last executing test programs: 3m24.554840137s ago: executing program 0 (id=219): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffef1, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019000700020006a101c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x404c844) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, "20753d00000055c51b08700c1e0abd5c2a008200120000000000090000f7ff00"}) 3m24.392807792s ago: executing program 0 (id=225): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {}, {@dioread_lock}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(0x0, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x400000000018, 0x400, 0xfffffffffe000001}) 3m24.18299683s ago: executing program 0 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}]}]}, 0xac}, 0x1, 0x0, 0xf5ff}, 0x0) 3m23.95679774s ago: executing program 0 (id=233): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x40002, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8000, 0x1, 0x1, 0x400, {{0x1f, 0x4, 0x1, 0xd, 0x7c, 0x64, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, {[@timestamp_prespec={0x44, 0x2c, 0x4d, 0x3, 0x5, [{@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast1, 0xe2f70c04}, {@multicast1}, {@broadcast, 0xb}]}, @generic={0x83, 0x11, "e6bc8a4595646e9080268944b1a85a"}, @timestamp_prespec={0x44, 0xc, 0x12, 0x3, 0x1, [{@local, 0xfffffff8}]}, @timestamp={0x44, 0x8, 0xfd, 0x0, 0x4, [0x4]}, @rr={0x7, 0xb, 0x44, [@multicast2, @remote]}, @noop, @noop, @rr={0x7, 0x7, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={r0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000000300)={0x20000000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendto$packet(r0, &(0x7f00000000c0)="b5ec5edcf74ceed1fc277e7bd3970cd07af278050114f492872ee0d938be", 0x1e, 0x80, &(0x7f0000000240)={0x11, 0x1a, r1, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3m23.622567639s ago: executing program 0 (id=238): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2200015) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000034b66b6dafd1536707122062fff1e3878a19981f06faa0046245f4f22697d547022d8bbdb680407760300aa70a61417011f097686b6c539780d99d4b378033adec9be8ed6394da0220d99b25e21dcaecb3cabb7ea1f8a0f4d960cf829d84c65d5f2593def58dc478a0240d65299bf59adab09686c525a92615e9a860c6fb5312a7091a45f2aa8fed"], 0x48) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc8864", 0x0, 0x1300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) (async) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$unix(r4, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008050) (async) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1}}], 0x1, 0x1000400000de, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = fcntl$dupfd(r0, 0x406, r1) r6 = io_uring_setup(0x2b47, &(0x7f0000000400)={0x0, 0xfa5e, 0x4000, 0x2, 0x1f6, 0x0, r5}) (async) r7 = syz_open_dev$loop(&(0x7f0000000140), 0xe3, 0x40000) (async) r8 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$cgroup_devices(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r8], 0x9) brk(0x800000000000) (async) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000500)={r8, 0x9, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0xe, 0x9, "8edf75744af856356f97e45091800f02d6114f6dd9d83e5db47714f04c4fb0108c4cc10dbb737da68899cb428423f04611b00a5c3db7c30b1f8849b491ad3c82", "972d6c3f39471a84f98a6de8646ca3aa752e6f0ee42d5f6a06ee1986099f0ff428d6850be779682bd2b54787871edc4ac5f67037abf9df912b0204e9abd734d7", "ff3ced1fabe50fb3ab42204c654c269f684c7dc28ed49fbb4d939ad2727aa076", [0x80, 0x2]}}) (async) r9 = io_uring_setup(0x27af, &(0x7f0000000480)={0x0, 0x65e1, 0x0, 0x0, 0x3a9}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000002440)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r10, &(0x7f0000002040)=""/4109, 0x100d) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000080)={0x10001, r9, 0xf, {0x8, 0x8}, 0xd}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="4a843030813ff56198ee271886d9c70000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001831000003000000000000000000000018600000090000000000000003000000bf91000000000000b7020000020000008500000084000000b7"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m23.540656707s ago: executing program 0 (id=246): syz_read_part_table(0x5fd, &(0x7f0000000000)="$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") 3m23.506116499s ago: executing program 32 (id=246): syz_read_part_table(0x5fd, &(0x7f0000000000)="$eJzs279rJGUYB/BnJruzu1EI/gWGs0i8xoPF6rgDCXGVA/dAxCvksJJrtkphFbJgRK7IpYkIabQIiDGYxjIWgRCTKARiIwhW8QepBAtBMSOzO5usESx0moPPp5j3mfeZeb/zkjflBo+1ND55NyaKKm9c7SVJRNQGZb4UzXK2HLPi8trm/IsvT999ISL5e/eLfGJY5I1h0SrTokxp79R6K5uNeL4W8fn0H1+l5aL9UXG0fr9YLM3GPuinmEmr3T7/0+zC9d2kf/JUszgCrbg52bv3oB7PplvHvxft8+Gfu3b1tel4tZr87Vv7U6OT+W1n8bTzc/rrL51XPsgiW41Izm7888BMjg5rUkF+78/Xs0839uaW32i1D+50u2uffff+M4vz9bL98Mvh2Iyx/64nh8NSBfEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFRsduH67tPJyXneio8Obx/enOzde7A1M7e0dXy3HhEfJ+Vzz5Vjq+L87Vv7U+8s53lMFXeLp51G2bidrbZi5uxGefvm4LqSvfV2RFx7YnCXVZDfKza0sTe3/EOrfXCn212rx0vlukd5kj2sjx5Mirg0i2/yPI9oVBANAAAAAAAAAAAAAAAAAAAAF+YbURsUo1+0f3jRenQxnUVcKye/LybyiPZOrbey2Xnv0WzZKN/vpxH9iPjxaP3+WMxBczgWWV9flvFbnufp2HMTl+VC+i+fnQxT6v9ly4z5KwAA//87TmdQ") 2m29.429310246s ago: executing program 2 (id=916): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) read(r1, &(0x7f0000000000)=""/3, 0x3) close_range(r0, r1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r6, &(0x7f0000004040), 0x0, 0x40000002, 0x0) 2m29.249400402s ago: executing program 2 (id=919): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x20, 0x77, 0xfc, 0xfffffffc}]}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") listxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0xffffffffffffff4a) 2m29.026267652s ago: executing program 2 (id=920): mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) io_setup(0x80, &(0x7f0000000480)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x400c84, &(0x7f0000000040)={[{}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x41, 0x7c5, &(0x7f0000000dc0)="$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") unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2c) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x1186ca, 0xa7, 0x2, 0x5, 0xa5, 0x4, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, @xdp={0x2c, 0x1, 0x0, 0x40000006}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @empty}, 0xe, 0x0, 0x0, 0x0, 0xe, 0x0, 0xe6ab, 0x7, 0x4}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180)={0x5}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000007}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 2m27.232575258s ago: executing program 2 (id=929): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x96) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000140)='grpjquota=', 0x40000, &(0x7f0000000180)={@_ha_fsid={[0x2210, 0x9]}, {0x6, 0x5, 0x0, 0x10}}, 0xfffffffc, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xa}) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = syz_clone(0x908091, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff03, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') msgget$private(0x0, 0x406) 2m26.467969216s ago: executing program 2 (id=946): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") listxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0xffffffffffffff4a) 2m26.228697236s ago: executing program 2 (id=949): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmmsg$unix(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/6, 0x6}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000002380)=""/22, 0x16}, {&(0x7f00000023c0)=""/91, 0x5b}], 0x5, &(0x7f00000024c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f00000025c0)=""/46, 0x2e}, {&(0x7f0000002600)=""/39, 0x27}, {&(0x7f0000002640)=""/66, 0x42}, {&(0x7f00000026c0)=""/2, 0x2}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x8}}, {{&(0x7f00000057c0), 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005840)=""/126, 0x7e}, {&(0x7f00000058c0)=""/77, 0x4d}, {&(0x7f0000005940)=""/11, 0xb}, {&(0x7f0000005980)=""/92, 0x5c}, {&(0x7f0000005a00)=""/71, 0x47}, {&(0x7f0000005a80)=""/57, 0x39}, {&(0x7f0000005ac0)=""/117, 0x75}, {&(0x7f0000005b40)=""/128, 0x80}, {&(0x7f0000005bc0)=""/171, 0xab}], 0x9, &(0x7f0000005d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005dc0)=""/50, 0x32}, {&(0x7f0000005e00)=""/20, 0x14}, {&(0x7f0000005e40)=""/217, 0xd9}, {&(0x7f0000005f40)=""/180, 0xb4}], 0x4, &(0x7f0000006040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x5, 0x2002, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) (async) timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) (async) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) recvmmsg$unix(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/6, 0x6}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000002380)=""/22, 0x16}, {&(0x7f00000023c0)=""/91, 0x5b}], 0x5, &(0x7f00000024c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f00000025c0)=""/46, 0x2e}, {&(0x7f0000002600)=""/39, 0x27}, {&(0x7f0000002640)=""/66, 0x42}, {&(0x7f00000026c0)=""/2, 0x2}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x8}}, {{&(0x7f00000057c0), 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005840)=""/126, 0x7e}, {&(0x7f00000058c0)=""/77, 0x4d}, {&(0x7f0000005940)=""/11, 0xb}, {&(0x7f0000005980)=""/92, 0x5c}, {&(0x7f0000005a00)=""/71, 0x47}, {&(0x7f0000005a80)=""/57, 0x39}, {&(0x7f0000005ac0)=""/117, 0x75}, {&(0x7f0000005b40)=""/128, 0x80}, {&(0x7f0000005bc0)=""/171, 0xab}], 0x9, &(0x7f0000005d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005dc0)=""/50, 0x32}, {&(0x7f0000005e00)=""/20, 0x14}, {&(0x7f0000005e40)=""/217, 0xd9}, {&(0x7f0000005f40)=""/180, 0xb4}], 0x4, &(0x7f0000006040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x5, 0x2002, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 2m26.227522806s ago: executing program 33 (id=949): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmmsg$unix(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/6, 0x6}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000002380)=""/22, 0x16}, {&(0x7f00000023c0)=""/91, 0x5b}], 0x5, &(0x7f00000024c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f00000025c0)=""/46, 0x2e}, {&(0x7f0000002600)=""/39, 0x27}, {&(0x7f0000002640)=""/66, 0x42}, {&(0x7f00000026c0)=""/2, 0x2}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x8}}, {{&(0x7f00000057c0), 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005840)=""/126, 0x7e}, {&(0x7f00000058c0)=""/77, 0x4d}, {&(0x7f0000005940)=""/11, 0xb}, {&(0x7f0000005980)=""/92, 0x5c}, {&(0x7f0000005a00)=""/71, 0x47}, {&(0x7f0000005a80)=""/57, 0x39}, {&(0x7f0000005ac0)=""/117, 0x75}, {&(0x7f0000005b40)=""/128, 0x80}, {&(0x7f0000005bc0)=""/171, 0xab}], 0x9, &(0x7f0000005d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005dc0)=""/50, 0x32}, {&(0x7f0000005e00)=""/20, 0x14}, {&(0x7f0000005e40)=""/217, 0xd9}, {&(0x7f0000005f40)=""/180, 0xb4}], 0x4, &(0x7f0000006040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x5, 0x2002, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) (async) timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) (async) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) recvmmsg$unix(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/6, 0x6}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000002380)=""/22, 0x16}, {&(0x7f00000023c0)=""/91, 0x5b}], 0x5, &(0x7f00000024c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f00000025c0)=""/46, 0x2e}, {&(0x7f0000002600)=""/39, 0x27}, {&(0x7f0000002640)=""/66, 0x42}, {&(0x7f00000026c0)=""/2, 0x2}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x8}}, {{&(0x7f00000057c0), 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005840)=""/126, 0x7e}, {&(0x7f00000058c0)=""/77, 0x4d}, {&(0x7f0000005940)=""/11, 0xb}, {&(0x7f0000005980)=""/92, 0x5c}, {&(0x7f0000005a00)=""/71, 0x47}, {&(0x7f0000005a80)=""/57, 0x39}, {&(0x7f0000005ac0)=""/117, 0x75}, {&(0x7f0000005b40)=""/128, 0x80}, {&(0x7f0000005bc0)=""/171, 0xab}], 0x9, &(0x7f0000005d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005dc0)=""/50, 0x32}, {&(0x7f0000005e00)=""/20, 0x14}, {&(0x7f0000005e40)=""/217, 0xd9}, {&(0x7f0000005f40)=""/180, 0xb4}], 0x4, &(0x7f0000006040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x5, 0x2002, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1m17.406332053s ago: executing program 6 (id=1538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'team0\x00'}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') read$watch_queue(r2, &(0x7f0000001080)=""/4088, 0xff8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=@acquire={0x368, 0x17, 0x400, 0x70bd29, 0x25dfdbfc, {{@in=@local, 0x4d3, 0xff}, @in6=@mcast1, {@in6=@mcast1, @in6=@remote, 0x4e23, 0x7f5, 0x4e23, 0x9, 0xa, 0x0, 0xc0, 0x2b, r3, r4}, {{@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e22, 0x10, 0xa, 0x0, 0x20, 0x37}, {0x1, 0x1, 0xf0e, 0x6, 0x9, 0x90000, 0x4e0, 0x7}, {0x3, 0x3, 0x19832e36, 0x3}, 0x10, 0x6e6bbf, 0x2, 0x0, 0x762035ec49be27b5, 0x1}, 0xecf1, 0x5, 0x4, 0x70bd27}, [@lastused={0xc, 0xf, 0x4}, @proto={0x5, 0x19, 0xff}, @tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x2b}, 0xa, @in=@local, 0x3501, 0x4, 0x1, 0x2, 0x8001, 0x2, 0x1}]}, @algo_aead={0x131, 0x12, {{'essiv(rfc4543(morus640),sha512-arm)\x00'}, 0x728, 0x0, "3664f8f972578c1e7048c339338bb230bf4cc07282a0aa187c29123aa957515048b9764c5bdb0e61d816999bb0e6f1bc085af2c422f90038bc83c34d78a4ede467c8158fc1642b95756d0690ea41bb1f84e5dd86a45da3d159dca1e8e158737d8a4dd7b652286b5ab9d94865c05fcb86676ff6b20936e39fb771b7e9d26030038890e755fd9df3e3540a20dd089f4ed4f13ef73ec52031a60afb68132ce5da6e492231a6550d3d3257e3f9028e4fbec82f365825ce22bf696b388a829e54eb72ed6a2d237a41bc4d59b798d3cdb2c487e41754595e88287e079cedbe08b7537842a89dbda3"}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x0, 0x2}}, @algo_aead={0x80, 0x12, {{'aegis256-generic\x00'}, 0x1a0, 0xa0, "9dbeb419e8c8a3968ac9d58b5ecc395b24159b7409be6ad11a6afb457cf8bfd2d47ead5cc3156eba2458cbc15b02f85ff4355ea3"}}, @replay_thresh={0x8, 0xb, 0x9}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x7e, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x20054040}, 0x0) r7 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x20c89f, 0x1c881, 0x1, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0xb, 0x0, 0xfffffffffffffdb5) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = socket$kcm(0x2, 0x3, 0x106) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000006c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff2dbd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000230800003400128009000100766c616e00000000240002800600010003000000100036de0c000100ffffffff040000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 1m17.144868905s ago: executing program 6 (id=1540): socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x2040400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0xa000000, 0x4008018}, 0x4000080) 1m17.109914998s ago: executing program 6 (id=1541): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r2 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='\'%\x00', 0x80000, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x1]}, {0x1, 0x3, 0xfdfffffe, 0x3ff}}, 0x40, 0x0, &(0x7f0000000200)=0x401}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) socket$inet6(0xa, 0xa, 0xfffd) write$selinux_attr(r3, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) r7 = syz_clone(0x4244600, &(0x7f00000001c0)="21c1bb5c952bd6bba52501ac19071acf0c682b9380db2f4eec74412af1b38680", 0x20, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="fce1c1ae6a1446f1ede3be138783db39263e9478986c22e9c4bb615586dcda9bead2f55a9a459ee8783c4b0653f09c35de3247cdb5c8bad0c58d1b26425fbfedf7c3a68eeac7a838890ba9455d2906ec86e3f5313d6892eb7b5717768f5b3a7722461cc049c20e4adcd64fe83081c443e7745c4f4c8bc4d98864d5d28178a2fdb75e4e4977a98dcbac05268ebb39eb24264890ca475fe6142a53ad29134bfbd920af595f80c40141ca274e55ab3b3761015eb08899358576e5c4cf354749fad5e068741fc0ea1366b9656576") perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8f, 0x1, 0x3, 0x2, 0x0, 0x2, 0x9, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7fffffff}, 0x100, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x8, 0x0, 0x8001, 0x0, 0x7}, r7, 0x4, r1, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 1m15.191024697s ago: executing program 6 (id=1549): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7e275}]}, 0x44}, 0x1, 0x0, 0x0, 0x6}, 0x48804) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x300001a, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfc, 0x2c6, &(0x7f0000000240)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x5}, 0x110007, 0x400000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) unshare(0x2c020400) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', r8, 0x4, 0xe7, 0xd5, 0x101, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x7, 0x10, 0x8, 0xf}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) write$binfmt_format(r10, &(0x7f0000000000)='1\x00', 0x2400) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3804c12, &(0x7f0000000000), 0x49, 0x61c, &(0x7f0000000d40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r11, &(0x7f0000000d40)=""/43, 0x2b) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m14.441861072s ago: executing program 6 (id=1557): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf25240000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x100000000000006]}, 0x8) move_mount(r4, 0x0, r4, 0x0, 0x76) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f00000001c0)={0xd, 0x9, 0x2, 0x1, 0xd, 0xf}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) removexattr(0x0, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xd}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xbe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000400), 0x188c4, &(0x7f0000000440)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x600}}, {@access_client}, {@ignoreqv}, {@version_L}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x8000000000000001}}, {@cache_none}, {@noextend}, {@version_L}], [{@seclabel}, {@dont_appraise}, {@seclabel}, {@appraise}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_eq}]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = socket$igmp6(0xa, 0x3, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x880) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) setresgid(0x0, 0xee01, r14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r11, {r13, r14}}, './file0\x00'}) setsockopt$MRT6_DONE(r11, 0x29, 0xc9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r8, 0x3516, 0x0, 0x40030000000000, 0x0, 0x0) r15 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2c020400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r15}, 0x8) 1m12.068532609s ago: executing program 6 (id=1572): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000300), &(0x7f0000000380)=""/67}, 0x20) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m12.045904171s ago: executing program 34 (id=1572): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000300), &(0x7f0000000380)=""/67}, 0x20) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18.998366068s ago: executing program 3 (id=1901): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) (async) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/147, 0x93}], 0x2, &(0x7f0000000580)=[{0x18, 0x0, 0x0, ""/8}, {0x1010, 0x0, 0x0, ""/4096}], 0x1028}, 0x38, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0, 0x3f00}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xb0}, 0x0, 0x8400, 0x1}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xb0}, 0x0, 0x8400, 0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe14, 0x10, 0x0, 0x30f}, &(0x7f00000003c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) close(0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x12, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r3, 0x47bc, 0xe0, 0x21, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 18.848823052s ago: executing program 3 (id=1905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xb8}}, 0x0) 18.784455017s ago: executing program 3 (id=1908): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000140), 0xc}, 0x118817, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) sendmmsg(r3, 0x0, 0x0, 0x200010c4) getsockname$inet(r3, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="14010000", @ANYRES16=r6, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xe}], 0x3fffffffffffcc9, 0x102, 0x0) shutdown(r0, 0x1) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x9) 18.284499431s ago: executing program 3 (id=1912): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?