last executing test programs: 4m6.049429073s ago: executing program 4 (id=9): r0 = open$dir(&(0x7f00000008c0)='./file0\x00', 0x200801, 0x80) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008050) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r6, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/68}, {&(0x7f0000000280)=""/177}, {&(0x7f0000000340)=""/54}, {&(0x7f0000000380)=""/22}, {&(0x7f00000003c0)=""/121}, {&(0x7f0000000440)=""/19}, {&(0x7f0000000480)=""/151}], 0x0, &(0x7f00000005c0)=""/101}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b40)=""/59}, {&(0x7f0000000680)=""/143}, {&(0x7f0000000740)=""/4096}, {&(0x7f0000001740)=""/15}, {&(0x7f0000001780)=""/215}, {&(0x7f0000001880)=""/4}, {&(0x7f00000018c0)=""/237}, {&(0x7f00000019c0)=""/76}, {&(0x7f0000001a40)=""/211}, {&(0x7f0000001e80)=""/16}], 0x0, &(0x7f0000001c40)=""/122}, 0x3ca}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001cc0)=""/212}, {&(0x7f0000001dc0)=""/188}, {&(0x7f0000002500)=""/118}, {&(0x7f0000001f00)=""/234}, {&(0x7f0000002000)=""/94}, {&(0x7f0000002080)=""/132}, {&(0x7f0000002140)=""/185}, {&(0x7f0000002200)=""/223}, {&(0x7f0000002300)=""/119}]}, 0x4}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) setresgid(r4, 0x0, r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0) fchownat(r0, &(0x7f0000000900)='./file0\x00', r1, r5, 0x1500) r7 = syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f00000008c0)='./file0\x00', 0x1808490, &(0x7f00000003c0)={[{@grpid}, {@grpquota}], [{@subj_user={'subj_user', 0x3d, '-/'}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, '\\:{}-/\'$'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r1}}, {@appraise}, {@appraise_type}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000009, 0x6031, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) kcmp(r8, r9, 0xe3298888b35a8c5f, r7, r7) timerfd_create(0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200ffff38000480340001800b000100657874686472000024000280050002000700000008000340000000f5080006400000000208000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a96c34a1079892ca948e52e38c1da401f47a2fd82eb8c81ea2728ffed2fc77541e4b0b55f"], 0x8c}}, 0x0) 3m59.565765317s ago: executing program 4 (id=33): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x1, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) eventfd(0x5000000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fedbdf2502e8cf00000008000c0000000000050005000100000006001b004e24080006001b004e210000060001000700000006001d00f80f00000800170079ba495e3710bac11f53318ce61a106656bd775d6fb368cacfe388a0", @ANYRES32=r5, @ANYBLOB="050004000800000008001900ac1e0001"], 0xfffffd5d}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000050) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='\b'], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8=r7], 0x0, 0xfffffffd, 0xffffffa4, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 3m59.136024975s ago: executing program 4 (id=34): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f0000000040)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179", 0x2d}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf5", 0x92}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c509", 0x22}, {&(0x7f0000000300)="cd3bedf5646a783101315fe187f47b94afae1ffd2c74baff699e21e2867578b532cd6d02dae6bde110f42b9352dea553e4da64eb7ef37d995a5720c63766208beed8089dc86af4dcb33f595cc83e0bc01b9b31274c6b3af62788d401c4021083", 0x60}, {&(0x7f0000000800)="ab378ee94afda7f8421d7d8cb97375b88d8eaec2a8141bdeb032fb0f67253d95e43e08593765a24d30a1e3c9625a01eff408586d036b66b02a5450908c9e202c0cf0192227620b37f79a446122ce28c618291e2c6e50c362a183c7fa0cc4ce162509dc8bfc0797af980400c65dcd3db17ceecad4f3bb73b209e21bf7cfdbf135306d0aed94e908ec0dc7024539a3ae3583e46a8c981af1a969d6f5973ef8950efb943908eeda8f", 0xa7}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m59.031723644s ago: executing program 4 (id=35): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f000001bd80)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4014, 0x0) 3m58.707071522s ago: executing program 4 (id=37): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f000001bd80)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4014, &(0x7f0000001000)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f"]) 3m58.300328769s ago: executing program 4 (id=39): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8000000000000001) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x1048a, 0x4000, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x400000, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xa4000061) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000894) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xd2b}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 3m58.28711421s ago: executing program 32 (id=39): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8000000000000001) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x1048a, 0x4000, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x400000, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xa4000061) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000894) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xd2b}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 3m27.802120688s ago: executing program 0 (id=247): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f0000000040)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179", 0x2d}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf5", 0x92}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea18", 0x14a}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe", 0x24}, {&(0x7f0000000300)="cd3bedf5646a783101315fe187f47b94afae1ffd2c74baff699e21e2867578b532cd6d02dae6bde110f42b9352dea553e4da64eb7ef37d995a5720c63766208beed8089dc86af4dcb33f595cc83e0bc01b9b31274c6b3af62788d401c40210835c7ace1259e178eea9616440ea8f1160817002117cd0", 0x76}, {&(0x7f0000000800)="ab378ee94afda7f8421d7d8cb97375b88d8eaec2a8141bdeb032fb0f67253d95e43e08593765a24d30a1e3c9625a01eff408586d036b66b02a5450908c9e202c0cf0192227620b37f79a446122ce28c618291e2c6e50c362a183c7fa0cc4ce162509dc8bfc0797af980400c65dcd3db17ceecad4f3bb73b209e21bf7cfdbf135306d0aed94e908ec0dc7024539a3ae3583e46a8c981af1a969d6f5973ef8950efb943908eeda8f74b41f440786", 0xad}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m27.773545371s ago: executing program 0 (id=249): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)="ec214234eb1723d623f1d71f886296921e547b28655c9c9e37e66814c8ad4432775af345849830bf604b8f54a685d32be1e868843aab2bf41e6e4c36286f99ea5bb269d9f3240662d935c775eefe66d6a92a95f70c646f2f4f5b", 0x5a}], 0x1) (fail_nth: 3) 3m27.082010672s ago: executing program 0 (id=251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000015001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 3m27.057593794s ago: executing program 0 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x17d}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="8d376f7b8644126747cb39ecdb9209fb5823ddad01338a2a28a8d11229c8d306d167a92f", 0x24}], 0x1, 0x12, 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000280)='.\x00', r3, &(0x7f0000000300)='./file0\x00', 0x0) 3m26.872327241s ago: executing program 0 (id=255): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, &(0x7f0000000400)=0x7, 0x0, 0x0, 0x4, 0x9, 0xfffffffffffffff9, 0x22, 0x7}}], 0x58, 0x8000}, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}}, 0x18}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3m26.614109503s ago: executing program 0 (id=258): openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) unshare(0x20060400) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) tee(r0, r2, 0x60000000000, 0x0) 3m26.613988663s ago: executing program 33 (id=258): openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) unshare(0x20060400) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) tee(r0, r2, 0x60000000000, 0x0) 2m57.934878352s ago: executing program 6 (id=436): r0 = open$dir(&(0x7f00000008c0)='./file0\x00', 0x200801, 0x80) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/68}, {&(0x7f0000000280)=""/177}, {&(0x7f0000000340)=""/54}, {&(0x7f0000000380)=""/22}, {&(0x7f00000003c0)=""/121}, {&(0x7f0000000440)=""/19}, {&(0x7f0000000480)=""/151}], 0x0, &(0x7f00000005c0)=""/101}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b40)=""/59}, {&(0x7f0000000680)=""/143}, {&(0x7f0000000740)=""/4096}, {&(0x7f0000001740)=""/15}, {&(0x7f0000001780)=""/215}, {&(0x7f0000001880)=""/4}, {&(0x7f00000018c0)=""/237}, {&(0x7f00000019c0)=""/76}, {&(0x7f0000001a40)=""/211}, {&(0x7f0000001e80)=""/16}], 0x0, &(0x7f0000001c40)=""/122}, 0x3ca}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001cc0)=""/212}, {&(0x7f0000001dc0)=""/188}, {&(0x7f0000002500)=""/118}, {&(0x7f0000001f00)=""/234}, {&(0x7f0000002000)=""/94}, {&(0x7f0000002080)=""/132}, {&(0x7f0000002140)=""/185}, {&(0x7f0000002200)=""/223}, {&(0x7f0000002300)=""/119}]}, 0x4}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) fchownat(r0, &(0x7f0000000900)='./file0\x00', r1, r4, 0x1500) r6 = syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f00000008c0)='./file0\x00', 0x1808490, &(0x7f00000003c0)={[{@grpid}, {@grpquota}], [{@subj_user={'subj_user', 0x3d, '-/'}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, '\\:{}-/\'$'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r1}}, {@appraise}, {@appraise_type}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000009, 0x6031, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) kcmp(r7, r8, 0xe3298888b35a8c5f, r6, r6) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timerfd_create(0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200ffff38000480340001800b000100657874686472000024000280050002000700000008000340000000f5080006400000000208000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a96c34a1079892ca948e52e38c1da401f47a2fd82eb8c81ea2728ffed2fc77541e4b0b55f"], 0x8c}}, 0x0) 2m55.242807791s ago: executing program 6 (id=451): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0xc800, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0x300, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x801) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 2m54.12022126s ago: executing program 6 (id=458): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x6, 0x1, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 2m54.033323188s ago: executing program 6 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x2a3, &(0x7f0000000440)="$eJzs3cFKW0scBvDPmKjXTYR7VxcXB7poNw3qG4RioTRQsLiwK0NVKEaECEK7aLvzXbrqO/QN+hh9gboQLDG2UZOKpbVHze8HOn8488HMLDJnMZOsz+9sb+zuba39+yUzM0WqyfuPR0lSyWT6Hn7qt7UkE5nKQCUAwO2zstJulj0Grle322z33t2mh56sfihlQAAAAAAAAAAAAPy29fnpofP/OUzmzpz/nzhtK0Pn/3udAYDbxvn/u6/bbbZnR97WdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKM/h8XH9+JK/sscHAPx59n8AGD/2fwAYP4fn9vqJ2P8B4O57vvbi6f1Wa3mlKGaSnYP91f3VpHbQ+9/T3MqrdLKZhdRzlN77wal+/fhJa3mhODGX9Z13/XyvnTyfX0w9c6Pzi/18cT5fy+zZ/FLq+W90fmlkfioP7iWV7xNtpJ7PL7ObTjbSyw7ybxeL4tGz1oX89Ek/AAAAAAAAAAAAAAAAAAAA+BsaxQ8j7+83Gj973s//wvcDXLhfX83/1XLnDgAAAAAAAAAAAAAAAAAAADfF3us32+1OZ7M7svh6epf/sj6KQfHP0KpWrrTOVymqSa7SuZbkZqyG4jYXJX4oAQAAAAAAAAAAAAAAAADAmBpc+i17JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnsHv/19fUfYcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPHwLQAA//8UJORI") sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0) syz_clone(0x8000000, &(0x7f0000000000)="0be5c8490c94a676f7011d76faf2a5620722e156", 0x14, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="b0ef014d5b6679ba01fa5d06e89f6563cbbab770f75a31d1f5c009059774b732c6917c331dc4a126278e9a6863ebef5af9add08293b263ab52942100f242174c29e02b938a74951d69efc4173e60976cb664d1e1ba0e262a5563be1d2797128e92350d6385ca57c4a2c0f0a39ecb387e7524cb9e8b07dfd4d723bfd526eb1289881592fb4acd44e66d0b749e50a99eb4db85d0b68d7fb216aa1ccde6cba8ee7d06b8f386b3c30be0c85e59a984a138ceda2ca4d789d32b1d39f00cb60eebff4bc16a56a639a7dae429effeaafd62f07112001533c7317a011bfbf2cdd9e6c497cff595024f97aa15602dc8564ba50f") 2m53.698665037s ago: executing program 6 (id=464): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0x8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002d0001002abd70000000000008000000", @ANYRES32=r5, @ANYBLOB="191753e6bf059c5e7abb09d4d158eeff24f6e61d301fc42d1b87d615"], 0x28}], 0x1}, 0x0) stat(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, r7}}}], 0x40}, 0x8841) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x1) writev(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) close(0xffffffffffffffff) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000000400), 0x4) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='net/raw\x00') r12 = open_tree(r11, &(0x7f0000000300)='./cgroup\x00', 0x1101) r13 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./cgroup\x00', 0x88100) move_mount(r12, 0x0, r13, 0x0, 0x46) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010010000000ffdbdf2500000100", @ANYRES8=r11, @ANYBLOB="0028000000000000140012800b0001006d6163736563000004000280"], 0x34}}, 0xc040) r14 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r16], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) 2m53.365283577s ago: executing program 6 (id=466): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r4, 0x6e2, 0x620, 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@deltaction={0x168, 0x31, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40800}, 0x400d1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x3ec0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000001340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="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"/343], 0xb0}, 0x1, 0x0, 0x0, 0x20008810}, 0xbb031d70b4c67da1) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x807, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x1) socket$unix(0x1, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000380)={0x4, 0x6}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000008c0)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @loopback}], 0x50) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="800700002e51a00167d271", @ANYRES16=0x0, @ANYBLOB="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"], 0x780}}, 0x20000000) r10 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0xc0000) ioctl$BLKBSZGET(r10, 0x80081270, 0x0) 2m53.283070504s ago: executing program 34 (id=466): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r4, 0x6e2, 0x620, 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@deltaction={0x168, 0x31, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40800}, 0x400d1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x3ec0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000001340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbdf25370000000c009900400000001300000008009f0007000000050018011c00000005001801110000000500190107000000080022b13101f4020000080057000800000008005700ff0700000800a000060000000800270000a96affff0800a00042000000050018010f00000008002600111700000800a000050000000800a000040000000800a100000000000800570000800000707577ee7589ef7400f900aa1e6f23721b8eac932ae1d38bbbfafc6f23bf59c79acca47e9f11031199a6ac4dc69daad2d6fa621298b8924ee3b6a1567d1ed17714780453f3a4432a166e213edd90dae225ce07d1f2cebb0d6ad2a7255e33a48954acfc3c52fcd705afdabb31dbcf6abe0776cc0b5a6a9fe12ce252e7abe3b6315b33a1e5d1a11692d4a4926b7409a46f0fdabb17526e86bfd50202b279da2c7c9837ae6ab14660f13046fa00"/343], 0xb0}, 0x1, 0x0, 0x0, 0x20008810}, 0xbb031d70b4c67da1) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x807, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x1) socket$unix(0x1, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000380)={0x4, 0x6}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000008c0)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @loopback}], 0x50) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="800700002e51a00167d271", @ANYRES16=0x0, @ANYBLOB="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"], 0x780}}, 0x20000000) r10 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0xc0000) ioctl$BLKBSZGET(r10, 0x80081270, 0x0) 51.451443508s ago: executing program 1 (id=1239): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000005f40)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xaa93}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000180)='o', 0x1}], 0xff80}}], 0x1, 0x4000) 51.359795716s ago: executing program 1 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0x3, 0x9, 0x80, 0x3, 0x0, 0x7ff, 0xc0400, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x4800, 0x6, 0x7fff, 0x3, 0x2, 0xc, 0xff, 0x0, 0x3, 0x0, 0x800}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xe) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r1, 0x0, 0x7}, 0x38) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r9, 0x29, 0x0, 0x0, 0x4, 0xd, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) 51.110122899s ago: executing program 1 (id=1243): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private0, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="83000400000000002800128008000100736974001c000280080002e0feffffff0800030005"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r5 = socket(0x28, 0x5, 0x0) r6 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r10, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r9}, 0x20) shutdown(r9, 0x0) r11 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r11, 0xd44, 0x44c1, 0x7, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r14 = epoll_create(0xb) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r14, &(0x7f0000005e00)={0x20000001}) connect$unix(r5, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r15 = syz_open_dev$usbfs(&(0x7f0000000280), 0x9, 0x101002) ioctl$USBDEVFS_ALLOW_SUSPEND(r15, 0x5522) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 50.199949369s ago: executing program 1 (id=1248): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4009, 0x5]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r2, 0x403, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1000, 0x2, 0x56e, 0xe6, 0x7, 0x8], 0x1, &(0x7f00000001c0)=[{}], 0x0, [{}]}, 0x88) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x40, 0x10040, 0x8f}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000ac0)={{r4, &(0x7f0000000d00)='\xecF#j\xe3\xa4\xbf\xf5A>{<\x12N\xe7\xae\x94\x8a\x86\xc9b:\a\xc04~$\x81rw\xf3Gk\x8a\x10=\xd0\xdb-\xd5v\x9e\xd9t\x87\xcc70\r4F\xba*\xc1\xc7\x89\xcd\x1a\xf4\x93\x1fE\xf7\xb0lt`\x96\xe6\xa3\x98y\x00\x84\x93\xc4\x8e\x1bp\xbb_>\xcd2t+\xeb\x96\x94\xfc\xed\xc4\x9d\x8e\x8c\xfce\xe2L\n\x98\xbb4\xd3\x97\x9b\xfa\x83v\xb1\x14lY\x18\x7fr;\x05f\x9c\xad\xbe3\x00\x98\x93\xc8{e\xa3VL]\x13\x9d\xf2\xc9o\xb8\xa42n\xd3V\xfd\x87t\xc4?