last executing test programs: 2m39.3911131s ago: executing program 3 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000203050000000000000000000200000009000200"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x22480, 0x28) 2m38.237653099s ago: executing program 3 (id=399): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m37.870950998s ago: executing program 3 (id=404): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2m37.079228038s ago: executing program 3 (id=410): syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d0002040718070904"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) 2m36.287164288s ago: executing program 3 (id=417): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2m35.644083364s ago: executing program 3 (id=422): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2m20.568163942s ago: executing program 32 (id=422): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 6.126954567s ago: executing program 1 (id=2252): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.683089913s ago: executing program 0 (id=2257): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xa0, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, @in6={0xa, 0x4e24, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff7fff}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x0, @private0, 0x8}, @in6={0xa, 0x4e21, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x8000, 0x0, 0x4, r1}, 0x10) write$tcp_mem(r0, &(0x7f00000001c0)={0xa, 0x20, 0x7, 0x20, 0x7}, 0x48) pwritev(r0, &(0x7f0000000c40)=[{&(0x7f0000000bc0)="4f3fe26536ac23ef9822c44b63ad8bf262e59c274f71fbbcdb0988e2ff98d8c3bf2d7235062b4890449c9c956c416f41656e9ce034724b79234e40ef87f7d579304150", 0x43}], 0x1, 0x0, 0x7) 4.592148225s ago: executing program 0 (id=2260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000001cc0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @esp={0x4, 0x6, "d3f872", 0x4a, 0x32, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {0x4d4, 0x6, @basic={0x0, 0x0, 0x2, [@ipv6=@tcp={0xc, 0x6, "efd525", 0x14, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x200, 0x0, 0x9}}}}]}}}}}}}, 0x0) 4.530818816s ago: executing program 1 (id=2262): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x705402, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fdffffff00b25ccb280000000b0001006e657464657673696d0000000f0002006e657464659073696d3000000800580000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sync_file_range(0xffffffffffffffff, 0x5, 0x9, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r5, 0x25, 0x0, @void}, 0x10) socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r6, &(0x7f00000037c0)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x24050080) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r7, &(0x7f0000000a80), 0x0}, 0x20) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000140)) 4.431842499s ago: executing program 0 (id=2264): socket$nl_generic(0x10, 0x3, 0x10) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = getpid() getpriority(0x0, r1) getpriority(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) 3.554136301s ago: executing program 1 (id=2267): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYBLOB, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x319, &(0x7f0000000a40)="$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") syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x21, 0x7ff, &(0x7f00000001c0)="$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") r1 = getpid() syz_pidfd_open(r1, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) tgkill(0x0, 0x0, 0x21) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, 0x140c, 0x411, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40842}, 0x8000) statx(r2, &(0x7f0000000040)='./file1\x00', 0x100, 0x400, &(0x7f00000009c0)) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) 3.515012261s ago: executing program 5 (id=2268): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x1, r0, 0x7) 3.155733041s ago: executing program 2 (id=2270): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0x8, @empty}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 2.991124115s ago: executing program 0 (id=2272): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.923032466s ago: executing program 2 (id=2274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000001cc0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @esp={0x4, 0x6, "d3f872", 0x4a, 0x32, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {0x4d4, 0x6, @basic={0x0, 0x0, 0x2, [@ipv6=@tcp={0xc, 0x6, "efd525", 0x14, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x200, 0x0, 0x9}}}}]}}}}}}}, 0x0) 2.710323962s ago: executing program 2 (id=2276): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.658984073s ago: executing program 1 (id=2277): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x705402, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fdffffff00b25ccb280000000b0001006e657464657673696d0000000f0002006e657464659073696d3000000800580000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sync_file_range(0xffffffffffffffff, 0x5, 0x9, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r5, 0x25, 0x0, @void}, 0x10) socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r6, &(0x7f00000037c0)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x24050080) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r7, &(0x7f0000000a80), 0x0}, 0x20) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000140)) 2.586435155s ago: executing program 2 (id=2278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004e7cb63921dbe19000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x400}, 0x100202, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x5, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000c80)={0x2, 0x0, 0x13, 0x0, 0x90, &(0x7f0000000880)="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"}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) ioctl$FS_IOC_FSGETXATTR(r1, 0x400455c8, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6, 0x0, 0x200, 0x26, 0x3, 0x80000000}, {0x101, 0x89, 0xfffffffffffffff9, 0x3, 0x8, 0xffffffffffffa908}], ['\x00']}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "7312b48fce375942", "7e7058c06f1c92a0c1df6d04d6fa69e9", "df06ed25", "86f8ec5219333f1a"}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x6, 0x40000183}) io_uring_enter(r4, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 2.585901905s ago: executing program 5 (id=2279): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x1001, 0x1, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='scalable', 0x8) r0 = open(&(0x7f0000000140)='./bus\x00', 0x149cc2, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x0, 0x81) write$binfmt_elf32(r1, 0x0, 0x69) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000000f06010100000000000000000a00000806000b00010000000500010007000008ce12"], 0x24}, 0x1, 0x0, 0x0, 0x4044014}, 0x8000) fsetxattr(r0, &(0x7f0000001040)=@known='security.selinux\x00', &(0x7f0000001e80)='\x00\x10\x00\x00\x00\x00\x00\x00\x83\xbb\x9e\xc5\xe8?\x89s\x81\xde\fU\xe2\xb2\xc9\b\xec^t\xfa\x16\x94\x14Q`w\xea\x18\x9d\x15&\f\xf2\x98m\n\xa4\xf9\xa1\f\xd7%\xd3Z\xca\xf3\xae\xc7@L\x14\x1a0\xf5N\xef\xb5r\x91\rL\xb21X\x8b\x0f)\xd9\x92i\x01\x86\x15j\xcf\x02\xc9\x92\x01%\xd8\x91\x10\xd9f\xcb\xed\xee\x7fYjw\xf5\xd4L\xdd\x8d\x98\xbb\xe38\xf4\xc7\xdd\x1b\xb1\xe1\vb\x16V:\xb1v\xd3i\x0f\xfd\t\x00\xd4K\x15J\x97GD)\xadF\xee\xdc\x96\x9c\x17\xd9\x10\x9f\xc4\x9aX\xcb\x00\x00\x1a\xd1\xd8U1B\x03K\n\xf8G0d\xdf\xefX>\x8bN\x94\x13\x92e0#\xefg\xff\xb6I\xf5\x9f6\x90\x99\xd9\x91\xca\xb9\xc6\xd7\xd6\xcc\xbc*b\xd7\xc7\xa0\xff\x15\x05i\x90;\xf5a\xa5\xb3o\x06\xe2\x94\xd8\x9cfbLgN\xc9\x156\x89\fp2a\xec\x9c\xec\x19RX\x0e\xc4\xfb\xeb\x84<\xb8\x94d\xa5m\r.\xdb\xba\xe0\x13P\x89\b\xb7\xeb\xd6T\x12\x98=\tc\x9f\x99f\x19\x99,\xea}4\xb3\x01@^\xb2^\xb4\x81\xa9\xab\x8c\xb1\xfb\x14\xa7\x16\xa0\xa5p\x84\x8a}|Yx\xadt\xf7\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1^)\xf4S\xd2\xc7oN\xf1\x84\xbbiU\xbe~\xa5\xa0\b\x7fv\xd6\x9eT!=\xf3y\xc9v\xff`\xaa\x14\f\x9cK\xba\x86\xb6\xaawkP\x13\nS)k\xc6\x05S\x9d$9\xe38\x7fy.\x97\xc2}0Z<\xf86\xec\xe7p\xf2bj6Z\xbbufqi\xda\xf4\x1c\x83\xc4\xe9LJ*\xfa\x00\x8d\xe6\xf9\xe6\xabU\x93\x05+(\x9f\xce\xa0\nXZmo\xb0C\xc1\xfd\xb5\xb5\xbc\x16\x8d\xbf\x05\xf8)\x9eX\xdc\xcc\x06Z\x8an\xb3G', 0x1c1, 0x0) syz_io_uring_setup(0x20076e3, &(0x7f0000000480)={0x0, 0x4ddb, 0x20000, 0x2, 0x3d5, 0x0, r0}, &(0x7f0000000200), 0x0, &(0x7f0000000000)) r3 = socket$rds(0x15, 0x5, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0), 0xfffffffffffffffe, 0x8) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup=r1, 0x2, 0x1, 0x20, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)}, 0x40) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}], 0x2, &(0x7f0000000280)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x5}, &(0x7f0000000080)=0x4, &(0x7f0000000100)=0x1, 0x1, 0xfffffffffffff000, 0x5, 0x10000, 0x0, 0x2}}], 0x58, 0x40080}, 0x4000000) eventfd(0x26) mlockall(0x5) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x101d0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r6, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b4caf0ceb2e5443418231d82a533cd19", 0x10}, {&(0x7f0000000340)="6650e1348bd28a9cd661f8fe6b7b8a02636ca7b1bf61cfff395d8770eb644dd4cf30076947450b9e8cfa61b1c92ef5a5965d46ed09dec5330eb0f8250d0936164c0ed2f30d998937771ff3607313c9c1d1ee2d932f45a78e8272ba5ba7fc", 0x5e}, {&(0x7f00000003c0)="89e3ad41aef61366d1527122918386a0c6331d0ad087d7f782bf4b5ff37ace4567c585", 0x23}, {&(0x7f0000000400)="c6b5d28e63aa02390cf38edd5776", 0xe}, {&(0x7f0000000440)="5010af1aa7ac82f08f66fc7bf81e71", 0xf}], 0x5, &(0x7f0000002080)=[{0x60, 0x10a, 0x36d, "5ad7f4f00fa5f51d20de3429f3eabfaff1afa061414aa911f4b218d4628e52e3b493f7d7c1b48c4446ce52b646263c6dc963779d172a8f33688b041c9e5354fae69f26dadee1b66c3a0c7c24"}, {0xe0, 0x35, 0x2, "aadb426188e7e74ba68787b056afd1db4ad7475a613c652df0840f0dbac8aab48b06f34f155f2fa78ecb8c20ce82959cf65d5fd281fdae9d0795163d9f2918906162955884572f99184ce2d0ca44cb4c4c5faa575f39cfbfdf58b2a2ad9cdf09fa97dcbd4bdf0109912b1bacb1b73617cad8c7b964012594081d92b8b477303459d549df23013d64963284c308666eef10266877af02ff06e75c47869d096fa0c9cfcc39345ac60419e7f19c039ac4fc1b0b812a0ce356b495678d06ff5e76381f35385a1e936715a8a958492fe820de"}, {0x1010, 0x10e, 