\x00\b', @ANYRES16=r0], 0x4c}}, 0x0) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x5c61, 0x10100, 0x1, 0x195}, &(0x7f00000000c0), &(0x7f0000000040)) r2 = epoll_create1(0x80000) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000921) setresuid(0xee01, 0x0, 0x0) r4 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x40048d4, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @remote}, 0x1c) move_pages(r4, 0x0, 0x0, 0x0, 0x0, 0x0) read(r3, 0x0, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000240)="a6", 0x1, 0x24000044, &(0x7f00000001c0)={0xa, 0x0, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) shutdown(r6, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000240)) close(r3) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x804818, &(0x7f0000000100)={[{@check_relaxed}, {@check_strict}, {@hide}, {}, {@unhide}, {@nojoliet}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x20000000}) 18.06455849s ago: executing program 3 (id=1914): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5393, &(0x7f00000001c0)) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) close(r2) socket(0x840000000002, 0x3, 0x101) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) msync(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x4) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x2, 0x7fff, 0x1}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) syslog(0x3, &(0x7f0000000700)=""/226, 0xe2) 17.644674507s ago: executing program 3 (id=1918): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dbdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40448c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x7fffffff, 0xfff, 0x7, 0x2c40}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.641095467s ago: executing program 35 (id=1918): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dbdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40448c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x7fffffff, 0xfff, 0x7, 0x2c40}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.464574324s ago: executing program 5 (id=2029): openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) r1 = io_uring_setup(0x70c3, &(0x7f0000000400)={0x0, 0x2c45, 0x400, 0x3, 0x3b4}) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x12, @link_local, 'wg0\x00'}}, 0x1e) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) (async) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x10) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 6.40235066s ago: executing program 1 (id=2030): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x0, 0x1, 0x4}, 0x2}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x3184, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0xa) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x3, 0x5, 0x200006, 0xffffffff, 0x2, "86bf31d02bc6f806425d9fbeb88cb009a960e3", 0x8000, 0xc4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 6.318195177s ago: executing program 1 (id=2031): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r2 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='\'%\x00', 0x80000, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x1]}, {0x1, 0x3, 0xfdfffffe, 0x3ff}}, 0x40, 0x0, &(0x7f0000000200)=0x401}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) r7 = socket$inet6(0xa, 0xa, 0xfffd) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) write$selinux_attr(r3, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) r8 = syz_clone(0x4244600, &(0x7f00000001c0)="21c1bb5c952bd6bba52501ac19071acf0c682b9380db2f4eec74412af1b38680", 0x20, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="fce1c1ae6a1446f1ede3be138783db39263e9478986c22e9c4bb615586dcda9bead2f55a9a459ee8783c4b0653f09c35de3247cdb5c8bad0c58d1b26425fbfedf7c3a68eeac7a838890ba9455d2906ec86e3f5313d6892eb7b5717768f5b3a7722461cc049c20e4adcd64fe83081c443e7745c4f4c8bc4d98864d5d28178a2fdb75e4e4977a98dcbac05268ebb39eb24264890ca475fe6142a53ad29134bfbd920af595f80c40141ca274e55ab3b3761015eb08899358576e5c4cf354749fad5e068741fc0ea1366b9656576") perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8f, 0x1, 0x3, 0x2, 0x0, 0x2, 0x9, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7fffffff}, 0x100, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x8, 0x0, 0x8001, 0x0, 0x7}, r8, 0x4, r1, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 4.773100662s ago: executing program 5 (id=2034): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@local, 0x1, 0x32}, @in6=@remote, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x10000000, 0xa, 0x4, 0x0, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x13c}}, 0x44050) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18480000000000000000000000020000180000000000000000005cbb0a00000000000095dae8a4b1b6651977d8daec7c3bf7802e5e9eb644ae97941dc10c1989bc5b7245e548ff1c7b8ab6ec60fec3999f1a866780aab5e76bd0e9f165885ee2a605d2b20448b90a24bcdaae6dff422fb8b67cbe137f43a891bf3131990bd85bd9f086b3f5cd69ef79e8d7604d2e651db5e24170601cdcb221cbddb2b2eba400651951de817042d62f290f8d97c8d474486e0e31d8dc89dc238d695596aa0bd7b91ff6abe8875f181ee1e8015da2ada318a0b7a727"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) (async) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.666262361s ago: executing program 1 (id=2035): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000e4ff0900000000000000c19e5b4ba7ffe80453a5b1314954370000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.'], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x17, 0x2004, 0x0, @value=r0}, 0x20) (async) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(r5, &(0x7f0000000400), 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000240)={&(0x7f0000000200)={0x1d, r7}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e6bff385353800ff"}, 0x10}}, 0x2004c895) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(r8, 0x0, 0x0) 4.612901186s ago: executing program 5 (id=2036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x84ff, &(0x7f0000000140)={&(0x7f0000000500)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xb8}}, 0x0) 4.611867076s ago: executing program 5 (id=2038): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000480)="192d9afc643e42b77c75d97412596234f47009939dfbb9843579f9c053925b59825fbfac21b5e7d3252ed60f780d1e3c4a7ed793cf1fd1381965750f78f946165dffe35d7f", 0x45}], 0x1}}], 0x1, 0x88040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40020000) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}}) 3.728802933s ago: executing program 8 (id=2041): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000240)=[{0x2, 0x0, 0x1800}, {0x0, 0xe65b}], 0x2) (async) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000680)) r2 = fcntl$dupfd(r0, 0x0, r0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x282dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4000000000000008, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff1e}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x105}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = timerfd_create(0x0, 0x0) (async) io_submit(0x0, 0x0, &(0x7f00000009c0)) timerfd_settime(r7, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async) socket$inet6(0xa, 0x3, 0x1) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf25a701000005000f0006000000060011004802000008000004", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x34044004) r11 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r12 = openat(r11, &(0x7f0000000080)='./file1\x00', 0x68042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x3) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r12, 0x2000) (async) setresuid(0x0, 0xee00, 0x0) (async) read$hidraw(r2, 0x0, 0x0) 3.703965746s ago: executing program 1 (id=2042): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5393, &(0x7f00000001c0)) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) close(r2) socket(0x840000000002, 0x3, 0x101) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) msync(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0, @in6=@dev}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) syslog(0x3, &(0x7f0000000700)=""/226, 0xe2) 3.612874014s ago: executing program 8 (id=2044): syz_emit_ethernet(0x3a, &(0x7f0000000600)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x800, 0x2}}}}}}, 0x0) r0 = io_uring_setup(0x667, &(0x7f0000000080)={0x0, 0x8dd3, 0x1, 0x3e, 0x235}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/234, 0xea}, {&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000180)=""/16, 0x10}], 0x3, &(0x7f0000000200)=""/162, 0xa2}, 0x20) 3.355886806s ago: executing program 1 (id=2045): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r2 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='\'%\x00', 0x80000, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x1]}, {0x1, 0x3, 0xfdfffffe, 0x3ff}}, 0x40, 0x0, &(0x7f0000000200)=0x401}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) r5 = socket$inet6(0xa, 0xa, 0xfffd) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) write$selinux_attr(r3, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) r6 = syz_clone(0x4244600, &(0x7f00000001c0)="21c1bb5c952bd6bba52501ac19071acf0c682b9380db2f4eec74412af1b38680", 0x20, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="fce1c1ae6a1446f1ede3be138783db39263e9478986c22e9c4bb615586dcda9bead2f55a9a459ee8783c4b0653f09c35de3247cdb5c8bad0c58d1b26425fbfedf7c3a68eeac7a838890ba9455d2906ec86e3f5313d6892eb7b5717768f5b3a7722461cc049c20e4adcd64fe83081c443e7745c4f4c8bc4d98864d5d28178a2fdb75e4e4977a98dcbac05268ebb39eb24264890ca475fe6142a53ad29134bfbd920af595f80c40141ca274e55ab3b3761015eb08899358576e5c4cf354749fad5e068741fc0ea1366b9656576") perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8f, 0x1, 0x3, 0x2, 0x0, 0x2, 0x9, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7fffffff}, 0x100, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x8, 0x0, 0x8001, 0x0, 0x7}, r6, 0x4, r1, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 2.803466644s ago: executing program 8 (id=2049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0xb8, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xb8}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2fe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r5, &(0x7f0000000340)={&(0x7f0000000000)=@tipc, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/168, 0xa8}], 0x5, &(0x7f00000002c0)=""/118, 0x76}, 0x40000000) 2.725018661s ago: executing program 8 (id=2050): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) (async) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, r0, 0x2) (async) setpriority(0x2, r0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xfffffff8, 0xe, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a00)='.pending_reads\x00', 0x5a10c1, 0x9c37611dc13d0c8c) fchown(r2, 0xffffffffffffffff, 0xee01) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x7850b4aeab4bf52e, 0x80, 0x169797c5, 0x7b151faa, {{0x36, 0x4, 0x2, 0x1, 0xd8, 0x65, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2, {[@noop, @generic={0x83, 0x11, "418211b08357d5ee247a09a40f372c"}, @end, @cipso={0x86, 0x5c, 0x3, [{0x2, 0x12, "44ab34c2675c6bcc78fc6bcd953c24a0"}, {0x6, 0xc, "c861962b8556d6e3d075"}, {0x1, 0x3, "e6"}, {0x5, 0x10, "ab85de6f739d602766c6e3974c94"}, {0x1, 0x5, "8574fa"}, {0x1, 0x5, "77578d"}, {0x7, 0xd, "ab490f64d8e5e8dbecdaad"}, {0x2, 0x7, "81b0977d70"}, {0x5, 0x5, "aa1458"}, {0x2, 0x2}]}, @ra={0x94, 0x4}, @generic={0x83, 0x9, "ce7eb75e64a81d"}, @end, @timestamp_prespec={0x44, 0x44, 0xfe, 0x3, 0x6, [{@local, 0xfd}, {@private=0xa010102, 0x6}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}, {@multicast2}, {@multicast2, 0x6}, {@empty, 0xdef1}, {@multicast2, 0x9}]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x15, 0x7, 0xffffff9b, 0x0, 0x2, r2, 0x5, '\x00', r3, r4, 0x1, 0x0, 0x4}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4c6, &(0x7f0000000100)="$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") (async) r6 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4c6, &(0x7f0000000100)="$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") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2fafb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0xc0085508, &(0x7f00000000c0)=0x1f) (async) ioctl$EVIOCRMFF(r9, 0xc0085508, &(0x7f00000000c0)=0x1f) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000600)={0x42}, 0x10) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f00000009c0)={r5, 0x0, 0x1, 0x2, 0x0, 0x1}) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f00000009c0)={r5, 0x0, 0x1, 0x2, 0x0, 0x1}) syz_io_uring_setup(0x450d, &(0x7f0000000640)={0x0, 0x3920, 0x1, 0x2, 0x3cc}, &(0x7f00000006c0), &(0x7f0000000700)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000780)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x1, 0x12}) (async) syz_io_uring_submit(0x0, r11, &(0x7f0000000780)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x1, 0x12}) 2.424735767s ago: executing program 1 (id=2053): io_setup(0x8, &(0x7f0000000540)=0x0) io_submit(r0, 0x0, 0x0) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)) name_to_handle_at(r2, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x600) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x8020000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x4c000000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 2.424437458s ago: executing program 7 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a62696e5f743a73302073797374656d5f753a73797374656d5f723a6b65726e656c5f743a73302030303030303030303030313638243c383832383700cdce2df946d6016f3c8bd3c80bb18291c087764b9edd13c59176baf2ea14c0ccc2fee0"], 0x4e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xe21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x4008011) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000180)={0x40, 0x18, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="081e49495586904577242f433a8202242e2131e4b7ab5939e40fafec0a6ec690db28f03a10e9dee7b2ec4e3768d6e10d559b3146bcc4e3a8f10ad1aa7a2eff835d03ebd348d37a15cf18c4e0c5e3d0", @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x408220, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) 2.411825458s ago: executing program 4 (id=2055): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000500)={&(0x7f0000000000)=0x8, 0x2, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0xa, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIONCLEX(r3, 0x5450) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000600)) r5 = getpid() ioprio_set$pid(0x0, r5, 0x2004) r6 = semget$private(0x0, 0x4, 0x40) semop(r6, &(0x7f0000000640)=[{0x0, 0x9, 0x1000}, {0x2, 0x9, 0x1000}, {0x4}, {0x3, 0x8, 0x1800}, {0x3, 0x8, 0x800}], 0x5) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r8 = getpid() sched_getscheduler(r8) r9 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r9, 0x3, 0x5004) semctl$SETALL(r6, 0x0, 0x11, &(0x7f00000006c0)=[0x3, 0x7, 0x6f, 0xf984, 0x82c4]) ppoll(&(0x7f0000000700)=[{0xffffffffffffffff, 0x600}, {r0, 0xa000}, {r0, 0x204}], 0x3, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f0000000780)={[0x3]}, 0x8) ioctl$BINDER_GET_FROZEN_INFO(r7, 0xc00c620f, &(0x7f00000007c0)={r5}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), r1) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x24}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r11 = accept4(r2, &(0x7f0000000980)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000a00)=0x80, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r11, 0x8004f50e, &(0x7f0000000a40)) socket$nl_route(0x10, 0x3, 0x0) fcntl$setownex(r11, 0xf, &(0x7f0000000a80)={0x2, r8}) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000b80)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000000bc0)={r13, 0x28, "803fab98d2788191cea5b05ea341c57064b08b7a22234440b74c9623aaff39703913524deea8bf31"}, &(0x7f0000000c00)=0x30) 2.308753238s ago: executing program 4 (id=2056): io_setup(0x8, &(0x7f0000000540)=0x0) io_submit(r0, 0x0, 0x0) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)) name_to_handle_at(r2, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x600) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x8020000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x4c000000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 1.829475569s ago: executing program 8 (id=2057): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='bpf\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0xb, 0x1, 0x8000, 0x1, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x4af, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x8, 0x10000002]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="01650400000000002400128009000100489924c20c3d7c821400028008000100ba260891914770d9ec01b34ef3d15737816f17fe6a6ecebdd6233aeaaad2d98086df90c2fb62bfba428b8c07b0ce1577e8688f56488c6946f5f32045526405517bb16645e87a750ee080a57415bf7cbf1a5a9bc1137bcd50bdf86c29991448b0090a9257b7bd8ef6", @ANYRES32=r5, @ANYBLOB="08000300ac1e0001"], 0x44}}, 0x40848c0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) r6 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x21) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x0, 0x20}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.37129467s ago: executing program 5 (id=2058): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000340)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.2566685s ago: executing program 5 (id=2059): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000600)={[{@nouid32}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@bh}, {@prjquota}, {@dax}, {@min_batch_time={'min_batch_time', 0x3d, 0x7c9}}, {@dax}, {@journal_async_commit}], [{@obj_user={'obj_user', 0x3d, ':^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/seq\x00'}}, {@euid_gt={'euid>', r1}}, {@dont_appraise}]}, 0x2, 0x5bf, &(0x7f0000001480)="$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") r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0xc, @tick=0x5, 0x7, {0x3, 0xa2}, 0xec, 0x2, 0x8}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x32, 0xfffffffb, 0x36, 0x0, 0x0, 0x0}) getpriority(0x0, r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="150b2abd7000fbdbdf25010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2600c8c0}, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250500000008030300", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040044}, 0x4000) 962.154895ms ago: executing program 4 (id=2060): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b13f8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 764.835653ms ago: executing program 7 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0xff84, &(0x7f0000000140)={&(0x7f0000000500)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xb8}}, 