\xa0*\x8b\xe0z\xdd\x02q\xad\x95s\x04\xd5~M@N\xc9.T\xaeY<\xde\xae\x17\x93\x01w^\xc4Y\xc1>\xacpPj\xfa\xa2\xb0\x18;Cd\xf0\x9cD-\xf1\x15\x00\xf1\xd0\xf1\x1e\x9e[=J}\x81\xa6\xc4k\xd9\xdb\xcev\x83^\xbf\xc3\xefJ\xf9\xf3\xe0\a&\xeb\xfe\xec\x0fL\xd5\x8e\xa2y\xc6\x8f\xba\xb2\xe3\xbf\xfa\xc8;\xc1\xa0\xd8\x92\xf2\xf35\xf6P\xc7\xa0\xc4T|\xfa\xae.h\x19F9\xabR\xbd', 0xa4080, &(0x7f00000003c0)={@_ha_fsid={[0x1, 0xa1]}, {0x800, 0x9, 0x0, 0x1000}}, 0x5, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000480)=0x80000000}, {[0xd, 0x5, 0x7, 0x8001]}, 0xffff, 0x13, &(0x7f00000004c0)=""/19}) dup(r8) r9 = epoll_create(0x3ff) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000240)={0x0, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000440)={0xa2000004}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r11 = inotify_init() r12 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r12, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r12, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close_range(r11, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 49.332121806s ago: executing program 1 (id=1254): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x1, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/19, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='\b'], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8=r5], 0x0, 0xfffffffd, 0xffffffa4, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 48.986582696s ago: executing program 1 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 48.961472279s ago: executing program 35 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 5.473201077s ago: executing program 8 (id=1647): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x400c005}, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r9, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@debug}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_eq}, {@uid_eq}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") syz_open_pts(r9, 0x40000) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5) r10 = syz_open_procfs(0x0, 0x0) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 4.157557443s ago: executing program 8 (id=1653): socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47ba, 0x100, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) 4.156310613s ago: executing program 2 (id=1654): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000063c0), r0) sendmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)='(', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="0e000000"], 0x10}}], 0x1, 0x4044044) 4.089375069s ago: executing program 5 (id=1655): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) getdents(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0x8000a}, 0x1c, 0x0}}], 0x1, 0x200880c0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r6, 0x1, 0x0, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendfile(r5, r4, 0x0, 0x3ffff) 3.949973982s ago: executing program 3 (id=1657): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r1, &(0x7f0000000080)='\x00\x00', 0x2}]) 3.949523601s ago: executing program 7 (id=1658): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000980)="a7eb18", 0x3}], 0x1}}], 0x1, 0xc80c0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 3.797855955s ago: executing program 3 (id=1659): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x4, 0x0, 0x0, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r1, 0x400454cc, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)={0x2, 0xd, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x9020, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x4}, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x4, 0x0, 0x0, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETNOCSUM(r1, 0x400454cc, 0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)={0x2, 0xd, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x9020, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x4}, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async) 3.74033676s ago: executing program 3 (id=1660): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0xc800, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0x300, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x801) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5597c7114de75d6a, 0x0, 0x0, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000040)={@empty, @multicast2}, &(0x7f0000000080)=0x8) 3.664902726s ago: executing program 8 (id=1661): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) set_mempolicy(0x4005, 0x0, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010a2cbd7000ffdbdf2502180000000000080000000008000100ac"], 0x24}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) 3.635381119s ago: executing program 7 (id=1662): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x24, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xe}, 0x106200, 0x10004, 0x4, 0x5, 0x9b41, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = mq_open(0x0, 0x42, 0x120, 0x0) mq_timedsend(r3, &(0x7f0000000600)="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", 0x9d4, 0x6, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, 0x0, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 3.534149628s ago: executing program 7 (id=1663): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) eventfd2(0xff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f000000b0c0)={0x0, 0x0, &(0x7f000000b080)={&(0x7f00000002c0)=@newtaction={0x44, 0x30, 0x1, 0x70bd27, 0x25dfdc01, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x4}]}, 0x44}}, 0x0) io_submit(r1, 0x0, &(0x7f0000000000)) 3.500470081s ago: executing program 8 (id=1664): r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x21, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@grpquota}, {@errors_remount}, {@auto_da_alloc}, {@grpquota}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") 3.429987897s ago: executing program 8 (id=1665): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002500)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB, @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESOCT=r0]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r4, 0x0, 0x0, 0x8800000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000001150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000002000000000a"], 0xb8}}, 0x40010) set_mempolicy_home_node(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000362000/0x3000)=nil, 0x3000, &(0x7f0000000000)='*(^+\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x81, @empty, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x1, 0x4}}}, 0x118) 3.412702889s ago: executing program 7 (id=1666): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) getdents(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0x8000a}, 0x1c, 0x0}}], 0x1, 0x200880c0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r6, 0x1, 0x0, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendfile(r5, r4, 0x0, 0x3ffff) 3.28990344s ago: executing program 2 (id=1667): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf", 0x11}], 0x2, &(0x7f00000010c0)}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, 0x0, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x4, 0x8001}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc841}, 0x20008850) sendmsg$inet6(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)="dab8c01c1990758b66f6beff8779fb021d61947b9b9b1d9d6ec8e320b9f55fb212a8b737bff6d08894e0b3e755e9dd62392cad63a55fbe87fc50a1c1064618a9e44a7b761886f9f2bf9a92968d8f58374da2a3f4f719ad7d130bbe9618e2eed650ae3a528b05f4066317c3e219f896aea2207758ca8dd529cfd3c55ac88c931da5574fd55cb5bdb9aff3e7185fe7ad1e85879e", 0x93}, {&(0x7f0000000180)}, {&(0x7f0000000480)="e65eef2f92fea8dd6c9031bb2ef9eba815914b1cd434f3928ef75f756aba8b6675d516cafe2db7ddf0593349ee43976a5ecae706da08688a53d12f1c4a70913f833fd628a2150180ed4a6f5cc390d6610cda20b79043ef0d4a4d7b79d44d5504cefd0588bd60df59c97b3e063dbf13bb8553a0c3f953533c800de1f30d07de92cda5fe72485f61f996a5dd249997e4878e12207437fcdb3f73cd618c85314172af3ad1e2aa3af97fd1142cd3a729aa34", 0xb0}, {&(0x7f0000000380)="9ee4a65f636c2622e3cd9e317ac70707fd3b763bee0f7a05721cad30ba81efd7ac4828653fac2ec1630c7773fab4eb48e172d36190ab24cbd6fc8ea1a620dc0aedc9c4e46a6481f7397f49048a", 0x4d}, {&(0x7f0000000540)="82c7e15e90a7efb9b0d3634acfe180c8addf573325c77bed6112c4b6856b44bb3ac4270d91a70d2a7ae3aa271efb46bd185fd3edf8faa4590244b30849db616e4d9ab0923e844cc61b6a1f339fe461236508d0a3cb5faa10ca695a00b2473251046da897be56d410311a1d7aa578cc5ecb74957e673a6a9fcbaa308d470c0d76321186fc6886c130b9e541892877f6b770a897387b0248273208555d5613cba1c05ee130cd29bea76db8628ad16a5929ca7db55807e4a9", 0xb7}], 0x5, &(0x7f00000009c0)=[@rthdrdstopts={{0x50, 0x29, 0x37, {0x2f, 0x6, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x4, "2838c78f"}, @generic={0x1}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x80, [0xb, 0x7fff, 0x4]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0x2, 0x11, '\x00', [@pad1, @calipso={0x7, 0x50, {0x0, 0x12, 0x6, 0xf9, [0x6, 0x100000001, 0x5, 0xc, 0xffffffffffffffff, 0x7fff, 0xffffffffffffffbf, 0xf675, 0xffffffffffffffff]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0xa1, 0x8001, [0x4, 0xf23b, 0xed8d]}}]}}}, @dstopts={{0x78, 0x29, 0x37, {0x1d, 0xb, '\x00', [@pad1, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x100}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x4, 0x4, [0xfffffffffffffff9, 0x200, 0x5, 0x1, 0x0, 0x8, 0x5]}}, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x2, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x81, 0x2, [0x3, 0x8, 0xc, 0xdd, 0x0]}}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x1, 0xc9, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x2b0}, 0x40400b0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000663000000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 3.114872435s ago: executing program 3 (id=1668): r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) r3 = io_uring_setup(0xf09, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x7ffffffe) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8, 0x20, 0x9, 0x5, {{0x31, 0x4, 0x3, 0x12, 0xc4, 0x67, 0x0, 0x4, 0x23, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x17, 0xc2, [@loopback, @loopback, @loopback, @broadcast, @multicast2]}, @ssrr={0x89, 0xf, 0x7c, [@loopback, @empty, @rand_addr=0x64010102]}, @cipso={0x86, 0x2a, 0x3, [{0x7, 0xe, "be41898f5ee47ea194075e65"}, {0x6, 0x10, "25fe7ff6cd0a4aa5e9efcfde7321"}, {0x0, 0x6, "a1d8d826"}]}, @timestamp_addr={0x44, 0xc, 0xfa, 0x1, 0x0, [{@empty, 0x7fffffff}]}, @timestamp={0x44, 0x8, 0xfe, 0x0, 0x8, [0x30d6]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x28, 0x4a, 0x0, 0x5, [0x40, 0x7fff, 0xc, 0xffffffff, 0x4, 0x3, 0x5, 0x1, 0x0]}, @timestamp_addr={0x44, 0x1c, 0xab, 0x1, 0x0, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@empty}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x7c, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r11 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) getdents64(r11, &(0x7f0000001400)=""/4090, 0xffa) 2.730089709s ago: executing program 3 (id=1669): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002540), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000018f9840000006b0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x1}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x17b, @mcast1, 0xf}, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0xa0000000}, r5, 0x9}}, 0x48) 2.680259533s ago: executing program 5 (id=1670): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = syz_io_uring_setup(0x3671, &(0x7f00000000c0)={0x0, 0x79af, 0x2, 0x0, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1008c54, &(0x7f0000000180)=ANY=[@ANYBLOB="e336935500"], 0x1, 0x305, &(0x7f00000006c0)="$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") syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) (async) io_uring_enter(r2, 0x627, 0xcd00, 0x43, 0x0, 0x0) 2.358123342s ago: executing program 5 (id=1671): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c000600000000000000000008000b00"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}}, 0x8850) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.350154793s ago: executing program 2 (id=1672): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000980)="a7eb", 0x2}], 0x1}}], 0x1, 0xc80c0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 2.174821548s ago: executing program 5 (id=1673): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.111344864s ago: executing program 2 (id=1674): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000", 0x3a}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7", 0xe4}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x1d}, @remote}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) unlink(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00') 1.193828365s ago: executing program 5 (id=1675): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) getdents(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000002040)='./file0\x00', 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0x8000a}, 0x1c, 0x0}}], 0x1, 0x200880c0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r7, 0x1, 0x0, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendfile(r6, r5, 0x0, 0x3ffff) 821.733168ms ago: executing program 8 (id=1676): r0 = open$dir(&(0x7f00000008c0)='./file0\x00', 0x200801, 0x80) lstat(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008050) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r3, &(0x7f0000002440), 0x0, 0x1000400000de, 0x0) fchownat(r0, &(0x7f0000000900)='./file0\x00', r1, 0x0, 0x1500) r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f00000008c0)='./file0\x00', 0x1808490, &(0x7f00000003c0)={[{@grpid}, {@grpquota}], [{@subj_user={'subj_user', 0x3d, '-/'}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, '\\:{}-/\'$'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r1}}, {@appraise}, {@appraise_type}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000009, 0x6031, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) kcmp(r5, r6, 0xe3298888b35a8c5f, r4, r4) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timerfd_create(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200ffff38000480340001800b000100657874686472000024000280050002000700000008000340000000f5080006400000000208000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a96c34a1079892ca948e52e38c1da401f47a2fd82eb8c81ea2728ffed2fc77541e4b0b55f"], 0x8c}}, 0x0) 344.81122ms ago: executing program 7 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000240)=0x800, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000940], 0x0, 0x0, &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x52, 0x22eb, 'syzkaller1\x00', 'macvlan0\x00', 'wg2\x00', 'bridge0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffd}]}, 0x1a6) r3 = socket(0x10, 0x803, 0x0) r4 = epoll_create1(0x80000) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000a00)=ANY=[@ANYBLOB="000202010000"], 0x18) r6 = socket$unix(0x1, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000080)={0xa002a008}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex=r8, 0x1e, 0x1, 0xd, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x304, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2d8, 0x2, [@TCA_U32_SEL={0x2d4, 0x5, {0xb, 0x8, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0xc000000, 0x9, 0x2, 0x3}, {0x0, 0x8000, 0x1, 0x32ec}, {0x9, 0x8, 0x7, 0x4}, {0x4, 0x2, 0xc5f5, 0x7fffffff}, {0x9, 0x8001, 0x7, 0x1c00}, {0xfcb5, 0x0, 0x0, 0xc551}, {0x9, 0xffffffe1, 0xd, 0x6}, {0x9, 0x0, 0x80000001, 0x4}, {0x8, 0xa48e, 0x7d39876a, 0x7}, {0x2, 0x100, 0x6, 0x8}, {0xffff, 0x7, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xfffffffa, 0x3, 0x4, 0x3}, {0xffffffff, 0x6, 0x80, 0x4}, {0x4, 0x2, 0x4, 0xa}, {0x2, 0x0, 0xf53, 0x8}, {0x8, 0xe, 0x7, 0xc793}, {0x4, 0x7, 0xe0ed, 0x3}, {0xe, 0x9, 0xbb, 0x8}, {0x80, 0xa0, 0x1b09, 0x5}, {0x6, 0x7, 0x7ff, 0x9}, {0x8, 0xb38, 0x1, 0x8}, {0x400, 0x5b, 0x8}, {0x2, 0x7, 0x0, 0x4}, {0xc8f, 0x7}, {0xfffffff0, 0x80000001, 0x1, 0x6}, {0x2, 0x2, 0x10, 0x880}, {0x20, 0xf0, 0x3134, 0x8}, {0x6422, 0x6, 0x0, 0x4}, {0x8, 0xb56, 0x1003}, {0xfe8c, 0xea81aae, 0xff, 0x2}, {0x6, 0x4, 0x4d, 0x653}, {0x1, 0xe7, 0x401, 0xd}, {0x0, 0xffffff50, 0xfffffff9, 0x2}, {0x8, 0x9, 0x5, 0x9}, {0x3, 0x3, 0xfffffff8, 0x1}, {0x0, 0x1, 0x464, 0x7fffffff}, {0x1ff, 0x0, 0x5, 0x5}, {0x3ca7, 0x3, 0x2, 0x4}, {0x4, 0x8c, 0xfffffffd, 0x2}, {0x1, 0x350f, 0x4, 0x5}, {0x1431, 0x10000, 0x52d, 0xfff}, {0x7, 0x3, 0xe, 0x6}, {0x100, 0x5, 0x401, 0x1779}]}}]}}]}, 0x304}}, 0x24040084) syz_read_part_table(0x5c7, &(0x7f0000000600)="$eJzs2z9oE1gcB/Bf1OChx7k4OVkHJxfF0QynJFFRCPG6yA0KioiBgwhChEBAB82gmKF07FIKWfpnapqhw9HSQudSCtej0KHT0S6FLs1R+sotN/T6Dw4/Hwg/3nvfl19+Q8YX/K+dib96vV4mInrn//vt/na+8OBq6efyLxGZ+DUi+n7/aXz3JJMS+996La1X0np46EL38+b9bHv5ydb1ZzPNM+m8kT4XRzr9Rx6OEzeam7304WO1+KWWe71UrK99Wlx4PLaRL3ceNVvjD7P3XqTcXKrnUn0btXgfb+J5VKISL6N6TP0H26s3d64U25Ov7mwXul+nb6Vc6YhzHrT/u75vT1v1uzcmLg/crk3Nl9fP7uUqh/h3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+kZzs5c+fKwWv9Ryr5eK9bVPiwuPxzby5c6jZmv8Yfbei5SbS/Vcqm+jFu/jTTyPSlTiZVSPoX806muD7dWbO1eK7clXd7YL3a/Tt1KudMQ5D9J/d/53fd+etup3b0xcHrhdm5ovr5/dy1XO/+v1zAn9LAAAAAAAAAAAAAAAAAAAAL4z+cKDq6U//ln/9uP05G7tpffu+w/cr6W6kvaHhy50P2/ez7aXn2xdfzbT/DPtN36IaETExZFO/+lNwWH9HQAA//+Qj5Ta") sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000007340)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x2000}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, {0x0, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x2f}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffe9e}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0x8c}}, 0x0) 237.972359ms ago: executing program 3 (id=1678): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0xc800, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0x300, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x801) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5597c7114de75d6a, 0x0, 0x0, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000040)={@empty, @multicast2}, &(0x7f0000000080)=0x8) 137.174878ms ago: executing program 2 (id=1679): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="187e46000000800000000000000000000000950000030000aed444157d4c2dd70c1807c19981de1ce72338727dcbeba324a88bfa20f9a2353a88288f6bb977216f8e07fee80bce1698cd81d23208121462e7f2c754a5cfdc18064ee7a9ab9b14fbec38e38ad2a5c09d1dfa63a951543189e7ccf607472b69c3"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x108, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe149}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) socket$inet(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0)=0x189, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x2411, 0x4) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 119.54774ms ago: executing program 7 (id=1680): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000002, 0x8504, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, r0, 0x7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, 0x0) writev(r6, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r8 = dup2(r7, r7) write$binfmt_script(r7, &(0x7f0000000800)={'#! ', './file0', [], 0xa, "8292eca6323326cc73608515712caf8554c99f20d74b0e46a394684746d6f355dab084363d59111100f147345926e9503a35ed2e8b9126b4fd9e894d4477034ae1bfd96f7c8613db757594c3e5f3a57a465f3959e1e5e9b2ff4356021ad48c"}, 