0x80, "0e2a0ba93fbd3d25aa62dec157e5debc8218249a730afe61bd94cd0a3d8edb9d1c7b9ee5d25fe5dba14c95ebdd44d731d6862b7e8bf4a75b7326efb9907f6eb0f03bab6182f45c7e33917c14559d86cbb1318ab368c99661032613f9975d7d7165029ab8ba780293a09bf2a7fb6ee6f8722afba22d37c48d56efd2ba9b7cb88a8189a59b4b86bd32c74a9e1c93af89b90cf5e1eba887913d6f140ef6af28896199ba95fb4bd889bfdf710b5bab542b65acc110ba6cd0f53c3f961407256821b15638ab157d929823d257fe1f830ae62a34deb765b32fa01fab56eb4a8ab9ad24b90d6b4bd3128e40766bd7d182dbce528c7bfe84ffd408c6bdc996a1219c3836a0a67359ee1e6ab2cc2131317f5225727706497c5c134787113d8274e7ec549dbfe0d870f54bfeee706389eb2b1cc30591073b4ed78100461cebf6a7e08f5cac9464d80e331fec7f1c28b333005fd225f61778182be66cf9965d20b07de0a2a36a0486859a07ef7140e5dd8034a3d9a22b1fbc46e7baa4931ed6d2a98a821042b8c7faa67e70994c743e3a7941232c0f395365f07393e01f6f2d778fa1a3bd4382b6aa6cf29bd6a79c9fbc9dc13b4857e42e578c58aaab0abd8e0f13f1c292cb8ec452721d012979946f302c540839ebf52184f87528e9f75da116de7735ac93c613e8b2fc90edebfead607d75a6665fdcef2536249bccf2429b00e0ee149482cabdaf575a48b32bc7fb2d2cd4a55f409c0f96837f579519b4cc28188ec6d9c27be7a7124b294d7be1d7429c5cd888583783ddf37b76750ad2c6171f52b823c263073f5a830fdc1eda84019e5038d88c94b443a56935d16705cbb876f2765be05002c0b8d6680b165c751f77965b9c24bc8e9ff98f9869ad050eef1a0e1041f61dca058fa6cc9545e0b4c1afed62b3e6c8e446859b25cb0d7263f7cbf9b0d41d4be5b4e7e4cf1214b0eb41cc2d286e6f740c6a123688fddaceb09953fa3fadad597fe711055b3e4ba6af360a81d8ba04f5896780aae18e80686729cca90d92bb759bbdcf7e335ab141fbbeaa8d01efb989a7ff90398ece5c000da30fa5ff08ff1a72eb700ead5bac644ef7ac341a794043da781b284f85f3c2db035395f557b57848251416187a6771b3ebab2374f10ea1334c5b42eb48f9d1cd21cd560afd4266a3ceb00509b7eb76aa9799fa200bb03d628c3e2f8cd59ae77025233a886f7933080e32c3d3e89e8836fd38c917e9d3e7997e1dcc1eef1d54dfe90663ebf85c0594ff94458d87da108ff91b37d115d2fd5818dc10a613b231d65ba23f4a0e474aa1f279a587a4e8352596f72acbd5cb34c4fedfce51c8a872d09cbfadcfcbd973fa92051a26f93dbfab30cef7d3e1d9cd16c5cfcba9ef5c227858c08c911a73ccef30e5f1432e03bea3e06bf0d51ccb0eda8c30625f52c9dfb88a5f4e4b4471703314f12c0f356bfbbdaa654bee56ed2e71fe441bb9b8183a7461e96fc7e50704964d961c52c81963f208575bcee04cd7fc409a3d000fd709889163e0d008b7228ae548eb2fd747a6324a9773bc69da328cd9f34cd1fcfa87778a86ae8ea2d56dedbae687e3b79c95149dfac899c90b89c98b8e8959ed9d6bb04f8bfea3da65ba8eacca461999d1f4977c45dfec4430dfe2877b0aba9859a127ae4bd45a9479d93db39cecedc4ee363274acda18d6a3fc8e475baf76eea9b3ed9c896e86ac26cdf57cd448da68251d9148321a49f3876813f4219d83d3ff4bafc53fde38caffa3d3a56c9b61efd011e32846234077e3571275cb0abc51a067b56fda1bc4f367b0c3c271ff747302b52185b888bdbab97edb454a7a29ea031b9410a4a5f99cb06c168303a059055ec7717ee3c129ccda916c16f778abd231808cbfb164ed8955e894ccbfce98b150d3c7321f64cf89915e211a1ed6b98bd8544a41ef967cbc834c1dfce8a1a77e61487e23bfa028cfe6b0e608e3350cd67978996732ef1f4f4254aedea1a604c05e50565c7200f0b17c9806e9eeb68e126b9e1664d250dc2faad4ae938d85c2a60f0339c1a86be00ad2db667ce228c187ac5e5c55af354a910aac0bc00b2f981577e0b02565a1575994c04c1248f238f7bc040797ac1e12a5f91c67a739af255de48e45cafd10f30ac758bbb0b612af1321a66c8567903288c2854a8b1a52afa587c6fead9aa6f18f282baea390c2c81de6d352e0328753962eb410e060717467a9af4c63087887d269c732e54ead8fb627d720310b74dc9d98cac151083ba6af90d561f8af8781b9982f74c42f1f206290095e27816ba940fac57213472e0c248796feb08ddeec69eaf54b6217a25ac0b8d5aa6793868530d37dfe7c2535fe26396c81f0c300cf6c263f95491ba2b5dccae6e2ba3c4308a7d3067d4fd51d8ed5b89de8add88eb9b76136ada1df5f81bc2d868ebf6f370eb678bf954c04c6e05e1dc0fb561e49ff551ad3389949641c358028303c24097bbc13226c1758628c09eb53804d7699624385dba4e2b1f4487eff0c3c909e57a56de4050c589ca3d79d4a541b19607f67d68551cca63b914159597462871c2052175d1da883eb6a2aee3b771c85fa7c7bdbfe41a9327ee34574b259748b41414287763d6c9e81b09d5fc70bff66554cecbff4aa408c5cc48c471646443b13737ae96a5bf2e5c4a4922317b28e16af3e2563bfd50abd8d701810401ca6a355867a9dd601784f0271a7b88729548d29bd525fc13f94f5f4d0072fa7c62b3255b08a2555bb0c5417b35306af9119021f0bcc9a06f5219c268ea8672902dfd844544b3d037f33964387dde304acaa4d5f9807f5665ec87882119d5ad7b6282d453e9841aac9b2da3f4e257b86d784a33c14baf7541a0c5acde774f8a702b8539d53c80d17336e3167749a578238cde5fc7e6278484a81ef815d2b83fca6a9ca4eaa1171829011d7d5d3a7b83a0a9ac8287379e6d7aa30f0762361e7f3420fc8a30d2274f766e8e3e1a3412902f723729c354b0adf32ed23b131c3be06349167f687d4ae443e365bdf0c6a130d14f4dfe10403a21519fe82a88dc179f76a92c19e03d45317cfb56b2f01d8c2bf8c7faf1bdd59e36408e6c7fc9227ce90a85b6001055aeb2a83919c319a7f970409bedabad76a2255ca803b733815e40f0eb99a6dc84cc65f780868cb33b330fd28b26cb731be36334fe24b399d4796b9af133dd4e4c8db7265daedad8037d6c658a6eb2e15abbf813f12cd7cf52aef626891c1e645bc8efed269e1785cbd2d9590b090e2560a2a44c5d54e90e930c8dd10f73d1d0a34db37dd9785b561bc4844f7fdc8144e002c45ba295b3cf20827e16b46bfd1a4308d0944c18952032c4d3b738f85620650a7509b499ad7292240353f88c2c941a2300feb8a89c788ce0d12214df1e75d5d59ff11e471ed2166c388709c10ff341c61c0bd9deaedd37bfcf013ef8c3d19dfd395c101334e74758a1b3417c0f05d64cf20d1a768779af2eeda900eb0acedc44e956a10ed61bee196dd4944d24e34c0d47d47af44df065b2d969e2568d8922c0c9c6a3695d9e443f34ca4cb08f231ce9437ab9ee5bce156cfc00d3c3cfa27448a1a065acfbeb4afdf9df18bfc9cb83b007a8d932981cffbd9817c6ab0cdb3dfc2831f6f8f7021c3e6307469f4e52d940eaa775b18d56ecd3574885e56d524ff9b390056199652bb93fe6c254207ac8fabf5f79469a9616d8eff650e83d48c9c85a7159f8f70c7fbd44ff3c72cd92a1367dbbecdb10e7180a479022584412cb9ea7b91db0be7f20bcab4bcec9c9cf8cfdfea11e8ba4594d9a0ce2338c484791bf30bf0ae130d4eba6e3fffdc939a5f8dd63a7da4e3d7909d78823fa6b3f63c6744010ef458993b58f9226bf70538819c098dccc6f0facbd2efaad22826d752d7d6ed7cc958d2a17f5298295fc36cade643db51d56597b1a60380cb53e6e54b15329c1e739b77e3afe6771b6d3e4254126f0daca28c6a3d4cb4e85ccc45d306db90cafac8076197b40be83a16d879197a3f3b8b883ac32351c00fe3e12026a363c75d8cc295b51d0486e488c5323b9dff720014ed0499ce2982eba5585358b26c11ea07c5105ed351d0f79026f4c8911a9a5711f717eb2df59065ff84a983e455572db00d5e9a3f3a5eb57040428f7607f1c81217906da33b4fc2b18500ea9d251499146c24ac4ebcba0b14e30969b4072438cc7901163a9cf5e2ce853e99ea06dd7283187b0cf9d1d2b80a0170f5986d77308b97bce067496b1b6f5dde6395db9c1a723eb311608f5a5f46e2285bf3b397948a66b72b4d9e706687b69cdc4b817b05dd8524d90d3cc238988c44444a1a35034486ea356ad1897686cc1a2c07a3a8da1e9a044a4bd32afe2c2e1a7a94db58d77a3fa80ebdc54ba90da3ef6aa52616a97121621e06179d65daecd351f4389a72fc717f760becc59420c5c05980271a785be3abb849adc67376a1f40c93b2e69e7e3146e05aadd24c6241f4a8a8539ebac7a16738ae142505cef469d617f3ffcf89c9e2cc6874aee613c715678e1241f21f2bade2293639bce7f48cad7a481a0b2e7d16861addbb201a98b8950539af3ad75beac9110eebe9a9fb5f69ad52e19c403426ed8d9d4ad5dd8f439daf83e8080b977eafec32fd28070cf9d73274c5ad032c8347ea005d7e970b66a276e7bf88439e7305e6bcdd70421b50fc6a22bbf9a9c05cb47786bf01df4b8281ab8e1b44f89c1f268e63f4f56d8b049bc8103174a00e94cf1c3b7efc2753056c526ac8d5a1d211498d105d7508d00f9d51e901677fd7b913c50a9769b9c1d21f6627d5b8e697e96226f264e0025e07146cef35c71be74de905fe95233fbc74fbe7247de1678593dd9566950c623aba0e22e78e294201648b8a6f2308e6ef1a0d39de518c921e7e00d1ee5936ac4602b367001256df23c57c0bab21de143b4c3e198b3322d03edcead7ead44b470e6149b0a091c032ef4717bea273eb6d527e43bf048092aa9ecf6627ec53ba15201eb9a5a14cfa1f9b0521ea3cf4aead08f697fc460ed91a28d9d103a50c7262a1751ba99b1f8c0244b4aea2db9eacf581b43b0248953f1124cd5585493eca034f411bee22bfa7dbb57d876ff97e64524cef9a76652ba3b2531ff45f779ac5df50aef920e9fe533b58fe5fe8fe76e52ba5ad5b1fcceedfeda3b1c65088422ff6fd051c3a9c2b193fd0cd5434b068eaad1c8b0eb814c953611f3299bd2ffcc2525a3609d640fcf7210f9351a2e00fa3b052a560343891004ba5206ba228d5fef4ba410f46d4514dfe11948aec968379fb6ca083db81796e3a8bdc0e2ad21f98800948e0f1002ab154171f3797a936368d3bb70a9d4e5a59619928f62ce3a742dfd7299536bed4095b8c6b38dad5d367822b87adcbe7936c25cd7e2e5824f8dca239b670e016523d5731aef4afbec6260a1a367a5558d5f7e7ec0ec6bc8dc548a755ea618ee4e4d57438125bf3cf1f1b5947edf09fd62bca3f5a6469ba6d2186704b23210f3b132fd0369a0af5bcf532d145f225e0df7241f1af5ee41bc56eb9007ca1177ddbc5979f4957284d0f8a217b797eb1ab56e023b55ff75bb828a5d676b2b8531fe9896961f5ef4ed43b2c241658c788739f159dca3359216100551873bff0f64935a010d804b9e6753a928ebfc6daa7361b8d37e5e773ba7c507785d803810c72104895568875e10cbff65e54f40530046ee29137e7f5b49d2db699714849d9f22c789d5ac625b26650ec8e31f9e56274884b6627da8c3c27340c7fad85dfeeadde3d73"}, {0xe0, 0x10b, 0x6, "fc1339237b331b86de840a0e356c64e61be71907e62f04cc683078339b2699aa660e778e73449e3947468a353b77009291ecd04a66447c4fa5ae1bcf8f67e320681e152e57aa089eb0012f57d346619cc0006b7486a65d01c0ba72643ab4b7a45f121ad7bc6d9edc728bda8e71bc956cd46afdbcd833e66655378df723654d2eb94a8d3cbc81ea4ec56f010b74c451e77272f351f6c9934120d8e581be201a0fc338158db389cb096fb86a888bc4e314446135cc08b23ca86ae53b25a2631139213b64aab488213211098248b98bfedb"}, {0xe0, 0x10e, 0x0, "66ec16a87d12832cc3427b31c7db3b4ee14972082c37c5d54977bc6479d3aaae08eb4e08ba70274d77fe6bf9735cf912831660cf69d126c48d3a9b6bb33015ba9749ec76013476407ba10e2531b01072580bc4bbd0683a17d21bdf7c790f1bae0c60c324cc792558f618e472d4739e8bbe0845d7c336ba5b6c5f069eb75c7627397209c1b7f596f75361956d1a8e85021ab92516468944e88f0fcec892ac91a733d55ead3442ff353c163d9ca0d377bdfd4347865c6acc7a5e72578bdf0bbba1d35167ea32c7e5b4e50055adaf078e91"}, {0xc8, 0x103, 0x800, "1819f9dae6010a768e6a2585eb2cff0df4d00fbcb1d85ab73023aaa5c69fa4d7f66e3d2e98a08013717b869e3138faec9b98ebc54426dc0cf1b3b29405c8fb62a7026dc90ea8231a3e48c4fdba31eb76e1ca4a30870b6d5a7acbb9bca3ff734d0633535866781b90d3d8b3b7fb752f4f08e0e6af2cdf93c5682dac139b41c6c08b819d9fa451f1273058b4a03faca81ba3ad1c9a5b913fb2d2abb798e8e1626e4d4e77aba3ae8116d3d76fddd79f7b8c7d3b"}, {0x1010, 0x110, 0x6, "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"}, {0x40, 0x119, 0xff, "8d997fc27ac0b5438a99ddfbbb86c59804ff5619baf81a0f459dbfc6ddd510da4113263071f63f29d3cf4ac4f9bae11e"}], 0x2428}}], 0x1, 0x840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x9, 0x7ffc0001}]}) 1.737237896s ago: executing program 4 (id=2280): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x319, &(0x7f0000000a40)="$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") syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x21, 0x7ff, &(0x7f00000001c0)="$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") r1 = getpid() syz_pidfd_open(r1, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) tgkill(0x0, 0x0, 0x21) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x40842}, 0x8000) statx(r2, &(0x7f0000000040)='./file1\x00', 0x100, 0x400, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@filename='./file0\x00', r4, &(0x7f0000000ac0)='./file1\x00') syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) 1.678072988s ago: executing program 5 (id=2281): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1.151792161s ago: executing program 5 (id=2282): socket$nl_generic(0x10, 0x3, 0x10) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = getpid() getpriority(0x0, r1) getpriority(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) 1.090949712s ago: executing program 4 (id=2283): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4086, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB="1b00"], 0x18}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000100)={0x0, 0x2, [0x9, 0x100000001, 0x9, 0xa, 0x400, 0x23dc]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1862a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x3}, 0x10ecc8, 0x1224, 0xfdfeffff, 0x8, 0x10, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x13, 0xfffffff5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x26]}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002a000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r3, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10020, 0x0, 0xc2ba}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) connect$nfc_llcp(r8, &(0x7f00000002c0)={0x27, r9, 0x1, 0x5, 0x8, 0xb, "35026b6821868d4cd2b40899357be76a443f91da5a6377bd284be909bee26172cef302b74fbbcdd62f66b14143e64c02e701d227bdd11b6be74f08e4b2bbbb", 0x1}, 0x60) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000840)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="1400000036000b63717abc0d0ed8980009000000", 0x14}], 0x1}, 0x20040010) 1.090453902s ago: executing program 1 (id=2284): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff8000018014000180080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.076269423s ago: executing program 1 (id=2285): r0 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1000800800f3d, 0x7) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) 998.739715ms ago: executing program 4 (id=2286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000001cc0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @esp={0x4, 0x6, "d3f872", 0x4a, 0x32, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {0x4d4, 0x6, @basic={0x0, 0x0, 0x2, [@ipv6=@tcp={0xc, 0x6, "efd525", 0x14, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x200, 0x0, 0x9}}}}]}}}}}}}, 0x0) 995.770045ms ago: executing program 0 (id=2287): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYBLOB, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x319, &(0x7f0000000a40)="$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") syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x21, 0x7ff, &(0x7f00000001c0)="$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") r1 = getpid() syz_pidfd_open(r1, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) tgkill(0x0, 0x0, 0x21) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, 0x140c, 0x411, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40842}, 0x8000) statx(r2, &(0x7f0000000040)='./file1\x00', 0x100, 0x400, &(0x7f00000009c0)) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) 911.683487ms ago: executing program 4 (id=2288): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 879.291198ms ago: executing program 4 (id=2298): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x100}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005800)=@newtfilter={0x47c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xf}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x44c, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x7, 0x0, 0x0, {0x7, 0x2, 0x39, 0x6, 0x4, 0x7f}, {0x9, 0x1, 0x3, 0xfffe, 0x0, 0x1}, 0x56e, 0x8024, 0xc9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xa, 0xd1, 0xffffffde, 0x8, 0xfffffffd, 0x4, 0x7, 0x0, 0xffffffff, 0xfffffff7, 0x9, 0x9, 0x7d, 0x4, 0x1, 0x1, 0x1, 0xffffff06, 0x7, 0xfffffffa, 0xaba, 0xffffffff, 0x3ff, 0xb9ac, 0xbec3, 0x6, 0x474b, 0x43c1, 0x80000001, 0x7469, 0x6, 0xfffffd2a, 0xc, 0x0, 0x6, 0x9e, 0xfffffff9, 0x0, 0xffff, 0x7, 0xff, 0x3, 0xffffffff, 0x1, 0x6, 0xc0a8, 0x8d2, 0x0, 0x7, 0x3, 0x1, 0x5, 0x0, 0x7, 0x3, 0x401, 0x7, 0x9, 0x90, 0x3, 0x200, 0xc, 0x5, 0xfffffffc, 0x4, 0x8001, 0x80, 0x0, 0x6833, 0x8, 0x4, 0xabd7, 0x7, 0x2, 0x2, 0xfff, 0xffff, 0x5, 0x400, 0xffff, 0x6, 0x4, 0x4, 0x48e74222, 0x9, 0x6, 0xfffffff9, 0x8, 0x5b, 0x6, 0x80000001, 0x7, 0x2, 0x8, 0x59, 0x2, 0x2, 0x4, 0xe816, 0x4, 0xd59, 0x9, 0x6, 0x401, 0x7, 0xf723, 0xd8, 0x7, 0xfffffffe, 0x1, 0xfffffff9, 0x7f, 0x3cc, 0x3, 0x7fffffff, 0x6, 0x7, 0x8, 0x5, 0x20f, 0x4, 0xa799, 0x80000001, 0xc314, 0x3, 0x5, 0x86e, 0xffff, 0x6, 0x10000, 0x5, 0xfffffffd, 0x4, 0x5, 0x7fffffff, 0xa2, 0xb25, 0x9, 0xa5be, 0x0, 0x9, 0x2, 0xc77, 0x1, 0xfffff801, 0x80000001, 0xff, 0x7, 0x2, 0xe, 0x5, 0x7, 0x10000, 0x8000, 0x9, 0x180, 0x0, 0x8, 0x9, 0x421e, 0x8, 0x7d7, 0x8, 0x200, 0x3ff, 0xfffffff9, 0xfffffff3, 0xf05b, 0x8, 0x2, 0x6, 0x1ff, 0x3, 0x9, 0x50, 0x4, 0xe, 0xc, 0x6, 0x2, 0x7, 0x0, 0x81, 0x1, 0x9, 0x7, 0x5, 0x2, 0x9, 0x470e, 0xf, 0x7, 0x1, 0x0, 0x6, 0x6, 0xfffffff9, 0x8, 0x401, 0x1, 0x3, 0x8, 0x7fff, 0x52, 0x1ff, 0x1e, 0x2, 0x8, 0x0, 0x8, 0x2, 0xce0a, 0x45, 0x26, 0xffff, 0x9, 0x2, 0x9, 0x8, 0x3, 0x10000, 0xd0, 0x7ff, 0x145, 0x7, 0x0, 0x5, 0x1, 0x9, 0x4, 0x5, 0x1a00, 0x6, 0x0, 0xfffffffb, 0x5, 0x6, 0x6, 0x8, 0x0, 0x1, 0x4, 0xadf9, 0x3, 0xd, 0xb69e, 0x3ff, 0x6fb, 0x6, 0x7fffffff, 0x1, 0x1, 0x5, 0x6, 0xfffffffc]}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x24049084}, 0x0) 531.663346ms ago: executing program 0 (id=2289): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x4, 0x1946}, 0x0, 0x10000, 0x8, 0x7, 0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffe00000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000007"], 0x50) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r6) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="060000e3ffffff00"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x4, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 531.240946ms ago: executing program 4 (id=2290): socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x556a, 0xc) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r0, r4, 0x8f5, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 423.696419ms ago: executing program 2 (id=2291): r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x6, 0x30}, &(0x7f00000005c0)=0xc) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="5a000000020000", 0x7) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r5, 0x1}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000080)={0x81}, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000700ffffff", @ANYRES8], 0x4}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000040)={0x8}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000100)={0x4}, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe5e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xffffff01}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000500000000000000010100939dd000558fc0fffcffffff18490000fbffffff00000000000000009500000000"], &(0x7f00000004c0)='GPL\x00', 0xfffffffd, 0x24, &(0x7f0000000500)=""/36, 0x41000, 0x8, '\x00', r7, 0x0, r2, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xc, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r2, r2, r1, r2, r2, r2, r1, r10], &(0x7f00000006c0)=[{0x0, 0x3, 0x5, 0x8}], 0x10, 0x8001}, 0x94) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xd4, "64facd11fc00e8624890401ab86ed569f97a6f4badb0011aab541e8ed7616dbe7c78f6fb2540ee835cba6d7211f6011064319c7608406e2877517c76fe9b5b7551c85a811d22f5ba4aad2795a30742bb090ba96836cc46e5edeaa9d36f0395bfa4f760c8d61e2356a4264e142d3f0c33433cc7aa3b79ec96f823c990100bb4c49813e15f0b9d7a2f47c4e919d4e6d54297bfe0b2a3e2a46e72296be96c0ff2581461c6236783c62c39f5cd778d891d77fb4286b1dff3ab54f8d56ac046b52a4f724d38cdc20e626507b94d52b6b06d723307d34d"}, &(0x7f0000000280)=0xdc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="040029bd7000fddbdf25010000000000446719691f4e13089133a07bf0000009410000004c001800000008657468000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000d32fade053278439005ceeb0"], 0x68}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) 173.380865ms ago: executing program 2 (id=2292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) unshare(0x40200) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f00000001c0)=[{0x1, 0x8001, 0x1000}, {0x4, 0x6}], 0x2) semop(r2, &(0x7f00000001c0), 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, '.\x00'}, 0x6e) semctl$IPC_RMID(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r1, @ANYBLOB="111100000000000008002300910f0000372755c67229090dc24580efebbd8f54e342d48fcdff4f910c2c3093885e38294979fe60a584af7d8752e701e77924df0df80d9f58be3284a2bb93c7"], 0x28}, 0x1, 0x0, 0x0, 0x2000c814}, 0x44800) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8c2) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000100), 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e26, @rand_addr=0x64010102}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='veth0_to_batadv\x00', 0x7, 0x9, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040840) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xf}, 0x12808, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f000041f000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r8 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0x4000) 89.855418ms ago: executing program 5 (id=2293): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x3}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x2}, {0x2}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x6}]}]}, 0x100}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYRES64=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=r5, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000013c0)={0x0, 0x0, {0x0, @struct}}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r11, 0x5) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x7, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r12}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r12, r13, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r12, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r10}, 0x20) sendto(r10, &(0x7f0000000800)="01", 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=2294): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10000009, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x90, &(0x7f0000000740), 0x1, 0x7b2, &(0x7f00000009c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x20, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x6e}}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)=r1}, 0x20) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 142.539312][ T29] audit: type=1400 audit(1788491075.455:620): avc: denied { write } for pid=6095 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.560861][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 144.469549][ T6156] netlink: 'syz.2.974': attribute type 2 has an invalid length. [ 144.592359][ T29] audit: type=1400 audit(1788491077.505:621): avc: denied { ioctl } for pid=6172 comm="syz.2.982" path="socket:[13792]" dev="sockfs" ino=13792 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.678066][ T6176] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 144.680878][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.986'. [ 144.864048][ T6198] netlink: 'syz.5.992': attribute type 39 has an invalid length. [ 144.864737][ T6200] netlink: 'syz.2.993': attribute type 1 has an invalid length. [ 144.872829][ T6198] hsr_slave_0: left promiscuous mode [ 144.882736][ T6198] hsr_slave_1: left promiscuous mode [ 145.524352][ T6260] loop5: detected capacity change from 0 to 736 [ 145.645883][ T6260] rock: directory entry would overflow storage [ 145.645972][ T6260] rock: sig=0x3b10, size=4, remaining=3 [ 145.866825][ T6274] syzkaller0: entered promiscuous mode [ 145.866936][ T6274] syzkaller0: entered allmulticast mode [ 146.259115][ T6312] tipc: Enabled bearer , priority 0 [ 146.262532][ T6312] tipc: Resetting bearer [ 146.272841][ T6310] tipc: Disabling bearer [ 146.330636][ T6318] loop5: detected capacity change from 0 to 736 [ 146.360157][ T6318] rock: directory entry would overflow storage [ 146.360177][ T6318] rock: sig=0x3b10, size=4, remaining=3 [ 146.436930][ T6336] __nla_validate_parse: 3 callbacks suppressed [ 146.436958][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1048'. [ 146.502997][ T6334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1049'. [ 146.513781][ T6334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1049'. [ 146.524172][ T6334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1049'. [ 146.535941][ T6334] openvswitch: netlink: Flow key attr not present in new flow. [ 146.572430][ T6341] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1051'. [ 146.753798][ T6358] loop5: detected capacity change from 0 to 736 [ 146.812207][ T29] audit: type=1400 audit(1788491079.675:622): avc: denied { connect } for pid=6344 comm="syz.4.