0x0) 704.841198ms ago: executing program 4 (id=2062): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000010000000e0000001000000000000000000000000ac1414bb0000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000009000000000000008000000000000000000000000000000000000000002b0000000000000000000004010500fc000000000000000000000000000000000000006c00000000000000ac1414bb000000000000000000000000ff340000000200000000000000000000fdffffffac1414aa000000000000000000000000000000003c0000000000000000000000000000000000000000000001fdffffff04030000000800000008000000000000ff0100000000000000000000000000010000000033"], 0x1bc}}, 0x0) 704.518338ms ago: executing program 8 (id=2063): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r2 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='\'%\x00', 0x80000, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x1]}, {0x1, 0x3, 0xfdfffffe, 0x3ff}}, 0x40, 0x0, &(0x7f0000000200)=0x401}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) r5 = socket$inet6(0xa, 0xa, 0xfffd) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) write$selinux_attr(r3, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) r6 = syz_clone(0x4244600, &(0x7f00000001c0)="21c1bb5c952bd6bba52501ac19071acf0c682b9380db2f4eec74412af1b38680", 0x20, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="fce1c1ae6a1446f1ede3be138783db39263e9478986c22e9c4bb615586dcda9bead2f55a9a459ee8783c4b0653f09c35de3247cdb5c8bad0c58d1b26425fbfedf7c3a68eeac7a838890ba9455d2906ec86e3f5313d6892eb7b5717768f5b3a7722461cc049c20e4adcd64fe83081c443e7745c4f4c8bc4d98864d5d28178a2fdb75e4e4977a98dcbac05268ebb39eb24264890ca475fe6142a53ad29134bfbd920af595f80c40141ca274e55ab3b3761015eb08899358576e5c4cf354749fad5e068741fc0ea1366b9656576") perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8f, 0x1, 0x3, 0x2, 0x0, 0x2, 0x9, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7fffffff}, 0x100, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x8, 0x0, 0x8001, 0x0, 0x7}, r6, 0x4, r1, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 650.615792ms ago: executing program 4 (id=2064): syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000002) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0) 648.241553ms ago: executing program 7 (id=2065): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), r1) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) readlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)=""/121, 0x79) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r2, 0x6c95514c400a5401, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x12}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async, rerun: 32) ioctl$TIOCSRS485(r0, 0x542f, 0x0) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x10001, 0xffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000300)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@directio}, {@aname={'aname', 0x3d, '/dev/ttyS3\x00'}}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@debug={'debug', 0x3d, 0x8000}}], [{@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ttyS3\x00'}}]}}) 513.823225ms ago: executing program 7 (id=2066): r0 = socket(0x1, 0x803, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x72, 0x9, 0x12, 0x10, 0x4, 0x2}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) 450.19347ms ago: executing program 7 (id=2067): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x5, 0xfc, 0x10, 0x0, 0x204, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) 410.614513ms ago: executing program 4 (id=2068): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000480)="192d9afc643e42b77c75d97412596234f47009939dfbb9843579f9c053925b59825fbfac21b5e7d3252ed60f780d1e3c4a7ed793cf1fd1381965750f78f946165dffe35d7f", 0x45}], 0x1}}], 0x1, 0x88040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40020000) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}}) 0s ago: executing program 7 (id=2069): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x4, 0x9, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x40, 0xffffffff, 0x6}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r3, 0x0, 0x7ffff000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x8, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x30, 0x61, 0x0]}}, &(0x7f0000000240)=""/238, 0xf, 0xee, 0x0, 0x74e8}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0x9, 0x3, 0xb, 0x22008, 0x1, 0x7fff, '\x00', r0, r4, 0x3, 0x4, 0x5}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0xa0, 0x44, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=inte', @ANYRESOCT]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', 0x0, 0xfffffffffffffffc) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r5, 0x40000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.391505][ T9363] EXT4-fs: Ignoring removed orlov option [ 192.397199][ T9363] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 192.462055][ T9367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=9367 comm=syz.5.1606 [ 192.480447][ T9146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.501561][ T9363] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 192.651833][ T9363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e11c, mo2=0003] [ 192.670933][ T9363] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 192.716728][ T28] audit: type=1400 audit(192.686:1454): avc: denied { execute } for pid=9377 comm="syz.5.1609" path="pipe:[25141]" dev="pipefs" ino=25141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 192.759021][ T9380] lo speed is unknown, defaulting to 1000 [ 192.797990][ T9380] lo speed is unknown, defaulting to 1000 [ 193.680734][ T28] audit: type=1400 audit(192.686:1453): avc: denied { map } for pid=9377 comm="syz.5.1609" path="pipe:[25141]" dev="pipefs" ino=25141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 193.996595][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.175717][ T9146] veth0_vlan: entered promiscuous mode [ 194.200082][ T9146] veth1_vlan: entered promiscuous mode [ 194.216094][ T28] audit: type=1400 audit(194.176:1455): avc: denied { listen } for pid=9398 comm="syz.5.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.245782][ T9146] veth0_macvtap: entered promiscuous mode [ 194.280295][ T9146] veth1_macvtap: entered promiscuous mode [ 194.317654][ T9146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.361686][ T9146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.371600][ T28] audit: type=1400 audit(194.346:1456): avc: denied { setcurrent } for pid=9402 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 194.418471][ T28] audit: type=1401 audit(194.346:1457): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 194.469827][ T8730] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.478849][ T8730] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.490441][ T8730] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.507157][ T8730] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.560331][ T9412] loop5: detected capacity change from 0 to 128 [ 194.595687][ T28] audit: type=1400 audit(194.566:1458): avc: denied { mount } for pid=9146 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.696567][ T9420] loop5: detected capacity change from 0 to 512 [ 194.727150][ T9420] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 194.750817][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1622'. [ 194.759883][ T9420] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1620: bad orphan inode 15 [ 194.766283][ T9428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1619'. [ 194.780558][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1622'. [ 194.799239][ T9420] loop5: lost filesystem error report for type 5 error -117 [ 194.800949][ T9420] ext4_test_bit(bit=14, block=18) = 1 [ 194.813729][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 194.813750][ C1] EXT4-fs (loop5): initial error at time 194: ext4_orphan_get:1417 [ 194.813773][ C1] EXT4-fs (loop5): last error at time 194: ext4_orphan_get:1417 [ 194.819745][ T9429] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1621'. [ 194.820415][ T9420] is_bad_inode(inode)=0 [ 194.849259][ T9420] NEXT_ORPHAN(inode)=1023 [ 194.853590][ T9420] max_ino=32 [ 194.853855][ T9426] team0: Port device team_slave_0 removed [ 194.856768][ T9420] i_nlink=0 [ 194.857330][ T9420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 194.894584][ T4279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 194.982614][ T9437] loop4: detected capacity change from 0 to 512 [ 194.989096][ T9437] ext4: Unknown parameter 'fsname' [ 195.060421][ T9442] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 195.067022][ T9442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.129352][ T9442] vhci_hcd vhci_hcd.0: Device attached [ 195.151627][ T9447] vhci_hcd: connection closed [ 195.151877][ T8730] vhci_hcd vhci_hcd.5: stop threads [ 195.181934][ T8730] vhci_hcd vhci_hcd.5: release socket [ 195.187368][ T8730] vhci_hcd vhci_hcd.5: disconnect device [ 195.410263][ T9461] lo speed is unknown, defaulting to 1000 [ 195.480999][ T9461] lo speed is unknown, defaulting to 1000 [ 196.329500][ T28] audit: type=1400 audit(196.296:1459): avc: denied { read } for pid=9454 comm="syz.5.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.496357][ T9470] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1629'. [ 196.615449][ T9465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1629'. [ 197.009179][ T28] audit: type=1400 audit(196.296:1460): avc: denied { connect } for pid=9454 comm="syz.5.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 197.049246][ T28] audit: type=1400 audit(196.866:1461): avc: denied { setopt } for pid=9480 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.190013][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'. [ 197.269491][ T9519] random: crng reseeded on system resumption [ 197.590383][ T9544] syzkaller0: entered promiscuous mode [ 197.595869][ T9544] syzkaller0: entered allmulticast mode [ 197.838275][ T9549] lo speed is unknown, defaulting to 1000 [ 197.907698][ T9549] lo speed is unknown, defaulting to 1000 [ 199.218189][ T9563] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 199.391940][ T9564] loop3: detected capacity change from 0 to 512 [ 199.442772][ T9564] EXT4-fs: Ignoring removed orlov option [ 199.508997][ T9564] EXT4-fs: Mount option(s) incompatible with ext2 [ 200.044542][ T9598] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1665'. [ 200.402407][ T9594] syz.7.1665 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 200.516682][ T9594] CPU: 0 UID: 0 PID: 9594 Comm: syz.7.1665 Tainted: G W syzkaller #0 PREEMPT(full) [ 200.516753][ T9594] Tainted: [W]=WARN [ 200.516761][ T9594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.516776][ T9594] Call Trace: [ 200.516784][ T9594] [ 200.516794][ T9594] __dump_stack+0x1d/0x30 [ 200.516826][ T9594] dump_stack_lvl+0x95/0xd0 [ 200.516891][ T9594] dump_stack+0x15/0x1b [ 200.516986][ T9594] dump_header+0x80/0x240 [ 200.517013][ T9594] oom_kill_process+0x295/0x350 [ 200.517033][ T9594] out_of_memory+0x97d/0xb80 [ 200.517130][ T9594] try_charge_memcg+0x62e/0xa10 [ 200.517223][ T9594] obj_cgroup_charge_pages+0x23/0xc0 [ 200.517249][ T9594] __memcg_kmem_charge_page+0x9e/0x170 [ 200.517318][ T9594] __alloc_frozen_pages_noprof+0x18a/0x360 [ 200.517348][ T9594] alloc_pages_mpol+0xb3/0x260 [ 200.517382][ T9594] alloc_pages_noprof+0x8f/0x130 [ 200.517414][ T9594] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 200.517530][ T9594] __kvmalloc_node_noprof+0x3d4/0x650 [ 200.517553][ T9594] ? futex_hash_allocate+0x190/0x9d0 [ 200.517625][ T9594] ? futex_hash_allocate+0x190/0x9d0 [ 200.517658][ T9594] futex_hash_allocate+0x190/0x9d0 [ 200.517768][ T9594] ? cap_task_prctl+0x13f/0x6e0 [ 200.517788][ T9594] futex_hash_prctl+0xd8/0xf0 [ 200.517886][ T9594] __se_sys_prctl+0xa3d/0x13f0 [ 200.517914][ T9594] __x64_sys_prctl+0x67/0x80 [ 200.517943][ T9594] x64_sys_call+0x2533/0x3020 [ 200.517975][ T9594] do_syscall_64+0x12c/0x370 [ 200.518074][ T9594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.518100][ T9594] RIP: 0033:0x7f60ddbac629 [ 200.518119][ T9594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.518140][ T9594] RSP: 002b:00007f60dc5ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 200.518177][ T9594] RAX: ffffffffffffffda RBX: 00007f60dde25fa0 RCX: 00007f60ddbac629 [ 200.518190][ T9594] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 200.518211][ T9594] RBP: 00007f60ddc42b39 R08: 0000000000000000 R09: 0000000000000000 [ 200.518227][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.518242][ T9594] R13: 00007f60dde26038 R14: 00007f60dde25fa0 R15: 00007ffe497b2c78 [ 200.518342][ T9594] [ 200.819824][ T9594] memory: usage 252600kB, limit 307200kB, failcnt 57 [ 200.850788][ T9594] memory+swap: usage 238168kB, limit 9007199254740988kB, failcnt 0 [ 200.888853][ T9594] kmem: usage 223860kB, limit 9007199254740988kB, failcnt 0 [ 200.908561][ T9594] Memory cgroup stats for /syz7: [ 200.908913][ T9594] cache 4096 [ 200.918289][ T9594] rss 45056 [ 200.922291][ T9594] shmem 0 [ 200.926056][ T9594] mapped_file 0 [ 200.934368][ T9594] dirty 0 [ 200.937336][ T9594] writeback 0 [ 200.941762][ T9594] workingset_refault_anon 7 [ 200.955275][ T9594] workingset_refault_file 0 [ 200.983595][ T9594] swap 126976 [ 200.986906][ T9594] swapcached 147456 [ 201.009543][ T9594] pgpgin 107 [ 201.019646][ T9594] pgpgout 90 [ 201.050860][ T9594] pgfault 376 [ 201.054253][ T9594] pgmajfault 3 [ 201.075397][ T9594] inactive_anon 0 [ 201.097915][ T9594] active_anon 65536 [ 201.129412][ T9594] inactive_file 0 [ 201.151344][ T9594] active_file 4096 [ 201.157331][ T9594] unevictable 0 [ 201.178323][ T9594] hierarchical_memory_limit 314572800 [ 201.219681][ T9594] hierarchical_memsw_limit 9223372036854771712 [ 201.225913][ T9594] total_cache 4096 [ 201.259193][ T9594] total_rss 45056 [ 201.262905][ T9594] total_shmem 0 [ 201.266346][ T9594] total_mapped_file 0 [ 201.294247][ T9594] total_dirty 0 [ 201.309215][ T9594] total_writeback 0 [ 201.313065][ T9594] total_workingset_refault_anon 7 [ 201.318084][ T9594] total_workingset_refault_file 0 [ 201.349303][ T9594] total_swap 126976 [ 201.353139][ T9594] total_swapcached 147456 [ 201.357491][ T9594] total_pgpgin 107 [ 201.362422][ T9594] total_pgpgout 90 [ 201.366149][ T9594] total_pgfault 376 [ 201.370006][ T9594] total_pgmajfault 3 [ 201.373888][ T9594] total_inactive_anon 0 [ 201.378033][ T9594] total_active_anon 65536 [ 201.382390][ T9594] total_inactive_file 0 [ 201.393330][ T9594] total_active_file 4096 [ 201.397937][ T9594] total_unevictable 0 [ 201.402329][ T9594] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1665,pid=9593,uid=0 [ 201.418405][ T9594] Memory cgroup out of memory: Killed process 9594 (syz.7.1665) total-vm:96140kB, anon-rss:1340kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 201.709123][ T28] audit: type=1400 audit(201.676:1462): avc: denied { mounton } for pid=9668 comm="syz.7.1688" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 201.778152][ T9676] 9pnet_virtio: no channels available for device syz [ 201.846373][ T9679] lo speed is unknown, defaulting to 1000 [ 202.037997][ T9679] lo speed is unknown, defaulting to 1000 [ 202.372390][ T9728] lo speed is unknown, defaulting to 1000 [ 202.440698][ T9728] lo speed is unknown, defaulting to 1000 [ 203.806236][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1701'. [ 203.860933][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1701'. [ 204.077536][ T9761] syzkaller0: entered promiscuous mode [ 204.189228][ T9761] syzkaller0: entered allmulticast mode [ 204.334063][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1707'. [ 204.505129][ T9780] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1708'. [ 204.691233][ T9789] lo speed is unknown, defaulting to 1000 [ 204.775568][ T28] audit: type=1326 audit(204.746:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.5.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5034f9c629 code=0x7ffc0000 [ 204.825935][ T9789] lo speed is unknown, defaulting to 1000 [ 204.849242][ T28] audit: type=1326 audit(204.746:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.5.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f5034f9c629 code=0x7ffc0000 [ 204.892947][ T28] audit: type=1326 audit(204.746:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.5.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5034f9c629 code=0x7ffc0000 [ 204.929796][ T28] audit: type=1326 audit(204.776:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.5.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5034f9c629 code=0x7ffc0000 [ 205.020284][ T9800] loop4: detected capacity change from 0 to 512 [ 205.141582][ T9800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.152809][ T28] audit: type=1400 audit(205.106:1467): avc: denied { write } for pid=9797 comm="syz.1.1714" path="socket:[27906]" dev="sockfs" ino=27906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 205.252828][ T9820] lo speed is unknown, defaulting to 1000 [ 205.323473][ T9820] lo speed is unknown, defaulting to 1000 [ 206.174998][ T9800] EXT4-fs (loop4): 1 truncate cleaned up [ 206.182810][ T9800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.446137][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 206.484976][ T9825] bond5: option ad_user_port_key: invalid value (1136) [ 206.531224][ T9825] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 206.591327][ T9825] bond5 (unregistering): Released all slaves [ 206.898354][ T9837] loop3: detected capacity change from 0 to 512 [ 206.917066][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.949532][ T9837] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 206.986114][ T9837] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003] [ 207.019015][ T9837] System zones: 0-1, 15-15, 18-18, 34-34 [ 207.024923][ T9837] EXT4-fs (loop3): orphan cleanup on readonly fs [ 207.036708][ T9837] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 207.046258][ T9837] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 207.060845][ T9837] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 207.069201][ T9837] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.1722: iget: bad extended attribute block 1 [ 207.099196][ T9837] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 207.099467][ T9837] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1722: couldn't read orphan inode 16 (err -117) [ 207.120425][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 207.120448][ C1] EXT4-fs (loop3): initial error at time 207: ext4_orphan_get:1391: inode 16 [ 207.120480][ C1] EXT4-fs (loop3): last error at time 207: ext4_orphan_get:1391: inode 16 [ 207.130175][ T28] audit: type=1400 audit(207.106:1468): avc: denied { ioctl } for pid=9840 comm="syz.4.1723" path="socket:[27299]" dev="sockfs" ino=27299 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 207.234293][ T9837] loop3: lost filesystem error report for type 5 error -117 [ 207.234791][ T9837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.363564][ T9837] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1722: bg 0: block 40: padding at end of block bitmap is not set [ 207.433967][ T9848] lo speed is unknown, defaulting to 1000 [ 207.507986][ T9848] lo speed is unknown, defaulting to 1000 [ 208.959378][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 208.995061][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1724'. [ 209.005277][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 209.036768][ T9862] netlink: 'syz.5.1724': attribute type 14 has an invalid length. [ 209.061377][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.085632][ T9869] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1730'. [ 209.099168][ T28] audit: type=1400 audit(209.056:1469): avc: denied { bind } for pid=9868 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 209.172919][ T28] audit: type=1400 audit(209.056:1470): avc: denied { name_bind } for pid=9868 comm="syz.1.1730" src=28195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 209.197977][ T28] audit: type=1400 audit(209.056:1471): avc: denied { node_bind } for pid=9868 comm="syz.1.1730" src=28195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 209.222981][ T28] audit: type=1326 audit(209.196:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9871 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167258c629 code=0x7ffc0000 [ 209.279335][ T28] audit: type=1326 audit(209.196:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9871 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167258c629 code=0x7ffc0000 [ 209.456694][ T9862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9862 comm=syz.5.1724 [ 209.499244][ T28] audit: type=1326 audit(209.196:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9871 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167258c629 code=0x7ffc0000 [ 209.536566][ T9862] netlink: 'syz.5.1724': attribute type 4 has an invalid length. [ 209.559590][ T28] audit: type=1326 audit(209.196:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9871 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f167258c629 code=0x7ffc0000 [ 209.619181][ T28] audit: type=1326 audit(209.196:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9871 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167258c629 code=0x7ffc0000 [ 209.873051][ T9891] lo speed is unknown, defaulting to 1000 [ 209.940778][ T9891] lo speed is unknown, defaulting to 1000 [ 211.274182][ T9902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9902 comm=syz.1.1737 [ 211.572632][ T9915] lo speed is unknown, defaulting to 1000 [ 211.642818][ T9915] lo speed is unknown, defaulting to 1000 [ 212.457643][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 212.457659][ T28] audit: type=1400 audit(212.426:1567): avc: denied { execute } for pid=9911 comm="syz.3.1741" path="/memory.events" dev="ramfs" ino=27555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 213.175910][ T9927] loop5: detected capacity change from 0 to 512 [ 213.199772][ T9927] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 213.476119][ T9941] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1748'. [ 213.579112][ T28] audit: type=1400 audit(213.546:1568): avc: denied { open } for pid=9945 comm="syz.7.