0x6a) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 61.968765ms ago: executing program 2 (id=1681): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002500)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB, @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESOCT=r0]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r4, 0x0, 0x0, 0x8800000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000001150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000002000000000a"], 0xb8}}, 0x40010) set_mempolicy_home_node(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000362000/0x3000)=nil, 0x3000, &(0x7f0000000000)='*(^+\x00') fchdir(r7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x81, @empty, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x1, 0x4}}}, 0x118) 0s ago: executing program 5 (id=1682): unshare(0x60480) r0 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) epoll_wait(r0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000001000)={@rand_addr, @dev}, &(0x7f0000000040)=0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): ous mode [ 189.355683][ T7071] syzkaller0: entered allmulticast mode [ 189.369358][ T7061] tipc: Resetting bearer [ 189.383404][ T7060] tipc: Resetting bearer [ 189.401631][ T7060] tipc: Disabling bearer [ 189.441173][ T7075] EXT4-fs: Ignoring removed nobh option [ 189.497342][ T7075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.540953][ T3507] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 189.566903][ T3507] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.596349][ T7075] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.839292][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.248012][ T7101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.407576][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.540123][ T7108] set_capacity_and_notify: 2 callbacks suppressed [ 190.540220][ T7108] loop5: detected capacity change from 0 to 1024 [ 190.593947][ T7108] ext4: Bad value for 'resuid' [ 190.603883][ T7108] ext4: Bad value for 'resuid' [ 190.764392][ T5138] Bluetooth: hci0: sending frame failed (-49) [ 190.772104][ T3542] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 190.867261][ T7113] x_tables: duplicate underflow at hook 1 [ 190.874316][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.953'. [ 190.955237][ T7108] syzkaller0: entered promiscuous mode [ 190.979494][ T7108] syzkaller0: entered allmulticast mode [ 191.018026][ T7108] x_tables: duplicate underflow at hook 1 [ 191.165312][ T7120] loop1: detected capacity change from 0 to 128 [ 191.194647][ T7120] syz.1.955: attempt to access beyond end of device [ 191.194647][ T7120] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 191.240477][ T7120] syz.1.955: attempt to access beyond end of device [ 191.240477][ T7120] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 191.269036][ T7120] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 191.289647][ T7120] syz.1.955: attempt to access beyond end of device [ 191.289647][ T7120] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 191.333356][ T7120] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 191.373358][ T7120] syz.1.955: attempt to access beyond end of device [ 191.373358][ T7120] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 191.433478][ T7120] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 191.469632][ T7120] syz.1.955: attempt to access beyond end of device [ 191.469632][ T7120] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 191.514187][ T7120] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 191.544093][ T7120] syz.1.955: attempt to access beyond end of device [ 191.544093][ T7120] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 191.587271][ T7120] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 191.614807][ T7122] syz.1.955: attempt to access beyond end of device [ 191.614807][ T7122] loop1: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 192.180687][ T7136] loop1: detected capacity change from 0 to 1024 [ 192.288724][ T7136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.315513][ T7136] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.347876][ T7136] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.959: lblock 3 mapped to illegal pblock 3 (length 3) [ 192.369482][ T7136] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 192.382158][ T7136] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.382158][ T7136] [ 192.393896][ T7136] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.959: bg 0: block 112: padding at end of block bitmap is not set [ 192.409691][ T7136] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.959: lblock 0 mapped to illegal pblock 0 (length 3) [ 192.431960][ T7136] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 192.444661][ T7136] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.444661][ T7136] [ 192.471702][ T69] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 4: comm kworker/u8:4: lblock 4 mapped to illegal pblock 4 (length 2) [ 192.486545][ T69] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 192.499189][ T69] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.499189][ T69] [ 192.509657][ T69] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 192.519723][ T7143] loop5: detected capacity change from 0 to 4096 [ 192.525355][ T69] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 192.543096][ T69] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.543096][ T69] [ 192.554290][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.585881][ T7143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.656864][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.131656][ T7165] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 194.143429][ T7165] bond1 (unregistering): Released all slaves [ 194.237938][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.246772][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.354311][ T7171] loop7: detected capacity change from 0 to 1024 [ 194.368612][ T7171] EXT4-fs: Ignoring removed orlov option [ 194.397481][ T7171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.740838][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.562556][ T7190] loop3: detected capacity change from 0 to 128 [ 196.577721][ T7190] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.646203][ T7190] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.173377][ T7208] FAULT_INJECTION: forcing a failure. [ 197.173377][ T7208] name failslab, interval 1, probability 0, space 0, times 0 [ 197.192350][ T7208] CPU: 1 UID: 0 PID: 7208 Comm: syz.1.980 Tainted: G W syzkaller #0 PREEMPT(full) [ 197.192469][ T7208] Tainted: [W]=WARN [ 197.192478][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.192494][ T7208] Call Trace: [ 197.192503][ T7208] [ 197.192513][ T7208] __dump_stack+0x1d/0x30 [ 197.192540][ T7208] dump_stack_lvl+0x95/0xd0 [ 197.192600][ T7208] dump_stack+0x15/0x1b [ 197.192702][ T7208] should_fail_ex+0x263/0x280 [ 197.192736][ T7208] should_failslab+0x8c/0xb0 [ 197.192762][ T7208] __kmalloc_noprof+0xb8/0x4e0 [ 197.192861][ T7208] ? do_handle_open+0x3a9/0x790 [ 197.192903][ T7208] do_handle_open+0x3a9/0x790 [ 197.192934][ T7208] __x64_sys_open_by_handle_at+0x44/0x50 [ 197.192975][ T7208] x64_sys_call+0x153d/0x3020 [ 197.193029][ T7208] do_syscall_64+0x12c/0x370 [ 197.193065][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.193087][ T7208] RIP: 0033:0x7f019b4cc629 [ 197.193174][ T7208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.193192][ T7208] RSP: 002b:00007f0199f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 197.193212][ T7208] RAX: ffffffffffffffda RBX: 00007f019b745fa0 RCX: 00007f019b4cc629 [ 197.193226][ T7208] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 197.193289][ T7208] RBP: 00007f0199f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 197.193306][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.193320][ T7208] R13: 00007f019b746038 R14: 00007f019b745fa0 R15: 00007ffda093d828 [ 197.193423][ T7208] [ 197.398480][ T7206] loop3: detected capacity change from 0 to 1024 [ 197.448446][ T7206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 197.475559][ T7206] System zones: 0-1, 3-36 [ 197.514927][ T7206] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.979: bad orphan inode 134217728 [ 197.562745][ T7206] loop3: lost filesystem error report for type 5 error -117 [ 197.565435][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 197.579263][ C1] EXT4-fs (loop3): initial error at time 1771944223: ext4_orphan_get:1417 [ 197.587828][ C1] EXT4-fs (loop3): last error at time 1771944223: ext4_orphan_get:1417 [ 197.618563][ T7206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.797443][ T7215] loop1: detected capacity change from 0 to 512 [ 197.957395][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.069154][ T7230] loop1: detected capacity change from 0 to 128 [ 198.089536][ T7227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7227 comm=syz.3.986 [ 198.286940][ T7238] netlink: 68 bytes leftover after parsing attributes in process `syz.1.990'. [ 198.381964][ T7242] loop2: detected capacity change from 0 to 128 [ 198.398971][ T7242] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.476186][ T7238] netlink: 64 bytes leftover after parsing attributes in process `syz.1.990'. [ 198.522362][ T7242] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.830611][ T7247] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 198.857758][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 198.876674][ T7247] bond1 (unregistering): Released all slaves [ 198.942011][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.969542][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.060490][ T7255] loop3: detected capacity change from 0 to 512 [ 199.094701][ T7256] loop2: detected capacity change from 0 to 1024 [ 199.113380][ T7255] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.993: bad orphan inode 15 [ 199.133719][ T7255] loop3: lost filesystem error report for type 5 error -117 [ 199.133931][ T7255] ext4_test_bit(bit=14, block=5) = 0 [ 199.141467][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 199.141522][ C0] EXT4-fs (loop3): initial error at time 1771944225: ext4_orphan_get:1417 [ 199.141587][ C0] EXT4-fs (loop3): last error at time 1771944225: ext4_orphan_get:1417 [ 199.176135][ T7256] EXT4-fs: inline encryption not supported [ 199.241472][ T7256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.257473][ T7255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.283555][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.422528][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.832716][ T7268] loop2: detected capacity change from 0 to 128 [ 199.866006][ T7268] syz.2.997: attempt to access beyond end of device [ 199.866006][ T7268] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 199.936725][ T7268] syz.2.997: attempt to access beyond end of device [ 199.936725][ T7268] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 199.984385][ T7268] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 200.014376][ T7268] syz.2.997: attempt to access beyond end of device [ 200.014376][ T7268] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 200.056234][ T7268] syz.2.997: attempt to access beyond end of device [ 200.056234][ T7268] loop2: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 200.085584][ T7268] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 200.439204][ T7275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.482396][ T7275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.522389][ T7273] loop3: detected capacity change from 0 to 1024 [ 200.555680][ T7275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.575682][ T7278] loop5: detected capacity change from 0 to 128 [ 200.587381][ T7273] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 200.609558][ T7273] System zones: 0-1, 3-36 [ 200.628629][ T7275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.644254][ T7273] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.996: bad orphan inode 134217728 [ 200.698346][ T7273] loop3: lost filesystem error report for type 5 error -117 [ 200.715445][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 200.729227][ C1] EXT4-fs (loop3): initial error at time 1771944226: ext4_orphan_get:1417 [ 200.737795][ C1] EXT4-fs (loop3): last error at time 1771944226: ext4_orphan_get:1417 [ 200.749123][ T7273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.818060][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.835757][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.865654][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.873944][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.968806][ T28] audit: type=1400 audit(1771944227.006:1004): avc: denied { write } for pid=7284 comm="syz.2.1003" lport=33410 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 201.066003][ T28] audit: type=1400 audit(1771944227.036:1005): avc: denied { setopt } for pid=7284 comm="syz.2.1003" lport=33410 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 201.421177][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.627198][ T82] kworker/u8:5: attempt to access beyond end of device [ 201.627198][ T82] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 201.655692][ T82] kworker/u8:5: attempt to access beyond end of device [ 201.655692][ T82] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 201.741541][ T82] kworker/u8:5: attempt to access beyond end of device [ 201.741541][ T82] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 201.775931][ T82] kworker/u8:5: attempt to access beyond end of device [ 201.775931][ T82] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 201.858215][ T82] kworker/u8:5: attempt to access beyond end of device [ 201.858215][ T82] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 201.879970][ T7283] set_capacity_and_notify: 1 callbacks suppressed [ 201.879995][ T7283] loop5: detected capacity change from 0 to 1024 [ 201.900230][ T82] kworker/u8:5: attempt to access beyond end of device [ 201.900230][ T82] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 201.949316][ T7302] loop3: detected capacity change from 0 to 512 [ 201.961964][ T7283] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 201.980151][ T7283] System zones: 0-1, 3-36 [ 202.002877][ T7302] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 202.071034][ T7283] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1002: bad orphan inode 134217728 [ 202.105981][ T7283] loop5: lost filesystem error report for type 5 error -117 [ 202.108406][ T7305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7305 comm=syz.2.1006 [ 202.116926][ T7283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.448015][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.637814][ T7322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1014'. [ 202.695794][ T28] audit: type=1400 audit(1771944228.736:1006): avc: denied { append } for pid=7324 comm="syz.7.1015" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.750461][ T7320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7320 comm=syz.5.1013 [ 202.765472][ T28] audit: type=1400 audit(1771944228.766:1007): avc: denied { setattr } for pid=7325 comm="syz.1.1016" name="[io_uring]" dev="anon_inodefs" ino=17198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 202.814265][ T7328] EXT4-fs (loop1): unable to read superblock [ 202.826614][ T28] audit: type=1400 audit(1771944228.856:1008): avc: denied { write } for pid=7325 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.134448][ T7339] loop1: detected capacity change from 0 to 512 [ 203.155932][ T7339] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 203.370077][ T7342] loop2: detected capacity change from 0 to 1024 [ 203.432275][ T7342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 203.465344][ T7342] System zones: 0-1, 3-36 [ 203.504913][ T7342] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1021: bad orphan inode 134217728 [ 203.538085][ T7342] loop2: lost filesystem error report for type 5 error -117 [ 203.541691][ T7342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.053848][ T7333] loop7: detected capacity change from 0 to 1024 [ 204.091261][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.194425][ T7333] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 204.204808][ T7333] System zones: 0-1, 3-36 [ 204.219716][ T7333] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1018: bad orphan inode 134217728 [ 204.231514][ T7333] loop7: lost filesystem error report for type 5 error -117 [ 204.241788][ T7333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.385338][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.538734][ T7356] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1024'. [ 204.758476][ T7335] loop5: detected capacity change from 0 to 1024 [ 204.952653][ T7335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 204.998847][ T7335] System zones: 0-1, 3-36 [ 205.067913][ T7335] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1019: bad orphan inode 134217728 [ 205.132738][ T7335] loop5: lost filesystem error report for type 5 error -117 [ 205.135560][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 205.150037][ C0] EXT4-fs (loop5): initial error at time 1771944231: ext4_orphan_get:1417 [ 205.158958][ C0] EXT4-fs (loop5): last error at time 1771944231: ext4_orphan_get:1417 [ 205.357244][ T7335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.789067][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.972049][ T28] audit: type=1400 audit(1771944232.006:1009): avc: denied { bind } for pid=7401 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 206.085496][ T7407] loop2: detected capacity change from 0 to 512 [ 206.100576][ T7407] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.141976][ T7407] EXT4-fs (loop2): 1 truncate cleaned up [ 206.154814][ T7407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.472018][ T7421] loop3: detected capacity change from 0 to 1024 [ 206.488940][ T7421] EXT4-fs: Ignoring removed orlov option [ 206.537435][ T7421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.581124][ T7422] mmap: syz.2.1034 (7422) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.598493][ T7429] loop5: detected capacity change from 0 to 512 [ 206.655533][ T7429] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 206.767355][ T28] audit: type=1400 audit(1771944232.806:1010): avc: denied { setattr } for pid=7433 comm="syz.1.1039" name="SCTPv6" dev="sockfs" ino=17316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.880573][ T28] audit: type=1326 audit(1771944232.916:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b4cc629 code=0x7ffc0000 [ 206.950634][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.954601][ T28] audit: type=1326 audit(1771944232.946:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f019b4cc629 code=0x7ffc0000 [ 207.047088][ T7438] loop3: detected capacity change from 0 to 128 [ 207.055378][ T28] audit: type=1326 audit(1771944232.946:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b4cc629 code=0x7ffc0000 [ 207.055530][ T28] audit: type=1326 audit(1771944232.946:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f019b48cece code=0x7ffc0000 [ 207.055598][ T28] audit: type=1326 audit(1771944232.956:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f019b48cece code=0x7ffc0000 [ 207.055698][ T28] audit: type=1326 audit(1771944232.956:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f019b48cece code=0x7ffc0000 [ 207.055728][ T28] audit: type=1326 audit(1771944232.956:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b4cc629 code=0x7ffc0000 [ 207.055800][ T28] audit: type=1326 audit(1771944232.976:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f019b4cc629 code=0x7ffc0000 [ 207.055828][ T28] audit: type=1326 audit(1771944232.976:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.1.