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.871609][ T6358] rock: directory entry would overflow storage [ 146.871631][ T6358] rock: sig=0x3b10, size=4, remaining=3 [ 147.043757][ T6373] netlink: 'syz.1.1067': attribute type 4 has an invalid length. [ 147.044049][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1068'. [ 147.108301][ T6373] netlink: 'syz.1.1067': attribute type 4 has an invalid length. [ 147.649174][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 147.807886][ T29] audit: type=1400 audit(1788491080.725:623): avc: denied { create } for pid=6412 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 147.807925][ T29] audit: type=1400 audit(1788491080.725:624): avc: denied { bind } for pid=6412 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 147.918055][ T6422] netlink: 'syz.1.1086': attribute type 17 has an invalid length. [ 147.978837][ T6431] loop5: detected capacity change from 0 to 512 [ 148.000350][ T6431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.000492][ T6431] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.026852][ T29] audit: type=1400 audit(1788491080.945:625): avc: denied { write } for pid=6430 comm="syz.5.1088" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.056432][ T29] audit: type=1400 audit(1788491080.965:626): avc: denied { map } for pid=6430 comm="syz.5.1088" path="/86/file1/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.217396][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.341991][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1092'. [ 148.526946][ T29] audit: type=1400 audit(1788491081.435:627): avc: denied { read write } for pid=6439 comm="syz.2.1090" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 148.527100][ T29] audit: type=1400 audit(1788491081.435:628): avc: denied { open } for pid=6439 comm="syz.2.1090" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 149.002130][ T29] audit: type=1400 audit(1788491081.775:629): avc: denied { getopt } for pid=6459 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.161516][ T29] audit: type=1400 audit(1788491082.075:630): avc: denied { ioctl } for pid=6473 comm="syz.2.1103" path="socket:[15040]" dev="sockfs" ino=15040 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.167755][ T6476] tmpfs: Bad value for 'mpol' [ 149.192331][ T29] audit: type=1400 audit(1788491082.085:631): avc: denied { mounton } for pid=6475 comm="syz.0.1102" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 149.204973][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'. [ 149.224101][ T6482] syz_tun: entered allmulticast mode [ 149.224959][ T6481] syz_tun: left allmulticast mode [ 149.296812][ T6485] syz1: rxe_newlink: already configured on bond_slave_1 [ 149.302470][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1108'. [ 149.537975][ T6500] syzkaller0: entered promiscuous mode [ 149.538004][ T6500] syzkaller0: entered allmulticast mode [ 149.559135][ T6500] tipc: Enabled bearer , priority 0 [ 149.564952][ T6505] FAULT_INJECTION: forcing a failure. [ 149.564952][ T6505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.564984][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.0.1115 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.565036][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.565050][ T6505] Call Trace: [ 149.565058][ T6505] [ 149.565066][ T6505] __dump_stack+0x1d/0x30 [ 149.565166][ T6505] dump_stack_lvl+0x95/0xd0 [ 149.565190][ T6505] dump_stack+0x15/0x1b [ 149.565212][ T6505] should_fail_ex+0x262/0x280 [ 149.565259][ T6505] should_fail+0xb/0x20 [ 149.565278][ T6505] should_fail_usercopy+0x1a/0x20 [ 149.565303][ T6505] _copy_to_user+0x20/0xa0 [ 149.565399][ T6505] generic_map_lookup_batch+0x67f/0x910 [ 149.565442][ T6505] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 149.565543][ T6505] bpf_map_do_batch+0x1bb/0x380 [ 149.565587][ T6505] ? security_bpf+0x2b/0x90 [ 149.565618][ T6505] __sys_bpf+0x955/0xc30 [ 149.565645][ T6505] ? do_futex+0x350/0x460 [ 149.565726][ T6505] __x64_sys_bpf+0x69/0x80 [ 149.565749][ T6505] x64_sys_call+0xf26/0x2550 [ 149.565776][ T6505] do_syscall_64+0x112/0x360 [ 149.565887][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.565913][ T6505] RIP: 0033:0x7f343644e159 [ 149.565932][ T6505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.565953][ T6505] RSP: 002b:00007f3434ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.565977][ T6505] RAX: ffffffffffffffda RBX: 00007f34366d5fa0 RCX: 00007f343644e159 [ 149.566020][ T6505] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 149.566034][ T6505] RBP: 00007f34364e5024 R08: 0000000000000000 R09: 0000000000000000 [ 149.566050][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.566065][ T6505] R13: 00007f34366d6038 R14: 00007f34366d5fa0 R15: 00007ffebe076f98 [ 149.566085][ T6505] [ 149.584383][ T6500] tipc: Resetting bearer [ 149.603812][ T6499] tipc: Resetting bearer [ 149.612304][ T6499] tipc: Disabling bearer [ 149.789272][ T6515] netlink: 'syz.0.1121': attribute type 4 has an invalid length. [ 149.918109][ T6524] loop1: detected capacity change from 0 to 256 [ 149.922417][ T6527] FAULT_INJECTION: forcing a failure. [ 149.922417][ T6527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.922446][ T6527] CPU: 1 UID: 0 PID: 6527 Comm: syz.2.1127 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.922475][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.922488][ T6527] Call Trace: [ 149.922497][ T6527] [ 149.922505][ T6527] __dump_stack+0x1d/0x30 [ 149.922601][ T6527] dump_stack_lvl+0x95/0xd0 [ 149.922625][ T6527] dump_stack+0x15/0x1b [ 149.922657][ T6527] should_fail_ex+0x262/0x280 [ 149.922744][ T6527] should_fail+0xb/0x20 [ 149.922764][ T6527] should_fail_usercopy+0x1a/0x20 [ 149.922789][ T6527] _copy_from_user+0x1c/0xb0 [ 149.922815][ T6527] tls_setsockopt+0x560/0xe00 [ 149.922847][ T6527] sock_common_setsockopt+0x69/0x80 [ 149.922873][ T6527] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 149.922911][ T6527] __sys_setsockopt+0x184/0x200 [ 149.922959][ T6527] __x64_sys_setsockopt+0x64/0x80 [ 149.922990][ T6527] x64_sys_call+0x248f/0x2550 [ 149.923166][ T6527] do_syscall_64+0x112/0x360 [ 149.923195][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.923219][ T6527] RIP: 0033:0x7f755d18e159 [ 149.923256][ T6527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.923275][ T6527] RSP: 002b:00007f755bbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.923308][ T6527] RAX: ffffffffffffffda RBX: 00007f755d415fa0 RCX: 00007f755d18e159 [ 149.923324][ T6527] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 149.923338][ T6527] RBP: 00007f755d225024 R08: 0000000000000028 R09: 0000000000000000 [ 149.923368][ T6527] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 149.923383][ T6527] R13: 00007f755d416038 R14: 00007f755d415fa0 R15: 00007fffe76bf5a8 [ 149.923403][ T6527] [ 150.081121][ T6524] FAT-fs (loop1): codepage cp866 not found [ 150.188679][ T6539] syzkaller0: entered promiscuous mode [ 150.188733][ T6539] syzkaller0: entered allmulticast mode [ 150.202832][ T6539] tipc: Enabled bearer , priority 0 [ 150.219405][ T6539] tipc: Resetting bearer [ 150.226298][ T6535] tipc: Resetting bearer [ 150.235324][ T6535] tipc: Disabling bearer [ 150.262471][ T6540] loop1: detected capacity change from 0 to 512 [ 150.271834][ T6540] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.293134][ T6540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.293206][ T6540] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.460233][ T6547] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 151.009097][ T6572] syz_tun: entered allmulticast mode [ 151.021518][ T6572] dvmrp6: left allmulticast mode [ 151.021567][ T6572] syz_tun: left allmulticast mode [ 151.153119][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.196037][ T6583] netlink: 'syz.1.1146': attribute type 4 has an invalid length. [ 151.329883][ T6589] lo speed is unknown, defaulting to 1000 [ 151.489503][ T6590] dvmrp0: entered allmulticast mode [ 151.593558][ T6592] netlink: 'syz.5.1150': attribute type 11 has an invalid length. [ 151.602890][ T6592] __nla_validate_parse: 1 callbacks suppressed [ 151.609942][ T6592] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1150'. [ 151.687856][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 151.722564][ T6596] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1152'. [ 152.026578][ T6614] netlink: 'syz.1.1159': attribute type 4 has an invalid length. [ 152.250937][ T6622] tipc: Enabling of bearer rejected, failed to enable media [ 152.427257][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 152.468655][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1164'. [ 152.642588][ T29] audit: type=1400 audit(1788491085.555:632): avc: denied { name_connect } for pid=6636 comm="syz.5.1167" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 152.778948][ T6653] tipc: Enabled bearer , priority 0 [ 152.780517][ T6653] tipc: Resetting bearer [ 152.793975][ T6652] tipc: Disabling bearer [ 152.802905][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 152.818572][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1175'. [ 152.992170][ T6675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1183'. [ 153.053036][ T6683] tipc: Enabled bearer , priority 0 [ 153.054270][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'. [ 153.057135][ T6683] tipc: Resetting bearer [ 153.074590][ T6682] tipc: Disabling bearer [ 153.762225][ T29] audit: type=1400 audit(1788491086.675:633): avc: denied { read write } for pid=6716 comm="syz.5.1199" name="uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 153.762334][ T29] audit: type=1400 audit(1788491086.675:634): avc: denied { open } for pid=6716 comm="syz.5.1199" path="/dev/uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 153.765147][ T3395] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0002/input/input5 [ 153.766057][ T29] audit: type=1400 audit(1788491086.675:635): avc: denied { read } for pid=2966 comm="acpid" name="event4" dev="devtmpfs" ino=749 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.766085][ T29] audit: type=1400 audit(1788491086.675:636): avc: denied { open } for pid=2966 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=749 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.766186][ T29] audit: type=1400 audit(1788491086.675:637): avc: denied { ioctl } for pid=2966 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=749 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.766906][ T3395] asus 0018:0B05:0101.0002: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 153.766938][ T3395] asus 0018:0B05:0101.0002: Asus failed to start multitouch: -5 [ 153.821280][ T3395] asus 0018:0B05:0101.0002: probe with driver asus failed with error -5 [ 153.880330][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 154.092664][ T6725] tipc: Enabling of bearer rejected, failed to enable media [ 154.097912][ T6731] FAULT_INJECTION: forcing a failure. [ 154.097912][ T6731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.097944][ T6731] CPU: 0 UID: 0 PID: 6731 Comm: syz.5.1205 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.098046][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.098059][ T6731] Call Trace: [ 154.098067][ T6731] [ 154.098076][ T6731] __dump_stack+0x1d/0x30 [ 154.098103][ T6731] dump_stack_lvl+0x95/0xd0 [ 154.098127][ T6731] dump_stack+0x15/0x1b [ 154.098158][ T6731] should_fail_ex+0x262/0x280 [ 154.098181][ T6731] should_fail+0xb/0x20 [ 154.098201][ T6731] should_fail_usercopy+0x1a/0x20 [ 154.098225][ T6731] _copy_from_user+0x1c/0xb0 [ 154.098326][ T6731] tls_setsockopt+0x560/0xe00 [ 154.098353][ T6731] sock_common_setsockopt+0x69/0x80 [ 154.098429][ T6731] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 154.098455][ T6731] __sys_setsockopt+0x184/0x200 [ 154.098535][ T6731] __x64_sys_setsockopt+0x64/0x80 [ 154.098653][ T6731] x64_sys_call+0x248f/0x2550 [ 154.098686][ T6731] do_syscall_64+0x112/0x360 [ 154.098718][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.098803][ T6731] RIP: 0033:0x7f816bd1e159 [ 154.098828][ T6731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.098848][ T6731] RSP: 002b:00007f816a777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.098875][ T6731] RAX: ffffffffffffffda RBX: 00007f816bfa5fa0 RCX: 00007f816bd1e159 [ 154.098902][ T6731] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 154.098916][ T6731] RBP: 00007f816bdb5024 R08: 0000000000000028 R09: 0000000000000000 [ 154.099004][ T6731] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 154.099018][ T6731] R13: 00007f816bfa6038 R14: 00007f816bfa5fa0 R15: 00007ffe189735b8 [ 154.099039][ T6731] [ 154.304219][ T6753] netlink: 'syz.1.1209': attribute type 4 has an invalid length. [ 154.314539][ T6753] .