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.609532][ T28] audit: type=1400 audit(213.576:1569): avc: denied { perfmon } for pid=9945 comm="syz.7.1747" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.640696][ T28] audit: type=1400 audit(213.576:1570): avc: denied { kernel } for pid=9945 comm="syz.7.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.680678][ T28] audit: type=1400 audit(213.636:1571): avc: denied { prog_load } for pid=9945 comm="syz.7.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.718170][ T28] audit: type=1400 audit(213.636:1572): avc: denied { bpf } for pid=9945 comm="syz.7.1747" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.738326][ T28] audit: type=1400 audit(213.646:1573): avc: denied { module_request } for pid=9945 comm="syz.7.1747" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 213.778506][ T9954] lo speed is unknown, defaulting to 1000 [ 213.784505][ T28] audit: type=1400 audit(213.686:1574): avc: denied { recv } for pid=3297 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.168 dest=41094 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 213.838249][ T28] audit: type=1400 audit(213.686:1575): avc: denied { read write } for pid=9146 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.896506][ T9954] lo speed is unknown, defaulting to 1000 [ 213.909852][ T9955] loop7: detected capacity change from 0 to 512 [ 213.960396][ T28] audit: type=1400 audit(213.686:1576): avc: denied { open } for pid=9146 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.160795][ T9960] tipc: Started in network mode [ 214.165825][ T9960] tipc: Node identity 767e1d7cfd72, cluster identity 4711 [ 214.173055][ T9960] tipc: Enabled bearer , priority 0 [ 214.181525][ T9960] syzkaller0: entered promiscuous mode [ 214.187039][ T9960] syzkaller0: entered allmulticast mode [ 215.193960][ T23] tipc: Node number set to 2332827004 [ 215.216978][ T9962] lo speed is unknown, defaulting to 1000 [ 215.259951][ T9962] lo speed is unknown, defaulting to 1000 [ 215.337041][ T9969] loop4: detected capacity change from 0 to 1024 [ 215.413168][ T9969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.439911][ T9959] tipc: Resetting bearer [ 215.447389][ T9959] tipc: Disabling bearer [ 215.489760][ T23] Process accounting resumed [ 215.941337][ T9969] syz.4.1754 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 215.967497][ T9969] CPU: 1 UID: 0 PID: 9969 Comm: syz.4.1754 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.967566][ T9969] Tainted: [W]=WARN [ 215.967573][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.967585][ T9969] Call Trace: [ 215.967591][ T9969] [ 215.967599][ T9969] __dump_stack+0x1d/0x30 [ 215.967631][ T9969] dump_stack_lvl+0x95/0xd0 [ 215.967659][ T9969] dump_stack+0x15/0x1b [ 215.967717][ T9969] dump_header+0x80/0x240 [ 215.967738][ T9969] oom_kill_process+0x295/0x350 [ 215.967762][ T9969] out_of_memory+0x97d/0xb80 [ 215.967787][ T9969] try_charge_memcg+0x62e/0xa10 [ 215.967845][ T9969] obj_cgroup_charge_pages+0x23/0xc0 [ 215.967891][ T9969] __memcg_kmem_charge_page+0x9e/0x170 [ 215.967918][ T9969] __alloc_frozen_pages_noprof+0x18a/0x360 [ 215.967952][ T9969] alloc_pages_mpol+0xb3/0x260 [ 215.968060][ T9969] alloc_pages_noprof+0x8f/0x130 [ 215.968088][ T9969] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 215.968127][ T9969] __kvmalloc_node_noprof+0x3d4/0x650 [ 215.968156][ T9969] ? futex_hash_allocate+0x190/0x9d0 [ 215.968322][ T9969] ? futex_hash_allocate+0x190/0x9d0 [ 215.968353][ T9969] futex_hash_allocate+0x190/0x9d0 [ 215.968442][ T9969] ? cap_task_prctl+0x13f/0x6e0 [ 215.968466][ T9969] futex_hash_prctl+0xd8/0xf0 [ 215.968567][ T9969] __se_sys_prctl+0xa3d/0x13f0 [ 215.968600][ T9969] __x64_sys_prctl+0x67/0x80 [ 215.968625][ T9969] x64_sys_call+0x2533/0x3020 [ 215.968704][ T9969] do_syscall_64+0x12c/0x370 [ 215.968744][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.968769][ T9969] RIP: 0033:0x7f9340fec629 [ 215.968789][ T9969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.968809][ T9969] RSP: 002b:00007f933fa47028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 215.968894][ T9969] RAX: ffffffffffffffda RBX: 00007f9341265fa0 RCX: 00007f9340fec629 [ 215.968908][ T9969] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 215.968921][ T9969] RBP: 00007f9341082b39 R08: 0000000000000000 R09: 0000000000000000 [ 215.968935][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.969028][ T9969] R13: 00007f9341266038 R14: 00007f9341265fa0 R15: 00007ffdda128f28 [ 215.969046][ T9969] [ 215.969063][ T9969] memory: usage 307200kB, limit 307200kB, failcnt 4152 [ 216.346266][ T9969] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 216.378055][ T9969] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 216.399234][ T9969] Memory cgroup stats for /syz4: [ 216.399598][ T9969] cache 16384 [ 216.407820][ T9969] rss 0 [ 216.429207][ T9969] shmem 0 [ 216.432186][ T9969] mapped_file 0 [ 216.435640][ T9969] dirty 0 [ 216.435808][ T9994] loop5: detected capacity change from 0 to 512 [ 216.438573][ T9969] writeback 0 [ 216.438583][ T9969] workingset_refault_anon 414 [ 216.438592][ T9969] workingset_refault_file 4903 [ 216.438602][ T9969] swap 720896 [ 216.445901][ T9994] EXT4-fs: inline encryption not supported [ 216.482171][ T9969] swapcached 2101248 [ 216.509246][ T9969] pgpgin 354676 [ 216.512979][ T9969] pgpgout 354669 [ 216.516610][ T9969] pgfault 191608 [ 216.529369][ T9969] pgmajfault 303 [ 216.533851][ T9969] inactive_anon 0 [ 216.539285][ T9969] active_anon 8192 [ 216.543232][ T9969] inactive_file 0 [ 216.546000][ T9994] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 216.550946][ T9969] active_file 20480 [ 216.571130][ T9969] unevictable 0 [ 216.579415][ T9969] hierarchical_memory_limit 314572800 [ 216.589409][ T9969] hierarchical_memsw_limit 9223372036854771712 [ 216.595578][ T9969] total_cache 16384 [ 216.615118][ T9969] total_rss 0 [ 216.635105][ T9969] total_shmem 0 [ 216.638582][ T9969] total_mapped_file 0 [ 216.649379][ T9969] total_dirty 0 [ 216.655253][ T9969] total_writeback 0 [ 216.669212][ T9969] total_workingset_refault_anon 419 [ 216.674422][ T9969] total_workingset_refault_file 4966 [ 216.681860][ T9994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 216.690844][ T9994] System zones: [ 216.690841][T10002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 216.690863][T10002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.694386][ T9994] 1-12 [ 216.714879][ T9969] total_swap 720896 [ 216.719190][ T9994] [ 216.723832][ T9994] EXT4-fs (loop5): orphan cleanup on readonly fs [ 216.733657][ T9969] total_swapcached 13369344 [ 216.738155][ T9969] total_pgpgin 456015 [ 216.742318][ T9994] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1759: bad orphan inode 267 [ 216.760264][T10002] vhci_hcd vhci_hcd.0: Device attached [ 216.779281][T10007] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 216.785840][T10007] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.793452][T10006] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 216.795189][ T9994] loop5: lost filesystem error report for type 5 error -117 [ 216.799952][T10006] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.800106][T10006] vhci_hcd vhci_hcd.0: Device attached [ 216.807275][ T9969] total_pgpgout 456008 [ 216.847196][ T9969] total_pgfault 197622 [ 216.851304][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 216.851319][ C1] EXT4-fs (loop5): initial error at time 216: ext4_orphan_get:1417 [ 216.851347][ C1] EXT4-fs (loop5): last error at time 216: ext4_orphan_get:1417 [ 216.873543][ T9994] EXT4-fs (loop5): Remounting filesystem read-only [ 216.879348][T10007] vhci_hcd vhci_hcd.0: Device attached [ 216.880551][ T9994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 216.906073][ T9969] total_pgmajfault 320 [ 216.911019][ T9969] total_inactive_anon 0 [ 216.915176][ T9969] total_active_anon 8192 [ 216.919639][ T9969] total_inactive_file 0 [ 216.923818][ T9969] total_active_file 20480 [ 216.928204][ T9969] total_unevictable 0 [ 216.948844][ T4279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 216.961539][ T9969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1754,pid=9968,uid=0 [ 217.045084][ T9969] Memory cgroup out of memory: Killed process 9969 (syz.4.1754) total-vm:94028kB, anon-rss:1332kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 217.101710][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.111168][T10008] vhci_hcd: connection closed [ 217.111354][ T8724] vhci_hcd vhci_hcd.3: stop threads [ 217.111515][T10004] vhci_hcd: connection closed [ 217.116070][ T8724] vhci_hcd vhci_hcd.3: release socket [ 217.116149][ T8724] vhci_hcd vhci_hcd.3: disconnect device [ 217.121442][T10009] vhci_hcd: connection closed [ 217.139373][ T8731] vhci_hcd vhci_hcd.3: stop threads [ 217.150109][ T8731] vhci_hcd vhci_hcd.3: release socket [ 217.155563][ T8731] vhci_hcd vhci_hcd.3: disconnect device [ 217.190582][T10023] lo speed is unknown, defaulting to 1000 [ 217.259920][T10023] lo speed is unknown, defaulting to 1000 [ 218.090015][T10026] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1765'. [ 218.105868][ T8731] vhci_hcd vhci_hcd.3: stop threads [ 218.111216][ T8731] vhci_hcd vhci_hcd.3: release socket [ 218.116770][ T8731] vhci_hcd vhci_hcd.3: disconnect device [ 218.329207][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 218.329294][ T28] audit: type=1400 audit(218.266:1628): avc: denied { create } for pid=10027 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.400321][ T28] audit: type=1400 audit(218.276:1629): avc: denied { write } for pid=10027 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.581480][ T28] audit: type=1400 audit(218.276:1630): avc: denied { nlmsg_write } for pid=10027 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.738519][T10034] lo speed is unknown, defaulting to 1000 [ 218.774981][T10034] lo speed is unknown, defaulting to 1000 [ 219.611296][ T28] audit: type=1400 audit(219.576:1631): avc: denied { name_bind } for pid=10037 comm="syz.3.1769" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 219.708973][ T28] audit: type=1400 audit(219.576:1632): avc: denied { node_bind } for pid=10037 comm="syz.3.1769" saddr=::ffff:224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 219.843952][ T28] audit: type=1400 audit(219.586:1633): avc: denied { create } for pid=10037 comm="syz.3.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.873218][T10045] loop3: detected capacity change from 0 to 512 [ 219.916957][T10051] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1773'. [ 219.940937][ T28] audit: type=1400 audit(219.586:1634): avc: denied { write } for pid=10037 comm="syz.3.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.978708][T10045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.009228][ T28] audit: type=1400 audit(219.586:1635): avc: denied { connect } for pid=10037 comm="syz.3.1769" lport=49838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.079762][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1766'. [ 220.100016][T10045] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1772: corrupted xattr block 33: e_value out of bounds [ 220.136381][T10045] EXT4-fs (loop3): Remounting filesystem read-only [ 220.159734][T10045] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 220.198885][T10045] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 220.268964][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.457564][T10059] loop7: detected capacity change from 0 to 1024 [ 220.469785][T10059] EXT4-fs: Ignoring removed bh option [ 220.494595][T10059] EXT4-fs: Ignoring removed bh option [ 220.503242][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 220.512958][T10061] netlink: zone id is out of range [ 220.520148][T10061] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1775'. [ 220.527274][ T28] audit: type=1400 audit(219.806:1636): avc: denied { ioctl } for pid=10043 comm="syz.5.1771" path="socket:[28211]" dev="sockfs" ino=28211 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.531184][T10061] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1775'. [ 220.553599][ T28] audit: type=1400 audit(219.936:1637): avc: denied { setopt } for pid=10027 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.576305][T10059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 220.691574][T10067] loop5: detected capacity change from 0 to 2048 [ 220.741433][ T6827] Alternate GPT is invalid, using primary GPT. [ 220.741748][ T6827] loop5: p2 p3 p7 [ 220.752111][T10067] Alternate GPT is invalid, using primary GPT. [ 220.752312][T10067] loop5: p2 p3 p7 [ 220.811517][ T6827] udevd[6827]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 220.813488][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 220.815531][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 220.903299][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 220.903415][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 220.914142][ T6827] udevd[6827]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 220.932977][T10080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59668 sclass=netlink_route_socket pid=10080 comm=syz.7.1770 [ 221.113761][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 221.124953][ T6827] udevd[6827]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 221.168727][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 221.274103][T10083] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1781'. [ 221.744685][T10103] x_tables: duplicate entry at hook 1 [ 221.896105][T10108] program syz.4.1786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.748575][ T9146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 222.812937][T10127] loop7: detected capacity change from 0 to 2048 [ 222.835967][T10132] /dev/sg0: Can't lookup blockdev [ 222.839809][T10133] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1793'. [ 222.858972][T10132] loop4: detected capacity change from 0 to 512 [ 222.876718][T10127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.914374][T10132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.997894][T10141] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.1795: corrupted xattr block 6: invalid header [ 223.155262][T10140] loop3: detected capacity change from 0 to 8192 [ 223.170903][ T9146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.189407][T10140] loop3: p1 < > p2 p4 < p5 > [ 223.194209][T10140] loop3: partition table partially beyond EOD, truncated [ 223.201735][T10141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 223.211613][T10140] loop3: p1 start 134217728 is beyond EOD, truncated [ 223.218386][T10140] loop3: p2 size 591360 extends beyond EOD, truncated [ 223.230024][T10141] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.1795: corrupted xattr block 6: invalid header [ 223.244384][T10140] loop3: p5 size 591360 extends beyond EOD, truncated [ 223.269887][T10141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 223.296764][T10124] syz.5.1793 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 223.301027][ T2999] loop3: p1 < > p2 p4 < p5 > [ 223.312497][T10124] CPU: 1 UID: 0 PID: 10124 Comm: syz.5.1793 Tainted: G W syzkaller #0 PREEMPT(full) [ 223.312536][T10124] Tainted: [W]=WARN [ 223.312542][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.312553][T10124] Call Trace: [ 223.312560][T10124] [ 223.312643][T10124] __dump_stack+0x1d/0x30 [ 223.312667][T10124] dump_stack_lvl+0x95/0xd0 [ 223.312687][T10124] dump_stack+0x15/0x1b [ 223.312705][T10124] dump_header+0x80/0x240 [ 223.312724][T10124] oom_kill_process+0x295/0x350 [ 223.312816][T10124] out_of_memory+0x97d/0xb80 [ 223.312837][T10124] try_charge_memcg+0x62e/0xa10 [ 223.312871][T10124] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 223.312971][T10124] __swap_cache_prepare_and_add+0x386/0x530 [ 223.313004][T10124] swap_cache_alloc_folio+0xa2/0x120 [ 223.313103][T10124] swap_cluster_readahead+0x36b/0x3d0 [ 223.313139][T10124] swapin_readahead+0xde/0x840 [ 223.313169][T10124] ? __rcu_read_unlock+0x4e/0x70 [ 223.313233][T10124] ? swap_cache_get_folio+0x26f/0x280 [ 223.313310][T10124] do_swap_page+0x309/0x2210 [ 223.313341][T10124] ? css_rstat_updated+0xbb/0x280 [ 223.313363][T10124] ? __rcu_read_lock+0x36/0x50 [ 223.313462][T10124] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 223.313491][T10124] handle_mm_fault+0xb40/0x3020 [ 223.313566][T10124] ? vma_start_read+0x1c7/0x2c0 [ 223.313596][T10124] do_user_addr_fault+0x62f/0x1050 [ 223.313639][T10124] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 223.313665][T10124] ? trace_page_fault_user+0x1f/0xe0 [ 223.313721][T10124] exc_page_fault+0x62/0xa0 [ 223.313750][T10124] asm_exc_page_fault+0x26/0x30 [ 223.313772][T10124] RIP: 0033:0x7f5034e6a04c [ 223.313791][T10124] Code: 4a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 223.313816][T10124] RSP: 002b:00007ffc175a7950 EFLAGS: 00010202 [ 223.313835][T10124] RAX: 0000000000000000 RBX: 00007f5035217080 RCX: 000055558d466808 [ 223.313850][T10124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.313900][T10124] RBP: 00007f5035217da0 R08: 0000000000000000 R09: 0000000000000000 [ 223.313915][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000036962 [ 223.313934][T10124] R13: 00007f503521609c R14: 0000000000036696 R15: 00007f5035216090 [ 223.314022][T10124] [ 223.314292][T10124] memory: usage 307200kB, limit 307200kB, failcnt 1272 [ 223.329853][ T2999] loop3: partition table partially beyond EOD, [ 223.359304][T10141] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #12: comm syz.4.1795: corrupted xattr block 6: invalid header [ 223.383120][T10124] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 223.401564][ T2999] truncated [ 223.424779][T10124] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 223.450183][ T2999] loop3: p1 start 134217728 is beyond EOD, [ 223.477796][T10124] Memory cgroup stats for [ 223.498058][ T2999] truncated [ 223.561431][T10124] /syz5: [ 223.607563][T10124] cache 4096 [ 223.613891][T10124] rss 0 [ 223.616710][T10124] shmem 0 [ 223.619884][T10124] mapped_file 0 [ 223.623479][T10124] dirty 0 [ 223.624228][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.635664][T10124] writeback 0 [ 223.654147][ T2999] loop3: p2 size 591360 extends beyond EOD, truncated [ 223.654360][T10149] dummy0: entered promiscuous mode [ 223.666598][T10124] workingset_refault_anon 461 [ 223.673049][T10149] macsec1: entered promiscuous mode [ 223.678454][T10149] macsec1: entered allmulticast mode [ 223.683988][T10149] dummy0: entered allmulticast mode [ 223.690013][ T2999] loop3: p5 size 591360 extends beyond EOD, truncated [ 223.696874][T10124] workingset_refault_file 0 [ 223.696915][T10149] dummy0: left allmulticast mode [ 223.701420][T10124] swap 376832 [ 223.706613][T10149] dummy0: left promiscuous mode [ 223.720881][T10124] swapcached 16924672 [ 223.724873][T10124] pgpgin 300240 [ 223.727525][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 223.727539][ T28] audit: type=1400 audit(223.696:1687): avc: denied { create } for pid=10151 comm="syz.4.