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b4cc629 code=0x7ffc0000 [ 207.138213][ T7438] bio_check_eod: 106 callbacks suppressed [ 207.138238][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.138238][ T7438] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 207.138750][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.138750][ T7438] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 207.138787][ T7438] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 207.139045][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.139045][ T7438] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 207.139883][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.139883][ T7438] loop3: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 207.139915][ T7438] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 207.141084][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.141084][ T7438] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 207.141600][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.141600][ T7438] loop3: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 207.141703][ T7438] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 207.142131][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.142131][ T7438] loop3: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 207.143224][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.143224][ T7438] loop3: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 207.143257][ T7438] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 207.143919][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.143919][ T7438] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 207.144435][ T7438] syz.3.1040: attempt to access beyond end of device [ 207.144435][ T7438] loop3: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 207.144466][ T7438] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 207.147372][ T7438] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 207.153688][ T7438] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 207.569457][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.440136][ T7461] loop3: detected capacity change from 0 to 512 [ 208.491821][ T7461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.561982][ T7461] EXT4-fs (loop3): 1 truncate cleaned up [ 208.569735][ T7461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.615764][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.836471][ T7486] loop7: detected capacity change from 0 to 128 [ 210.887712][ T7499] loop1: detected capacity change from 0 to 128 [ 210.909906][ T7498] loop5: detected capacity change from 0 to 4096 [ 210.922847][ T7499] FAT-fs (loop1): Directory bread(block 32) failed [ 210.927747][ T7486] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.929970][ T7499] FAT-fs (loop1): Directory bread(block 33) failed [ 210.930037][ T7499] FAT-fs (loop1): Directory bread(block 34) failed [ 210.930060][ T7499] FAT-fs (loop1): Directory bread(block 35) failed [ 210.930160][ T7499] FAT-fs (loop1): Directory bread(block 36) failed [ 210.968979][ T7499] FAT-fs (loop1): Directory bread(block 37) failed [ 210.979500][ T7498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.985708][ T7499] FAT-fs (loop1): Directory bread(block 38) failed [ 211.000541][ T7486] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.013660][ T7499] FAT-fs (loop1): Directory bread(block 39) failed [ 211.034642][ T7499] FAT-fs (loop1): Directory bread(block 40) failed [ 211.045949][ T7499] FAT-fs (loop1): Directory bread(block 41) failed [ 211.065338][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.148909][ T5452] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.249222][ T7520] loop7: detected capacity change from 0 to 128 [ 212.528270][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 212.528321][ T28] audit: type=1400 audit(1771944238.566:1031): avc: denied { mount } for pid=7519 comm="syz.7.1064" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 212.647478][ T12] bio_check_eod: 5 callbacks suppressed [ 212.647496][ T12] kworker/u8:0: attempt to access beyond end of device [ 212.647496][ T12] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 213.528214][ T7543] loop5: detected capacity change from 0 to 128 [ 213.542574][ T7543] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.557689][ T7543] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.429117][ T7559] loop7: detected capacity change from 0 to 128 [ 214.727945][ T7567] loop5: detected capacity change from 0 to 512 [ 214.759089][ T7567] EXT4-fs: Ignoring removed nobh option [ 214.819120][ T7567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.860965][ T7567] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.082808][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.161907][ T7575] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 215.234390][ T7575] bond2 (unregistering): Released all slaves [ 215.273992][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.285755][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.410683][ T28] audit: type=1400 audit(1771944241.446:1032): avc: denied { unmount } for pid=7592 comm="syz.2.1089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 215.480765][ T7596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1090'. [ 215.744602][ T7604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1093'. [ 216.199056][ T7616] FAULT_INJECTION: forcing a failure. [ 216.199056][ T7616] name failslab, interval 1, probability 0, space 0, times 0 [ 216.211900][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.5.1097 Tainted: G W syzkaller #0 PREEMPT(full) [ 216.211946][ T7616] Tainted: [W]=WARN [ 216.211955][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.211972][ T7616] Call Trace: [ 216.211981][ T7616] [ 216.211989][ T7616] __dump_stack+0x1d/0x30 [ 216.212017][ T7616] dump_stack_lvl+0x95/0xd0 [ 216.212069][ T7616] dump_stack+0x15/0x1b [ 216.212098][ T7616] should_fail_ex+0x263/0x280 [ 216.212126][ T7616] should_failslab+0x8c/0xb0 [ 216.212149][ T7616] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 216.212178][ T7616] ? __alloc_skb+0x2d6/0x690 [ 216.212201][ T7616] __alloc_skb+0x2d6/0x690 [ 216.212225][ T7616] ? __alloc_skb+0x200/0x690 [ 216.212254][ T7616] netlink_alloc_large_skb+0xbf/0xf0 [ 216.212346][ T7616] netlink_sendmsg+0x40c/0x6f0 [ 216.212396][ T7616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.212457][ T7616] ____sys_sendmsg+0x5af/0x600 [ 216.212487][ T7616] ___sys_sendmsg+0x195/0x1e0 [ 216.212562][ T7616] __x64_sys_sendmsg+0xd4/0x160 [ 216.212645][ T7616] x64_sys_call+0x194c/0x3020 [ 216.212706][ T7616] do_syscall_64+0x12c/0x370 [ 216.212743][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.212771][ T7616] RIP: 0033:0x7fa550f9c629 [ 216.212791][ T7616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.212810][ T7616] RSP: 002b:00007fa54f9f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.212854][ T7616] RAX: ffffffffffffffda RBX: 00007fa551215fa0 RCX: 00007fa550f9c629 [ 216.212870][ T7616] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 216.212885][ T7616] RBP: 00007fa54f9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.212906][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.212922][ T7616] R13: 00007fa551216038 R14: 00007fa551215fa0 R15: 00007ffd586ba528 [ 216.212957][ T7616] [ 216.789404][ T7633] loop3: detected capacity change from 0 to 512 [ 216.829576][ T7633] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 216.841606][ T28] audit: type=1400 audit(1771944242.876:1033): avc: denied { getopt } for pid=7634 comm="syz.5.1106" lport=42526 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 216.938882][ T7638] loop5: detected capacity change from 0 to 164 [ 216.978555][ T7638] Unsupported NM flag settings (240) [ 216.990777][ T7638] Unsupported NM flag settings (240) [ 217.806246][ T28] audit: type=1400 audit(1771944243.846:1034): avc: denied { create } for pid=7646 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 217.867895][ T28] audit: type=1400 audit(1771944243.866:1035): avc: denied { write } for pid=7646 comm="syz.2.1110" path="socket:[18669]" dev="sockfs" ino=18669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 217.921607][ T28] audit: type=1400 audit(1771944243.876:1036): avc: denied { mounton } for pid=7646 comm="syz.2.1110" path="/249/file0" dev="tmpfs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.654831][ T28] audit: type=1400 audit(1771944245.686:1037): avc: denied { sys_module } for pid=7664 comm="syz.3.1117" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 219.687095][ T7665] loop3: detected capacity change from 0 to 512 [ 219.710780][ T7665] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1117: bad orphan inode 15 [ 219.721197][ T7665] loop3: lost filesystem error report for type 5 error -117 [ 219.721295][ T7665] ext4_test_bit(bit=14, block=5) = 0 [ 219.728632][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 219.728663][ C1] EXT4-fs (loop3): initial error at time 1771944245: ext4_orphan_get:1417 [ 219.728693][ C1] EXT4-fs (loop3): last error at time 1771944245: ext4_orphan_get:1417 [ 219.816357][ T7665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.944952][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.033839][ T7685] loop3: detected capacity change from 0 to 512 [ 220.046635][ T7685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.069602][ T7685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.120389][ T7685] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.163993][ T7692] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 220.212044][ T7692] bond1 (unregistering): Released all slaves [ 220.294278][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.325135][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.430125][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.493858][ T7701] loop3: detected capacity change from 0 to 1024 [ 220.505831][ T7701] EXT4-fs: Ignoring removed orlov option [ 220.612249][ T7701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.214128][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.524202][ T28] audit: type=1401 audit(1771944247.546:1038): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 223.042031][ T7738] loop1: detected capacity change from 0 to 4096 [ 223.062616][ T7738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.120924][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.541606][ T7757] loop7: detected capacity change from 0 to 512 [ 223.552885][ T7757] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1144: bad orphan inode 15 [ 223.568013][ T7757] loop7: lost filesystem error report for type 5 error -117 [ 223.568678][ T7757] ext4_test_bit(bit=14, block=5) = 0 [ 223.576069][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 223.576089][ C0] EXT4-fs (loop7): initial error at time 1771944249: ext4_orphan_get:1417 [ 223.576125][ C0] EXT4-fs (loop7): last error at time 1771944249: ext4_orphan_get:1417 [ 223.605939][ T7757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.667956][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.358433][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 224.373096][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 224.385875][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 224.398432][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 224.668910][ T7794] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 224.686077][ T7788] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 225.473753][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1159'. [ 225.561809][ T28] audit: type=1400 audit(1771944251.596:1039): avc: denied { create } for pid=7806 comm="syz.3.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.589564][ T28] audit: type=1400 audit(1771944251.596:1040): avc: denied { setopt } for pid=7806 comm="syz.3.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.641900][ T7814] netlink: 'syz.3.1158': attribute type 10 has an invalid length. [ 225.730473][ T7816] loop5: detected capacity change from 0 to 1024 [ 225.759072][ T7816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 225.770789][ T7816] System zones: 0-1, 3-36 [ 225.778246][ T7816] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1163: bad orphan inode 134217728 [ 225.789108][ T7816] loop5: lost filesystem error report for type 5 error -117 [ 225.789645][ T7816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.458095][ T7824] loop1: detected capacity change from 0 to 512 [ 226.501865][ T7824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.520615][ T7824] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.532554][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.566407][ T28] audit: type=1400 audit(1771944252.606:1041): avc: denied { mounton } for pid=7823 comm="syz.1.1165" path="/212/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.590375][ T28] audit: type=1400 audit(1771944252.606:1042): avc: denied { mount } for pid=7823 comm="syz.1.1165" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 226.620577][ T28] audit: type=1400 audit(1771944252.656:1043): avc: denied { ioctl } for pid=7823 comm="syz.1.1165" path="/212/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 ioctlcmd=0x7004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 226.666859][ T28] audit: type=1400 audit(1771944252.656:1044): avc: denied { remount } for pid=7823 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 226.770033][ T7838] loop7: detected capacity change from 0 to 512 [ 226.788694][ T7838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 226.802290][ T7838] System zones: 1-12 [ 226.814648][ T7838] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #12: comm syz.7.1170: missing EA_INODE flag [ 226.828180][ T7838] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 226.828371][ T7838] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1170: error while reading EA inode 12 err=-117 [ 226.830999][ T28] audit: type=1400 audit(1771944252.876:1045): avc: denied { rmdir } for pid=3320 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.837555][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 226.837573][ C0] EXT4-fs (loop7): initial error at time 1771944252: ext4_xattr_inode_iget:441: inode 12 [ 226.850257][ T28] audit: type=1400 audit(1771944252.876:1046): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 226.872523][ C0] [ 226.872531][ C0] EXT4-fs (loop7): last error at time 1771944252: ext4_xattr_inode_iget:441: inode 12 [ 226.878336][ T7838] loop7: lost filesystem error report for type 5 error -117 [ 226.879441][ T7838] EXT4-fs (loop7): 1 orphan inode deleted [ 226.934830][ T7838] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.951691][ T7838] x_tables: duplicate underflow at hook 1 [ 226.962218][ T28] audit: type=1400 audit(1771944253.006:1047): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 226.991128][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.991149][ T28] audit: type=1400 audit(1771944253.026:1048): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 227.080540][ T7846] loop1: detected capacity change from 0 to 128 [ 227.090123][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.217633][ T7194] kworker/u8:10: attempt to access beyond end of device [ 227.217633][ T7194] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 227.742534][ T7845] syz.1.1172 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 227.756283][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.1.1172 Tainted: G W syzkaller #0 PREEMPT(full) [ 227.756392][ T7845] Tainted: [W]=WARN [ 227.756400][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.756417][ T7845] Call Trace: [ 227.756425][ T7845] [ 227.756435][ T7845] __dump_stack+0x1d/0x30 [ 227.756527][ T7845] dump_stack_lvl+0x95/0xd0 [ 227.756558][ T7845] dump_stack+0x15/0x1b [ 227.756601][ T7845] dump_header+0x80/0x240 [ 227.756628][ T7845] oom_kill_process+0x295/0x350 [ 227.756653][ T7845] out_of_memory+0x97d/0xb80 [ 227.756745][ T7845] try_charge_memcg+0x62e/0xa10 [ 227.756785][ T7845] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 227.756896][ T7845] __swap_cache_prepare_and_add+0x386/0x530 [ 227.756941][ T7845] swap_cache_alloc_folio+0xa2/0x120 [ 227.756983][ T7845] swap_cluster_readahead+0x26e/0x3d0 [ 227.757067][ T7845] swapin_readahead+0xde/0x840 [ 227.757119][ T7845] ? _raw_spin_unlock+0x9/0x30 [ 227.757184][ T7845] ? swap_put_entries_cluster+0x385/0x3a0 [ 227.757231][ T7845] ? swap_put_entries_cluster+0xa1/0x3a0 [ 227.757270][ T7845] ? __rcu_read_unlock+0x4e/0x70 [ 227.757294][ T7845] ? swap_cache_get_folio+0x26f/0x280 [ 227.757347][ T7845] do_swap_page+0x309/0x2210 [ 227.757385][ T7845] ? css_rstat_updated+0xbb/0x280 [ 227.757407][ T7845] ? __rcu_read_lock+0x36/0x50 [ 227.757426][ T7845] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 227.757532][ T7845] handle_mm_fault+0xb40/0x3020 [ 227.757571][ T7845] ? vma_start_read+0x1c7/0x2c0 [ 227.757619][ T7845] do_user_addr_fault+0x62f/0x1050 [ 227.757664][ T7845] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 227.757704][ T7845] ? trace_page_fault_user+0x1f/0xe0 [ 227.757826][ T7845] exc_page_fault+0x62/0xa0 [ 227.757858][ T7845] asm_exc_page_fault+0x26/0x30 [ 227.757883][ T7845] RIP: 0033:0x7f019b4877b4 [ 227.757904][ T7845] Code: ff ff ff f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 5d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca <64> 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ee 4e 29 00 00 [ 227.757971][ T7845] RSP: 002b:00007ffda093d920 EFLAGS: 00010246 [ 227.758004][ T7845] RAX: 00000000fffffffa RBX: 00007f019b745fa0 RCX: 0000000000000000 [ 227.758017][ T7845] RDX: 00007ffda093d960 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.758030][ T7845] RBP: 00007f019b747da0 R08: 0000000000000000 R09: 0000000000000000 [ 227.758045][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000037a28 [ 227.758057][ T7845] R13: 