered promiscuous mode [ 692.394780][T15986] total_inactive_file 0 [ 692.399004][T15986] total_active_file 0 [ 692.402995][T15986] total_unevictable 0 [ 692.413535][T17620] syzkaller0: entered allmulticast mode [ 692.617239][T15986] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3278,pid=17553,uid=0 [ 692.725290][T15986] Memory cgroup out of memory: Killed process 17553 (syz.4.3278) total-vm:96360kB, anon-rss:1244kB, file-rss:22580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 692.834153][T17625] SELinux: policydb version 0 does not match my version range 15-35 [ 692.897683][T17623] loop0: detected capacity change from 0 to 512 [ 692.907203][T17623] EXT4-fs: Ignoring removed bh option [ 692.931813][T17625] SELinux: failed to load policy [ 692.999256][T17630] netlink: 'syz.4.3299': attribute type 1 has an invalid length. [ 693.006008][T17555] vhci_hcd: connection reset by peer [ 693.013958][ T4889] usb 7-1: enqueue for inactive port 0 [ 693.025402][ T4889] usb 7-1: enqueue for inactive port 0 [ 693.029929][ T1917] vhci_hcd vhci_hcd.4: stop threads [ 693.044622][T17630] 8021q: adding VLAN 0 to HW filter on device bond2 [ 693.051522][T17623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.064122][T17630] bond2: (slave dummy0): making interface the new active one [ 693.072461][T17630] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 693.073032][T17623] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.108265][ T1917] vhci_hcd vhci_hcd.4: release socket [ 693.119817][ T1917] vhci_hcd vhci_hcd.4: disconnect device [ 693.120217][ T4889] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 693.154885][T17640] loop3: detected capacity change from 0 to 256 [ 693.211414][T17642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3302'. [ 693.232386][T17642] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 693.237495][T17634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.259244][T17640] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 693.284024][T17634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.314203][T17640] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 693.342412][T17009] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.343902][T17640] FAT-fs (loop3): Filesystem has been set read-only [ 693.373778][T17634] loop5: detected capacity change from 0 to 2048 [ 693.411807][T17634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.431170][T17650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17650 comm=syz.0.3305 [ 693.448842][T17646] loop4: detected capacity change from 0 to 512 [ 693.459654][T17646] EXT4-fs: Ignoring removed bh option [ 693.467051][T17634] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.479482][T17650] netlink: 'syz.0.3305': attribute type 1 has an invalid length. [ 693.609732][T17655] syzkaller0: entered promiscuous mode [ 693.609755][T17655] syzkaller0: entered allmulticast mode [ 693.647000][T17646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.649588][T17646] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.092247][T17660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.129767][T17660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.614361][T16658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.626058][T15986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.718677][T17664] SELinux: policydb version 0 does not match my version range 15-35 [ 694.734936][T17662] loop5: detected capacity change from 0 to 256 [ 694.776816][T17664] SELinux: failed to load policy [ 694.822178][T17662] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 694.872364][T17662] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 694.886958][T17670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3313'. [ 694.903101][T17671] binfmt_misc: register: failed to install interpreter file ./file2 [ 694.917683][T17670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 694.937309][T17662] FAT-fs (loop5): Filesystem has been set read-only [ 695.007228][T17674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.077978][T17674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.131458][T17678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.227224][T17678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.278368][T17682] loop0: detected capacity change from 0 to 256 [ 695.292890][T17682] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 695.308619][T17682] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 695.319676][T17682] FAT-fs (loop0): Filesystem has been set read-only [ 695.373505][T17684] loop4: detected capacity change from 0 to 764 [ 695.401427][T17684] iso9660: Unknown parameter '' [ 695.426011][T17684] loop4: detected capacity change from 0 to 512 [ 696.287930][T17692] syzkaller0: entered promiscuous mode [ 696.304508][T17692] syzkaller0: entered allmulticast mode [ 696.426480][T17696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.442984][T17696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.479270][T17696] loop0: detected capacity change from 0 to 2048 [ 696.522026][T17696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.543018][T17696] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.747918][T17701] loop1: detected capacity change from 0 to 1024 [ 696.816112][T17701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 696.834630][T17701] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.852061][T17707] binfmt_misc: register: failed to install interpreter file ./file2 [ 696.881495][T17701] binfmt_misc: register: failed to install interpreter file ./bus [ 696.904259][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 696.942933][T17713] SELinux: policydb version 0 does not match my version range 15-35 [ 696.952942][T17713] SELinux: failed to load policy [ 696.967192][T17707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.976573][T17707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.026070][T17721] loop4: detected capacity change from 0 to 256 [ 697.084542][T17719] syzkaller0: entered promiscuous mode [ 697.090285][T17719] syzkaller0: entered allmulticast mode [ 697.172744][T17724] loop1: detected capacity change from 0 to 256 [ 697.187387][T17724] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 697.202971][T17724] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 697.215662][T17724] FAT-fs (loop1): Filesystem has been set read-only [ 697.277954][T17009] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.359427][T17725] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 697.477159][T17738] loop1: detected capacity change from 0 to 4096 [ 697.497266][T17738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 697.513569][T17738] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 697.523574][T17738] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 697.602644][T17738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.614823][T17738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.619799][T17725] xt_ecn: cannot match TCP bits for non-tcp packets [ 698.121466][T17743] loop3: detected capacity change from 0 to 764 [ 698.128206][T17743] iso9660: Unknown parameter '' [ 698.185193][ T4875] usb 9-1: enqueue for inactive port 0 [ 698.338152][ T4875] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 698.700672][T17745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 698.768727][T17745] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.859773][T17009] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 699.474948][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.496247][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.544927][T17751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.557428][T17751] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.751008][T17757] set_capacity_and_notify: 3 callbacks suppressed [ 699.751026][T17757] loop3: detected capacity change from 0 to 512 [ 699.751798][T17757] EXT4-fs: Ignoring removed bh option [ 699.790614][T17754] loop0: detected capacity change from 2048 to 2047 [ 699.810788][T17757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.838519][T17757] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.880561][T15476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.942794][T17773] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 699.949351][T17773] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 699.957197][T17773] vhci_hcd vhci_hcd.0: Device attached [ 699.960969][T17771] loop3: detected capacity change from 0 to 256 [ 700.018312][T17771] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 700.049047][T17771] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 700.063024][T17771] FAT-fs (loop3): Filesystem has been set read-only [ 700.068344][T17776] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 700.094231][T17776] loop4: detected capacity change from 0 to 512 [ 700.186131][T17773] syz.4.3341 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 700.210846][T17773] CPU: 0 UID: 0 PID: 17773 Comm: syz.4.3341 