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 223.728399][T10124] pgpgout 300238 [ 223.744521][ T28] audit: type=1400 audit(223.696:1688): avc: denied { setopt } for pid=10151 comm="syz.4.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 223.753480][T10124] pgfault 154473 [ 223.782406][ T28] audit: type=1400 audit(223.706:1689): avc: denied { create } for pid=10151 comm="syz.4.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.797803][T10124] pgmajfault 365 [ 223.805100][T10124] inactive_anon 4096 [ 223.826862][ T28] audit: type=1400 audit(223.716:1690): avc: denied { getopt } for pid=10151 comm="syz.4.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.838596][T10124] active_anon 0 [ 223.848059][ T28] audit: type=1400 audit(223.736:1691): avc: denied { unlink } for pid=3319 comm="syz-executor" name="file0" dev="tmpfs" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.849739][T10124] inactive_file 4096 [ 223.875659][T10124] active_file 0 [ 223.880380][T10124] unevictable 0 [ 223.883963][T10124] hierarchical_memory_limit 314572800 [ 223.889815][T10124] hierarchical_memsw_limit 9223372036854771712 [ 223.924042][T10124] total_cache 4096 [ 223.928231][T10124] total_rss 0 [ 223.934855][T10124] total_shmem 0 [ 223.938333][T10124] total_mapped_file 0 [ 223.942532][T10124] total_dirty 0 [ 223.946012][T10124] total_writeback 0 [ 223.950081][T10124] total_workingset_refault_anon 461 [ 223.955316][T10124] total_workingset_refault_file 0 [ 223.979244][T10124] total_swap 376832 [ 223.983316][T10124] total_swapcached 16924672 [ 224.017957][T10161] loop7: detected capacity change from 0 to 8192 [ 224.044606][T10124] total_pgpgin 349991 [ 224.048607][T10124] total_pgpgout 349989 [ 224.075352][T10124] total_pgfault 156611 [ 224.089723][T10124] total_pgmajfault 365 [ 224.094033][T10124] total_inactive_anon 4096 [ 224.098802][T10124] total_active_anon 0 [ 224.103293][ T3300] loop7: p1 < > p2 p4 < p5 > [ 224.108060][ T3300] loop7: partition table partially beyond EOD, truncated [ 224.118237][ T3300] loop7: p1 start 134217728 is beyond EOD, truncated [ 224.118314][T10124] total_inactive_file 4096 [ 224.129191][ T3300] loop7: p2 size 591360 extends beyond EOD, truncated [ 224.147605][ T28] audit: type=1400 audit(224.116:1692): avc: denied { ioctl } for pid=10166 comm="syz.1.1805" path="socket:[28976]" dev="sockfs" ino=28976 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.147727][ T3300] loop7: p5 size 591360 extends beyond EOD, [ 224.174811][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 224.199940][T10124] total_active_file 0 [ 224.203978][T10124] total_unevictable 0 [ 224.207979][T10124] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1793,pid=10124,uid=0 [ 224.233810][ T3300] truncated [ 224.234357][T10170] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1805'. [ 224.254338][T10161] loop7: p1 < > p2 p4 < p5 > [ 224.259035][T10161] loop7: partition table partially beyond EOD, truncated [ 224.274340][ T28] audit: type=1400 audit(224.206:1693): avc: denied { create } for pid=10166 comm="syz.1.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.293661][T10124] Memory cgroup out of memory: Killed process 10124 (syz.5.1793) total-vm:94164kB, anon-rss:1224kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 224.318551][T10161] loop7: p1 start 134217728 is beyond EOD, truncated [ 224.325903][T10158] loop4: detected capacity change from 0 to 256 [ 224.339485][ T28] audit: type=1400 audit(224.206:1694): avc: denied { write } for pid=10166 comm="syz.1.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.342763][T10161] loop7: p2 size 591360 extends beyond EOD, truncated [ 224.484759][T10158] FAT-fs (loop4): Directory bread(block 64) failed [ 224.491958][T10158] FAT-fs (loop4): Directory bread(block 65) failed [ 224.518127][T10158] FAT-fs (loop4): Directory bread(block 66) failed [ 224.539033][T10161] loop7: p5 size 591360 extends beyond EOD, truncated [ 224.549204][T10158] FAT-fs (loop4): Directory bread(block 67) failed [ 224.555903][T10158] FAT-fs (loop4): Directory bread(block 68) failed [ 224.601031][T10158] FAT-fs (loop4): Directory bread(block 69) failed [ 224.608940][T10158] FAT-fs (loop4): Directory bread(block 70) failed [ 224.653672][T10158] FAT-fs (loop4): Directory bread(block 71) failed [ 224.713859][T10168] syz.1.1805 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 224.714268][T10158] FAT-fs (loop4): Directory bread(block 72) failed [ 224.740051][T10185] loop5: detected capacity change from 0 to 512 [ 224.746694][T10185] EXT4-fs: Ignoring removed bh option [ 224.764944][T10185] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 224.789274][T10168] CPU: 0 UID: 0 PID: 10168 Comm: syz.1.1805 Tainted: G W syzkaller #0 PREEMPT(full) [ 224.789357][T10168] Tainted: [W]=WARN [ 224.789365][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.789420][T10168] Call Trace: [ 224.789427][T10168] [ 224.789435][T10168] __dump_stack+0x1d/0x30 [ 224.789505][T10168] dump_stack_lvl+0x95/0xd0 [ 224.789550][T10168] dump_stack+0x15/0x1b [ 224.789573][T10168] dump_header+0x80/0x240 [ 224.789623][T10168] oom_kill_process+0x295/0x350 [ 224.789647][T10168] out_of_memory+0x97d/0xb80 [ 224.789671][T10168] try_charge_memcg+0x62e/0xa10 [ 224.789776][T10168] obj_cgroup_charge_pages+0x23/0xc0 [ 224.789807][T10168] __memcg_kmem_charge_page+0x9e/0x170 [ 224.789873][T10168] __alloc_frozen_pages_noprof+0x18a/0x360 [ 224.789907][T10168] alloc_pages_mpol+0xb3/0x260 [ 224.789939][T10168] alloc_pages_noprof+0x8f/0x130 [ 224.790007][T10168] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 224.790049][T10168] __kvmalloc_node_noprof+0x3d4/0x650 [ 224.790074][T10168] ? futex_hash_allocate+0x190/0x9d0 [ 224.790169][T10168] ? futex_hash_allocate+0x190/0x9d0 [ 224.790253][T10168] futex_hash_allocate+0x190/0x9d0 [ 224.790415][T10168] ? cap_task_prctl+0x13f/0x6e0 [ 224.790437][T10168] futex_hash_prctl+0xd8/0xf0 [ 224.790498][T10168] __se_sys_prctl+0xa3d/0x13f0 [ 224.790527][T10168] __x64_sys_prctl+0x67/0x80 [ 224.790607][T10168] x64_sys_call+0x2533/0x3020 [ 224.790637][T10168] do_syscall_64+0x12c/0x370 [ 224.790715][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.790741][T10168] RIP: 0033:0x7fe54a79c629 [ 224.790766][T10168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.790785][T10168] RSP: 002b:00007fe5491f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 224.790871][T10168] RAX: ffffffffffffffda RBX: 00007fe54aa15fa0 RCX: 00007fe54a79c629 [ 224.790887][T10168] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 224.790966][T10168] RBP: 00007fe54a832b39 R08: 0000000000000000 R09: 0000000000000000 [ 224.790980][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.790994][T10168] R13: 00007fe54aa16038 R14: 00007fe54aa15fa0 R15: 00007ffd264e6908 [ 224.791017][T10168] [ 224.791284][T10168] memory: usage 305632kB, limit 307200kB, failcnt 1946 [ 224.804320][T10158] FAT-fs (loop4): Directory bread(block 73) failed [ 224.826678][T10168] memory+swap: usage 365668kB, limit 9007199254740988kB, failcnt 0 [ 224.848175][ T28] audit: type=1400 audit(224.816:1695): avc: denied { mount } for pid=10151 comm="syz.4.1798" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 224.854844][T10168] kmem: usage 263936kB, limit 9007199254740988kB, failcnt 0 [ 224.902059][ T28] audit: type=1400 audit(224.866:1696): avc: denied { mount } for pid=10186 comm="syz.3.1809" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 224.909258][T10168] Memory cgroup stats for [ 224.969591][T10185] EXT4-fs (loop5): 1 truncate cleaned up [ 224.974467][T10168] /syz1 [ 224.999802][T10185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.006386][T10168] : [ 225.113948][T10168] cache 1052672 [ 225.119853][T10168] rss 118784 [ 225.123040][T10168] shmem 0 [ 225.125968][T10168] mapped_file 69632 [ 225.129851][T10168] dirty 8192 [ 225.133046][T10168] writeback 0 [ 225.136334][T10168] workingset_refault_anon 510 [ 225.141051][T10168] workingset_refault_file 13765 [ 225.145942][T10168] swap 67784704 [ 225.149479][T10168] swapcached 78991360 [ 225.153451][T10168] pgpgin 591377 [ 225.156961][T10168] pgpgout 591090 [ 225.160588][T10168] pgfault 242621 [ 225.164144][T10168] pgmajfault 299 [ 225.167700][T10168] inactive_anon 28672 [ 225.172150][T10168] active_anon 90112 [ 225.175976][T10168] inactive_file 4096 [ 225.180304][T10168] active_file 1011712 [ 225.184336][T10168] unevictable 0 [ 225.187852][T10168] hierarchical_memory_limit 314572800 [ 225.193294][T10168] hierarchical_memsw_limit 9223372036854771712 [ 225.199548][T10168] total_cache 1052672 [ 225.203615][T10168] total_rss 118784 [ 225.207394][T10168] total_shmem 0 [ 225.211075][T10168] total_mapped_file 69632 [ 225.215500][T10168] total_dirty 8192 [ 225.250756][T10168] total_writeback 0 [ 225.254652][T10168] total_workingset_refault_anon 510 [ 225.260231][T10168] total_workingset_refault_file 13765 [ 225.265671][T10168] total_swap 67784704 [ 225.276261][T10168] total_swapcached 78991360 [ 225.281197][T10168] total_pgpgin 675100 [ 225.285195][T10168] total_pgpgout 674813 [ 225.289501][T10168] total_pgfault 245606 [ 225.293784][T10168] total_pgmajfault 312 [ 225.297872][T10168] total_inactive_anon 28672 [ 225.317424][T10168] total_active_anon 90112 [ 225.322135][T10168] total_inactive_file 4096 [ 225.326563][T10168] total_active_file 1011712 [ 225.331374][T10168] total_unevictable 0 [ 225.335355][T10168] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1805,pid=10166,uid=0 [ 225.350168][T10168] Memory cgroup out of memory: Killed process 10168 (syz.1.1805) total-vm:94164kB, anon-rss:1340kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 225.491798][T10198] loop3: detected capacity change from 0 to 256 [ 225.570838][T10198] FAT-fs (loop3): Directory bread(block 64) failed [ 225.577420][T10198] FAT-fs (loop3): Directory bread(block 65) failed [ 225.584012][T10198] FAT-fs (loop3): Directory bread(block 66) failed [ 225.590667][T10198] FAT-fs (loop3): Directory bread(block 67) failed [ 225.597229][T10198] FAT-fs (loop3): Directory bread(block 68) failed [ 225.603775][T10198] FAT-fs (loop3): Directory bread(block 69) failed [ 225.610372][T10198] FAT-fs (loop3): Directory bread(block 70) failed [ 225.616932][T10198] FAT-fs (loop3): Directory bread(block 71) failed [ 225.623686][T10198] FAT-fs (loop3): Directory bread(block 72) failed [ 225.630357][T10198] FAT-fs (loop3): Directory bread(block 73) failed [ 226.250592][T10214] loop7: detected capacity change from 0 to 8192 [ 226.299437][ T6827] loop7: p1 < > p2 p4 < p5 > [ 226.314350][ T6827] loop7: partition table partially beyond EOD, truncated [ 226.329242][ T6827] loop7: p1 start 134217728 is beyond EOD, truncated [ 226.339104][ T6827] loop7: p2 size 591360 extends beyond EOD, truncated [ 226.349834][ T6827] loop7: p5 size 591360 extends beyond EOD, truncated [ 226.358785][T10214] loop7: p1 < > p2 p4 < p5 > [ 226.373094][T10214] loop7: partition table partially beyond EOD, truncated [ 226.390305][ T4279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.402809][T10214] loop7: p1 start 134217728 is beyond EOD, truncated [ 226.414228][T10214] loop7: p2 size 591360 extends beyond EOD, truncated [ 226.423972][T10214] loop7: p5 size 591360 extends beyond EOD, truncated [ 226.555295][T10228] loop5: detected capacity change from 0 to 512 [ 226.572883][T10230] loop4: detected capacity change from 0 to 256 [ 226.916282][T10238] loop5: detected capacity change from 0 to 8192 [ 226.930407][T10240] IPVS: set_ctl: invalid protocol: 20 16.0.1.0:0 [ 227.009522][ T6827] loop5: p1 < > p2 p4 < p5 > [ 227.014379][ T6827] loop5: partition table partially beyond EOD, truncated [ 227.028507][ T6827] loop5: p1 start 134217728 is beyond EOD, truncated [ 227.040947][ T6827] loop5: p2 size 591360 extends beyond EOD, truncated [ 227.061386][ T6827] loop5: p5 size 591360 extends beyond EOD, truncated [ 227.126168][T10238] loop5: p1 < > p2 p4 < p5 > [ 227.163767][T10238] loop5: partition table partially beyond EOD, truncated [ 227.231219][T10238] loop5: p1 start 134217728 is beyond EOD, truncated [ 227.237932][T10238] loop5: p2 size 591360 extends beyond EOD, truncated [ 227.309273][T10238] loop5: p5 size 591360 extends beyond EOD, truncated [ 227.597511][ T3314] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 228.826363][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 228.826431][ T3314] Tainted: [W]=WARN [ 228.826439][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.826449][ T3314] Call Trace: [ 228.826455][ T3314] [ 228.826462][ T3314] __dump_stack+0x1d/0x30 [ 228.826487][ T3314] dump_stack_lvl+0x95/0xd0 [ 228.826539][ T3314] dump_stack+0x15/0x1b [ 228.826559][ T3314] dump_header+0x80/0x240 [ 228.826660][ T3314] oom_kill_process+0x295/0x350 [ 228.826771][ T3314] out_of_memory+0x97d/0xb80 [ 228.826798][ T3314] try_charge_memcg+0x62e/0xa10 [ 228.826838][ T3314] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 228.826907][ T3314] __swap_cache_prepare_and_add+0x386/0x530 [ 228.826942][ T3314] swap_cache_alloc_folio+0xa2/0x120 [ 228.826973][ T3314] swap_cluster_readahead+0x26e/0x3d0 [ 228.827068][ T3314] swapin_readahead+0xde/0x840 [ 228.827171][ T3314] ? _raw_spin_unlock+0x9/0x30 [ 228.827267][ T3314] ? swap_put_entries_cluster+0x385/0x3a0 [ 228.827308][ T3314] ? swap_put_entries_cluster+0xa1/0x3a0 [ 228.827334][ T3314] ? __rcu_read_unlock+0x4e/0x70 [ 228.827417][ T3314] ? swap_cache_get_folio+0x26f/0x280 [ 228.827442][ T3314] do_swap_page+0x309/0x2210 [ 228.827483][ T3314] ? css_rstat_updated+0xbb/0x280 [ 228.827505][ T3314] ? __rcu_read_lock+0x36/0x50 [ 228.827535][ T3314] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 228.827562][ T3314] handle_mm_fault+0xb40/0x3020 [ 228.827678][ T3314] ? vma_start_read+0x1c7/0x2c0 [ 228.827713][ T3314] do_user_addr_fault+0x62f/0x1050 [ 228.827776][ T3314] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 228.827803][ T3314] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 228.827825][ T3314] ? trace_page_fault_user+0x1f/0xe0 [ 228.827857][ T3314] exc_page_fault+0x62/0xa0 [ 228.827919][ T3314] asm_exc_page_fault+0x26/0x30 [ 228.827955][ T3314] RIP: 0033:0x7f9340fed1b8 [ 228.827971][ T3314] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 93 19 00 00 0f [ 228.827986][ T3314] RSP: 002b:00007ffdda129260 EFLAGS: 00010202 [ 228.828001][ T3314] RAX: 0000000000000000 RBX: 0000000000000423 RCX: 00007f9340fa7817 [ 228.828013][ T3314] RDX: ba7bc40800a3f200 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.828086][ T3314] RBP: 00007ffdda1292cc R08: 0000000000000000 R09: 0000000000000000 [ 228.828098][ T3314] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 228.828110][ T3314] R13: 00000000000927c0 R14: 00000000000376a7 R15: 00007ffdda129320 [ 228.828131][ T3314] [ 228.828139][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 4399 [ 229.125553][T10274] loop3: detected capacity change from 0 to 8192 [ 229.269277][ T3314] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 229.277195][ T3314] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 229.284508][ T3314] Memory cgroup stats for /syz4: [ 229.284894][ T3314] cache 4096 [ 229.293078][ T3314] rss 0 [ 229.295834][ T3314] shmem 0 [ 229.298786][ T3314] mapped_file 0 [ 229.302284][ T3314] dirty 0 [ 229.305229][ T3314] writeback 4096 [ 229.308854][ T3314] workingset_refault_anon 496 [ 229.313611][ T3314] workingset_refault_file 4903 [ 229.318392][ T3314] swap 212992 [ 229.326625][ T6827] loop3: p1 < > p2 p4 < p5 > [ 229.339221][ T3314] swapcached 2113536 [ 229.343169][ T3314] pgpgin 364744 [ 229.346689][ T3314] pgpgout 364740 [ 229.349258][ T6827] loop3: partition table partially beyond EOD, truncated [ 229.350752][ T3314] pgfault 202242 [ 229.369278][ T6827] loop3: p1 start 134217728 is beyond EOD, truncated [ 229.375970][ T6827] loop3: p2 size 591360 extends beyond EOD, truncated [ 229.382502][ T3314] pgmajfault 339 [ 229.386362][ T3314] inactive_anon 8192 [ 229.400864][ T3314] active_anon 0 [ 229.414506][ T3314] inactive_file 8192 [ 229.440186][ T6827] loop3: p5 size 591360 extends beyond EOD, truncated [ 229.448695][ T3314] active_file 0 [ 229.452673][ T3314] unevictable 0 [ 229.456348][ T3314] hierarchical_memory_limit 314572800 [ 229.462004][ T3314] hierarchical_memsw_limit 9223372036854771712 [ 229.468421][ T3314] total_cache 4096 [ 229.472484][ T3314] total_rss 0 [ 229.475762][ T3314] total_shmem 0 [ 229.479583][ T3314] total_mapped_file 0 [ 229.483555][ T3314] total_dirty 0 [ 229.487163][ T3314] total_writeback 4096 [ 229.491261][ T3314] total_workingset_refault_anon 501 [ 229.496729][ T3314] total_workingset_refault_file 4966 [ 229.502260][ T3314] total_swap 212992 [ 229.506217][ T3314] total_swapcached 13381632 [ 229.510957][ T3314] total_pgpgin 466083 [ 229.515135][ T3314] total_pgpgout 466079 [ 229.516217][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 229.516229][ T28] audit: type=1400 audit(229.486:1716): avc: denied { create } for pid=10288 comm="syz.7.