00007f019b74609c R14: 0000000000037779 R15: 00007f019b746090 [ 227.758076][ T7845] [ 227.758083][ T7845] memory: usage 307200kB, limit 307200kB, failcnt 505 [ 228.011906][ T7845] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 228.019996][ T7845] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 228.027570][ T7845] Memory cgroup stats for /syz1: [ 228.027863][ T7845] cache 8192 [ 228.036080][ T7845] rss 0 [ 228.038940][ T7845] shmem 0 [ 228.041900][ T7845] mapped_file 0 [ 228.045634][ T7845] dirty 0 [ 228.049465][ T7845] writeback 4096 [ 228.053023][ T7845] workingset_refault_anon 127 [ 228.057968][ T7845] workingset_refault_file 3798 [ 228.062846][ T7845] swap 270336 [ 228.066339][ T7845] swapcached 4378624 [ 228.070263][ T7845] pgpgin 232318 [ 228.073747][ T7845] pgpgout 232314 [ 228.077346][ T7845] pgfault 201515 [ 228.080903][ T7845] pgmajfault 103 [ 228.084463][ T7845] inactive_anon 4096 [ 228.088416][ T7845] active_anon 4096 [ 228.092159][ T7845] inactive_file 0 [ 228.095838][ T7845] active_file 8192 [ 228.099568][ T7845] unevictable 0 [ 228.103041][ T7845] hierarchical_memory_limit 314572800 [ 228.109244][ T7845] hierarchical_memsw_limit 9223372036854771712 [ 228.115677][ T7845] total_cache 8192 [ 228.119812][ T7845] total_rss 0 [ 228.123153][ T7845] total_shmem 0 [ 228.126787][ T7845] total_mapped_file 0 [ 228.130790][ T7845] total_dirty 0 [ 228.134262][ T7845] total_writeback 4096 [ 228.142144][ T7845] total_workingset_refault_anon 127 [ 228.156133][ T7845] total_workingset_refault_file 3798 [ 228.161479][ T7845] total_swap 270336 [ 228.165508][ T7845] total_swapcached 4378624 [ 228.169999][ T7845] total_pgpgin 232318 [ 228.174042][ T7845] total_pgpgout 232314 [ 228.178547][ T7845] total_pgfault 201515 [ 228.182869][ T7845] total_pgmajfault 103 [ 228.187425][ T7845] total_inactive_anon 4096 [ 228.191905][ T7845] total_active_anon 4096 [ 228.196217][ T7845] total_inactive_file 0 [ 228.200688][ T7845] total_active_file 8192 [ 228.205163][ T7845] total_unevictable 0 [ 228.209739][ T7845] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1172,pid=7845,uid=0 [ 228.224511][ T7845] Memory cgroup out of memory: Killed process 7845 (syz.1.1172) total-vm:94160kB, anon-rss:1228kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 228.406374][ T7885] netlink: 'syz.3.1184': attribute type 10 has an invalid length. [ 228.414581][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.421844][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.446356][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.453531][ T7885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.460912][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.468009][ T7885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.499181][ T7885] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 228.637813][ T7895] loop1: detected capacity change from 0 to 1024 [ 228.644972][ T7895] EXT4-fs: Ignoring removed orlov option [ 228.690673][ T7895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.037769][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.142219][ T7906] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 229.159331][ T7906] bond1 (unregistering): Released all slaves [ 229.267317][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.290293][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.511984][ T7920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1196'. [ 231.020554][ T7940] loop5: detected capacity change from 0 to 512 [ 231.132310][ T7944] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 231.235033][ T7951] loop5: detected capacity change from 0 to 512 [ 231.263472][ T7951] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 232.804295][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.836272][ T7982] bridge_slave_1: left allmulticast mode [ 232.842039][ T7982] bridge_slave_1: left promiscuous mode [ 232.865662][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.881845][ T7982] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 232.967179][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1223'. [ 232.980296][ T7990] loop7: detected capacity change from 0 to 1024 [ 232.996249][ T7990] EXT4-fs: inline encryption not supported [ 233.024921][ T7989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7989 comm=syz.2.1223 [ 233.026433][ T7990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.064675][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.127999][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 233.128013][ T28] audit: type=1326 audit(1771944259.166:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 233.199520][ T28] audit: type=1326 audit(1771944259.166:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 233.253653][ T28] audit: type=1326 audit(1771944259.206:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 233.304433][ T28] audit: type=1326 audit(1771944259.206:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 233.355478][ T28] audit: type=1326 audit(1771944259.206:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 233.412042][ T28] audit: type=1326 audit(1771944259.206:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 233.527652][ T28] audit: type=1326 audit(1771944259.206:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 233.617563][ T28] audit: type=1326 audit(1771944259.206:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 233.641092][ T28] audit: type=1326 audit(1771944259.206:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 233.665555][ T28] audit: type=1326 audit(1771944259.206:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.7.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 234.043474][ T8013] loop7: detected capacity change from 0 to 512 [ 234.086460][ T8013] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 234.152306][ T8013] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 234.172638][ T8013] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1230: Corrupt directory, running e2fsck is recommended [ 234.246984][ T8017] loop1: detected capacity change from 0 to 512 [ 234.280349][ T8017] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1219: bad orphan inode 15 [ 234.305725][ T8017] loop1: lost filesystem error report for type 5 error -117 [ 234.305882][ T8017] ext4_test_bit(bit=14, block=5) = 0 [ 234.318539][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 234.318558][ C0] EXT4-fs (loop1): initial error at time 1771944260: ext4_orphan_get:1417 [ 234.318588][ C0] EXT4-fs (loop1): last error at time 1771944260: ext4_orphan_get:1417 [ 234.354917][ T8013] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 234.387917][ T8013] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1230: corrupted in-inode xattr: invalid ea_ino [ 234.445700][ T8013] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.445982][ T8013] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1230: couldn't read orphan inode 15 (err -117) [ 234.467003][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 234.467028][ C0] EXT4-fs (loop7): initial error at time 1771944260: ext4_iget_extra_inode:5025: inode 15 [ 234.467057][ C0] EXT4-fs (loop7): last error at time 1771944260: ext4_iget_extra_inode:5025: inode 15 [ 234.476739][ T8017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.555848][ T8013] loop7: lost filesystem error report for type 5 error -117 [ 234.565170][ T8013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.656110][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.676150][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.803574][ T8028] tipc: Failed to remove unknown binding: 66,1,1/0:1980903943/1980903945 [ 234.834314][ T8028] tipc: Failed to remove unknown binding: 66,1,1/0:1980903943/1980903945 [ 235.366105][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 236.057902][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 236.730337][ T8075] loop5: detected capacity change from 0 to 1024 [ 236.885817][ T8075] EXT4-fs: Ignoring removed orlov option [ 236.941700][ T8077] loop1: detected capacity change from 0 to 512 [ 236.983459][ T8075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.030515][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.105553][ T8077] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.159938][ T8062] syz.3.1244 (8062) used greatest stack depth: 5432 bytes left [ 237.215447][ T8077] loop1: detected capacity change from 512 to 0 [ 237.363276][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.537280][ T8098] loop5: detected capacity change from 0 to 256 [ 237.656002][ T8100] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 237.784086][ T3320] EXT4-fs error (device loop1): ext4_get_inode_loc:4920: inode #2: block 34: comm syz-executor: unable to read itable block [ 237.812270][ T3320] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 237.831554][ T3320] EXT4-fs (loop1): I/O error while writing superblock [ 237.854488][ T3320] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: IO failure [ 237.863493][ T3320] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 237.881999][ T3320] EXT4-fs (loop1): I/O error while writing superblock [ 237.895430][ T3320] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 237.925442][ T3320] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 237.935443][ T3320] EXT4-fs (loop1): I/O error while writing superblock [ 237.958651][ T12] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4905: inode #18: block 34: comm kworker/u8:0: unable to read itable block [ 237.988719][ T12] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 238.006524][ T12] EXT4-fs (loop1): I/O error while writing superblock [ 238.019916][ T12] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4905: inode #2: block 34: comm kworker/u8:0: unable to read itable block [ 238.048300][ T12] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 238.056783][ T12] EXT4-fs (loop1): I/O error while writing superblock [ 238.064142][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.075681][ T3320] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 238.083999][ T3320] EXT4-fs (loop1): I/O error while writing superblock [ 238.093261][ T8081] Buffer I/O error on dev loop1, logical block 8, lost sync page write [ 238.299355][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 238.469733][ T8127] loop5: detected capacity change from 0 to 1024 [ 238.488265][ T8127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 238.502731][ T8127] System zones: 0-1, 3-36 [ 238.509316][ T8127] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1261: bad orphan inode 134217728 [ 238.535487][ T8127] loop5: lost filesystem error report for type 5 error -117 [ 238.536778][ T8127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.590765][ T12] bridge_slave_1: left allmulticast mode [ 238.602765][ T12] bridge_slave_1: left promiscuous mode [ 238.616977][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.675677][ T12] bridge_slave_0: left allmulticast mode [ 238.686553][ T12] bridge_slave_0: left promiscuous mode [ 238.698334][ T8132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8709 sclass=netlink_route_socket pid=8132 comm=syz.2.1263 [ 238.711470][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.751283][ T8136] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 238.868399][ T8140] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 238.918563][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.929781][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.940530][ T12] bond0 (unregistering): Released all slaves [ 238.960767][ T8140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 238.996707][ T12] tipc: Left network mode [ 238.996986][ T8112] chnl_net:caif_netlink_parms(): no params data found [ 239.026749][ T12] hsr_slave_0: left promiscuous mode [ 239.032697][ T12] hsr_slave_1: left promiscuous mode [ 239.039008][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.161299][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.171011][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 239.191454][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.256546][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 239.256641][ T28] audit: type=1400 audit(1771944265.296:1128): avc: denied { create } for pid=8168 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 239.336169][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.343479][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.350903][ T8112] bridge_slave_0: entered allmulticast mode [ 239.357681][ T8169] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1269'. [ 239.357821][ T8112] bridge_slave_0: entered promiscuous mode [ 239.375706][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.385560][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.393447][ T8112] bridge_slave_1: entered allmulticast mode [ 239.400889][ T8112] bridge_slave_1: entered promiscuous mode [ 239.417584][ T8178] loop5: detected capacity change from 0 to 512 [ 239.439281][ T8112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.450282][ T8112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.462454][ T8178] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.1270: corrupted inode contents [ 239.478061][ T8178] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 239.478245][ T8178] EXT4-fs (loop5): Remounting filesystem read-only [ 239.485203][ T8112] team0: Port device team_slave_0 added [ 239.487335][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 239.505867][ C0] EXT4-fs (loop5): initial error at time 1771944265: ext4_do_update_inode:5569: inode 3 [ 239.510628][ T8112] team0: Port device team_slave_1 added [ 239.515645][ C0] EXT4-fs (loop5): last error at time 1771944265: ext4_do_update_inode:5569: inode 3 [ 239.532848][ T8178] Quota error (device loop5): write_blk: dquota write failed [ 239.549162][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.556391][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.582804][ T8178] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 239.585920][ T8112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.604409][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.609170][ T8178] EXT4-fs (loop5): 1 truncate cleaned up [ 239.611875][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.643181][ T8112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.661448][ T8178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.676533][ T8178] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.762153][ T8112] hsr_slave_0: entered promiscuous mode [ 239.773883][ T8112] hsr_slave_1: entered promiscuous mode [ 239.779919][ T8112] debugfs: 'hsr0' already exists in 'hsr' [ 239.794723][ T8112] Cannot create hsr debugfs directory [ 239.814704][ T8193] loop7: detected capacity change from 0 to 512 [ 239.879054][ T8193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.911294][ T8193] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.944375][ T3636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.011597][ T8112] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 240.013458][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.037886][ T8112] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 240.054236][ T8112] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 240.090308][ T8112] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 240.218980][ T8216] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 240.234538][ T8216] bond1 (unregistering): Released all slaves [ 241.001334][ T8250] netlink: 'syz.5.1278': attribute type 4 has an invalid length. [ 241.235011][ T8112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.248152][ T8112] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.318521][ T1619] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.325661][ T1619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.365119][ T1619] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.372504][ T1619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.429629][ T8253] loop5: detected capacity change from 0 to 512 [ 241.470696][ T8112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.488473][ T8253] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 241.553494][ T8112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.843534][ T8112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.338025][ T8112] veth0_vlan: entered promiscuous mode [ 242.350728][ T8112] veth1_vlan: entered promiscuous mode [ 242.379235][ T8112] veth0_macvtap: entered promiscuous mode [ 242.392983][ T8112] veth1_macvtap: entered promiscuous mode [ 242.411851][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.428621][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.455631][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.469047][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.478820][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.490567][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.896411][ T28] audit: type=1400 audit(1771944268.936:1129): avc: denied { create } for pid=8325 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 243.113904][ T28] audit: type=1400 audit(1771944268.956:1130): avc: denied { connect } for pid=8325 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 243.335739][ T28] audit: type=1400 audit(1771944269.366:1132): avc: denied { ioctl } for pid=8338 comm="syz.2.1297" path="socket:[20891]" dev="sockfs" ino=20891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.368156][ T28] audit: type=1400 audit(1771944269.366:1131): avc: denied { read } for pid=8318 comm="syz.5.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.442663][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 243.452240][ T28] audit: type=1400 audit(1771944269.476:1133): avc: denied { bind } for pid=8338 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.620800][ T28] audit: type=1400 audit(1771944269.476:1134): avc: denied { write } for pid=8338 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 244.070187][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 244.289249][ T8359] bridge2: port 1(ip6gretap1) entered blocking state [ 244.305541][ T8359] bridge2: port 1(ip6gretap1) entered disabled state [ 244.312552][ T8359] ip6gretap1: entered allmulticast mode [ 244.333421][ T8359] ip6gretap1: entered promiscuous mode [ 244.391775][ T8361] loop7: detected capacity change from 0 to 512 [ 244.400094][ T8366] bridge2: port 2(veth7) entered blocking state [ 244.416491][ T8366] bridge2: port 2(veth7) entered disabled state [ 244.429646][ T8361] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 244.445942][ T8366] veth7: entered allmulticast mode [ 244.460352][ T8366] veth7: entered promiscuous mode [ 244.485230][ T8366] bridge2: port 2(veth7) entered blocking state [ 244.491668][ T8366] bridge2: port 2(veth7) entered forwarding state [ 244.521594][ T7192] bridge2: port 2(veth7) entered disabled state [ 244.664000][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 244.900051][ T28] audit: type=1400 audit(1771944270.936:1135): avc: denied { unmount } for pid=8377 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 245.185918][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 245.724966][ T28] audit: type=1400 audit(1771944271.756:1136): avc: denied { getopt } for pid=8412 comm="syz.3.