`: renamed from bond0 [ 154.423101][ T6769] loop1: detected capacity change from 0 to 128 [ 154.460939][ T6769] FAT-fs (loop1): bogus number of reserved sectors [ 154.461078][ T6769] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 154.461100][ T6769] FAT-fs (loop1): Can't find a valid FAT filesystem [ 154.661009][ T6777] tipc: Enabled bearer , priority 0 [ 154.669790][ T6777] tipc: Resetting bearer [ 154.677608][ T6776] tipc: Disabling bearer [ 155.454781][ T6796] loop5: detected capacity change from 0 to 512 [ 155.577982][ T6796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.578061][ T6796] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.580874][ T6805] tipc: Enabled bearer , priority 0 [ 155.584151][ T6805] tipc: Resetting bearer [ 155.607027][ T6800] tipc: Disabling bearer [ 155.866751][ T6817] loop1: detected capacity change from 0 to 512 [ 155.931583][ T6817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.945220][ T6817] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.967606][ T29] audit: type=1400 audit(1788491088.885:638): avc: denied { write } for pid=6816 comm="syz.1.1241" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.991111][ T29] audit: type=1400 audit(1788491088.915:639): avc: denied { create } for pid=6816 comm="syz.1.1241" name="debug" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.129846][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.138993][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.380412][ T6849] tipc: Enabled bearer , priority 0 [ 156.440737][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 156.464557][ T6849] tipc: Resetting bearer [ 156.551347][ T6847] tipc: Disabling bearer [ 157.028847][ T6880] tipc: Enabled bearer , priority 0 [ 157.037718][ T6880] tipc: Resetting bearer [ 157.045382][ T6879] tipc: Disabling bearer [ 157.546283][ T29] audit: type=1400 audit(1788491090.455:640): avc: denied { getopt } for pid=6900 comm="syz.0.1273" lport=45949 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 157.914781][ T29] audit: type=1400 audit(1788491090.825:641): avc: denied { read } for pid=6924 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.915427][ T6927] loop5: detected capacity change from 0 to 512 [ 157.980451][ T6922] tipc: Enabling of bearer rejected, failed to enable media [ 158.596416][ T29] audit: type=1400 audit(1788491091.485:642): avc: denied { setopt } for pid=6942 comm="syz.4.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.128873][ T6968] __nla_validate_parse: 4 callbacks suppressed [ 159.128900][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 160.003983][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 160.075532][ T29] audit: type=1400 audit(1788491092.985:643): avc: denied { connect } for pid=7003 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.291370][ T7020] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1318'. [ 160.346034][ T7025] netlink: 'syz.1.1322': attribute type 4 has an invalid length. [ 160.415523][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 160.602856][ T7051] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 160.649740][ T7060] netlink: 'syz.5.1336': attribute type 4 has an invalid length. [ 160.659126][ T7051] veth3: entered allmulticast mode [ 160.669715][ T7051] bond0: (slave veth3): Enslaving as an active interface with a down link [ 160.706238][ T7062] bond0: (slave veth0_to_bond): making interface the new active one [ 160.710423][ T7064] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1334'. [ 160.726409][ T7062] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 160.754263][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1337'. [ 160.841269][ T7072] loop5: detected capacity change from 0 to 512 [ 160.853061][ T7072] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.871859][ T7072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.872001][ T7072] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.937163][ T29] audit: type=1400 audit(1788491093.855:644): avc: denied { listen } for pid=7075 comm="syz.2.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.053142][ T29] audit: type=1400 audit(1788491093.965:645): avc: denied { create } for pid=7090 comm="syz.1.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 161.055987][ T29] audit: type=1400 audit(1788491093.965:646): avc: denied { sys_admin } for pid=7090 comm="syz.1.1344" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 161.416073][ T7103] sctp: [Deprecated]: syz.1.1349 (pid 7103) Use of int in max_burst socket option. [ 161.416073][ T7103] Use struct sctp_assoc_value instead [ 161.505332][ T29] audit: type=1400 audit(1788491094.415:647): avc: denied { ioctl } for pid=7105 comm="syz.1.1350" path="socket:[16999]" dev="sockfs" ino=16999 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.740656][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.770630][ T7122] netlink: 'syz.4.1358': attribute type 4 has an invalid length. [ 162.856656][ T61] IPVS: starting estimator thread 0... [ 162.956409][ T7167] IPVS: using max 2400 ests per chain, 120000 per kthread [ 163.090324][ T7171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25897 sclass=netlink_route_socket pid=7171 comm=syz.5.1378 [ 163.518083][ T7179] loop5: detected capacity change from 0 to 512 [ 163.658702][ T7179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 163.658753][ T7179] System zones: 1-12 [ 163.674838][ T7179] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.1380: missing EA_INODE flag [ 163.674895][ T7179] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 163.687615][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 163.687635][ C1] EXT4-fs (loop5): initial error at time 1788491096: ext4_xattr_inode_iget:437: inode 12 [ 163.687671][ C1] EXT4-fs (loop5): last error at time 1788491096: ext4_xattr_inode_iget:437: inode 12 [ 163.687809][ T7179] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1380: error while reading EA inode 12 err=-117 [ 163.687835][ T7179] loop5: lost filesystem error report for type 5 error -117 [ 163.697886][ T7179] EXT4-fs (loop5): 1 orphan inode deleted [ 163.698537][ T7179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.755905][ T7204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25897 sclass=netlink_route_socket pid=7204 comm=syz.2.1390 [ 165.194657][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 165.214080][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.376198][ T7240] FAULT_INJECTION: forcing a failure. [ 165.376198][ T7240] name fail_futex, interval 1, probability 0, space 0, times 1 [ 165.376240][ T7240] CPU: 1 UID: 0 PID: 7240 Comm: syz.0.1406 Not tainted syzkaller #0 PREEMPT(lazy) [ 165.376270][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.376292][ T7240] Call Trace: [ 165.376299][ T7240] [ 165.376307][ T7240] __dump_stack+0x1d/0x30 [ 165.376361][ T7240] dump_stack_lvl+0x95/0xd0 [ 165.376386][ T7240] dump_stack+0x15/0x1b [ 165.376478][ T7240] should_fail_ex+0x262/0x280 [ 165.376502][ T7240] should_fail+0xb/0x20 [ 165.376522][ T7240] get_futex_key+0x12d/0xb10 [ 165.376553][ T7240] futex_wake+0x89/0x400 [ 165.376648][ T7240] do_futex+0x3f8/0x460 [ 165.376677][ T7240] ? tcp_setsockopt+0x98/0xb0 [ 165.376734][ T7240] __se_sys_futex+0x2f6/0x370 [ 165.376767][ T7240] __x64_sys_futex+0x78/0x90 [ 165.376836][ T7240] x64_sys_call+0x22e2/0x2550 [ 165.376863][ T7240] do_syscall_64+0x112/0x360 [ 165.376893][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.376930][ T7240] RIP: 0033:0x7f343644e159 [ 165.376949][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.377004][ T7240] RSP: 002b:00007f3434ea70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.377028][ T7240] RAX: ffffffffffffffda RBX: 00007f34366d5fa8 RCX: 00007f343644e159 [ 165.377044][ T7240] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f34366d5fac [ 165.377101][ T7240] RBP: 00007f34366d5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 165.377117][ T7240] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 165.377132][ T7240] R13: 00007f34366d6038 R14: 00007ffebe076eb0 R15: 00007ffebe076f98 [ 165.377152][ T7240] [ 165.681257][ T29] audit: type=1400 audit(1788491098.595:648): avc: denied { bind } for pid=7251 comm="syz.1.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.688748][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.688908][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.716759][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.716856][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.716949][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.716984][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.750177][ T7252] team0: Port device bridge0 added [ 165.806132][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.809181][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.873813][ T7258] loop2: detected capacity change from 0 to 512 [ 165.886737][ T7258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.904003][ T7258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.904093][ T7258] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.118383][ T7267] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 166.593950][ T7296] FAULT_INJECTION: forcing a failure. [ 166.593950][ T7296] name fail_futex, interval 1, probability 0, space 0, times 0 [ 166.594131][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.0.1429 Not tainted syzkaller #0 PREEMPT(lazy) [ 166.594161][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.594174][ T7296] Call Trace: [ 166.594182][ T7296] [ 166.594190][ T7296] __dump_stack+0x1d/0x30 [ 166.594300][ T7296] dump_stack_lvl+0x95/0xd0 [ 166.594332][ T7296] dump_stack+0x15/0x1b [ 166.594357][ T7296] should_fail_ex+0x262/0x280 [ 166.594425][ T7296] should_fail+0xb/0x20 [ 166.594443][ T7296] get_futex_key+0x12d/0xb10 [ 166.594507][ T7296] futex_wake+0x89/0x400 [ 166.594550][ T7296] do_futex+0x3f8/0x460 [ 166.594578][ T7296] ? tcp_setsockopt+0x98/0xb0 [ 166.594714][ T7296] __se_sys_futex+0x2f6/0x370 [ 166.594797][ T7296] __x64_sys_futex+0x78/0x90 [ 166.594902][ T7296] x64_sys_call+0x22e2/0x2550 [ 166.594930][ T7296] do_syscall_64+0x112/0x360 [ 166.594962][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.595001][ T7296] RIP: 0033:0x7f343644e159 [ 166.595023][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.595046][ T7296] RSP: 002b:00007f3434ea70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.595087][ T7296] RAX: ffffffffffffffda RBX: 00007f34366d5fa8 RCX: 00007f343644e159 [ 166.595104][ T7296] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f34366d5fac [ 166.595121][ T7296] RBP: 00007f34366d5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 166.595210][ T7296] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 166.595225][ T7296] R13: 00007f34366d6038 R14: 00007ffebe076eb0 R15: 00007ffebe076f98 [ 166.595248][ T7296] [ 166.994021][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.311487][ T7313] ip_tables: iptables: counters copy to user failed while replacing table [ 167.961831][ T7323] loop2: detected capacity change from 0 to 128 [ 170.171128][ T29] audit: type=1400 audit(1788491103.085:649): avc: denied { accept } for pid=7372 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.541740][ T7393] gretap0: entered promiscuous mode [ 170.686659][ T7399] loop2: detected capacity change from 0 to 512 [ 170.710544][ T7399] EXT4-fs (loop2): 1 truncate cleaned up [ 170.711114][ T7399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.711933][ T7399] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.856071][ T7414] loop2: detected capacity change from 0 to 128 [ 170.882835][ T7414] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.895402][ T7414] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.917019][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.942311][ T7418] FAULT_INJECTION: forcing a failure. [ 170.942311][ T7418] name fail_futex, interval 1, probability 0, space 0, times 0 [ 170.942361][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.1.1474 Not tainted syzkaller #0 PREEMPT(lazy) [ 170.942463][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.942476][ T7418] Call Trace: [ 170.942483][ T7418] [ 170.942491][ T7418] __dump_stack+0x1d/0x30 [ 170.942522][ T7418] dump_stack_lvl+0x95/0xd0 [ 170.942558][ T7418] dump_stack+0x15/0x1b [ 170.942583][ T7418] should_fail_ex+0x262/0x280 [ 170.942608][ T7418] should_fail+0xb/0x20 [ 170.942710][ T7418] get_futex_key+0x12d/0xb10 [ 170.942767][ T7418] futex_wait_setup+0x49/0x3e0 [ 170.942806][ T7418] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 170.942906][ T7418] ? hrtimer_active+0xe4/0x110 [ 170.942928][ T7418] __futex_wait+0xa9/0x260 [ 170.943044][ T7418] ? __pfx_futex_wake_mark+0x10/0x10 [ 170.943079][ T7418] futex_wait+0x98/0x1c0 [ 170.943103][ T7418] do_futex+0x391/0x460 [ 170.943132][ T7418] ? tcp_setsockopt+0x98/0xb0 [ 170.943230][ T7418] __se_sys_futex+0x2f6/0x370 [ 170.943257][ T7418] ? xfd_validate_state+0x45/0xf0 [ 170.943287][ T7418] __x64_sys_futex+0x78/0x90 [ 170.943363][ T7418] x64_sys_call+0x22e2/0x2550 [ 170.943528][ T7418] do_syscall_64+0x112/0x360 [ 170.943559][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.943639][ T7418] RIP: 0033:0x7f1ed4ffe159 [ 170.943658][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.943677][ T7418] RSP: 002b:00007f1ed3a360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 170.943700][ T7418] RAX: ffffffffffffffda RBX: 00007f1ed5286098 RCX: 00007f1ed4ffe159 [ 170.943761][ T7418] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1ed5286098 [ 170.943778][ T7418] RBP: 00007f1ed5286090 R08: 0000000000000000 R09: 0000000000000000 [ 170.943794][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.943807][ T7418] R13: 00007f1ed5286128 R14: 00007ffe1576a760 R15: 00007ffe1576a848 [ 170.943860][ T7418] [ 171.356872][ T4825] IPVS: starting estimator thread 0... [ 171.446524][ T7438] IPVS: using max 2400 ests per chain, 120000 per kthread [ 172.555864][ T7457] bridge_slave_0: left allmulticast mode [ 172.555938][ T7457] bridge_slave_0: left promiscuous mode [ 172.557806][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.562986][ T7457] bridge_slave_1: left allmulticast mode [ 172.563009][ T7457] bridge_slave_1: left promiscuous mode [ 172.563403][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.645902][ T7457] .`: (slave bond_slave_0): Releasing backup interface [ 172.656505][ T7457] .`: (slave bond_slave_1): Releasing backup interface [ 172.666281][ T7466] FAULT_INJECTION: forcing a failure. [ 172.666281][ T7466] name fail_futex, interval 1, probability 0, space 0, times 0 [ 172.666528][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.5.1494 Not tainted syzkaller #0 PREEMPT(lazy) [ 172.666557][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.666630][ T7466] Call Trace: [ 172.666639][ T7466] [ 172.666648][ T7466] __dump_stack+0x1d/0x30 [ 172.666677][ T7466] dump_stack_lvl+0x95/0xd0 [ 172.666710][ T7466] dump_stack+0x15/0x1b [ 172.666733][ T7466] should_fail_ex+0x262/0x280 [ 172.666757][ T7466] should_fail+0xb/0x20 [ 172.666783][ T7466] get_futex_key+0x12d/0xb10 [ 172.666813][ T7466] futex_wake+0x89/0x400 [ 172.666847][ T7466] do_futex+0x3f8/0x460 [ 172.666911][ T7466] ? tcp_setsockopt+0x98/0xb0 [ 172.666935][ T7466] __se_sys_futex+0x2f6/0x370 [ 172.666966][ T7466] __x64_sys_futex+0x78/0x90 [ 172.667050][ T7466] x64_sys_call+0x22e2/0x2550 [ 172.667077][ T7466] do_syscall_64+0x112/0x360 [ 172.667140][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.667239][ T7466] RIP: 0033:0x7f816bd1e159 [ 172.667258][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.667279][ T7466] RSP: 002b:00007f816a7770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.667379][ T7466] RAX: ffffffffffffffda RBX: 00007f816bfa5fa8 RCX: 00007f816bd1e159 [ 172.667419][ T7466] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f816bfa5fac [ 172.667436][ T7466] RBP: 00007f816bfa5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 172.667452][ T7466] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 172.667475][ T7466] R13: 00007f816bfa6038 R14: 00007ffe189734d0 R15: 00007ffe189735b8 [ 172.667495][ T7466] [ 172.688553][ T7457] team0: Port device team_slave_0 removed [ 172.712203][ T7457] team0: Port device team_slave_1 removed [ 172.718174][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.718195][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.803876][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.803931][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.813557][ T7457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.955951][ T7480] loop5: detected capacity change from 0 to 512 [ 174.218239][ T7480] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.238123][ T7480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.238191][ T7480] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.489385][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.903130][ T7507] FAULT_INJECTION: forcing a failure. [ 174.903130][ T7507] name fail_futex, interval 1, probability 0, space 0, times 0 [ 174.903214][ T7507] CPU: 1 UID: 0 PID: 7507 Comm: syz.1.1509 Not tainted syzkaller #0 PREEMPT(lazy) [ 174.903244][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.903258][ T7507] Call Trace: [ 174.903265][ T7507] [ 174.903272][ T7507] __dump_stack+0x1d/0x30 [ 174.903302][ T7507] dump_stack_lvl+0x95/0xd0 [ 174.903328][ T7507] dump_stack+0x15/0x1b [ 174.903370][ T7507] should_fail_ex+0x262/0x280 [ 174.903406][ T7507] should_fail+0xb/0x20 [ 174.903429][ T7507] get_futex_key+0x12d/0xb10 [ 174.903457][ T7507] futex_wait_setup+0x49/0x3e0 [ 174.903532][ T7507] ? __rcu_read_unlock+0x4e/0x70 [ 174.903592][ T7507] __futex_wait+0xa9/0x260 [ 174.903641][ T7507] ? __pfx_futex_wake_mark+0x10/0x10 [ 174.903678][ T7507] futex_wait+0x98/0x1c0 [ 174.903703][ T7507] do_futex+0x391/0x460 [ 174.903736][ T7507] __se_sys_futex+0x2f6/0x370 [ 174.903765][ T7507] __x64_sys_futex+0x78/0x90 [ 174.903793][ T7507] x64_sys_call+0x22e2/0x2550 [ 174.903822][ T7507] do_syscall_64+0x112/0x360 [ 174.903914][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.903940][ T7507] RIP: 0033:0x7f1ed4ffe159 [ 174.903959][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.903977][ T7507] RSP: 002b:00007f1ed3a570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 174.904071][ T7507] RAX: ffffffffffffffda RBX: 00007f1ed5285fa8 RCX: 00007f1ed4ffe159 [ 174.904091][ T7507] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1ed5285fa8 [ 174.904109][ T7507] RBP: 00007f1ed5285fa0 R08: 0000000000000000 R09: 0000000000000000 [ 174.904126][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.904200][ T7507] R13: 00007f1ed5286038 R14: 00007ffe1576a760 R15: 00007ffe1576a848 [ 174.904303][ T7507] [ 175.981748][ T38] IPVS: starting estimator thread 0... [ 176.076432][ T7555] IPVS: using max 2400 ests per chain, 120000 per kthread [ 176.862008][ T7596] FAULT_INJECTION: forcing a failure. [ 176.862008][ T7596] name fail_futex, interval 1, probability 0, space 0, times 0 [ 176.862073][ T7596] CPU: 0 UID: 0 PID: 7596 Comm: syz.0.1544 Not tainted syzkaller #0 PREEMPT(lazy) [ 176.862103][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.862118][ T7596] Call Trace: [ 176.862128][ T7596] [ 176.862138][ T7596] __dump_stack+0x1d/0x30 [ 176.862230][ T7596] dump_stack_lvl+0x95/0xd0 [ 176.862253][ T7596] dump_stack+0x15/0x1b [ 176.862275][ T7596] should_fail_ex+0x262/0x280 [ 176.862368][ T7596] should_fail+0xb/0x20 [ 176.862389][ T7596] get_futex_key+0x12d/0xb10 [ 176.862423][ T7596] futex_wake+0x89/0x400 [ 176.862463][ T7596] do_futex+0x3f8/0x460 [ 176.862516][ T7596] __se_sys_futex+0x2f6/0x370 [ 176.862550][ T7596] __x64_sys_futex+0x78/0x90 [ 176.862584][ T7596] x64_sys_call+0x22e2/0x2550 [ 176.862679][ T7596] do_syscall_64+0x112/0x360 [ 176.862714][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.862795][ T7596] RIP: 0033:0x7f343644e159 [ 176.862816][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.862899][ T7596] RSP: 002b:00007f3434ea70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 176.862926][ T7596] RAX: ffffffffffffffda RBX: 00007f34366d5fa8 RCX: 00007f343644e159 [ 176.862944][ T7596] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f34366d5fac [ 176.862997][ T7596] RBP: 00007f34366d5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 176.863012][ T7596] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 176.863026][ T7596] R13: 00007f34366d6038 R14: 00007ffebe076eb0 R15: 00007ffebe076f98 [ 176.863049][ T7596] [ 177.404193][ T7608] loop2: detected capacity change from 0 to 164 [ 178.244529][ T7617] loop8: detected capacity change from 0 to 7 [ 178.292127][ T7623] netlink: 'syz.5.1556': attribute type 10 has an invalid length. [ 178.368008][ T7631] ip_tables: iptables: counters copy to user failed while replacing table [ 178.399872][ T7633] tipc: Enabled bearer , priority 0 [ 178.408477][ T7633] tipc: Resetting bearer [ 178.415968][ T7632] tipc: Disabling bearer [ 178.430172][ T7613] rock: directory entry would overflow storage [ 178.430187][ T7613] rock: sig=0x4f50, size=4, remaining=3 [ 178.430205][ T7613] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 179.284523][ T29] audit: type=1400 audit(1788491112.195:650): avc: denied { getopt } for pid=7664 comm="syz.2.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.083306][ T7671] tmpfs: Bad value for 'mpol' [ 180.555091][ T29] audit: type=1400 audit(1788491113.465:651): avc: denied { getopt } for pid=7699 comm="syz.2.