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 229.519313][ T3314] total_pgfault 208256 [ 229.519357][ T3314] total_pgmajfault 356 [ 229.519365][ T3314] total_inactive_anon 8192 [ 229.550680][T10274] loop3: p1 < > p2 p4 < p5 > [ 229.552480][ T3314] total_active_anon 0 [ 229.565458][ T3314] total_inactive_file 8192 [ 229.565918][ T28] audit: type=1400 audit(229.496:1717): avc: denied { ioctl } for pid=10288 comm="syz.7.1839" path="socket:[29079]" dev="sockfs" ino=29079 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 229.594022][ T3314] total_active_file 0 [ 229.594555][T10274] loop3: partition table partially beyond EOD, truncated [ 229.598060][ T3314] total_unevictable 0 [ 229.606699][T10274] loop3: p1 start 134217728 is beyond EOD, truncated [ 229.616109][T10274] loop3: p2 size 591360 extends beyond EOD, truncated [ 229.621252][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg= [ 229.625140][T10274] loop3: p5 size 591360 extends beyond EOD, [ 229.636540][ T3314] /syz4,task=syz.4.1823,pid=10236,uid=0 [ 229.636583][ T3314] Memory cgroup out of memory: Killed process 10236 (syz.4.1823) total-vm:94296kB, anon-rss:1224kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 229.655829][T10274] truncated [ 229.674579][T10292] loop5: detected capacity change from 0 to 512 [ 229.711461][T10292] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 229.742635][T10292] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1841: bg 0: block 255: padding at end of block bitmap is not set [ 229.858156][T10292] loop5: lost filesystem error report for type 5 error -117 [ 229.858518][T10292] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 229.865904][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 229.865920][ C0] EXT4-fs (loop5): initial error at time 229: ext4_validate_block_bitmap:441 [ 229.865953][ C0] EXT4-fs (loop5): last error at time 229: ext4_validate_block_bitmap:441 [ 229.912154][T10292] loop5: lost filesystem error report for type 5 error -117 [ 229.912406][T10292] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1841: invalid indirect mapped block 1 (level 1) [ 229.941145][T10292] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 229.941300][T10292] EXT4-fs (loop5): 1 truncate cleaned up [ 229.965053][T10304] loop4: detected capacity change from 0 to 512 [ 229.966818][T10292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.023260][T10304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.045119][ T28] audit: type=1400 audit(230.016:1718): avc: denied { append } for pid=10291 comm="syz.5.1841" path="/305/file0/cpuacct.usage_sys" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 230.056858][T10304] xt_hashlimit: size too large, truncated to 1048576 [ 230.072830][ T28] audit: type=1400 audit(230.026:1719): avc: denied { ioctl } for pid=10303 comm="syz.4.1846" path="socket:[28655]" dev="sockfs" ino=28655 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.099542][ T28] audit: type=1400 audit(230.046:1720): avc: denied { map } for pid=10291 comm="syz.5.1841" path="/305/file0/cpuacct.usage_sys" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 230.100799][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 230.134012][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 230.140293][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 230.145395][ T6827] udevd[6827]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 230.172804][T10317] xt_hashlimit: size too large, truncated to 1048576 [ 230.179535][ T28] audit: type=1400 audit(230.146:1721): avc: denied { create } for pid=10303 comm="syz.4.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.226668][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1849'. [ 230.268823][ T28] audit: type=1400 audit(230.146:1722): avc: denied { read } for pid=10303 comm="syz.4.1846" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 230.326758][T10323] loop7: detected capacity change from 0 to 128 [ 230.344212][ T28] audit: type=1400 audit(230.146:1723): avc: denied { ioctl } for pid=10303 comm="syz.4.1846" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 230.380054][ T4279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.422608][ T28] audit: type=1400 audit(230.226:1724): avc: denied { setattr } for pid=10303 comm="syz.4.1846" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.502327][T10337] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1854'. [ 230.724884][T10333] ipt_REJECT: ECHOREPLY no longer supported. [ 230.740975][T10333] lo speed is unknown, defaulting to 1000 [ 230.776174][T10333] lo speed is unknown, defaulting to 1000 [ 230.806637][ T28] audit: type=1400 audit(230.776:1725): avc: denied { getopt } for pid=10332 comm="syz.1.1855" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.818439][T10347] loop3: detected capacity change from 0 to 8192 [ 231.911045][ T3300] loop3: p1 < > p2 p4 < p5 > [ 231.920527][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.929888][ T3300] loop3: partition table partially beyond EOD, truncated [ 231.965645][ T3300] loop3: p1 start 134217728 is beyond EOD, truncated [ 231.991743][ T3300] loop3: p2 size 591360 extends beyond EOD, truncated [ 232.036885][ T3300] loop3: p5 size 591360 extends beyond EOD, truncated [ 232.459404][T10347] loop3: p1 < > p2 p4 < p5 > [ 232.491537][T10347] loop3: partition table partially beyond EOD, truncated [ 232.514030][T10347] loop3: p1 start 134217728 is beyond EOD, truncated [ 232.529208][T10347] loop3: p2 size 591360 extends beyond EOD, truncated [ 232.561910][T10347] loop3: p5 size 591360 extends beyond EOD, truncated [ 232.590955][T10377] x_tables: duplicate underflow at hook 2 [ 232.741170][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 232.752573][ T6827] udevd[6827]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 232.764202][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 232.769407][T10392] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1869'. [ 232.791333][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 232.802437][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 232.813505][ T6827] udevd[6827]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 232.828181][T10351] loop7: detected capacity change from 0 to 1024 [ 232.874099][T10351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.920557][T10351] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 232.989366][T10351] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 232.997765][T10351] System zones: 0-1, 3-36 [ 233.058730][T10351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.179980][T10399] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1873'. [ 233.202767][T10399] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1873'. [ 233.234075][T10399] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1873'. [ 233.255622][T10400] lo speed is unknown, defaulting to 1000 [ 233.274976][T10351] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 233.287845][T10399] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1873'. [ 233.291305][T10400] lo speed is unknown, defaulting to 1000 [ 233.464006][ T9146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.556035][T10410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1877'. [ 233.593292][T10410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=10410 comm=syz.1.1877 [ 233.664196][T10411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10411 comm=syz.1.1877 [ 234.118265][T10437] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1885'. [ 234.461560][T10436] syz.4.1885 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 234.475740][T10436] CPU: 0 UID: 0 PID: 10436 Comm: syz.4.1885 Tainted: G W syzkaller #0 PREEMPT(full) [ 234.475773][T10436] Tainted: [W]=WARN [ 234.475780][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.475802][T10436] Call Trace: [ 234.475863][T10436] [ 234.475871][T10436] __dump_stack+0x1d/0x30 [ 234.475961][T10436] dump_stack_lvl+0x95/0xd0 [ 234.476044][T10436] dump_stack+0x15/0x1b [ 234.476068][T10436] dump_header+0x80/0x240 [ 234.476090][T10436] oom_kill_process+0x295/0x350 [ 234.476114][T10436] out_of_memory+0x97d/0xb80 [ 234.476193][T10436] try_charge_memcg+0x62e/0xa10 [ 234.476230][T10436] obj_cgroup_charge_pages+0x23/0xc0 [ 234.476258][T10436] __memcg_kmem_charge_page+0x9e/0x170 [ 234.476290][T10436] __alloc_frozen_pages_noprof+0x18a/0x360 [ 234.476392][T10436] alloc_pages_mpol+0xb3/0x260 [ 234.476421][T10436] alloc_pages_noprof+0x8f/0x130 [ 234.476488][T10436] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 234.476526][T10436] __kvmalloc_node_noprof+0x3d4/0x650 [ 234.476633][T10436] ? futex_hash_allocate+0x190/0x9d0 [ 234.476725][T10436] ? futex_hash_allocate+0x190/0x9d0 [ 234.476755][T10436] futex_hash_allocate+0x190/0x9d0 [ 234.476836][T10436] ? cap_task_prctl+0x13f/0x6e0 [ 234.476859][T10436] futex_hash_prctl+0xd8/0xf0 [ 234.476885][T10436] __se_sys_prctl+0xa3d/0x13f0 [ 234.476919][T10436] __x64_sys_prctl+0x67/0x80 [ 234.476966][T10436] x64_sys_call+0x2533/0x3020 [ 234.476993][T10436] do_syscall_64+0x12c/0x370 [ 234.477027][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.477056][T10436] RIP: 0033:0x7f9340fec629 [ 234.477119][T10436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.477140][T10436] RSP: 002b:00007f933fa47028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 234.477168][T10436] RAX: ffffffffffffffda RBX: 00007f9341265fa0 RCX: 00007f9340fec629 [ 234.477185][T10436] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 234.477258][T10436] RBP: 00007f9341082b39 R08: 0000000000000000 R09: 0000000000000000 [ 234.477272][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.477287][T10436] R13: 00007f9341266038 R14: 00007f9341265fa0 R15: 00007ffdda128f28 [ 234.477344][T10436] [ 234.477430][T10436] memory: usage 307200kB, limit 307200kB, failcnt 4649 [ 234.554477][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 234.554530][ T28] audit: type=1400 audit(234.526:1738): avc: denied { bind } for pid=10448 comm="syz.1.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.579229][T10436] memory+swap: usage 245580kB, limit 9007199254740988kB, failcnt 0 [ 234.583949][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 234.619200][T10436] kmem: usage 216472kB, limit 9007199254740988kB, failcnt 0 [ 234.650949][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 234.688320][T10436] Memory cgroup stats for [ 234.692550][ T28] audit: type=1400 audit(234.646:1739): avc: denied { watch watch_reads } for pid=10454 comm="syz.5.1887" path="/310" dev="tmpfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 234.713407][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 234.806637][T10455] loop5: detected capacity change from 0 to 256 [ 234.815459][T10436] /syz4: [ 234.815650][T10436] cache 16384 [ 234.817443][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 234.825519][T10436] rss 212992 [ 234.836738][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 234.837474][T10436] shmem 0 [ 234.854472][T10436] mapped_file 0 [ 234.858189][T10436] dirty 0 [ 234.861408][T10436] writeback 0 [ 234.864868][T10436] workingset_refault_anon 517 [ 234.869617][T10436] workingset_refault_file 4969 [ 234.874374][T10436] swap 0 [ 234.877247][T10436] swapcached 2019328 [ 234.881494][T10436] pgpgin 365292 [ 234.885238][T10436] pgpgout 365235 [ 234.889249][T10436] pgfault 203354 [ 234.893017][T10436] pgmajfault 354 [ 234.896612][T10436] inactive_anon 172032 [ 234.900733][T10436] active_anon 40960 [ 234.904531][T10436] inactive_file 20480 [ 234.908522][T10436] active_file 0 [ 234.912039][T10436] unevictable 0 [ 234.915493][T10436] hierarchical_memory_limit 314572800 [ 234.920961][T10436] hierarchical_memsw_limit 9223372036854771712 [ 234.927145][T10436] total_cache 16384 [ 234.931007][T10436] total_rss 212992 [ 234.932739][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 234.934713][T10436] total_shmem 0 [ 234.952575][T10460] loop7: detected capacity change from 0 to 1024 [ 234.959996][T10436] total_mapped_file 0 [ 234.964063][T10436] total_dirty 0 [ 234.967559][T10436] total_writeback 0 [ 234.982565][T10436] total_workingset_refault_anon 522 [ 234.988015][T10436] total_workingset_refault_file 5032 [ 234.993430][T10436] total_swap 0 [ 234.996837][T10436] total_swapcached 13287424 [ 235.001461][T10436] total_pgpgin 466631 [ 235.005705][T10436] total_pgpgout 466574 [ 235.007415][T10460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 235.009816][T10436] total_pgfault 209368 [ 235.025933][T10436] total_pgmajfault 371 [ 235.030109][T10436] total_inactive_anon 172032 [ 235.034752][T10436] total_active_anon 40960 [ 235.038809][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 235.039116][T10436] total_inactive_file 20480 [ 235.052376][T10436] total_active_file 0 [ 235.056341][T10436] total_unevictable 0 [ 235.060423][T10436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1885,pid=10435,uid=0 [ 235.075166][T10436] Memory cgroup out of memory: Killed process 10435 (syz.4.1885) total-vm:96212kB, anon-rss:1416kB, file-rss:22252kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 235.075644][T10455] FAT-fs (loop5): Directory bread(block 64) failed [ 235.099480][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 235.110916][ T28] audit: type=1400 audit(235.086:1740): avc: denied { ioctl } for pid=10459 comm="syz.7.1892" path="/50/file1/file1" dev="loop7" ino=15 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.118076][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 235.158332][T10455] FAT-fs (loop5): Directory bread(block 65) failed [ 235.175669][ T8733] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm kworker/u8:65: lblock 0 mapped to illegal pblock 0 (length 1) [ 235.180061][T10455] FAT-fs (loop5): Directory bread(block 66) failed [ 235.189579][ T8733] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 235.207281][T10449] syz.1.1890 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 235.208502][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 235.222626][T10455] FAT-fs (loop5): Directory bread(block 67) failed [ 235.240940][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.1.1890 Tainted: G W syzkaller #0 PREEMPT(full) [ 235.240999][T10449] Tainted: [W]=WARN [ 235.241006][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.241018][T10449] Call Trace: [ 235.241024][T10449] [ 235.241031][T10449] __dump_stack+0x1d/0x30 [ 235.241057][T10449] dump_stack_lvl+0x95/0xd0 [ 235.241104][T10449] dump_stack+0x15/0x1b [ 235.241127][T10449] dump_header+0x80/0x240 [ 235.241151][T10449] oom_kill_process+0x295/0x350 [ 235.241173][T10449] out_of_memory+0x97d/0xb80 [ 235.241198][T10449] try_charge_memcg+0x62e/0xa10 [ 235.241306][T10449] obj_cgroup_charge_pages+0x23/0xc0 [ 235.241334][T10449] __memcg_kmem_charge_page+0x9e/0x170 [ 235.241396][T10449] __alloc_frozen_pages_noprof+0x18a/0x360 [ 235.241425][T10449] alloc_pages_mpol+0xb3/0x260 [ 235.241455][T10449] alloc_pages_noprof+0x8f/0x130 [ 235.241515][T10449] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 235.241557][T10449] __kvmalloc_node_noprof+0x3d4/0x650 [ 235.241586][T10449] ? futex_hash_allocate+0x190/0x9d0 [ 235.241662][T10449] ? futex_hash_allocate+0x190/0x9d0 [ 235.241697][T10449] futex_hash_allocate+0x190/0x9d0 [ 235.241754][T10449] ? cap_task_prctl+0x13f/0x6e0 [ 235.241779][T10449] futex_hash_prctl+0xd8/0xf0 [ 235.241903][T10449] __se_sys_prctl+0xa3d/0x13f0 [ 235.241930][T10449] __x64_sys_prctl+0x67/0x80 [ 235.241955][T10449] x64_sys_call+0x2533/0x3020 [ 235.242086][T10449] do_syscall_64+0x12c/0x370 [ 235.242120][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.242140][T10449] RIP: 0033:0x7fe54a79c629 [ 235.242157][T10449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.242270][T10449] RSP: 002b:00007fe5491f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 235.242295][T10449] RAX: ffffffffffffffda RBX: 00007fe54aa15fa0 RCX: 00007fe54a79c629 [ 235.242312][T10449] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 235.242328][T10449] RBP: 00007fe54a832b39 R08: 0000000000000000 R09: 0000000000000000 [ 235.242387][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.242441][T10449] R13: 00007fe54aa16038 R14: 00007fe54aa15fa0 R15: 00007ffd264e6908 [ 235.242470][T10449] [ 235.242916][T10455] FAT-fs (loop5): Directory bread(block 68) failed [ 235.254399][ T8733] EXT4-fs (loop7): This should not happen!! Data will be lost [ 235.254399][ T8733] [ 235.259903][ T9146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 235.271140][T10449] memory: usage 307200kB, limit 307200kB, failcnt 2080 [ 235.305449][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 235.315063][T10455] FAT-fs (loop5): Directory bread(block 69) failed [ 235.329168][ T28] audit: type=1400 audit(235.296:1741): avc: denied { write } for pid=10465 comm="syz.4.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 235.346328][T10455] FAT-fs (loop5): Directory bread(block 70) failed [ 235.362543][T10466] loop4: detected capacity change from 0 to 1024 [ 235.364647][T10466] EXT4-fs: Ignoring removed orlov option [ 235.400793][T10449] memory+swap: usage 373312kB, limit 9007199254740988kB, failcnt 0 [ 235.469672][T10455] FAT-fs (loop5): Directory bread(block 71) failed [ 235.519268][T10466] EXT4-fs: inline encryption not supported [ 235.523828][ T28] audit: type=1400 audit(235.456:1742): avc: denied { execute } for pid=10469 comm="syz.7.1895" name="file0" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.565160][T10466] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 235.614750][T10449] kmem: usage 196364kB, limit 9007199254740988kB, failcnt 0 [ 235.622532][T10449] Memory cgroup stats for /syz1: [ 235.622762][T10449] cache 4096 [ 235.627888][T10474] loop7: detected capacity change from 0 to 2048 [ 235.631321][T10466] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 235.647479][T10449] rss 200704 [ 235.650955][T10449] shmem 0 [ 235.653939][T10449] mapped_file 0 [ 235.657427][T10449] dirty 0 [ 235.660075][T10455] FAT-fs (loop5): Directory bread(block 72) failed [ 235.661867][T10466] EXT4-fs (loop4): invalid journal inode [ 235.667410][T10455] FAT-fs (loop5): Directory bread(block 73) failed [ 235.674677][T10449] writeback 0 [ 235.688578][T10466] EXT4-fs (loop4): can't get journal size [ 235.694883][T10449] workingset_refault_anon 522 [ 235.700292][T10449] workingset_refault_file 15670 [ 235.705773][T10466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.729504][T10449] swap 67698688 [ 235.733056][T10449] swapcached 78942208 [ 235.737179][T10449] pgpgin 626842 [ 235.747516][T10474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.769619][ T28] audit: type=1400 audit(235.736:1743): avc: denied { mounton } for pid=10465 comm="syz.4.1894" path="/364/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.809777][T10449] pgpgout 626789 [ 235.816429][T10449] pgfault 261519 [ 235.829150][T10449] pgmajfault 315 [ 235.832734][T10449] inactive_anon 200704 [ 235.838513][ T9146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.839458][T10449] active_anon 12288 [ 235.857882][T10449] inactive_file 0 [ 235.861692][T10449] active_file 4096 [ 235.865414][T10449] unevictable 0 [ 235.868907][T10449] hierarchical_memory_limit 314572800 [ 235.874775][T10449] hierarchical_memsw_limit 9223372036854771712 [ 235.881154][T10449] total_cache 4096 [ 235.884999][T10449] total_rss 200704 [ 235.888726][T10449] total_shmem 0 [ 235.900363][T10482] loop5: detected capacity change from 0 to 128 [ 235.907293][T10482] FAT-fs (loop5): bogus number of reserved sectors [ 235.909620][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.918460][T10449] total_mapped_file 0 [ 235.961494][T10482] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 235.976980][T10449] total_dirty 0 [ 235.989493][T10449] total_writeback 0 [ 235.993319][T10449] total_workingset_refault_anon 522 [ 235.998509][T10449] total_workingset_refault_file 15670 [ 236.009639][T10485] netlink: 'syz.4.1900': attribute type 3 has an invalid length. [ 236.016191][T10482] FAT-fs (loop5): Can't find a valid FAT filesystem [ 236.021678][T10485] loop4: detected capacity change from 0 to 512 [ 236.030015][ T28] audit: type=1400 audit(235.986:1744): avc: denied { write } for pid=10484 comm="syz.4.1900" name="ipv6_route" dev="proc" ino=4026532948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 236.050658][T10449] total_swap 67698688 [ 236.070553][T10449] total_swapcached 78942208 [ 236.075154][T10485] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.084381][T10449] total_pgpgin 710565 [ 236.088432][T10449] total_pgpgout 710512 [ 236.095521][T10449] total_pgfault 264504 [ 236.100293][T10482] loop5: detected capacity change from 0 to 128 [ 236.100534][T10449] total_pgmajfault 328 [ 236.120689][T10449] total_inactive_anon 200704 [ 236.127967][T10449] total_active_anon 12288 [ 236.132891][T10485] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 236.143344][T10449] total_inactive_file 0 [ 236.147487][T10449] total_active_file 4096 [ 236.152021][T10485] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 236.156650][T10449] total_unevictable 0 [ 236.166803][T10485] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1900: Failed to acquire dquot type 1 [ 236.167514][T10449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1890,pid=10448,uid=0 [ 236.195273][T10449] Memory cgroup out of memory: Killed process 10448 (syz.1.1890) total-vm:94164kB, anon-rss:1412kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 236.220501][T10485] loop4: lost filesystem error report for type 5 error -5 [ 236.221060][T10485] EXT4-fs (loop4): 1 truncate cleaned up [ 236.233923][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 236.233942][ C1] EXT4-fs (loop4): last error at time 236: ext4_acquire_dquot:7001 [ 236.249405][T10485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 236.301622][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 236.394188][ T28] audit: type=1400 audit(236.366:1745): avc: denied { setopt } for pid=10509 comm="syz.7.