Not tainted syzkaller #0 PREEMPT(lazy) [ 700.210881][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 700.210895][T17773] Call Trace: [ 700.210901][T17773] [ 700.210938][T17773] __dump_stack+0x1d/0x30 [ 700.210964][T17773] dump_stack_lvl+0x95/0xd0 [ 700.210990][T17773] dump_stack+0x15/0x1b [ 700.211011][T17773] dump_header+0x80/0x240 [ 700.211071][T17773] oom_kill_process+0x295/0x350 [ 700.211110][T17773] out_of_memory+0x981/0xbc0 [ 700.211148][T17773] try_charge_memcg+0x621/0xa00 [ 700.211248][T17773] __memcg_kmem_charge_page+0x199/0x3a0 [ 700.211281][T17773] __alloc_frozen_pages_noprof+0x18a/0x350 [ 700.211353][T17773] alloc_pages_mpol+0xa9/0x1d0 [ 700.211386][T17773] alloc_pages_noprof+0x8f/0x140 [ 700.211434][T17773] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 700.211470][T17773] __kvmalloc_node_noprof+0x3a0/0x590 [ 700.211500][T17773] ? futex_hash_allocate+0x192/0x920 [ 700.211560][T17773] ? futex_hash_allocate+0x192/0x920 [ 700.211586][T17773] ? futex_hash_allocate+0x192/0x920 [ 700.211671][T17773] futex_hash_allocate+0x192/0x920 [ 700.211697][T17773] ? cap_task_prctl+0x13f/0x6b0 [ 700.211731][T17773] futex_hash_prctl+0xd8/0xf0 [ 700.211752][T17773] __se_sys_prctl+0x4f4/0x13b0 [ 700.211893][T17773] __x64_sys_prctl+0x67/0x80 [ 700.211919][T17773] x64_sys_call+0x2533/0x3020 [ 700.211943][T17773] do_syscall_64+0x136/0x3c0 [ 700.212039][T17773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.212065][T17773] RIP: 0033:0x7f821171de59 [ 700.212082][T17773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.212136][T17773] RSP: 002b:00007f8210177028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 700.212157][T17773] RAX: ffffffffffffffda RBX: 00007f82119a5fa0 RCX: 00007f821171de59 [ 700.212172][T17773] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 700.212223][T17773] RBP: 00007f82117b3e6f R08: 0000000000000000 R09: 0000000000000000 [ 700.212237][T17773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.212252][T17773] R13: 00007f82119a6038 R14: 00007f82119a5fa0 R15: 00007fffed23fa18 [ 700.212276][T17773] [ 700.212791][T17773] memory: usage 294200kB, limit 307200kB, failcnt 2916 [ 700.284725][T17781] binfmt_misc: register: failed to install interpreter file ./file2 [ 700.286999][ T4875] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 700.347380][T17782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.348090][T17773] memory+swap: usage 2924kB, limit 9007199254740988kB, failcnt 0 [ 700.356502][T17782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.358616][T17773] kmem: usage 2044kB, limit 9007199254740988kB, failcnt 0 [ 700.487114][T17773] Memory cgroup stats for /syz4: [ 700.487394][T17773] cache 61440 [ 700.488261][T17009] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.492531][T17773] rss 135168 [ 700.508595][T17773] shmem 24576 [ 700.509603][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.512113][T17773] mapped_file 0 [ 700.524722][T17773] dirty 24576 [ 700.528033][T17773] writeback 0 [ 700.531321][T17773] workingset_refault_anon 956 [ 700.536366][T17773] workingset_refault_file 972 [ 700.541351][T17773] swap 278528 [ 700.553804][ T4875] usb 9-1: new full-speed USB device number 8 using vhci_hcd [ 700.580382][T17773] swapcached 10690560 [ 700.603197][T17785] bio_check_eod: 39 callbacks suppressed [ 700.603216][T17785] syz.4.3341: attempt to access beyond end of device [ 700.603216][T17785] loop4: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 700.624575][T17784] loop0: detected capacity change from 0 to 256 [ 700.638308][T17773] pgpgin 475637 [ 700.647966][T17773] pgpgout 475581 [ 700.652710][T17773] pgfault 613382 [ 700.659264][T17773] pgmajfault 506 [ 700.664690][T17784] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 700.677907][T17773] inactive_anon 0 [ 700.682157][T17785] syz.4.3341: attempt to access beyond end of device [ 700.682157][T17785] loop4: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 700.704912][T17784] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 700.715844][T17773] active_anon 188416 [ 700.719898][T17784] FAT-fs (loop0): Filesystem has been set read-only [ 700.727715][T17773] inactive_file 0 [ 700.733007][T17773] active_file 36864 [ 700.741746][T17785] syz.4.3341: attempt to access beyond end of device [ 700.741746][T17785] loop4: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 700.761077][T17773] unevictable 0 [ 700.764749][T17773] hierarchical_memory_limit 314572800 [ 700.770276][T17773] hierarchical_memsw_limit 