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.784464][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 245.859354][ T8418] netlink: 'syz.3.1319': attribute type 18 has an invalid length. [ 245.870689][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 245.906837][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1321'. [ 245.930847][ T8420] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1320'. [ 245.940233][ T8420] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 246.396002][ T8431] loop7: detected capacity change from 0 to 1024 [ 246.421784][ T8431] EXT4-fs: inline encryption not supported [ 246.467224][ T8431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.547020][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.302956][ T8448] loop8: detected capacity change from 0 to 1024 [ 247.356349][ T8448] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 247.410567][ T8448] System zones: 0-1, 3-36 [ 247.449206][ T8448] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1328: bad orphan inode 134217728 [ 247.477863][ T8448] loop8: lost filesystem error report for type 5 error -117 [ 247.478364][ T8448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.564688][ T8458] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 247.578005][ T8458] bond1 (unregistering): Released all slaves [ 247.774289][ T8467] loop7: detected capacity change from 0 to 512 [ 247.799654][ T8467] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1335: couldn't read orphan inode 26 (err -116) [ 247.812138][ T8467] loop7: lost filesystem error report for type 5 error -116 [ 247.812734][ T8467] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.833341][ T8467] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.845155][ T8467] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.1335: corrupted inode contents [ 247.858175][ T8467] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #3: comm syz.7.1335: mark_inode_dirty error [ 247.870286][ T8467] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1335: bg 0: block 64: padding at end of block bitmap is not set [ 247.884948][ T8467] Quota error (device loop7): write_blk: dquota write failed [ 247.892629][ T8467] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 247.903245][ T8467] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.1335: Failed to acquire dquot type 0 [ 247.915121][ T28] audit: type=1400 audit(1771944273.946:1137): avc: denied { read } for pid=8466 comm="syz.7.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 247.970388][ T8112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.978883][ T28] audit: type=1400 audit(1771944274.016:1138): avc: denied { write } for pid=8466 comm="syz.7.1335" path="socket:[21020]" dev="sockfs" ino=21020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.016126][ T28] audit: type=1400 audit(1771944274.056:1139): avc: denied { remount } for pid=8472 comm="syz.8.1336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 248.056315][ T8473] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 248.081367][ T8473] team0 (unregistering): Port device team_slave_0 removed [ 248.092882][ T8473] team0 (unregistering): Failed to send options change via netlink (err -105) [ 248.112675][ T8473] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 248.124726][ T8476] loop8: detected capacity change from 0 to 512 [ 248.150183][ T8473] team0 (unregistering): Port device team_slave_1 removed [ 248.166650][ T8476] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1336: bad orphan inode 15 [ 248.183316][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 248.194811][ T8476] loop8: lost filesystem error report for type 5 error -117 [ 248.195048][ T8476] ext4_test_bit(bit=14, block=5) = 0 [ 248.202417][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 248.202441][ C0] EXT4-fs (loop8): initial error at time 1771944274: ext4_orphan_get:1417 [ 248.202485][ C0] EXT4-fs (loop8): last error at time 1771944274: ext4_orphan_get:1417 [ 248.236710][ T8476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.251519][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.269968][ T8487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=8487 comm=syz.3.1340 [ 248.307591][ T8112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.366800][ T8495] FAULT_INJECTION: forcing a failure. [ 248.366800][ T8495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.386829][ T8495] CPU: 1 UID: 0 PID: 8495 Comm: syz.8.1341 Tainted: G W syzkaller #0 PREEMPT(full) [ 248.386871][ T8495] Tainted: [W]=WARN [ 248.386878][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.386899][ T8495] Call Trace: [ 248.386906][ T8495] [ 248.386914][ T8495] __dump_stack+0x1d/0x30 [ 248.386945][ T8495] dump_stack_lvl+0x95/0xd0 [ 248.387048][ T8495] dump_stack+0x15/0x1b [ 248.387085][ T8495] should_fail_ex+0x263/0x280 [ 248.387110][ T8495] should_fail+0xb/0x20 [ 248.387127][ T8495] should_fail_usercopy+0x1a/0x20 [ 248.387196][ T8495] _copy_from_iter+0x21c/0xea0 [ 248.387224][ T8495] ? __rcu_read_unlock+0x4e/0x70 [ 248.387251][ T8495] ? __rcu_read_unlock+0x4e/0x70 [ 248.387300][ T8495] packet_sendmsg+0x2046/0x3370 [ 248.387323][ T8495] ? avc_has_perm+0x101/0x190 [ 248.387357][ T8495] ? avc_has_perm+0x101/0x190 [ 248.387391][ T8495] ? selinux_socket_sendmsg+0x192/0x1c0 [ 248.387444][ T8495] ? __pfx_packet_sendmsg+0x10/0x10 [ 248.387473][ T8495] ____sys_sendmsg+0x5af/0x600 [ 248.387531][ T8495] ___sys_sendmsg+0x195/0x1e0 [ 248.387579][ T8495] __x64_sys_sendmsg+0xd4/0x160 [ 248.387687][ T8495] x64_sys_call+0x194c/0x3020 [ 248.387719][ T8495] do_syscall_64+0x12c/0x370 [ 248.387764][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.387900][ T8495] RIP: 0033:0x7fe2619dc629 [ 248.387921][ T8495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.387991][ T8495] RSP: 002b:00007fe26042f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.388012][ T8495] RAX: ffffffffffffffda RBX: 00007fe261c55fa0 RCX: 00007fe2619dc629 [ 248.388026][ T8495] RDX: 0000000030040805 RSI: 0000200000000100 RDI: 0000000000000003 [ 248.388039][ T8495] RBP: 00007fe26042f090 R08: 0000000000000000 R09: 0000000000000000 [ 248.388051][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.388063][ T8495] R13: 00007fe261c56038 R14: 00007fe261c55fa0 R15: 00007ffeb140eaf8 [ 248.388163][ T8495] [ 248.620897][ T8499] loop8: detected capacity change from 0 to 128 [ 248.751425][ T69] kworker/u8:4: attempt to access beyond end of device [ 248.751425][ T69] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 249.404307][ T8499] syz.8.1345 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 249.419220][ T8499] CPU: 0 UID: 0 PID: 8499 Comm: syz.8.1345 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.419255][ T8499] Tainted: [W]=WARN [ 249.419262][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.419274][ T8499] Call Trace: [ 249.419280][ T8499] [ 249.419288][ T8499] __dump_stack+0x1d/0x30 [ 249.419464][ T8499] dump_stack_lvl+0x95/0xd0 [ 249.419601][ T8499] dump_stack+0x15/0x1b [ 249.419626][ T8499] dump_header+0x80/0x240 [ 249.419652][ T8499] oom_kill_process+0x295/0x350 [ 249.419704][ T8499] out_of_memory+0x97d/0xb80 [ 249.419732][ T8499] try_charge_memcg+0x62e/0xa10 [ 249.419775][ T8499] obj_cgroup_charge_pages+0x23/0xc0 [ 249.419820][ T8499] __memcg_kmem_charge_page+0x9e/0x170 [ 249.419873][ T8499] __alloc_frozen_pages_noprof+0x18a/0x360 [ 249.419912][ T8499] alloc_pages_mpol+0xb3/0x260 [ 249.419941][ T8499] alloc_pages_noprof+0x8f/0x130 [ 249.419970][ T8499] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 249.420032][ T8499] __kvmalloc_node_noprof+0x3d4/0x650 [ 249.420057][ T8499] ? ip_set_alloc+0x24/0x30 [ 249.420149][ T8499] ? ip_set_alloc+0x24/0x30 [ 249.420174][ T8499] ? __kmalloc_cache_noprof+0x18a/0x410 [ 249.420199][ T8499] ip_set_alloc+0x24/0x30 [ 249.420275][ T8499] hash_netiface_create+0x282/0x740 [ 249.420300][ T8499] ? __pfx_hash_netiface_create+0x10/0x10 [ 249.420324][ T8499] ip_set_create+0x3cf/0x970 [ 249.420368][ T8499] ? __nla_parse+0x40/0x60 [ 249.420480][ T8499] nfnetlink_rcv_msg+0x509/0x5d0 [ 249.420537][ T8499] netlink_rcv_skb+0x123/0x220 [ 249.420565][ T8499] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 249.420599][ T8499] nfnetlink_rcv+0x167/0x1720 [ 249.420704][ T8499] ? __kfree_skb+0x109/0x150 [ 249.420809][ T8499] ? nlmon_xmit+0x4f/0x60 [ 249.420897][ T8499] ? consume_skb+0x4b/0x160 [ 249.420949][ T8499] ? nlmon_xmit+0x4f/0x60 [ 249.420987][ T8499] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 249.421086][ T8499] ? __dev_queue_xmit+0x1393/0x1f40 [ 249.421116][ T8499] ? __dev_queue_xmit+0x148/0x1f40 [ 249.421158][ T8499] ? ref_tracker_free+0x37d/0x3e0 [ 249.421319][ T8499] ? __netlink_deliver_tap+0x4dc/0x500 [ 249.421351][ T8499] netlink_unicast+0x5c0/0x690 [ 249.421383][ T8499] netlink_sendmsg+0x5c8/0x6f0 [ 249.421502][ T8499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.421539][ T8499] ____sys_sendmsg+0x5af/0x600 [ 249.421679][ T8499] ___sys_sendmsg+0x195/0x1e0 [ 249.421732][ T8499] __x64_sys_sendmsg+0xd4/0x160 [ 249.421775][ T8499] x64_sys_call+0x194c/0x3020 [ 249.421811][ T8499] do_syscall_64+0x12c/0x370 [ 249.421865][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.421979][ T8499] RIP: 0033:0x7fe2619dc629 [ 249.421998][ T8499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.422022][ T8499] RSP: 002b:00007fe26042f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.422125][ T8499] RAX: ffffffffffffffda RBX: 00007fe261c55fa0 RCX: 00007fe2619dc629 [ 249.422145][ T8499] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 249.422162][ T8499] RBP: 00007fe261a72b39 R08: 0000000000000000 R09: 0000000000000000 [ 249.422180][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.422196][ T8499] R13: 00007fe261c56038 R14: 00007fe261c55fa0 R15: 00007ffeb140eaf8 [ 249.422219][ T8499] [ 249.422344][ T8499] memory: usage 307200kB, limit 307200kB, failcnt 164 [ 249.752990][ T8499] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 249.761000][ T8499] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 249.768499][ T8499] Memory cgroup stats for /syz8: [ 249.768724][ T8499] cache 12288 [ 249.777021][ T8499] rss 4096 [ 249.780061][ T8499] shmem 0 [ 249.783021][ T8499] mapped_file 0 [ 249.786577][ T8499] dirty 0 [ 249.789528][ T8499] writeback 0 [ 249.792889][ T8499] workingset_refault_anon 23 [ 249.797540][ T8499] workingset_refault_file 0 [ 249.802066][ T8499] swap 229376 [ 249.805371][ T8499] swapcached 262144 [ 249.829303][ T8499] pgpgin 7755 [ 249.832599][ T8499] pgpgout 7744 [ 249.845423][ T8499] pgfault 9558 [ 249.848896][ T8499] pgmajfault 0 [ 249.852290][ T8499] inactive_anon 32768 [ 249.865420][ T8499] active_anon 0 [ 249.868980][ T8499] inactive_file 12288 [ 249.873104][ T8499] active_file 0 [ 249.877153][ T8499] unevictable 0 [ 249.880648][ T8499] hierarchical_memory_limit 314572800 [ 249.886418][ T8499] hierarchical_memsw_limit 9223372036854771712 [ 249.892693][ T8499] total_cache 12288 [ 249.896647][ T8499] total_rss 4096 [ 249.900279][ T8499] total_shmem 0 [ 249.903824][ T8499] total_mapped_file 0 [ 249.907867][ T8499] total_dirty 0 [ 249.911382][ T8499] total_writeback 0 [ 249.915204][ T8499] total_workingset_refault_anon 23 [ 249.920382][ T8499] total_workingset_refault_file 0 [ 249.925451][ T8499] total_swap 229376 [ 249.929330][ T8499] total_swapcached 262144 [ 249.933769][ T8499] total_pgpgin 7755 [ 249.937703][ T8499] total_pgpgout 7744 [ 249.941668][ T8499] total_pgfault 9558 [ 249.945612][ T8499] total_pgmajfault 0 [ 249.949532][ T8499] total_inactive_anon 32768 [ 249.954091][ T8499] total_active_anon 0 [ 249.975425][ T8499] total_inactive_file 12288 [ 249.980029][ T8499] total_active_file 0 [ 249.984038][ T8499] total_unevictable 0 [ 249.995505][ T8499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1345,pid=8498,uid=0 [ 250.020419][ T8499] Memory cgroup out of memory: Killed process 8498 (syz.8.1345) total-vm:94160kB, anon-rss:1232kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 250.106517][ T28] audit: type=1400 audit(1771944276.116:1140): avc: denied { mount } for pid=8527 comm="syz.3.1352" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 250.382903][ T8550] loop8: detected capacity change from 0 to 1024 [ 250.407291][ T8550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 250.421087][ T8550] System zones: 0-1, 3-36 [ 250.426582][ T8550] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1354: bad orphan inode 134217728 [ 250.437684][ T8550] loop8: lost filesystem error report for type 5 error -117 [ 250.438213][ T8550] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.076506][ T8112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.286514][ T8556] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1358'. [ 251.305454][ T8556] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 251.418106][ T28] audit: type=1400 audit(1771944277.456:1141): avc: denied { read } for pid=8567 comm="syz.8.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 251.483696][ T28] audit: type=1326 audit(1771944277.516:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.8.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2619dc629 code=0x7ffc0000 [ 251.545484][ T28] audit: type=1326 audit(1771944277.516:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.8.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2619dc629 code=0x7ffc0000 [ 251.585552][ T28] audit: type=1326 audit(1771944277.556:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.8.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe2619dc629 code=0x7ffc0000 [ 251.646862][ T28] audit: type=1326 audit(1771944277.556:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.8.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2619dc629 code=0x7ffc0000 [ 251.695526][ T28] audit: type=1326 audit(1771944277.556:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.8.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2619dc629 code=0x7ffc0000 [ 251.745483][ T28] audit: type=1326 audit(1771944277.556:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.8.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2619dc629 code=0x7ffc0000 [ 251.786567][ T28] audit: type=1326 audit(1771944277.566:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.8.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2619dc629 code=0x7ffc0000 [ 251.839028][ T28] audit: type=1326 audit(1771944277.566:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.8.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2619dc629 code=0x7ffc0000 [ 251.972895][ T8589] bond0: option arp_validate: invalid value (18446744072759227714) [ 252.123221][ T8598] FAULT_INJECTION: forcing a failure. [ 252.123221][ T8598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.136457][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz.8.1375 Tainted: G W syzkaller #0 PREEMPT(full) [ 252.136493][ T8598] Tainted: [W]=WARN [ 252.136536][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.136626][ T8598] Call Trace: [ 252.136632][ T8598] [ 252.136639][ T8598] __dump_stack+0x1d/0x30 [ 252.136663][ T8598] dump_stack_lvl+0x95/0xd0 [ 252.136683][ T8598] dump_stack+0x15/0x1b [ 252.136702][ T8598] should_fail_ex+0x263/0x280 [ 252.136720][ T8598] should_fail+0xb/0x20 [ 252.136764][ T8598] should_fail_usercopy+0x1a/0x20 [ 252.136835][ T8598] _copy_to_user+0x20/0xa0 [ 252.136863][ T8598] simple_read_from_buffer+0xb5/0x130 [ 252.136939][ T8598] proc_fail_nth_read+0x10e/0x150 [ 252.136965][ T8598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.136989][ T8598] vfs_read+0x1ab/0x7f0 [ 252.137016][ T8598] ? __rcu_read_unlock+0x4e/0x70 [ 252.137097][ T8598] ? __fget_files+0x184/0x1c0 [ 252.137117][ T8598] ? mutex_lock+0x57/0x90 [ 252.137140][ T8598] ksys_read+0xdc/0x1a0 [ 252.137189][ T8598] __x64_sys_read+0x40/0x50 [ 252.137215][ T8598] x64_sys_call+0x2886/0x3020 [ 252.137238][ T8598] do_syscall_64+0x12c/0x370 [ 252.137296][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.137314][ T8598] RIP: 0033:0x7fe26199cece [ 252.137328][ T8598] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.137382][ T8598] RSP: 002b:00007fe26042efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.137476][ T8598] RAX: ffffffffffffffda RBX: 00007fe26042f6c0 RCX: 00007fe26199cece [ 252.137488][ T8598] RDX: 000000000000000f RSI: 00007fe26042f0a0 RDI: 0000000000000003 [ 252.137499][ T8598] RBP: 00007fe26042f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.137509][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.137520][ T8598] R13: 00007fe261c56038 R14: 00007fe261c55fa0 R15: 00007ffeb140eaf8 [ 252.137572][ T8598] [ 253.560035][ T8652] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 253.597152][ T8652] bond1 (unregistering): Released all slaves [ 253.927756][ T8667] loop8: detected capacity change from 0 to 512 [ 253.940653][ T8667] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 254.168077][ T8685] FAULT_INJECTION: forcing a failure. [ 254.168077][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 254.180957][ T8685] CPU: 1 UID: 0 PID: 8685 Comm: syz.7.1387 Tainted: G W syzkaller #0 PREEMPT(full) [ 254.181012][ T8685] Tainted: [W]=WARN [ 254.181020][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.181035][ T8685] Call Trace: [ 254.181042][ T8685] [ 254.181051][ T8685] __dump_stack+0x1d/0x30 [ 254.181082][ T8685] dump_stack_lvl+0x95/0xd0 [ 254.181154][ T8685] dump_stack+0x15/0x1b [ 254.181178][ T8685] should_fail_ex+0x263/0x280 [ 254.181208][ T8685] should_failslab+0x8c/0xb0 [ 254.181230][ T8685] __kvmalloc_node_noprof+0x155/0x650 [ 254.181263][ T8685] ? bpf_test_run_xdp_live+0x17e/0x1360 [ 254.181376][ T8685] bpf_test_run_xdp_live+0x17e/0x1360 [ 254.181430][ T8685] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 254.181462][ T8685] ? __static_call_update+0x343/0x380 [ 254.181519][ T8685] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 254.181555][ T8685] ? mutex_unlock+0x4e/0x90 [ 254.181591][ T8685] ? 0xffffffffa0205800 [ 254.181610][ T8685] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 254.181721][ T8685] ? 