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.439505][T10510] ipip0: entered promiscuous mode [ 236.444626][T10510] ipip0: entered allmulticast mode [ 236.452559][T10497] loop5: detected capacity change from 0 to 8192 [ 236.502596][T10518] syzkaller0: entered promiscuous mode [ 236.508086][T10518] syzkaller0: entered allmulticast mode [ 236.516077][ T6827] loop5: p1 < > p2 p4 < p5 > [ 236.522417][ T6827] loop5: partition table partially beyond EOD, truncated [ 236.532204][ T6827] loop5: p1 start 134217728 is beyond EOD, truncated [ 236.541231][ T6827] loop5: p2 size 591360 extends beyond EOD, truncated [ 236.550850][ T6827] loop5: p5 size 591360 extends beyond EOD, truncated [ 236.596035][T10497] loop5: p1 < > p2 p4 < p5 > [ 236.600876][T10497] loop5: partition table partially beyond EOD, truncated [ 236.608075][T10497] loop5: p1 start 134217728 is beyond EOD, truncated [ 236.615098][T10497] loop5: p2 size 591360 extends beyond EOD, truncated [ 236.677044][T10497] loop5: p5 size 591360 extends beyond EOD, truncated [ 236.973928][T10540] __nla_validate_parse: 1 callbacks suppressed [ 236.973945][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 237.022682][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1912'. [ 237.098608][T10544] loop7: detected capacity change from 0 to 1024 [ 237.121843][T10540] loop3: detected capacity change from 0 to 164 [ 237.140311][T10540] Invalid option length (453) for dns_resolver key [ 237.157533][T10544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 237.208618][T10544] System zones: 0-1, 3-36 [ 237.222447][T10544] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1913: bad orphan inode 134217728 [ 237.233229][T10544] loop7: lost filesystem error report for type 5 error -117 [ 237.233894][T10544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.379049][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 237.404821][ T6827] udevd[6827]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 237.410749][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 237.680749][T10565] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1919'. [ 237.693663][ T8727] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.780018][ T8727] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.856941][ T8727] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.915690][T10560] lo speed is unknown, defaulting to 1000 [ 237.933421][ T8727] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.004345][T10560] lo speed is unknown, defaulting to 1000 [ 238.104237][ T9146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.208220][ T8727] bridge_slave_1: left allmulticast mode [ 238.214547][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1926'. [ 238.219331][ T8727] bridge_slave_1: left promiscuous mode [ 238.229856][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.240891][ T8727] bridge_slave_0: left allmulticast mode [ 238.246541][ T8727] bridge_slave_0: left promiscuous mode [ 238.252700][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.390601][T10590] loop7: detected capacity change from 0 to 8192 [ 238.392756][T10592] loop4: detected capacity change from 0 to 2048 [ 238.464666][ T6827] loop7: p1 < > p2 p4 < p5 > [ 238.469464][ T6827] loop7: partition table partially beyond EOD, truncated [ 238.550825][ T6827] loop7: p1 start 134217728 is beyond EOD, truncated [ 238.564904][ T6827] loop7: p2 size 591360 extends beyond EOD, truncated [ 238.591577][ T6827] loop7: p5 size 591360 extends beyond EOD, truncated [ 238.773014][T10592] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 238.779814][T10590] loop7: p1 < > p2 p4 < p5 > [ 238.780437][T10592] loop4: partition table partially beyond EOD, [ 238.789333][T10590] loop7: partition table partially beyond EOD, [ 238.800343][T10592] truncated [ 238.803211][T10590] truncated [ 238.816111][T10592] loop4: p1 start 4278190080 is beyond EOD, truncated [ 238.823079][T10590] loop7: p1 start 134217728 is beyond EOD, truncated [ 238.837461][T10590] loop7: p2 size 591360 extends beyond EOD, truncated [ 238.843501][T10592] loop4: p2 start 16908800 is beyond EOD, truncated [ 238.853365][T10590] loop7: p5 size 591360 extends beyond EOD, truncated [ 238.860104][T10592] loop4: p5 start 16908800 is beyond EOD, truncated [ 238.927618][T10606] loop5: detected capacity change from 0 to 512 [ 238.935337][T10606] ext4: Unknown parameter 'dont_measure' [ 238.946258][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1933'. [ 238.952397][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1933'. [ 239.174406][T10613] netlink: 'syz.7.1935': attribute type 2 has an invalid length. [ 239.182365][T10613] netlink: 'syz.7.1935': attribute type 1 has an invalid length. [ 240.360973][ T8727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.370766][ T8727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.380128][ T8727] bond0 (unregistering): Released all slaves [ 240.387141][T10560] chnl_net:caif_netlink_parms(): no params data found [ 240.406051][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 240.426593][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 240.426608][ T28] audit: type=1400 audit(240.396:1795): avc: denied { read open } for pid=10622 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.469723][ T28] audit: type=1400 audit(240.396:1796): avc: denied { getattr } for pid=10622 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.499281][ T8727] tipc: Disabling bearer [ 240.504550][ T8727] tipc: Left network mode [ 240.600887][ T28] audit: type=1400 audit(240.566:1797): avc: denied { add_name } for pid=10621 comm="dhcpcd-run-hook" name="resolv.conf.eth14.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.607271][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.633540][T10560] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.640909][T10560] bridge_slave_0: entered allmulticast mode [ 240.647349][T10560] bridge_slave_0: entered promiscuous mode [ 240.691234][T10628] lo speed is unknown, defaulting to 1000 [ 240.744499][ T28] audit: type=1400 audit(240.566:1798): avc: denied { create } for pid=10621 comm="dhcpcd-run-hook" name="resolv.conf.eth14.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.807192][ T28] audit: type=1400 audit(240.566:1799): avc: denied { write } for pid=10621 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth14.link" dev="tmpfs" ino=12337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.847105][ T8727] hsr_slave_0: left promiscuous mode [ 240.866802][ T8727] hsr_slave_1: left promiscuous mode [ 240.892636][ T8727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.910308][ T8727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.917548][ T28] audit: type=1400 audit(240.566:1800): avc: denied { append } for pid=10621 comm="dhcpcd-run-hook" name="resolv.conf.eth14.link" dev="tmpfs" ino=12337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.946227][ T8727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.953891][ T8727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.961301][ T28] audit: type=1400 audit(240.636:1801): avc: denied { remove_name } for pid=10645 comm="rm" name="resolv.conf.eth14.link" dev="tmpfs" ino=12337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.986516][ T8727] veth1_macvtap: left promiscuous mode [ 240.994563][ T8727] veth0_macvtap: left promiscuous mode [ 241.006113][ T28] audit: type=1400 audit(240.636:1802): avc: denied { unlink } for pid=10645 comm="rm" name="resolv.conf.eth14.link" dev="tmpfs" ino=12337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 241.052887][T10661] loop5: detected capacity change from 0 to 8192 [ 241.060060][ T28] audit: type=1400 audit(240.806:1803): avc: denied { write } for pid=10648 comm="syz.1.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.101567][ T28] audit: type=1400 audit(240.916:1804): avc: denied { connect } for pid=10648 comm="syz.1.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.129439][ T6827] loop5: p1 < > p2 p4 < p5 > [ 241.134236][ T6827] loop5: partition table partially beyond EOD, truncated [ 241.144606][ T6827] loop5: p1 start 134217728 is beyond EOD, truncated [ 241.157915][ T6827] loop5: p2 size 591360 extends beyond EOD, truncated [ 241.168910][ T6827] loop5: p5 size 591360 extends beyond EOD, truncated [ 241.194288][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.214053][T10661] loop5: p1 < > p2 p4 < p5 > [ 241.218744][T10661] loop5: partition table partially beyond EOD, truncated [ 241.225907][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.233236][T10661] loop5: p1 start 134217728 is beyond EOD, truncated [ 241.241454][T10560] bridge_slave_1: entered allmulticast mode [ 241.248084][T10560] bridge_slave_1: entered promiscuous mode [ 241.254563][T10661] loop5: p2 size 591360 extends beyond EOD, truncated [ 241.274294][T10661] loop5: p5 size 591360 extends beyond EOD, truncated [ 241.281825][T10560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.291232][ T3360] syz1: Port: 1 Link DOWN [ 241.291487][T10628] lo speed is unknown, defaulting to 1000 [ 241.308830][T10560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.350164][T10560] team0: Port device team_slave_0 added [ 241.356934][T10560] team0: Port device team_slave_1 added [ 241.417539][T10560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.435082][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.506711][T10560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.566379][T10560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.585045][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.611301][T10560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.665129][T10560] hsr_slave_0: entered promiscuous mode [ 241.679896][T10560] hsr_slave_1: entered promiscuous mode [ 241.712508][ T8727] IPVS: stop unused estimator thread 0... [ 241.860214][T10702] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1951'. [ 241.913261][T10560] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 241.961360][T10560] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 241.996484][T10560] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 242.006700][T10560] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 242.030838][T10729] x_tables: unsorted underflow at hook 2 [ 242.067151][T10745] netlink: 'syz.5.1956': attribute type 29 has an invalid length. [ 242.075378][T10745] netlink: 'syz.5.1956': attribute type 29 has an invalid length. [ 242.130175][T10560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.152841][T10560] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.182042][T10756] loop5: detected capacity change from 0 to 512 [ 242.218852][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.225955][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.236095][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.243348][ T8731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.253145][T10756] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.260853][T10560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.289099][T10560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.304648][T10756] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 242.341866][T10770] program syz.7.1962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.353799][T10770] loop7: detected capacity change from 0 to 512 [ 242.355949][T10769] loop4: detected capacity change from 0 to 2048 [ 242.383003][T10756] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 242.406138][T10770] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1962: ea_inode with extended attributes [ 242.406266][T10560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.425770][T10756] System zones: 0-2, 18-18, 34-35 [ 242.439799][T10756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 242.452133][T10770] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.459203][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 242.474802][ C1] EXT4-fs (loop7): initial error at time 242: ext4_xattr_inode_iget:441: inode 11 [ 242.484030][ C1] EXT4-fs (loop7): last error at time 242: ext4_xattr_inode_iget:441: inode 11 [ 242.497852][T10769] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1964'. [ 242.508571][T10770] EXT4-fs (loop7): Remounting filesystem read-only [ 242.515642][T10770] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -30) [ 242.529296][T10770] EXT4-fs (loop7): 1 orphan inode deleted [ 242.535067][T10756] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 242.544427][T10756] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 242.552663][T10756] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 242.596361][T10756] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.5.1961: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 242.619916][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1966'. [ 242.631472][T10756] EXT4-fs error (device loop5) in ext4_delete_entry:2737: Corrupt filesystem [ 242.642408][T10770] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.670713][T10802] raw_sendmsg: syz.1.1968 forgot to set AF_INET. Fix it! [ 242.674910][T10756] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.1961: Deleting old file: nlink 4, error=-117 [ 242.702415][T10808] loop4: detected capacity change from 0 to 128 [ 242.768212][T10816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1971'. [ 242.778764][T10755] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1961: bg 0: block 353: padding at end of block bitmap is not set [ 242.823237][ T9146] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 242.832825][T10755] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 242.852690][T10560] veth0_vlan: entered promiscuous mode [ 242.890479][T10560] veth1_vlan: entered promiscuous mode [ 242.928400][T10560] veth0_macvtap: entered promiscuous mode [ 242.949672][T10560] veth1_macvtap: entered promiscuous mode [ 242.968312][ T4279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.997403][T10560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.018853][T10560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.032685][T10843] loop4: detected capacity change from 0 to 512 [ 243.045254][ T5571] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.058940][T10845] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 243.071834][ T8731] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.101868][ T8733] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.111774][T10843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.129407][ T8733] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.253292][T10859] SELinux: failed to load policy [ 243.265863][T10849] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1980'. [ 243.315961][T10866] loop7: detected capacity change from 0 to 512 [ 243.456565][T10866] EXT4-fs: Ignoring removed nobh option [ 243.621918][T10866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.915868][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.944257][ T9146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.080180][T10900] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1990'. [ 244.303342][T10900] lo speed is unknown, defaulting to 1000 [ 244.315097][T10921] loop4: detected capacity change from 0 to 256 [ 244.346484][T10921] FAT-fs (loop4): Directory bread(block 64) failed [ 244.360390][T10921] FAT-fs (loop4): Directory bread(block 65) failed [ 244.399198][T10921] FAT-fs (loop4): Directory bread(block 66) failed [ 244.405814][T10921] FAT-fs (loop4): Directory bread(block 67) failed [ 244.425151][T10921] FAT-fs (loop4): Directory bread(block 68) failed [ 244.442895][T10921] FAT-fs (loop4): Directory bread(block 69) failed [ 244.469221][T10921] FAT-fs (loop4): Directory bread(block 70) failed [ 244.471747][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2001'. [ 244.489528][T10921] FAT-fs (loop4): Directory bread(block 71) failed [ 244.496074][T10921] FAT-fs (loop4): Directory bread(block 72) failed [ 244.536177][T10921] FAT-fs (loop4): Directory bread(block 73) failed [ 244.567841][T10920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2000'. [ 244.734881][T10930] loop4: detected capacity change from 0 to 2048 [ 245.030262][T10930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.090202][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.263677][T10926] lo speed is unknown, defaulting to 1000 [ 245.280892][T10900] lo speed is unknown, defaulting to 1000 [ 245.397232][T10926] lo speed is unknown, defaulting to 1000 [ 245.500060][T10945] 9pnet_fd: Insufficient options for proto=fd [ 245.550538][T10945] xt_CT: No such helper "snmp" [ 245.573701][T10948] xt_CONNSECMARK: invalid mode: 4 [ 245.962404][T10967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2013'. [ 246.365172][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 246.365469][ T28] audit: type=1400 audit(245.996:1934): avc: denied { create } for pid=10959 comm="syz.1.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 247.251832][T10969] lo speed is unknown, defaulting to 1000 [ 247.289541][T10969] lo speed is unknown, defaulting to 1000 [ 247.343992][ T28] audit: type=1400 audit(245.996:1935): avc: denied { getopt } for pid=10959 comm="syz.1.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 247.363326][ T28] audit: type=1400 audit(245.996:1936): avc: denied { setopt } for pid=10959 comm="syz.1.