9223372036854771712 [ 700.776796][T17785] syz.4.3341: attempt to access beyond end of device [ 700.776796][T17785] loop4: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 700.790743][T17773] total_cache 61440 [ 700.794798][T17773] total_rss 135168 [ 700.798558][T17773] total_shmem 24576 [ 700.802454][T17773] total_mapped_file 0 [ 700.807004][T17776] syz.4.3341: attempt to access beyond end of device [ 700.807004][T17776] loop4: rw=2049, sector=808, nr_sectors = 8 limit=512 [ 700.808376][T17773] total_dirty 24576 [ 700.825550][T17773] total_writeback 0 [ 700.829450][T17773] total_workingset_refault_anon 956 [ 700.836945][T17773] total_workingset_refault_file 972 [ 700.842443][T17773] total_swap 278528 [ 700.846935][T17773] total_swapcached 10690560 [ 700.851591][T17773] total_pgpgin 475637 [ 700.855801][T17773] total_pgpgout 475581 [ 700.860117][T17773] total_pgfault 613382 [ 700.864470][T17773] total_pgmajfault 506 [ 700.865613][T17776] syz.4.3341: attempt to access beyond end of device [ 700.865613][T17776] loop4: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 700.868615][T17773] total_inactive_anon 0 [ 700.886275][T17787] loop1: detected capacity change from 0 to 1024 [ 700.887104][T17773] total_active_anon 188416 [ 700.900291][T17776] syz.4.3341: attempt to access beyond end of device [ 700.900291][T17776] loop4: rw=2049, sector=912, nr_sectors = 32 limit=512 [ 700.901458][T17773] total_inactive_file 0 [ 700.915819][T17776] syz.4.3341: attempt to access beyond end of device [ 700.915819][T17776] loop4: rw=2049, sector=976, nr_sectors = 32 limit=512 [ 700.918755][T17773] total_active_file 36864 [ 700.932876][T17776] syz.4.3341: attempt to access beyond end of device [ 700.932876][T17776] loop4: rw=2049, sector=1040, nr_sectors = 32 limit=512 [ 700.936509][T17773] total_unevictable 0 [ 700.950851][T17776] syz.4.3341: attempt to access beyond end of device [ 700.950851][T17776] loop4: rw=2049, sector=1104, nr_sectors = 32 limit=512 [ 700.956826][T17773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3341,pid=17772,uid=0 [ 700.994507][T17787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 701.010249][T17773] Memory cgroup out of memory: Killed process 17772 (syz.4.3341) total-vm:96360kB, anon-rss:1388kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 701.028189][T17787] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.068969][T17774] vhci_hcd: connection reset by peer [ 701.074768][ T4752] vhci_hcd vhci_hcd.4: stop threads [ 701.075157][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 701.080171][ T4752] vhci_hcd vhci_hcd.4: release socket [ 701.095179][ T4752] vhci_hcd vhci_hcd.4: disconnect device [ 701.246834][T17800] loop1: detected capacity change from 0 to 512 [ 701.280753][T17800] EXT4-fs: Ignoring removed bh option [ 701.359070][T17800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.383578][T17804] loop4: detected capacity change from 0 to 764 [ 701.390741][T17804] iso9660: Unknown parameter '' [ 701.405022][T17804] loop4: detected capacity change from 0 to 512 [ 701.469123][T17800] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.552559][T16312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.330382][T17810] loop1: detected capacity change from 0 to 256 [ 702.639748][T17812] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 702.842657][T17761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.047978][T17815] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 703.065470][T17817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.076456][T17817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.110219][T17815] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 703.122974][T17820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 703.136003][T17820] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.137466][T17815] FAT-fs (loop0): Filesystem has been set read-only [ 703.180288][ T28] audit: type=1400 audit(1783184220.144:763): avc: denied { write } for pid=17819 comm="syz.5.3354" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 703.180921][T17817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.221441][T17820] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.3354: lblock 0 mapped to illegal pblock 0 (length 1) [ 703.244195][T17817] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.295735][T16658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 703.372678][T17826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 