0xffffffffa0205800 [ 254.181753][ T8685] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 254.181878][ T8685] bpf_prog_test_run_xdp+0x57b/0xa10 [ 254.181917][ T8685] ? __rcu_read_unlock+0x4e/0x70 [ 254.182003][ T8685] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 254.182035][ T8685] bpf_prog_test_run+0x204/0x340 [ 254.182065][ T8685] __sys_bpf+0x52e/0x7e0 [ 254.182155][ T8685] __x64_sys_bpf+0x41/0x50 [ 254.182198][ T8685] x64_sys_call+0x10cb/0x3020 [ 254.182233][ T8685] do_syscall_64+0x12c/0x370 [ 254.182402][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.182510][ T8685] RIP: 0033:0x7fcd2296c629 [ 254.182528][ T8685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.182551][ T8685] RSP: 002b:00007fcd213c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.182629][ T8685] RAX: ffffffffffffffda RBX: 00007fcd22be5fa0 RCX: 00007fcd2296c629 [ 254.182649][ T8685] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 254.182731][ T8685] RBP: 00007fcd213c7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.182748][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.182766][ T8685] R13: 00007fcd22be6038 R14: 00007fcd22be5fa0 R15: 00007ffe18fb3e98 [ 254.182793][ T8685] [ 254.998100][ T8715] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 255.011498][ T8715] bond1 (unregistering): Released all slaves [ 255.244935][ T8721] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 255.256924][ T8721] bond1 (unregistering): Released all slaves [ 255.714975][ T8733] FAULT_INJECTION: forcing a failure. [ 255.714975][ T8733] name failslab, interval 1, probability 0, space 0, times 0 [ 255.755511][ T8733] CPU: 0 UID: 0 PID: 8733 Comm: syz.7.1402 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.755626][ T8733] Tainted: [W]=WARN [ 255.755635][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.755651][ T8733] Call Trace: [ 255.755660][ T8733] [ 255.755669][ T8733] __dump_stack+0x1d/0x30 [ 255.755704][ T8733] dump_stack_lvl+0x95/0xd0 [ 255.755736][ T8733] dump_stack+0x15/0x1b [ 255.755843][ T8733] should_fail_ex+0x263/0x280 [ 255.755871][ T8733] should_failslab+0x8c/0xb0 [ 255.755917][ T8733] kmem_cache_alloc_noprof+0x66/0x400 [ 255.755944][ T8733] ? skb_clone+0x151/0x1f0 [ 255.756040][ T8733] skb_clone+0x151/0x1f0 [ 255.756075][ T8733] __netlink_deliver_tap+0x2c9/0x500 [ 255.756118][ T8733] netlink_unicast+0x66b/0x690 [ 255.756152][ T8733] netlink_sendmsg+0x5c8/0x6f0 [ 255.756203][ T8733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.756277][ T8733] ____sys_sendmsg+0x5af/0x600 [ 255.756324][ T8733] ___sys_sendmsg+0x195/0x1e0 [ 255.756415][ T8733] __x64_sys_sendmsg+0xd4/0x160 [ 255.756456][ T8733] x64_sys_call+0x194c/0x3020 [ 255.756492][ T8733] do_syscall_64+0x12c/0x370 [ 255.756532][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.756579][ T8733] RIP: 0033:0x7fcd2296c629 [ 255.756599][ T8733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.756621][ T8733] RSP: 002b:00007fcd213a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.756646][ T8733] RAX: ffffffffffffffda RBX: 00007fcd22be6090 RCX: 00007fcd2296c629 [ 255.756688][ T8733] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000007 [ 255.756784][ T8733] RBP: 00007fcd213a6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.756800][ T8733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.756835][ T8733] R13: 00007fcd22be6128 R14: 00007fcd22be6090 R15: 00007ffe18fb3e98 [ 255.756861][ T8733] [ 257.103708][ T8775] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 257.323057][ T8779] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 257.336706][ T8779] bond1 (unregistering): Released all slaves [ 257.583022][ T28] kauditd_printk_skb: 180 callbacks suppressed [ 257.583039][ T28] audit: type=1326 audit(1771944283.616:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.621628][ T28] audit: type=1326 audit(1771944283.636:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.646937][ T28] audit: type=1326 audit(1771944283.656:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.671701][ T28] audit: type=1326 audit(1771944283.656:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.696603][ T28] audit: type=1326 audit(1771944283.656:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.720230][ T28] audit: type=1326 audit(1771944283.656:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.744333][ T28] audit: type=1326 audit(1771944283.656:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.769746][ T28] audit: type=1326 audit(1771944283.656:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.793451][ T28] audit: type=1326 audit(1771944283.656:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.817956][ T28] audit: type=1326 audit(1771944283.656:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f52bb3cc629 code=0x7ffc0000 [ 257.893659][ T8794] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1419'. [ 258.636578][ T8823] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1426'. [ 258.646893][ T8823] netlink: zone id is out of range [ 258.652782][ T8823] netlink: zone id is out of range [ 258.662330][ T8823] netlink: zone id is out of range [ 258.836816][ T8823] netlink: set zone limit has 8 unknown bytes [ 259.203585][ T8839] Invalid ELF header type: 3 != 1 [ 259.471119][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1442'. [ 259.637322][ T8864] loop8: detected capacity change from 0 to 128 [ 260.462496][ T8879] ip6gretap1: entered promiscuous mode [ 260.607738][ T8879] bridge0: port 1(ip6gretap1) entered blocking state [ 260.817628][ T8879] bridge0: port 1(ip6gretap1) entered disabled state [ 260.845048][ T8879] ip6gretap1: entered allmulticast mode [ 260.872725][ T8879] bridge0: port 1(ip6gretap1) entered blocking state [ 260.879540][ T8879] bridge0: port 1(ip6gretap1) entered forwarding state [ 261.371993][ T8898] xt_connbytes: Forcing CT accounting to be enabled [ 261.374242][ T8897] loop7: detected capacity change from 0 to 1024 [ 261.432287][ T8897] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 261.516079][ T8897] System zones: 0-1, 3-36 [ 261.558156][ T8897] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1449: bad orphan inode 134217728 [ 261.623082][ T8897] loop7: lost filesystem error report for type 5 error -117 [ 261.624035][ T8897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.024832][ T8922] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1457'. [ 262.111075][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.227735][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1460'. [ 262.255509][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1460'. [ 262.376930][ T8933] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 262.417471][ T8933] bond2 (unregistering): Released all slaves [ 262.449930][ T8939] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1462'. [ 262.556752][ T8939] xt_hashlimit: size too large, truncated to 1048576 [ 262.594831][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 262.594848][ T28] audit: type=1326 audit(1771944288.626:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac9c629 code=0x7ffc0000 [ 262.633890][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1467'. [ 262.645538][ T28] audit: type=1326 audit(1771944288.626:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac9c629 code=0x7ffc0000 [ 262.669321][ T28] audit: type=1326 audit(1771944288.646:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac9c629 code=0x7ffc0000 [ 262.697924][ T8951] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1467'. [ 262.703071][ T28] audit: type=1326 audit(1771944288.646:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac9c629 code=0x7ffc0000 [ 262.744058][ T28] audit: type=1326 audit(1771944288.646:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f4afac9c629 code=0x7ffc0000 [ 262.776785][ T8951] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 262.777677][ T28] audit: type=1326 audit(1771944288.646:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac9c629 code=0x7ffc0000 [ 262.819255][ T28] audit: type=1326 audit(1771944288.646:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac9c629 code=0x7ffc0000 [ 262.842842][ T28] audit: type=1326 audit(1771944288.646:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4afac9c629 code=0x7ffc0000 [ 262.844740][ T8951] bond1 (unregistering): Released all slaves [ 262.866516][ T28] audit: type=1326 audit(1771944288.766:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4afac9c629 code=0x7ffc0000 [ 262.905434][ T28] audit: type=1326 audit(1771944288.936:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.7.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2296c629 code=0x7ffc0000 [ 263.198596][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 263.267352][ T8977] loop7: detected capacity change from 0 to 128 [ 263.303034][ T8977] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.321070][ T8977] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.355927][ T5452] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.578607][ T8994] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 263.990273][ T9014] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 264.025698][ T3417] IPVS: starting estimator thread 0... [ 264.135935][ T9015] IPVS: using max 2208 ests per chain, 110400 per kthread [ 264.181272][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1486'. [ 265.370021][ T9031] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1488'. [ 265.380403][ T9031] netlink: zone id is out of range [ 265.387119][ T9031] netlink: zone id is out of range [ 265.402590][ T9031] netlink: zone id is out of range [ 265.613789][ T9031] netlink: set zone limit has 8 unknown bytes [ 265.931826][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1497'. [ 265.963200][ T9045] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1493'. [ 265.981975][ T9060] loop7: detected capacity change from 0 to 1024 [ 265.989271][ T9055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1497'. [ 266.007127][ T9060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 266.025674][ T9060] System zones: 0-1, 3-36 [ 266.039871][ T9060] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1492: bad orphan inode 134217728 [ 266.050716][ T9060] loop7: lost filesystem error report for type 5 error -117 [ 266.051660][ T9060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.076290][ T9055] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 266.114056][ T9055] bond1 (unregistering): Released all slaves [ 266.338708][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 266.437762][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 266.458300][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.726679][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1508'. [ 266.765951][ T9097] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1508'. [ 266.828183][ T9102] netlink: 'syz.2.1508': attribute type 49 has an invalid length. [ 267.550930][ T9114] bridge1: port 1(ip6gretap2) entered blocking state [ 267.617529][ T9114] bridge1: port 1(ip6gretap2) entered disabled state [ 267.624469][ T9114] ip6gretap2: entered allmulticast mode [ 267.630775][ T9114] ip6gretap2: entered promiscuous mode [ 267.662824][ T9115] bridge1: port 2(veth5) entered blocking state [ 267.669734][ T9115] bridge1: port 2(veth5) entered disabled state [ 267.676392][ T9115] veth5: entered allmulticast mode [ 267.682229][ T9115] veth5: entered promiscuous mode [ 267.687723][ T9115] bridge1: port 2(veth5) entered blocking state [ 267.694026][ T9115] bridge1: port 2(veth5) entered forwarding state [ 268.253274][ T1619] bridge1: port 2(veth5) entered disabled state [ 268.962891][ T9158] __nla_validate_parse: 3 callbacks suppressed [ 268.962944][ T9158] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1525'. [ 268.979772][ T9158] netlink: zone id is out of range [ 268.985396][ T9158] netlink: zone id is out of range [ 268.994804][ T9158] netlink: zone id is out of range [ 269.151098][ T9158] netlink: set zone limit has 8 unknown bytes [ 269.805663][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1539'. [ 269.977385][ T9199] netlink: 15 bytes leftover after parsing attributes in process `syz.8.1539'. [ 270.264142][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 270.264159][ T28] audit: type=1400 audit(1771944296.296:1681): avc: denied { read } for pid=9205 comm="syz.8.1542" path="socket:[23154]" dev="sockfs" ino=23154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 270.526958][ T28] audit: type=1326 audit(1771944296.566:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9221 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa550f9c629 code=0x7ffc0000 [ 270.585004][ T28] audit: type=1326 audit(1771944296.566:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9221 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa550f9c629 code=0x7ffc0000 [ 270.610388][ T28] audit: type=1326 audit(1771944296.596:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9221 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa550f9c629 code=0x7ffc0000 [ 270.656419][ T28] audit: type=1326 audit(1771944296.596:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9221 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa550f9c629 code=0x7ffc0000 [ 270.682915][ T9226] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.701194][ T28] audit: type=1326 audit(1771944296.596:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9221 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa550f9c629 code=0x7ffc0000 [ 270.724946][ T28] audit: type=1326 audit(1771944296.596:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9221 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa550f9c629 code=0x7ffc0000 [ 270.748818][ T28] audit: type=1326 audit(1771944296.596:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9221 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa550f9c629 code=0x7ffc0000 [ 270.772787][ T28] audit: type=1326 audit(1771944296.596:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9221 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa550f9c629 code=0x7ffc0000 [ 270.828998][ T28] audit: type=1326 audit(1771944296.606:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9221 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa550f9c629 code=0x7ffc0000 [ 270.890637][ T9226] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.927169][ T9226] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.230239][ T9235] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.1549'. [ 271.241162][ T9235] netlink: zone id is out of range [ 271.246841][ T9235] netlink: zone id is out of range [ 271.255804][ T9235] netlink: zone id is out of range [ 271.409408][ T9235] netlink: set zone limit has 8 unknown bytes [ 271.550765][ T9226] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.632452][ T1619] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.658267][ T1619] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.685506][ T1619] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.699261][ T1619] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.865911][ T9248] x_tables: duplicate underflow at hook 3 [ 271.994598][ T9253] loop7: detected capacity change from 0 to 512 [ 272.034340][ T9253] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1559: bad orphan inode 15 [ 272.045446][ T9253] loop7: lost filesystem error report for type 5 error -117 [ 272.055516][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 272.069322][ C1] EXT4-fs (loop7): initial error at time 1771944298: ext4_orphan_get:1417 [ 272.077886][ C1] EXT4-fs (loop7): last error at time 1771944298: ext4_orphan_get:1417 [ 272.085573][ T9253] ext4_test_bit(bit=14, block=5) = 0 [ 272.091984][ T9253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.173594][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.495623][ T9279] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1565'. [ 273.058889][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'. [ 273.393403][ T9288] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1568'. [ 273.537141][ T9294] loop7: detected capacity change from 0 to 512 [ 273.553254][ T9294] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1570: bad orphan inode 15 [ 273.583840][ T9294] loop7: lost filesystem error report for type 5 error -117 [ 273.584088][ T9294] ext4_test_bit(bit=14, block=5) = 0 [ 273.591494][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 273.591509][ C1] EXT4-fs (loop7): initial error at time 1771944299: ext4_orphan_get:1417 [ 273.591528][ C1] EXT4-fs (loop7): last error at time 1771944299: ext4_orphan_get:1417 [ 273.623109][ T9294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.941818][ T5452] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.090711][ T9309] loop7: detected capacity change from 0 to 512 [ 274.120009][ T9309] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 274.126225][ T9309] syzkaller0: linktype set to 823 [ 276.065756][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1588'. [ 276.282895][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1594'. [ 276.296422][ T9369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1594'. [ 276.321783][ T9369] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 276.470904][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1596'. [ 276.481260][ T9369] bond1 (unregistering): Released all slaves [ 276.732600][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 276.732616][ T28] audit: type=1400 audit(1771944302.766:1831): avc: denied { create } for pid=9383 comm="syz.7.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.168987][ T9389] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1599'. [ 277.179229][ T9389] netlink: zone id is out of range [ 277.188790][ T9389] netlink: zone id is out of range [ 277.205611][ T9389] netlink: zone id is out of range [ 277.537087][ T9389] netlink: set zone limit has 8 unknown bytes [ 277.730525][ T28] audit: type=1400 audit(1771944302.806:1832): avc: denied { ioctl } for pid=9383 comm="syz.7.1598" path="socket:[24405]" dev="sockfs" ino=24405 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.209524][ T9391] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1598'. [ 278.221804][ T9391] netlink: zone id is out of range [ 278.228668][ T9391] netlink: zone id is out of range [ 278.240040][ T9391] netlink: zone id is out of range [ 278.456496][ T9391] netlink: set zone limit has 8 unknown bytes [ 278.499778][ T28] audit: type=1400 audit(1771944304.506:1833): avc: denied { shutdown } for pid=9383 comm="syz.7.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.615772][ T28] audit: type=1400 audit(1771944304.516:1834): avc: denied { write } for pid=9383 comm="syz.7.