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 247.690921][T10990] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2020'. [ 247.700855][T10990] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2020'. [ 248.044321][T11009] loop5: detected capacity change from 0 to 1024 [ 248.062080][T11009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.080610][T11008] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.2024: lblock 3 mapped to illegal pblock 3 (length 3) [ 248.097069][T11008] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 248.109408][T11008] EXT4-fs (loop5): This should not happen!! Data will be lost [ 248.109408][T11008] [ 248.158952][T11007] loop8: detected capacity change from 0 to 8192 [ 248.223653][ T3300] loop8: p1 < > p2 p4 < p5 > [ 248.240340][ T3300] loop8: partition table partially beyond EOD, truncated [ 248.348450][ T3300] loop8: p1 start 134217728 is beyond EOD, truncated [ 248.356280][ T3300] loop8: p2 size 591360 extends beyond EOD, truncated [ 248.512274][ T3300] loop8: p5 size 591360 extends beyond EOD, truncated [ 248.563452][T11007] loop8: p1 < > p2 p4 < p5 > [ 248.588943][T11007] loop8: partition table partially beyond EOD, truncated [ 248.620391][T11007] loop8: p1 start 134217728 is beyond EOD, truncated [ 248.660256][T11007] loop8: p2 size 591360 extends beyond EOD, truncated [ 248.760104][T11007] loop8: p5 size 591360 extends beyond EOD, truncated [ 248.790096][ T8724] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:57: lblock 8 mapped to illegal pblock 8 (length 8) [ 248.848326][ T8724] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 248.889435][ T8724] EXT4-fs (loop5): This should not happen!! Data will be lost [ 248.889435][ T8724] [ 248.918329][ T4279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.118146][ T28] audit: type=1400 audit(249.086:1937): avc: denied { connect } for pid=11029 comm="syz.5.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.148769][T11033] lo speed is unknown, defaulting to 1000 [ 249.184716][T11033] lo speed is unknown, defaulting to 1000 [ 250.402583][T11043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2033'. [ 250.450205][ T28] audit: type=1400 audit(250.426:1938): avc: denied { connect } for pid=11042 comm="syz.4.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.955416][T11051] loop4: detected capacity change from 0 to 1764 [ 250.980490][ T28] audit: type=1400 audit(250.946:1939): avc: denied { mounton } for pid=11042 comm="syz.4.2033" path="/file0" dev="ramfs" ino=31840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 251.003547][T11051] iso9660: Bad value for 'uid' [ 251.008611][T11051] iso9660: Bad value for 'uid' [ 251.156462][T11067] loop8: detected capacity change from 0 to 4096 [ 251.262332][T11067] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.306630][T11073] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2040'. [ 251.450082][ T28] audit: type=1400 audit(251.416:1940): avc: denied { map } for pid=11066 comm="syz.8.2039" path="/19/file0/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.473892][T10560] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.501610][ T28] audit: type=1400 audit(251.416:1941): avc: denied { execute } for pid=11066 comm="syz.8.2039" path="/19/file0/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.599874][T11083] loop7: detected capacity change from 0 to 128 [ 251.678880][ T28] audit: type=1400 audit(251.646:1942): avc: denied { read } for pid=11084 comm="syz.8.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 252.011813][T11089] lo speed is unknown, defaulting to 1000 [ 252.048169][T11089] lo speed is unknown, defaulting to 1000 [ 252.318153][T11093] loop4: detected capacity change from 0 to 512 [ 252.346149][T11093] ext4: Unknown parameter 'smackfshat' [ 252.472024][T11101] Non-string source [ 252.545296][T11104] loop8: detected capacity change from 0 to 512 [ 252.563007][T11104] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2050: bad orphan inode 17 [ 252.573432][T11104] loop8: lost filesystem error report for type 5 error -117 [ 252.573524][T11104] ext4_test_bit(bit=16, block=4) = 1 [ 252.580931][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 252.580952][ C1] EXT4-fs (loop8): initial error at time 252: ext4_orphan_get:1417 [ 252.580977][ C1] EXT4-fs (loop8): last error at time 252: ext4_orphan_get:1417 [ 252.608795][T11104] is_bad_inode(inode)=0 [ 252.614575][T11104] NEXT_ORPHAN(inode)=0 [ 252.618862][T11104] max_ino=32 [ 252.622327][T11104] i_nlink=1 [ 252.625999][T11104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.909194][ T28] audit: type=1400 audit(252.856:1943): avc: denied { write } for pid=11102 comm="syz.8.2050" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.970939][ T28] audit: type=1400 audit(252.916:1944): avc: denied { compute_member } for pid=11115 comm="syz.7.2054" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 252.991993][T11122] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2056'. [ 253.027013][T11121] syzkaller0: entered promiscuous mode [ 253.032608][T11121] syzkaller0: entered allmulticast mode [ 253.179998][T11125] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2053'. [ 253.416418][T10560] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.500926][T11120] syz.4.2056 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 253.515821][T11127] IPv6: sit1: Disabled Multicast RS [ 253.532930][T11120] CPU: 0 UID: 0 PID: 11120 Comm: syz.4.2056 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.533048][T11120] Tainted: [W]=WARN [ 253.533055][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.533078][T11120] Call Trace: [ 253.533084][T11120] [ 253.533092][T11120] __dump_stack+0x1d/0x30 [ 253.533121][T11120] dump_stack_lvl+0x95/0xd0 [ 253.533167][T11120] dump_stack+0x15/0x1b [ 253.533262][T11120] dump_header+0x80/0x240 [ 253.533287][T11120] oom_kill_process+0x295/0x350 [ 253.533308][T11120] out_of_memory+0x97d/0xb80 [ 253.533347][T11120] try_charge_memcg+0x62e/0xa10 [ 253.533391][T11120] obj_cgroup_charge_pages+0x23/0xc0 [ 253.533421][T11120] __memcg_kmem_charge_page+0x9e/0x170 [ 253.533495][T11120] __alloc_frozen_pages_noprof+0x18a/0x360 [ 253.533531][T11120] alloc_pages_mpol+0xb3/0x260 [ 253.533558][T11120] alloc_pages_noprof+0x8f/0x130 [ 253.533584][T11120] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 253.533694][T11120] __kvmalloc_node_noprof+0x3d4/0x650 [ 253.533717][T11120] ? futex_hash_allocate+0x190/0x9d0 [ 253.533744][T11120] ? futex_hash_allocate+0x190/0x9d0 [ 253.533772][T11120] futex_hash_allocate+0x190/0x9d0 [ 253.533874][T11120] ? cap_task_prctl+0x13f/0x6e0 [ 253.533894][T11120] futex_hash_prctl+0xd8/0xf0 [ 253.533925][T11120] __se_sys_prctl+0xa3d/0x13f0 [ 253.533994][T11120] __x64_sys_prctl+0x67/0x80 [ 253.534018][T11120] x64_sys_call+0x2533/0x3020 [ 253.534135][T11120] do_syscall_64+0x12c/0x370 [ 253.534226][T11120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.534257][T11120] RIP: 0033:0x7f9340fec629 [ 253.534273][T11120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.534291][T11120] RSP: 002b:00007f933fa47028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 253.534314][T11120] RAX: ffffffffffffffda RBX: 00007f9341265fa0 RCX: 00007f9340fec629 [ 253.534379][T11120] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 253.534392][T11120] RBP: 00007f9341082b39 R08: 0000000000000000 R09: 0000000000000000 [ 253.534434][T11120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.534447][T11120] R13: 00007f9341266038 R14: 00007f9341265fa0 R15: 00007ffdda128f28 [ 253.534468][T11120] [ 253.769176][T11120] memory: usage 307200kB, limit 307200kB, failcnt 4838 [ 253.779209][T11120] memory+swap: usage 307356kB, limit 9007199254740988kB, failcnt 0 [ 253.791523][T11120] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 253.798808][T11120] Memory cgroup stats for /syz4: [ 253.798996][T11120] cache 4096 [ 253.807200][T11120] rss 8192 [ 253.810240][T11120] shmem 0 [ 253.813173][T11120] mapped_file 0 [ 253.816628][T11120] dirty 0 [ 253.819683][T11120] writeback 0 [ 253.823031][T11120] workingset_refault_anon 561 [ 253.827786][T11120] workingset_refault_file 6762 [ 253.832596][T11120] swap 159744 [ 253.835878][T11120] swapcached 2236416 [ 253.839788][T11120] pgpgin 412604 [ 253.843266][T11120] pgpgout 412589 [ 253.846890][T11120] pgfault 231603 [ 253.850890][T11120] pgmajfault 378 [ 253.854565][T11120] inactive_anon 40960 [ 253.858542][T11120] active_anon 12288 [ 253.862399][T11120] inactive_file 4096 [ 253.866463][T11120] active_file 4096 [ 253.870215][T11120] unevictable 0 [ 253.873761][T11120] hierarchical_memory_limit 314572800 [ 253.879178][T11120] hierarchical_memsw_limit 9223372036854771712 [ 253.885324][T11120] total_cache 4096 [ 253.889104][T11120] total_rss 8192 [ 253.892777][T11120] total_shmem 0 [ 253.896223][T11120] total_mapped_file 0 [ 253.900429][T11120] total_dirty 0 [ 253.903893][T11120] total_writeback 0 [ 253.907696][T11120] total_workingset_refault_anon 566 [ 253.912963][T11120] total_workingset_refault_file 6825 [ 253.918242][T11120] total_swap 159744 [ 253.922161][T11120] total_swapcached 13504512 [ 253.926679][T11120] total_pgpgin 513943 [ 253.930684][T11120] total_pgpgout 513928 [ 253.934739][T11120] total_pgfault 237617 [ 253.938846][T11120] total_pgmajfault 395 [ 253.943180][T11120] total_inactive_anon 40960 [ 253.947703][T11120] total_active_anon 12288 [ 253.953562][T11120] total_inactive_file 4096 [ 253.958087][T11120] total_active_file 4096 [ 253.962399][T11120] total_unevictable 0 [ 253.966402][T11120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2056,pid=11119,uid=0 [ 253.981230][T11120] Memory cgroup out of memory: Killed process 11119 (syz.4.2056) total-vm:94164kB, anon-rss:1224kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 253.998611][ T28] audit: type=1326 audit(253.956:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11135 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5034f9c629 code=0x7ffc0000 [ 254.036493][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2057'. [ 254.045832][ T28] audit: type=1326 audit(253.956:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11135 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5034f9c629 code=0x7ffc0000 [ 254.100653][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2057'. [ 254.109161][ T28] audit: type=1326 audit(253.956:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11135 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5034f9c629 code=0x7ffc0000 [ 254.118694][T11123] syz.1.2053 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 254.170475][ T28] audit: type=1326 audit(253.976:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11135 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5034f9c629 code=0x7ffc0000 [ 254.199400][T11123] CPU: 1 UID: 0 PID: 11123 Comm: syz.1.2053 Tainted: G W syzkaller #0 PREEMPT(full) [ 254.199434][T11123] Tainted: [W]=WARN [ 254.199441][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.199455][T11123] Call Trace: [ 254.199503][T11123] [ 254.199510][T11123] __dump_stack+0x1d/0x30 [ 254.199537][T11123] dump_stack_lvl+0x95/0xd0 [ 254.199563][T11123] dump_stack+0x15/0x1b [ 254.199651][T11123] dump_header+0x80/0x240 [ 254.199670][T11123] oom_kill_process+0x295/0x350 [ 254.199735][T11123] out_of_memory+0x97d/0xb80 [ 254.199753][T11123] try_charge_memcg+0x62e/0xa10 [ 254.199801][T11123] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 254.199828][T11123] __swap_cache_prepare_and_add+0x386/0x530 [ 254.199901][T11123] swap_cache_alloc_folio+0xa2/0x120 [ 254.199930][T11123] swap_cluster_readahead+0x26e/0x3d0 [ 254.200003][T11123] swapin_readahead+0xde/0x840 [ 254.200027][T11123] ? __rcu_read_unlock+0x4e/0x70 [ 254.200067][T11123] ? __perf_event_task_sched_in+0xa65/0xad0 [ 254.200088][T11123] ? __list_add_valid_or_report+0x38/0xe0 [ 254.200120][T11123] ? __rcu_read_unlock+0x4e/0x70 [ 254.200137][T11123] ? swap_cache_get_folio+0x26f/0x280 [ 254.200199][T11123] do_swap_page+0x309/0x2210 [ 254.200244][T11123] ? __schedule+0x85a/0xd40 [ 254.200265][T11123] ? __rcu_read_lock+0x36/0x50 [ 254.200283][T11123] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 254.200338][T11123] handle_mm_fault+0xb40/0x3020 [ 254.200380][T11123] ? vma_start_read+0x1c7/0x2c0 [ 254.200409][T11123] do_user_addr_fault+0x62f/0x1050 [ 254.200442][T11123] ? trace_page_fault_user+0x1f/0xe0 [ 254.200531][T11123] exc_page_fault+0x62/0xa0 [ 254.200612][T11123] asm_exc_page_fault+0x26/0x30 [ 254.200633][T11123] RIP: 0033:0x7fe54a664dde [ 254.200648][T11123] Code: e9 b7 69 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 1b d2 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 254.200665][T11123] RSP: 002b:00007ffd264e6a00 EFLAGS: 00010206 [ 254.200680][T11123] RAX: 00007fe54aa15fa0 RBX: 00007fe54aa15fa0 RCX: 0000000000000026 [ 254.200693][T11123] RDX: 0000000000000001 RSI: 00007fe54aa16038 RDI: 000000000000000a [ 254.200729][T11123] RBP: 00007fe54aa17da0 R08: 0000000000000001 R09: 0000000000000001 [ 254.200742][T11123] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000003dff3 [ 254.200757][T11123] R13: 00007fe54aa1609c R14: 000000000003dd19 R15: 00007fe54aa16090 [ 254.200778][T11123] [ 254.203344][T11123] memory: usage 307200kB, limit 307200kB, failcnt 2535 [ 254.279874][ T28] audit: type=1326 audit(254.046:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11135 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5034f9c629 code=0x7ffc0000 [ 254.285962][T11123] memory+swap: usage 373508kB, limit 9007199254740988kB, failcnt 0 [ 254.481233][T11123] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 254.489015][T11123] Memory cgroup stats for /syz1: [ 254.489211][T11123] cache 4096 [ 254.498080][T11123] rss 0 [ 254.501377][T11123] shmem 0 [ 254.504309][T11123] mapped_file 0 [ 254.507757][T11123] dirty 0 [ 254.510835][T11123] writeback 4096 [ 254.514493][T11123] workingset_refault_anon 550 [ 254.519283][T11123] workingset_refault_file 18103 [ 254.524180][T11123] swap 67899392 [ 254.527712][T11123] swapcached 79142912 [ 254.531809][T11123] pgpgin 693613 [ 254.535295][T11123] pgpgout 693610 [ 254.539266][T11123] pgfault 287289 [ 254.571812][T11123] pgmajfault 342 [ 254.588958][T11123] inactive_anon 8192 [ 254.611998][T11123] active_anon 0 [ 254.615476][T11123] inactive_file 4096 [ 254.646961][T11160] lo speed is unknown, defaulting to 1000 [ 254.662327][T11123] active_file 0 [ 254.672767][T11123] unevictable 0 [ 254.686459][T11123] hierarchical_memory_limit 314572800 [ 254.696088][T11123] hierarchical_memsw_limit 9223372036854771712 [ 254.706986][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2066'. [ 254.720964][T11123] total_cache 4096 [ 254.724777][T11123] total_rss 0 [ 254.728059][T11123] total_shmem 0 [ 254.731698][T11123] total_mapped_file 0 [ 254.735789][T11123] total_dirty 0 [ 254.739359][T11123] total_writeback 4096 [ 254.743458][T11123] total_workingset_refault_anon 550 [ 254.748932][T11123] total_workingset_refault_file 18103 [ 254.755450][T11123] total_swap 67899392 [ 254.759547][T11123] total_swapcached 79142912 [ 254.764082][T11123] total_pgpgin 777336 [ 254.768138][T11123] total_pgpgout 777333 [ 254.772256][T11123] total_pgfault 290274 [ 254.776357][T11123] total_pgmajfault 355 [ 254.807699][T11123] total_inactive_anon 8192 [ 254.861336][T11160] lo speed is unknown, defaulting to 1000 [ 254.923840][T11190] loop7: detected capacity change from 0 to 1024 [ 254.937628][T11123] total_active_anon 0 [ 254.947894][T11123] total_inactive_file 4096 [ 254.974516][T11190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 254.990776][T11123] total_active_file 0 [ 255.018912][T11123] total_unevictable 0 [ 255.033422][T11123] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2053,pid=11123,uid=0 [ 255.052487][T11190] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.2067: lblock 3 mapped to illegal pblock 3 (length 3) [ 255.094847][T11123] Memory cgroup out of memory: Killed process 11123 (syz.1.2053) total-vm:96212kB, anon-rss:1228kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 255.119678][T11190] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 255.141399][T11190] EXT4-fs (loop7): This should not happen!! Data will be lost [ 255.141399][T11190] [ 255.202513][ T8731] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:63: lblock 8 mapped to illegal pblock 8 (length 8) [ 255.232882][ T8731] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 255.269029][ T8731] EXT4-fs (loop7): This should not happen!! Data will be lost [ 255.269029][ T8731] [ 255.306086][ T9146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 255.339239][T11125] ================================================================== [ 255.347339][T11125] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 255.357142][T11125] [ 255.359448][T11125] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 0: [ 255.367494][T11125] tick_do_update_jiffies64+0x113/0x1c0 [ 255.373037][T11125] tick_nohz_handler+0x8d/0x3d0 [ 255.377884][T11125] __hrtimer_run_queues+0x218/0x4f0 [ 255.383075][T11125] hrtimer_interrupt+0x269/0x810 [ 255.388016][T11125] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 255.393903][T11125] sysvec_apic_timer_interrupt+0x6f/0x80 [ 255.399527][T11125] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.405493][T11125] mt_find+0xb5/0x3d0 [ 255.409460][T11125] find_vma+0x6c/0xa0 [ 255.413428][T11125] __get_user_pages+0x203/0x1ea0 [ 255.418360][T11125] get_dump_page+0xb4/0x240 [ 255.422860][T11125] dump_user_range+0x148/0xdb0 [ 255.427610][T11125] elf_core_dump+0x21a2/0x2330 [ 255.432376][T11125] coredump_write+0xacc/0xdd0 [ 255.437040][T11125] vfs_coredump+0x26c7/0x3130 [ 255.441705][T11125] get_signal+0xd80/0xf60 [ 255.446028][T11125] arch_do_signal_or_restart+0x96/0x450 [ 255.451564][T11125] irqentry_exit+0xf7/0x520 [ 255.456057][T11125] asm_exc_page_fault+0x26/0x30 [ 255.460894][T11125] [ 255.463200][T11125] read to 0xffffffff86c09a00 of 8 bytes by task 11125 on cpu 1: [ 255.470814][T11125] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 255.477042][T11125] count_shadow_nodes+0x6a/0x230 [ 255.481976][T11125] do_shrink_slab+0x63/0x6a0 [ 255.486550][T11125] shrink_slab+0x538/0x880 [ 255.490948][T11125] shrink_node+0x6bc/0x2130 [ 255.495432][T11125] do_try_to_free_pages+0x408/0xc80 [ 255.500624][T11125] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 255.506629][T11125] try_charge_memcg+0x37e/0xa10 [ 255.511473][T11125] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 255.517532][T11125] __swap_cache_prepare_and_add+0x386/0x530 [ 255.523420][T11125] swap_cache_alloc_folio+0xa2/0x120 [ 255.528788][T11125] swap_cluster_readahead+0x26e/0x3d0 [ 255.534155][T11125] swapin_readahead+0xde/0x840 [ 255.538995][T11125] do_swap_page+0x309/0x2210 [ 255.543576][T11125] handle_mm_fault+0xb40/0x3020 [ 255.548416][T11125] do_user_addr_fault+0x3fd/0x1050 [ 255.553525][T11125] exc_page_fault+0x62/0xa0 [ 255.558019][T11125] asm_exc_page_fault+0x26/0x30 [ 255.562857][T11125] __get_user_8+0x14/0x30 [ 255.567177][T11125] exit_robust_list+0x31/0x280 [ 255.571939][T11125] futex_exit_release+0xe0/0x130 [ 255.576871][T11125] exit_mm_release+0x1a/0x30 [ 255.581450][T11125] exit_mm+0x37/0x180 [ 255.585423][T11125] do_exit+0x3fa/0x15a0 [ 255.589579][T11125] do_group_exit+0xfe/0x140 [ 255.594075][T11125] get_signal+0xe54/0xf60 [ 255.598393][T11125] arch_do_signal_or_restart+0x96/0x450 [ 255.603930][T11125] exit_to_user_mode_loop+0x6a/0x6f0 [ 255.609201][T11125] do_syscall_64+0x249/0x370 [ 255.613783][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.619661][T11125] [ 255.621967][T11125] value changed: 0x00000000ffffee61 -> 0x00000000ffffee62 [ 255.629055][T11125] [ 255.631361][T11125] Reported by Kernel Concurrency Sanitizer on: [ 255.637496][T11125] CPU: 1 UID: 0 PID: 11125 Comm: syz.1.2053 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.648422][T11125] Tainted: [W]=WARN [ 255.652214][T11125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.662254][T11125] ==================================================================