703.379586][T17826] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 703.382138][T17826] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 703.402501][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3356'. [ 703.402520][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3356'. [ 703.402634][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3356'. [ 703.443400][T17833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.637844][T17833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.637907][T17835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.638163][T17835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.837836][T17845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.854191][T17845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.461119][T17849] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 704.591410][T15986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.749295][T17849] xt_ecn: cannot match TCP bits for non-tcp packets [ 704.763202][T17851] set_capacity_and_notify: 5 callbacks suppressed [ 704.771071][T17851] loop0: detected capacity change from 0 to 256 [ 704.844138][T17851] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 706.168385][ T4875] usb 9-1: enqueue for inactive port 0 [ 706.175589][ T4875] usb 9-1: enqueue for inactive port 0 [ 706.740387][T17856] loop0: detected capacity change from 0 to 764 [ 706.747199][T17856] iso9660: Unknown parameter '' [ 706.761859][T17856] loop0: detected capacity change from 0 to 512 [ 706.772859][ T4875] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 706.864442][T15476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.956012][T17860] binfmt_misc: register: failed to install interpreter file ./file2 [ 707.054919][T17865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.109439][T17865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.188990][T17864] loop4: detected capacity change from 0 to 512 [ 707.231953][T17864] EXT4-fs: Ignoring removed bh option [ 707.292764][T17864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.334505][T17864] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.388483][T17872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3368'. [ 707.400498][T17872] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 707.442706][T15986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.484949][T17880] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 707.490353][T17879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.491597][T17880] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 707.496725][T17880] vhci_hcd vhci_hcd.0: Device attached [ 707.522174][T17870] loop0: detected capacity change from 0 to 256 [ 707.537385][T17879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.580721][T17883] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 707.584755][T17876] loop1: detected capacity change from 0 to 256 [ 707.600491][T17870] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 707.622610][T17876] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 707.640562][T17870] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 707.647709][T17883] loop3: detected capacity change from 0 to 512 [ 707.651322][T17870] FAT-fs (loop0): Filesystem has been set read-only [ 707.714072][ T4866] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 707.741980][ T4752] bio_check_eod: 19 callbacks suppressed [ 707.742000][ T4752] kworker/u8:28: attempt to access beyond end of device [ 707.742000][ T4752] loop3: rw=1, sector=528, nr_sectors = 32 limit=512 [ 707.763109][ T4752] kworker/u8:28: attempt to access beyond end of device [ 707.763109][ T4752] loop3: rw=1, sector=592, nr_sectors = 32 limit=512 [ 707.776935][ T4866] usb 7-1: new full-speed USB device number 8 using vhci_hcd [ 707.787135][T17887] syz.3.3375: attempt to access beyond end of device [ 707.787135][T17887] loop3: rw=2049, sector=680, nr_sectors = 8 limit=512 [ 707.787146][ T4752] kworker/u8:28: attempt to access beyond end of device [ 707.787146][ T4752] loop3: rw=1, sector=656, nr_sectors = 24 limit=512 [ 707.787273][T17887] ================================================================== [ 707.787303][T17887] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 707.787337][T17887] [ 707.787345][T17887] write to 0xffffffff893a4687 of 41 bytes by task 4752 on cpu 0: [ 707.787365][T17887] vsnprintf+0x2c0/0x8c0 [ 707.787394][T17887] vscnprintf+0x41/0x90 [ 707.787421][T17887] printk_sprint+0x30/0x2b0 [ 707.787449][T17887] vprintk_store+0x57b/0x910 [ 