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.823816][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1607'. [ 278.938402][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1611'. [ 278.947499][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1611'. [ 278.970414][ T9425] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 279.015251][ T9425] bond1 (unregistering): Released all slaves [ 279.450099][ T9439] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.1614'. [ 279.461313][ T9439] netlink: zone id is out of range [ 279.466725][ T9439] netlink: zone id is out of range [ 280.072505][ T9453] 9pnet_fd: Insufficient options for proto=fd [ 280.165100][ T9466] netlink: 'syz.3.1623': attribute type 4 has an invalid length. [ 281.274277][ T9513] __nla_validate_parse: 4 callbacks suppressed [ 281.274296][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'. [ 281.461779][ T9531] sctp: [Deprecated]: syz.3.1643 (pid 9531) Use of int in max_burst socket option deprecated. [ 281.461779][ T9531] Use struct sctp_assoc_value instead [ 281.465747][ T28] audit: type=1400 audit(1771944307.496:1835): avc: denied { read open } for pid=9530 comm="syz.3.1643" path="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 282.176036][ T9550] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1648'. [ 282.186226][ T9550] net_ratelimit: 6 callbacks suppressed [ 282.186249][ T9550] netlink: zone id is out of range [ 282.198785][ T9550] netlink: zone id is out of range [ 282.212618][ T9550] netlink: zone id is out of range [ 282.515416][ T9550] netlink: set zone limit has 8 unknown bytes [ 282.726470][ T9555] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1650'. [ 282.748690][ T9555] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1650'. [ 282.878233][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 283.537667][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1662'. [ 284.490954][ T9601] syz.8.1665 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 284.518159][ T9601] CPU: 1 UID: 0 PID: 9601 Comm: syz.8.1665 Tainted: G W syzkaller #0 PREEMPT(full) [ 284.518265][ T9601] Tainted: [W]=WARN [ 284.518275][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.518293][ T9601] Call Trace: [ 284.518303][ T9601] [ 284.518329][ T9601] __dump_stack+0x1d/0x30 [ 284.518366][ T9601] dump_stack_lvl+0x95/0xd0 [ 284.518405][ T9601] dump_stack+0x15/0x1b [ 284.518435][ T9601] dump_header+0x80/0x240 [ 284.518503][ T9601] oom_kill_process+0x295/0x350 [ 284.518531][ T9601] out_of_memory+0x97d/0xb80 [ 284.518560][ T9601] try_charge_memcg+0x62e/0xa10 [ 284.518671][ T9601] __mem_cgroup_charge+0x65/0x150 [ 284.518767][ T9601] shmem_get_folio_gfp+0x47b/0xd60 [ 284.518826][ T9601] shmem_fallocate+0x628/0x920 [ 284.518876][ T9601] vfs_fallocate+0x3b6/0x450 [ 284.518903][ T9601] __x64_sys_fallocate+0x7a/0xd0 [ 284.519009][ T9601] x64_sys_call+0x298e/0x3020 [ 284.519112][ T9601] do_syscall_64+0x12c/0x370 [ 284.519210][ T9601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.519237][ T9601] RIP: 0033:0x7fe2619dc629 [ 284.519293][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.519381][ T9601] RSP: 002b:00007fe26040e028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 284.519407][ T9601] RAX: ffffffffffffffda RBX: 00007fe261c56090 RCX: 00007fe2619dc629 [ 284.519426][ T9601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 284.519443][ T9601] RBP: 00007fe261a72b39 R08: 0000000000000000 R09: 0000000000000000 [ 284.519460][ T9601] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 284.519477][ T9601] R13: 00007fe261c56128 R14: 00007fe261c56090 R15: 00007ffeb140eaf8 [ 284.519511][ T9601] [ 284.519520][ T9601] memory: usage 307200kB, limit 307200kB, failcnt 5989 [ 284.754949][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1671'. [ 284.778455][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1671'. [ 284.790194][ T9623] geneve2: entered promiscuous mode [ 284.805521][ T9601] memory+swap: usage 311268kB, limit 9007199254740988kB, failcnt 0 [ 284.805768][ T9623] geneve2: entered allmulticast mode [ 284.813491][ T9601] kmem: usage 206332kB, limit 9007199254740988kB, failcnt 0 [ 284.813511][ T9601] Memory cgroup stats for /syz8: [ 284.826512][ T9601] cache 48476160 [ 284.835121][ T9601] rss 200704 [ 284.838403][ T9601] shmem 48476160 [ 284.842022][ T9601] mapped_file 16384 [ 284.845920][ T9601] dirty 0 [ 284.849019][ T9601] writeback 0 [ 284.852348][ T9601] workingset_refault_anon 164 [ 284.857148][ T9601] workingset_refault_file 0 [ 284.861782][ T9601] swap 57593856 [ 284.865292][ T9601] swapcached 59748352 [ 284.869411][ T9601] pgpgin 127328 [ 284.873031][ T9601] pgpgout 115180 [ 284.876638][ T9601] pgfault 80177 [ 284.880144][ T9601] pgmajfault 44 [ 284.883665][ T9601] inactive_anon 9134080 [ 284.889002][ T9601] active_anon 40624128 [ 284.893122][ T9601] inactive_file 0 [ 285.146942][ T9601] active_file 0 [ 285.150526][ T9601] unevictable 0 [ 285.154096][ T9601] hierarchical_memory_limit 314572800 [ 285.159605][ T9601] hierarchical_memsw_limit 9223372036854771712 [ 285.171645][ T9601] total_cache 48476160 [ 285.176653][ T9601] total_rss 200704 [ 285.180513][ T9601] total_shmem 48476160 [ 285.184798][ T9601] total_mapped_file 16384 [ 285.189494][ T9601] total_dirty 0 [ 285.193095][ T9601] total_writeback 0 [ 285.341786][ T9601] total_workingset_refault_anon 164 [ 285.362700][ T9601] total_workingset_refault_file 0 [ 285.383280][ T9601] total_swap 57593856 [ 285.399690][ T9601] total_swapcached 59748352 [ 285.418841][ T9601] total_pgpgin 127328 [ 285.437868][ T9601] total_pgpgout 115180 [ 285.454382][ T9601] total_pgfault 80177 [ 285.470364][ T9601] total_pgmajfault 44 [ 285.486630][ T9601] total_inactive_anon 9134080 [ 285.505465][ T9601] total_active_anon 40624128 [ 285.523907][ T9601] total_inactive_file 0 [ 285.544952][ T9601] total_active_file 0 [ 285.559129][ T9601] total_unevictable 0 [ 285.573299][ T9601] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1665,pid=9599,uid=0 [ 285.629216][ T9601] Memory cgroup out of memory: Killed process 9601 (syz.8.1665) total-vm:94292kB, anon-rss:1412kB, file-rss:22288kB, shmem-rss:16kB, UID:0 pgtables:128kB oom_score_adj:0 [ 286.891964][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1677'. [ 286.925442][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1677'. [ 286.953483][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1677'. [ 287.626103][ T9655] syz.2.1681 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 287.640153][ T9655] CPU: 1 UID: 0 PID: 9655 Comm: syz.2.1681 Tainted: G W syzkaller #0 PREEMPT(full) [ 287.640192][ T9655] Tainted: [W]=WARN [ 287.640200][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.640215][ T9655] Call Trace: [ 287.640223][ T9655] [ 287.640232][ T9655] __dump_stack+0x1d/0x30 [ 287.640264][ T9655] dump_stack_lvl+0x95/0xd0 [ 287.640319][ T9655] dump_stack+0x15/0x1b [ 287.640348][ T9655] dump_header+0x80/0x240 [ 287.640439][ T9655] oom_kill_process+0x295/0x350 [ 287.640466][ T9655] out_of_memory+0x97d/0xb80 [ 287.640507][ T9655] try_charge_memcg+0x62e/0xa10 [ 287.640559][ T9655] obj_cgroup_charge_pages+0x23/0xc0 [ 287.640599][ T9655] __memcg_kmem_charge_page+0x9e/0x170 [ 287.640648][ T9655] __alloc_frozen_pages_noprof+0x18a/0x360 [ 287.640684][ T9655] alloc_pages_mpol+0xb3/0x260 [ 287.640718][ T9655] alloc_pages_noprof+0x8f/0x130 [ 287.640787][ T9655] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 287.640910][ T9655] __kvmalloc_node_noprof+0x3d4/0x650 [ 287.640943][ T9655] ? ip_set_alloc+0x24/0x30 [ 287.640974][ T9655] ? ip_set_alloc+0x24/0x30 [ 287.641038][ T9655] ? __kmalloc_cache_noprof+0x18a/0x410 [ 287.641069][ T9655] ip_set_alloc+0x24/0x30 [ 287.641099][ T9655] hash_netiface_create+0x282/0x740 [ 287.641157][ T9655] ? __pfx_hash_netiface_create+0x10/0x10 [ 287.641204][ T9655] ip_set_create+0x3cf/0x970 [ 287.641314][ T9655] ? __nla_parse+0x40/0x60 [ 287.641401][ T9655] nfnetlink_rcv_msg+0x509/0x5d0 [ 287.641449][ T9655] netlink_rcv_skb+0x123/0x220 [ 287.641479][ T9655] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 287.641529][ T9655] nfnetlink_rcv+0x167/0x1720 [ 287.641556][ T9655] ? __kfree_skb+0x109/0x150 [ 287.641605][ T9655] ? nlmon_xmit+0x4f/0x60 [ 287.641640][ T9655] ? consume_skb+0x4b/0x160 [ 287.641667][ T9655] ? nlmon_xmit+0x4f/0x60 [ 287.641745][ T9655] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 287.641779][ T9655] ? __dev_queue_xmit+0x1393/0x1f40 [ 287.641809][ T9655] ? __dev_queue_xmit+0x148/0x1f40 [ 287.641909][ T9655] ? ref_tracker_free+0x37d/0x3e0 [ 287.641944][ T9655] ? __netlink_deliver_tap+0x4dc/0x500 [ 287.641985][ T9655] netlink_unicast+0x5c0/0x690 [ 287.642019][ T9655] netlink_sendmsg+0x5c8/0x6f0 [ 287.642116][ T9655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.642153][ T9655] ____sys_sendmsg+0x5af/0x600 [ 287.642273][ T9655] ___sys_sendmsg+0x195/0x1e0 [ 287.642326][ T9655] __x64_sys_sendmsg+0xd4/0x160 [ 287.642369][ T9655] x64_sys_call+0x194c/0x3020 [ 287.642499][ T9655] do_syscall_64+0x12c/0x370 [ 287.642547][ T9655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.642583][ T9655] RIP: 0033:0x7f4afac9c629 [ 287.642602][ T9655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.642687][ T9655] RSP: 002b:00007f4af96f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.642711][ T9655] RAX: ffffffffffffffda RBX: 00007f4afaf15fa0 RCX: 00007f4afac9c629 [ 287.642729][ T9655] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 287.642744][ T9655] RBP: 00007f4afad32b39 R08: 0000000000000000 R09: 0000000000000000 [ 287.642812][ T9655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.642826][ T9655] R13: 00007f4afaf16038 R14: 00007f4afaf15fa0 R15: 00007fffa0a0a168 [ 287.642928][ T9655] [ 287.642969][ T9655] memory: usage 307200kB, limit 307200kB, failcnt 1475 [ 287.654088][ T3317] ================================================================== [ 287.664750][ T9655] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 287.667831][ T3317] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 287.667878][ T3317] [ 287.667883][ T3317] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 1: [ 287.667904][ T3317] tick_do_update_jiffies64+0x113/0x1c0 [ 287.672107][ T9655] kmem: usage 274544kB, limit 9007199254740988kB, failcnt 0 [ 287.674169][ T3317] tick_nohz_handler+0x8d/0x3d0 [ 287.674202][ T3317] __hrtimer_run_queues+0x218/0x4f0 [ 287.679171][ T9655] Memory cgroup stats for [ 287.683069][ T3317] hrtimer_interrupt+0x269/0x810 [ 287.687706][ T9655] /syz2 [ 287.691567][ T3317] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 287.696938][ T9655] : [ 287.701006][ T3317] sysvec_apic_timer_interrupt+0x6f/0x80 [ 287.713519][ T9655] cache 33185792 [ 287.716620][ T3317] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.716653][ T3317] console_flush_all+0x540/0x6c0 [ 287.716678][ T3317] console_unlock+0xa1/0x280 [ 287.722932][ T9655] rss 200704 [ 287.727253][ T3317] vprintk_emit+0x3e4/0x600 [ 287.727280][ T3317] vprintk_default+0x26/0x30 [ 287.732474][ T9655] shmem 33185792 [ 287.738117][ T3317] vprintk+0x1d/0x30 [ 287.738152][ T3317] _printk+0x79/0xa0 [ 287.743725][ T9655] mapped_file 16384 [ 287.748027][ T3317] mem_cgroup_print_oom_meminfo+0x84/0x260 [ 287.754144][ T9655] dirty 0 [ 287.758098][ T3317] dump_header+0xa2/0x240 [ 287.758127][ T3317] oom_kill_process+0x295/0x350 [ 287.758148][ T3317] out_of_memory+0x97d/0xb80 [ 287.758165][ T3317] try_charge_memcg+0x62e/0xa10 [ 287.762966][ T9655] writeback 0 [ 287.767693][ T3317] obj_cgroup_charge_pages+0x23/0xc0 [ 287.767728][ T3317] __memcg_kmem_charge_page+0x9e/0x170 [ 287.774401][ T9655] workingset_refault_anon 192 [ 287.778041][ T3317] __alloc_frozen_pages_noprof+0x18a/0x360 [ 287.778078][ T3317] alloc_pages_mpol+0xb3/0x260 [ 287.782999][ T9655] workingset_refault_file 2753 [ 287.787430][ T3317] alloc_pages_noprof+0x8f/0x130 [ 287.787468][ T3317] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 287.792512][ T9655] swap 454656 [ 287.797700][ T3317] __kvmalloc_node_noprof+0x3d4/0x650 [ 287.797733][ T3317] ip_set_alloc+0x24/0x30 [ 287.797756][ T3317] hash_netiface_create+0x282/0x740 [ 287.797777][ T3317] ip_set_create+0x3cf/0x970 [ 287.802706][ T9655] swapcached 22089728 [ 287.807062][ T3317] nfnetlink_rcv_msg+0x509/0x5d0 [ 287.807092][ T3317] netlink_rcv_skb+0x123/0x220 [ 287.807122][ T3317] nfnetlink_rcv+0x167/0x1720 [ 287.807147][ T3317] netlink_unicast+0x5c0/0x690 [ 287.818427][ T9655] pgpgin 249181 [ 287.820319][ T3317] netlink_sendmsg+0x5c8/0x6f0 [ 287.826196][ T9655] pgpgout 241017 [ 287.830908][ T3317] ____sys_sendmsg+0x5af/0x600 [ 287.836445][ T9655] pgfault 256491 [ 287.841053][ T3317] ___sys_sendmsg+0x195/0x1e0 [ 287.847081][ T9655] pgmajfault 140 [ 287.851383][ T3317] __x64_sys_sendmsg+0xd4/0x160 [ 287.856636][ T9655] inactive_anon 2813952 [ 287.861442][ T3317] x64_sys_call+0x194c/0x3020 [ 287.895591][ T9655] active_anon 30621696 [ 287.914949][ T3317] do_syscall_64+0x12c/0x370 [ 287.914997][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.955597][ T9655] inactive_file 0 [ 287.963351][ T3317] [ 287.963361][ T3317] read to 0xffffffff86c09a00 of 8 bytes by task 3317 on cpu 0: [ 288.293678][ T3317] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 288.299952][ T3317] count_shadow_nodes+0x6a/0x230 [ 288.304931][ T3317] do_shrink_slab+0x63/0x6a0 [ 288.309555][ T3317] shrink_slab+0x538/0x880 [ 288.313997][ T3317] shrink_node+0x6bc/0x2130 [ 288.318528][ T3317] do_try_to_free_pages+0x408/0xc80 [ 288.323761][ T3317] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 288.329690][ T3317] try_charge_memcg+0x37e/0xa10 [ 288.334572][ T3317] __mem_cgroup_charge+0x65/0x150 [ 288.339630][ T3317] filemap_add_folio+0x110/0x350 [ 288.344605][ T3317] __filemap_get_folio_mpol+0x326/0x680 [ 288.350176][ T3317] filemap_fault+0x486/0xb90 [ 288.355222][ T3317] __do_fault+0xbc/0x200 [ 288.359502][ T3317] handle_mm_fault+0x11d7/0x3020 [ 288.364473][ T3317] do_user_addr_fault+0x62f/0x1050 [ 288.369635][ T3317] exc_page_fault+0x62/0xa0 [ 288.374183][ T3317] asm_exc_page_fault+0x26/0x30 [ 288.379054][ T3317] [ 288.381393][ T3317] value changed: 0x00000000fffffaef -> 0x00000000fffffaf0 [ 288.388516][ T3317] [ 288.390860][ T3317] Reported by Kernel Concurrency Sanitizer on: [ 288.397207][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 288.408263][ T3317] Tainted: [W]=WARN [ 288.412096][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.422175][ T3317] ================================================================== [ 288.438890][ T9655] active_file 4096 [ 288.448536][ T9655] unevictable 0 [ 288.459805][ T9655] hierarchical_memory_limit 314572800 [ 288.475556][ T9655] hierarchical_memsw_limit 9223372036854771712 [ 288.487863][ T9655] total_cache 33185792 [ 288.492064][ T9655] total_rss 200704 [ 288.499320][ T9655] total_shmem 33185792 [ 288.503439][ T9655] total_mapped_file 16384 [ 288.519091][ T9655] total_dirty 0 [ 288.523931][ T9655] total_writeback 0 [ 288.528017][ T9655] total_workingset_refault_anon 192 [ 288.533288][ T9655] total_workingset_refault_file 2753 [ 288.538751][ T9655] total_swap 454656 [ 288.542610][ T9655] total_swapcached 22089728 [ 288.547186][ T9655] total_pgpgin 249181 [ 288.551208][ T9655] total_pgpgout 241017 [ 288.555321][ T9655] total_pgfault 256491 [ 288.559473][ T9655] total_pgmajfault 140 [ 288.563665][ T9655] total_inactive_anon 2813952 [ 288.568547][ T9655] total_active_anon 30621696 [ 288.573189][ T9655] total_inactive_file 0 [ 288.577640][ T9655] total_active_file 4096 [ 288.581928][ T9655] total_unevictable 0 [ 288.586132][ T9655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.242,pid=4543,uid=0 [ 288.600974][ T9655] Memory cgroup out of memory: Killed process 4543 (syz.2.242) total-vm:94292kB, anon-rss:1224kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 288.627789][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 288.646098][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 288.646130][ T3317] Tainted: [W]=WARN [ 288.646139][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.646156][ T3317] Call Trace: [ 288.646165][ T3317] [ 288.646247][ T3317] __dump_stack+0x1d/0x30 [ 288.646279][ T3317] dump_stack_lvl+0x95/0xd0 [ 288.646302][ T3317] dump_stack+0x15/0x1b [ 288.646324][ T3317] dump_header+0x80/0x240 [ 288.646360][ T3317] oom_kill_process+0x295/0x350 [ 288.646383][ T3317] out_of_memory+0x97d/0xb80 [ 288.646446][ T3317] try_charge_memcg+0x62e/0xa10 [ 288.646494][ T3317] __mem_cgroup_charge+0x65/0x150 [ 288.646524][ T3317] filemap_add_folio+0x110/0x350 [ 288.646620][ T3317] __filemap_get_folio_mpol+0x326/0x680 [ 288.646650][ T3317] filemap_fault+0x486/0xb90 [ 288.646677][ T3317] __do_fault+0xbc/0x200 [ 288.646842][ T3317] handle_mm_fault+0x11d7/0x3020 [ 288.646883][ T3317] ? vma_start_read+0x1c7/0x2c0 [ 288.646910][ T3317] do_user_addr_fault+0x62f/0x1050 [ 288.646945][ T3317] ? trace_page_fault_user+0x1f/0xe0 [ 288.647106][ T3317] exc_page_fault+0x62/0xa0 [ 288.647144][ T3317] asm_exc_page_fault+0x26/0x30 [ 288.647170][ T3317] RIP: 0033:0x7f4afab6a6b4 [ 288.647190][ T3317] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 [ 288.647284][ T3317] RSP: 002b:00007fffa0a0a4d0 EFLAGS: 00010206 [ 288.647304][ T3317] RAX: 0000001b33a24000 RBX: 00000000000003f7 RCX: 0000000000046118 [ 288.647321][ T3317] RDX: 0000000009695fe1 RSI: 00007fffa0a0a560 RDI: 0000000000000001 [ 288.647336][ T3317] RBP: 00007fffa0a0a50c R08: 0000000023e708d3 R09: 7fffffffffffffff [ 288.647350][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 288.647433][ T3317] R13: 00000000000927c0 R14: 00000000000461e0 R15: 00007fffa0a0a560 [ 288.647497][ T3317] [ 288.651673][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 1516 [ 288.852190][ T3317] memory+swap: usage 307232kB, limit 9007199254740988kB, failcnt 0 [ 288.860149][ T3317] kmem: usage 274408kB, limit 9007199254740988kB, failcnt 0 [ 288.867525][ T3317] Memory cgroup stats for /syz2: [ 288.867780][ T3317] cache 33185792 [ 288.876312][ T3317] rss 192512 [ 288.879520][ T3317] shmem 33185792 [ 288.883082][ T3317] mapped_file 16384 [ 288.887015][ T3317] dirty 0 [ 288.890029][ T3317] writeback 0 [ 288.893319][ T3317] workingset_refault_anon 192 [ 288.898086][ T3317] workingset_refault_file 2753 [ 288.902866][ T3317] swap 81920 [ 288.906099][ T3317] swapcached 22097920 [ 288.910089][ T3317] pgpgin 249181 [ 288.913561][ T3317] pgpgout 241029 [ 288.917252][ T3317] pgfault 256499 [ 288.920853][ T3317] pgmajfault 141 [ 288.924466][ T3317] inactive_anon 27643904 [ 288.929064][ T3317] active_anon 5480448 [ 288.933149][ T3317] inactive_file 0 [ 288.936999][ T3317] active_file 4096 [ 288.940751][ T3317] unevictable 0 [ 288.944310][ T3317] hierarchical_memory_limit 314572800 [ 288.949876][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 288.956232][ T3317] total_cache 33185792 [ 288.960391][ T3317] total_rss 192512 [ 288.964128][ T3317] total_shmem 33185792 [ 288.968444][ T3317] total_mapped_file 16384 [ 288.972791][ T3317] total_dirty 0 [ 288.985451][ T3317] total_writeback 0 [ 288.989290][ T3317] total_workingset_refault_anon 192 [ 288.994505][ T3317] total_workingset_refault_file 2753 [ 289.015781][ T3317] total_swap 81920 [ 289.019537][ T3317] total_swapcached 22097920 [ 289.024045][ T3317] total_pgpgin 249181 [ 289.033651][ T3317] total_pgpgout 241029 [ 289.045479][ T3317] total_pgfault 256499 [ 289.049591][ T3317] total_pgmajfault 141 [ 289.053678][ T3317] total_inactive_anon 27643904 [ 289.066286][ T3317] total_active_anon 5480448 [ 289.075400][ T3317] total_inactive_file 0 [ 289.084054][ T3317] total_active_file 4096 [ 289.093102][ T3317] total_unevictable 0 [ 289.102333][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1681,pid=9654,uid=0 [ 289.131493][ T3317] Memory cgroup out of memory: Killed process 9654 (syz.2.1681) total-vm:96340kB, anon-rss:1220kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0