707.787477][T17887] vprintk_emit+0x1a4/0x600 [ 707.787505][T17887] vprintk_default+0x26/0x30 [ 707.787535][T17887] vprintk+0x1d/0x30 [ 707.787568][T17887] _printk+0x79/0xa0 [ 707.787589][T17887] submit_bio_noacct+0x85f/0x920 [ 707.787618][T17887] submit_bio+0x2a4/0x2c0 [ 707.787645][T17887] __mpage_writepages+0x12d6/0x1370 [ 707.787687][T17887] fat_writepages+0x26/0x30 [ 707.787710][T17887] do_writepages+0x1b9/0x300 [ 707.787737][T17887] __writeback_single_inode+0x7b/0x660 [ 707.787763][T17887] writeback_sb_inodes+0x4d9/0xaa0 [ 707.787787][T17887] __writeback_inodes_wb+0x8a/0x180 [ 707.787811][T17887] wb_writeback+0x21e/0x510 [ 707.787834][T17887] wb_workfn+0x4f4/0xa50 [ 707.787867][T17887] process_scheduled_works+0x4d4/0x9a0 [ 707.787901][T17887] worker_thread+0x569/0x750 [ 707.787934][T17887] kthread+0x221/0x270 [ 707.787956][T17887] ret_from_fork+0x146/0x330 [ 707.787990][T17887] ret_from_fork_asm+0x1a/0x30 [ 707.788025][T17887] [ 707.788034][T17887] read to 0xffffffff893a4688 of 8 bytes by task 17887 on cpu 1: [ 707.788104][T17887] data_push_tail+0x104/0x440 [ 707.788129][T17887] data_alloc+0x111/0x380 [ 707.788153][T17887] prb_reserve+0x8e3/0xaf0 [ 707.788178][T17887] vprintk_store+0x54a/0x910 [ 707.788206][T17887] vprintk_emit+0x1a4/0x600 [ 707.788235][T17887] vprintk_default+0x26/0x30 [ 707.788265][T17887] vprintk+0x1d/0x30 [ 707.788302][T17887] _printk+0x79/0xa0 [ 707.788328][T17887] submit_bio_noacct+0x85f/0x920 [ 707.788357][T17887] submit_bio+0x2a4/0x2c0 [ 707.788382][T17887] __mpage_writepages+0x946/0x1370 [ 707.788416][T17887] fat_writepages+0x26/0x30 [ 707.788438][T17887] do_writepages+0x1b9/0x300 [ 707.788467][T17887] filemap_write_and_wait_range+0x166/0x370 [ 707.788505][T17887] generic_file_read_iter+0xf4/0x320 [ 707.788529][T17887] do_iter_readv_writev+0x4f6/0x5a0 [ 707.788551][T17887] vfs_readv+0x1e8/0x6d0 [ 707.788580][T17887] __se_sys_preadv2+0xfc/0x1c0 [ 707.788606][T17887] __x64_sys_preadv2+0x67/0x80 [ 707.788633][T17887] x64_sys_call+0x2b3b/0x3020 [ 707.788663][T17887] do_syscall_64+0x136/0x3c0 [ 707.788701][T17887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.788728][T17887] [ 707.788735][T17887] value changed: 0x0000000000000d32 -> 0x742074706d657474 [ 707.788752][T17887] [ 707.788758][T17887] Reported by Kernel Concurrency Sanitizer on: [ 707.788774][T17887] CPU: 1 UID: 0 PID: 17887 Comm: syz.3.3375 Not tainted syzkaller #0 PREEMPT(lazy) [ 707.788806][T17887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 707.788823][T17887] ================================================================== [ 707.815671][T17885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.816354][T17887] syz.3.3375: attempt to access beyond end of device [ 707.816354][T17887] loop3: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 707.825445][T17885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.832856][T17887] syz.3.3375: attempt to access beyond end of device [ 707.832856][T17887] loop3: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 707.854562][T17885] loop0: detected capacity change from 0 to 2048 [ 707.871807][T17887] syz.3.3375: attempt to access beyond end of device [ 707.871807][T17887] loop3: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 707.875210][ T4752] kworker/u8:28: attempt to access beyond end of device [ 707.875210][ T4752] loop3: rw=1, sector=912, nr_sectors = 16 limit=512 [ 707.977680][T17883] syz.3.3375: attempt to access beyond end of device [ 707.977680][T17883] loop3: rw=2049, sector=928, nr_sectors = 16 limit=512 [ 708.008336][T17885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.010104][T17883] syz.3.3375: attempt to access beyond end of device [ 708.010104][T17883] loop3: rw=2049, sector=976, nr_sectors = 32 limit=512 [ 708.019116][T17885] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.341829][T17878] syz.3.3375 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 708.355047][T17878] CPU: 0 UID: 0 PID: 17878 Comm: syz.3.3375 Not tainted syzkaller #0 PREEMPT(lazy) [ 708.355101][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.355177][T17878] Call Trace: [ 708.355185][T17878] [ 708.355195][T17878] __dump_stack+0x1d/0x30 [ 708.355226][T17878] dump_stack_lvl+0x95/0xd0 [ 708.355251][T17878] dump_stack+0x15/0x1b [ 708.355308][T17878] dump_header+0x80/0x240 [ 708.355335][T17878] oom_kill_process+0x295/0x350 [ 708.355367][T17878] out_of_memory+0x981/0xbc0 [ 708.355457][T17878] try_charge_memcg+0x621/0xa00 [ 708.355496][T17878] charge_memcg+0x6d/0x120 [ 708.355529][T17878] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 708.355628][T17878] swap_cache_alloc_folio+0x47b/0x5e0 [ 708.355665][T17878] swap_cluster_readahead+0x2b1/0x460 [ 708.355834][T17878] swapin_readahead+0xd8/0x8a0 [ 708.355868][T17878] ? _raw_spin_unlock+0x9/0x30 [ 708.355908][T17878] ? swap_put_entries_cluster+0x49c/0x4c0 [ 708.355938][T17878] ? __entry_text_end+0x11248/0x102179 [ 708.355990][T17878] ? __rcu_read_unlock+0x4e/0x70 [ 708.356017][T17878] ? swap_cache_get_folio+0x1f7/0x200 [ 708.356110][T17878] do_swap_page+0x2a2/0x1ec0 [ 708.356145][T17878] ? __css_rstat_updated+0xbb/0x280 [ 708.356175][T17878] ? __rcu_read_lock+0x36/0x50 [ 708.356199][T17878] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 708.356263][T17878] handle_mm_fault+0xb3c/0x2da0 [ 708.356303][T17878] do_user_addr_fault+0x634/0x1060 [ 708.356397][T17878] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 708.356430][T17878] ? trace_page_fault_user+0x1f/0xa0 [ 708.356461][T17878] exc_page_fault+0x62/0xa0 [ 708.356500][T17878] asm_exc_page_fault+0x26/0x30 [ 708.356520][T17878] RIP: 0033:0x7f7439f0e660 [ 708.356550][T17878] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 708.356573][T17878] RSP: 002b:00007fffe6f2c268 EFLAGS: 00010246 [ 708.356618][T17878] RAX: 0000000000000000 RBX: 00005555820a6500 RCX: 0000000000000000 [ 708.356632][T17878] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 00005555820a6808 [ 708.356645][T17878] RBP: 00007f743a1d7da0 R08: 00007fffe6f2c2c0 R09: 0000000000000000 [ 708.356660][T17878] R10: 0000000000000000 R11: 00005555820a6808 R12: 00000000000ad899 [ 708.356739][T17878] R13: 00007f743a1d618c R14: 00000000000accd1 R15: 00007fffe6f2c3f0 [ 708.356761][T17878] [ 708.356783][T17878] memory: usage 307200kB, limit 307200kB, failcnt 1727 [ 708.394878][T17891] loop0: detected capacity change from 2048 to 2047 [ 708.408227][T17878] memory+swap: usage 190732kB, limit 9007199254740988kB, failcnt 0 [ 708.613460][T17878] kmem: usage 4092kB, limit 9007199254740988kB, failcnt 0 [ 708.622012][T17878] Memory cgroup stats for /syz3: [ 708.622220][T17878] cache 0 [ 708.630151][T17878] rss 0 [ 708.632916][T17878] shmem 0 [ 708.635893][T17878] mapped_file 0 [ 708.639344][T17878] dirty 0 [ 708.642258][T17878] writeback 4096 [ 708.645851][T17878] workingset_refault_anon 1781 [ 708.650638][T17878] workingset_refault_file 1982 [ 708.655704][T17878] swap 1077248 [ 708.659148][T17878] swapcached 10199040 [ 708.663128][T17878] pgpgin 447715 [ 708.666657][T17878] pgpgout 447714 [ 708.670220][T17878] pgfault 576119 [ 708.673874][T17878] pgmajfault 254 [ 708.677433][T17878] inactive_anon 0 [ 708.681059][T17878] active_anon 0 [ 708.684662][T17878] inactive_file 0 [ 708.688324][T17878] active_file 0 [ 708.691787][T17878] unevictable 0 [ 708.695276][T17878] hierarchical_memory_limit 314572800 [ 708.700677][T17878] hierarchical_memsw_limit 9223372036854771712 [ 708.707038][T17878] total_cache 0 [ 708.710498][T17878] total_rss 0 [ 708.713798][T17878] total_shmem 0 [ 708.717328][T17878] total_mapped_file 0 [ 708.721289][T17878] total_dirty 0 [ 708.724877][T17878] total_writeback 4096 [ 708.729002][T17878] total_workingset_refault_anon 1781 [ 708.734318][T17878] total_workingset_refault_file 1982 [ 708.739800][T17878] total_swap 1077248 [ 708.743735][T17878] total_swapcached 10199040 [ 708.748258][T17878] total_pgpgin 447715 [ 708.752678][T17878] total_pgpgout 447714 [ 708.756760][T17878] total_pgfault 576119 [ 708.760831][T17878] total_pgmajfault 254 [ 708.764944][T17878] total_inactive_anon 0 [ 708.769202][T17878] total_active_anon 0 [ 708.773161][T17878] total_inactive_file 0 [ 708.777372][T17878] total_active_file 0 [ 708.781349][T17878] total_unevictable 0 [ 708.785375][T17878] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3375,pid=17878,uid=0 [ 708.800899][T17878] Memory cgroup out of memory: Killed process 17878 (syz.3.3375) total-vm:96360kB, anon-rss:1232kB, file-rss:22576kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 708.844410][T17881] vhci_hcd: connection reset by peer [ 708.849978][ T4752] vhci_hcd vhci_hcd.3: stop threads [ 708.855305][ T4752] vhci_hcd vhci_hcd.3: release socket [ 708.860709][ T4752] vhci_hcd vhci_hcd.3: disconnect device [ 709.157986][T17009] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.813943][ T4866] usb 7-1: enqueue for inactive port 0 [ 712.819526][ T4866] usb 7-1: enqueue for inactive port 0 [ 712.893781][ T4866] vhci_hcd vhci_hcd.3: vhci_device speed not set