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.933195][ T7700] FAULT_INJECTION: forcing a failure. [ 180.933195][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 180.933240][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.2.1585 Not tainted syzkaller #0 PREEMPT(lazy) [ 180.933267][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.933326][ T7700] Call Trace: [ 180.933335][ T7700] [ 180.933343][ T7700] __dump_stack+0x1d/0x30 [ 180.933380][ T7700] dump_stack_lvl+0x95/0xd0 [ 180.933403][ T7700] dump_stack+0x15/0x1b [ 180.933426][ T7700] should_fail_ex+0x262/0x280 [ 180.933450][ T7700] ? assoc_array_insert+0x75/0x19a0 [ 180.933526][ T7700] should_failslab+0x8c/0xb0 [ 180.933637][ T7700] __kmalloc_cache_noprof+0x7a/0x400 [ 180.933668][ T7700] ? assoc_array_insert+0x75/0x19a0 [ 180.933697][ T7700] assoc_array_insert+0x75/0x19a0 [ 180.933791][ T7700] ? _get_random_bytes+0x182/0x1b0 [ 180.933869][ T7700] __key_link_begin+0x84/0x130 [ 180.933905][ T7700] key_instantiate_and_link+0x15f/0x2f0 [ 180.933936][ T7700] keyring_alloc+0x6f/0xb0 [ 180.933978][ T7700] look_up_user_keyrings+0x22a/0x400 [ 180.934005][ T7700] lookup_user_key+0x23d/0xd60 [ 180.934031][ T7700] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 180.934095][ T7700] __se_sys_add_key+0x272/0x360 [ 180.934130][ T7700] __x64_sys_add_key+0x67/0x80 [ 180.934163][ T7700] x64_sys_call+0x1fa9/0x2550 [ 180.934215][ T7700] do_syscall_64+0x112/0x360 [ 180.934245][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.934340][ T7700] RIP: 0033:0x7f755d18e159 [ 180.934379][ T7700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.934400][ T7700] RSP: 002b:00007f755bbe7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 180.934425][ T7700] RAX: ffffffffffffffda RBX: 00007f755d415fa0 RCX: 00007f755d18e159 [ 180.934441][ T7700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 180.934499][ T7700] RBP: 00007f755d225024 R08: fffffffffffffffd R09: 0000000000000000 [ 180.934580][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.934594][ T7700] R13: 00007f755d416038 R14: 00007f755d415fa0 R15: 00007fffe76bf5a8 [ 180.934615][ T7700] [ 181.690709][ T7729] loop5: detected capacity change from 0 to 4096 [ 181.701750][ T7729] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.714414][ T7729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.760901][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.114341][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1604'. [ 182.911794][ T7759] syzkaller0: entered promiscuous mode [ 182.911821][ T7759] syzkaller0: entered allmulticast mode [ 182.929531][ T7759] tipc: Enabled bearer , priority 0 [ 182.941340][ T7759] tipc: Resetting bearer [ 182.949387][ T7758] tipc: Resetting bearer [ 182.955125][ T7758] tipc: Disabling bearer [ 183.940622][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'. [ 185.132674][ T7810] loop5: detected capacity change from 0 to 256 [ 185.147150][ T7810] FAT-fs (loop5): bogus number of FAT sectors [ 185.147177][ T7810] FAT-fs (loop5): Can't find a valid FAT filesystem [ 185.221941][ T7813] FAULT_INJECTION: forcing a failure. [ 185.221941][ T7813] name fail_futex, interval 1, probability 0, space 0, times 0 [ 185.222020][ T7813] CPU: 0 UID: 0 PID: 7813 Comm: syz.1.1627 Not tainted syzkaller #0 PREEMPT(lazy) [ 185.222052][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.222067][ T7813] Call Trace: [ 185.222076][ T7813] [ 185.222085][ T7813] __dump_stack+0x1d/0x30 [ 185.222111][ T7813] dump_stack_lvl+0x95/0xd0 [ 185.222152][ T7813] dump_stack+0x15/0x1b [ 185.222178][ T7813] should_fail_ex+0x262/0x280 [ 185.222220][ T7813] should_fail+0xb/0x20 [ 185.222243][ T7813] get_futex_key+0x12d/0xb10 [ 185.222285][ T7813] futex_wake+0x89/0x400 [ 185.222338][ T7813] do_futex+0x3f8/0x460 [ 185.222367][ T7813] ? tcp_setsockopt+0x98/0xb0 [ 185.222389][ T7813] __se_sys_futex+0x2f6/0x370 [ 185.222454][ T7813] __x64_sys_futex+0x78/0x90 [ 185.222484][ T7813] x64_sys_call+0x22e2/0x2550 [ 185.222509][ T7813] do_syscall_64+0x112/0x360 [ 185.222540][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.222645][ T7813] RIP: 0033:0x7f1ed4ffe159 [ 185.222666][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.222686][ T7813] RSP: 002b:00007f1ed3a570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.222730][ T7813] RAX: ffffffffffffffda RBX: 00007f1ed5285fa8 RCX: 00007f1ed4ffe159 [ 185.222811][ T7813] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1ed5285fac [ 185.222826][ T7813] RBP: 00007f1ed5285fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 185.222850][ T7813] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 185.222866][ T7813] R13: 00007f1ed5286038 R14: 00007ffe1576a760 R15: 00007ffe1576a848 [ 185.222887][ T7813] [ 185.485130][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'. [ 185.547427][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1631'. [ 186.229383][ T29] audit: type=1400 audit(1788491119.125:652): avc: denied { map } for pid=7809 comm="syz.5.1626" path="socket:[18357]" dev="sockfs" ino=18357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.266509][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.280798][ T29] audit: type=1400 audit(1788491119.145:653): avc: denied { read write } for pid=7809 comm="syz.5.1626" path="socket:[18357]" dev="sockfs" ino=18357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.283453][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1642'. [ 187.553414][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1647'. [ 188.429923][ T3552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.488166][ T29] audit: type=1400 audit(1788491121.405:654): avc: denied { read write } for pid=7886 comm="syz.1.1655" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.515081][ T29] audit: type=1400 audit(1788491121.425:655): avc: denied { open } for pid=7886 comm="syz.1.1655" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.782965][ T7909] loop1: detected capacity change from 0 to 256 [ 188.811037][ T7909] FAT-fs (loop1): bogus number of FAT sectors [ 188.811077][ T7909] FAT-fs (loop1): Can't find a valid FAT filesystem [ 188.908011][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.162473][ T7925] bridge_slave_0: entered promiscuous mode [ 191.134847][ T7829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.556143][ T29] audit: type=1400 audit(1788491124.465:656): avc: denied { connect } for pid=7963 comm="syz.1.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.436277][ T7990] loop1: detected capacity change from 0 to 512 [ 192.448339][ T7990] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.468302][ T7990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.468389][ T7990] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.756781][ T7999] loop5: detected capacity change from 0 to 256 [ 192.775124][ T7999] FAT-fs (loop5): bogus number of FAT sectors [ 192.775149][ T7999] FAT-fs (loop5): Can't find a valid FAT filesystem [ 192.842257][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.919831][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.928128][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.935211][ T4825] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.477273][ T8007] lo speed is unknown, defaulting to 1000 [ 194.256938][ T8028] loop1: detected capacity change from 0 to 512 [ 194.271958][ T8028] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.339745][ T8028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.339923][ T8028] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.405041][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.467311][ T8033] loop1: detected capacity change from 0 to 512 [ 194.482350][ T8033] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.1714: corrupted in-inode xattr: invalid ea_ino [ 194.482457][ T8033] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.495897][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 194.495932][ C0] EXT4-fs (loop1): initial error at time 1788491127: ext4_iget_extra_inode:5210: inode 15 [ 194.495961][ C0] EXT4-fs (loop1): last error at time 1788491127: ext4_iget_extra_inode:5210: inode 15 [ 194.542281][ T8033] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1714: couldn't read orphan inode 15 (err -117) [ 194.542361][ T8033] loop1: lost filesystem error report for type 5 error -117 [ 194.555240][ T8033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.581710][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1693'. [ 194.833995][ T8042] loop2: detected capacity change from 0 to 1024 [ 194.834516][ T8042] EXT4-fs: Ignoring removed bh option [ 194.845010][ T8042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.976382][ T3552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.095182][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.274752][ T8080] loop2: detected capacity change from 0 to 256 [ 196.320454][ T8080] FAT-fs (loop2): bogus number of FAT sectors [ 196.320502][ T8080] FAT-fs (loop2): Can't find a valid FAT filesystem [ 196.335266][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.460996][ T8033] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.1714: invalid fast symlink length 39 [ 196.501990][ T8033] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.1714: invalid fast symlink length 39 [ 196.591561][ T29] audit: type=1400 audit(1788491129.505:657): avc: denied { write } for pid=8032 comm="syz.1.1714" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.934821][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.378861][ T8107] loop5: detected capacity change from 0 to 1024 [ 197.392758][ T8107] EXT4-fs: Ignoring removed bh option [ 197.428863][ T8107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.104635][ T8124] netlink: 'syz.4.1745': attribute type 29 has an invalid length. [ 198.106629][ T8124] netlink: 'syz.4.1745': attribute type 29 has an invalid length. [ 198.284903][ T8135] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1749'. [ 198.326661][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.339338][ T7829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 199.053212][ T8164] loop2: detected capacity change from 0 to 2048 [ 199.103079][ T8164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 199.192809][ T29] audit: type=1400 audit(1788491132.105:658): avc: denied { bind } for pid=8165 comm="syz.1.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.219566][ T29] audit: type=1400 audit(1788491132.135:659): avc: denied { node_bind } for pid=8165 comm="syz.1.1756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 199.242886][ T29] audit: type=1400 audit(1788491132.165:660): avc: denied { name_bind } for pid=8165 comm="syz.1.1756" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 199.266470][ T29] audit: type=1400 audit(1788491132.185:661): avc: denied { getopt } for pid=8165 comm="syz.1.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.321032][ T8171] loop1: detected capacity change from 0 to 2048 [ 199.333080][ T8171] EXT4-fs: Ignoring removed orlov option [ 199.333118][ T8171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.467738][ T8171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.493328][ T8175] loop5: detected capacity change from 0 to 512 [ 199.504027][ T8175] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.541887][ T8175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.541957][ T8175] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.581951][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.649139][ T8187] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1761'. [ 200.118428][ T8214] loop5: detected capacity change from 0 to 512 [ 200.119907][ T8214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.140332][ T8214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.140657][ T8214] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.317916][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.432697][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 200.659552][ T29] audit: type=1326 audit(1788491133.575:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.5.1772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816bd1e159 code=0x7ffc0000 [ 200.659587][ T29] audit: type=1326 audit(1788491133.575:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.5.1772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816bd1e159 code=0x7ffc0000 [ 200.668687][ T29] audit: type=1326 audit(1788491133.585:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.5.1772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816bd1e159 code=0x7ffc0000 [ 200.678275][ T29] audit: type=1326 audit(1788491133.585:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.5.1772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f816bd1e159 code=0x7ffc0000 [ 200.709011][ T29] audit: type=1326 audit(1788491133.585:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.5.1772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816bd1e159 code=0x7ffc0000 [ 200.913373][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 201.052871][ T8241] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1778'. [ 201.251927][ T8249] loop5: detected capacity change from 0 to 512 [ 201.267945][ T8249] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.292905][ T8249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.292994][ T8249] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.332721][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.458722][ T8256] loop5: detected capacity change from 0 to 2048 [ 201.479495][ T8256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.499053][ T8256] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1784: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 201.500210][ T8256] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1784: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 201.501231][ T8256] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1784: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 201.799350][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.849247][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1785'. [ 201.861988][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1785'. [ 201.862031][ T8268] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1785'. [ 201.976501][ T8270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1786'. [ 202.735261][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1797'. [ 203.260625][ T8318] loop5: detected capacity change from 0 to 1024 [ 203.269477][ T8318] EXT4-fs: Ignoring removed bh option [ 203.323180][ T8318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.627646][ T7993] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 204.867973][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.898238][ T8346] loop5: detected capacity change from 0 to 256 [ 204.906771][ T8346] FAT-fs (loop5): bogus number of FAT sectors [ 204.906799][ T8346] FAT-fs (loop5): Can't find a valid FAT filesystem [ 205.225578][ T8362] netlink: 'syz.4.1819': attribute type 29 has an invalid length. [ 205.258765][ T8362] netlink: 'syz.4.1819': attribute type 29 has an invalid length. [ 205.539710][ T8376] loop5: detected capacity change from 0 to 1024 [ 205.568203][ T8376] EXT4-fs: Ignoring removed bh option [ 205.617636][ T8376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.822586][ T4825] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.399635][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.856455][ T3552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 207.930211][ T8398] netlink: 'syz.0.1831': attribute type 29 has an invalid length. [ 207.932203][ T8398] netlink: 'syz.0.1831': attribute type 29 has an invalid length. [ 208.168807][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.168942][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.193934][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.194026][ T8420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.194131][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.194184][ T8420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.305769][ T8420] team0: Port device bridge0 added [ 208.702827][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.715983][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.912731][ T8439] netlink: 'syz.5.1845': attribute type 29 has an invalid length. [ 208.919349][ T8439] netlink: 'syz.5.1845': attribute type 29 has an invalid length. [ 208.920429][ T8439] netlink: 'syz.5.1845': attribute type 29 has an invalid length. [ 209.051607][ T4825] Bluetooth: hci0: Frame reassembly failed (-84) [ 209.395516][ T8470] netlink: 'syz.1.1857': attribute type 29 has an invalid length. [ 209.396609][ T8470] netlink: 'syz.1.1857': attribute type 29 has an invalid length. [ 209.397131][ T8470] netlink: 'syz.1.1857': attribute type 29 has an invalid length. [ 210.309575][ T8494] loop5: detected capacity change from 0 to 512 [ 210.699795][ T8501] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 210.705746][ T8501] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 210.706102][ T8501] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 211.096806][ T3552] Bluetooth: hci0: command 0x1003 tx timeout [ 211.116560][ T7829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 211.759872][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.760022][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.900710][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.900786][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.900930][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.900961][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.986773][ T8529] team0: Port device bridge0 added [ 212.268359][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.296056][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.164556][ T8555] loop2: detected capacity change from 0 to 2048 [ 213.217702][ T4825] Bluetooth: hci0: Frame reassembly failed (-84) [ 213.246342][ T8555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 213.493822][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 213.649395][ T8577] loop5: detected capacity change from 0 to 1024 [ 213.660655][ T8577] EXT4-fs: Ignoring removed bh option [ 213.662459][ T8579] syzkaller0: entered promiscuous mode [ 213.662539][ T8579] syzkaller0: entered allmulticast mode [ 213.708497][ T8577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.872277][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 213.872311][ T29] audit: type=1400 audit(1788491146.785:829): avc: denied { write } for pid=8576 comm="syz.5.1892" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.911371][ T29] audit: type=1400 audit(1788491146.825:830): avc: denied { ioctl } for pid=8576 comm="syz.5.1892" path="/249/file1/file1" dev="loop5" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.392539][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 214.547880][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.217023][ T3552] Bluetooth: hci0: command 0x1003 tx timeout [ 215.245816][ T7829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.295877][ T8608] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 215.437147][ T29] audit: type=1400 audit(1788491148.275:831): avc: denied { mount } for pid=8607 comm="syz.2.1900" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 216.001948][ T8623] syzkaller0: entered promiscuous mode [ 216.001999][ T8623] syzkaller0: entered allmulticast mode [ 216.099597][ T8632] lo speed is unknown, defaulting to 1000 [ 216.946700][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.085820][ T7829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 219.135279][ T8687] loop2: detected capacity change from 0 to 2048 [ 219.188847][ T8687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 219.351491][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.376398][ T3552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.184043][ T8759] netlink: 'syz.1.1953': attribute type 2 has an invalid length. [ 222.200342][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1953'. [ 222.255182][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 222.609810][ T4825] Bluetooth: hci0: Frame reassembly failed (-84) [ 222.842919][ T8781] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1962'. [ 223.190974][ T8795] team0: Port device bridge0 removed [ 223.574876][ T8803] bridge_slave_0: left promiscuous mode [ 223.817746][ T8808] loop5: detected capacity change from 0 to 2048 [ 223.839262][ T8808] EXT4-fs: Mount option(s) incompatible with ext3 [ 224.143534][ T8804] netlink: 'syz.5.1968': attribute type 9 has an invalid length. [ 224.143564][ T8804] netlink: 399 bytes leftover after parsing attributes in process `syz.5.1968'. [ 224.346755][ T8816] loop5: detected capacity change from 0 to 1024 [ 224.358968][ T8816] EXT4-fs: Ignoring removed bh option [ 224.471676][ T8816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.505763][ T8821] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1974'. [ 224.664472][ T7829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 224.793221][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.793445][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.855969][ T8839] loop2: detected capacity change from 0 to 2048 [ 224.884828][ T8839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.906601][ T8839] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.1979: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 224.929394][ T8839] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.1979: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 224.932252][ T8839] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.1979: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 225.177108][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.397942][ T29] audit: type=1400 audit(1788491158.315:832): avc: denied { ioctl } for pid=8847 comm="syz.0.1982" path="/dev/input/event2" dev="devtmpfs" ino=254 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.475542][ T8853] geneve2: entered promiscuous mode [ 225.591398][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1985'. [ 225.617615][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.645695][ T8865] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1986'. [ 225.692525][ T8867] loop2: detected capacity change from 0 to 512 [ 225.725628][ T8867] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1987: corrupted in-inode xattr: invalid ea_ino [ 225.725749][ T8867] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.726007][ T8867] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1987: couldn't read orphan inode 15 (err -117) [ 225.726039][ T8867] loop2: lost filesystem error report for type 5 error -117 [ 225.726740][ T8867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.040739][ T8878] loop5: detected capacity change from 0 to 512 [ 226.062694][ T8878] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1991: corrupted in-inode xattr: invalid ea_ino [ 226.062736][ T8878] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 226.066327][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 226.066349][ C1] EXT4-fs (loop5): initial error at time 1788491158: ext4_iget_extra_inode:5210: inode 15 [ 226.066381][ C1] EXT4-fs (loop5): last error at time 1788491158: ext4_iget_extra_inode:5210: inode 15 [ 226.077869][ T8878] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1991: couldn't read orphan inode 15 (err -117) [ 226.077952][ T8878] loop5: lost filesystem error report for type 5 error -117 [ 226.088676][ T8878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.150781][ T8871] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.1987: invalid fast symlink length 39 [ 226.303918][ T8796] syz.1.1965 (8796) used greatest stack depth: 8536 bytes left [ 226.432336][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.617068][ T8883] geneve2: left promiscuous mode [ 226.732169][ T8897] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1998'. [ 226.784619][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'. [ 226.909866][ T29] audit: type=1400 audit(1788491159.825:833): avc: denied { remount } for pid=8909 comm="syz.0.2002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 226.909915][ T8910] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 227.242237][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'. [ 227.286661][ T8925] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.1991: invalid fast symlink length 39 [ 227.288042][ T29] audit: type=1400 audit(1788491160.205:834): avc: denied { write } for pid=8877 comm="syz.5.1991" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.360355][ T8920] loop2: detected capacity change from 0 to 2048 [ 227.399139][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.454116][ T8920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 227.585460][ T8937] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2009'. [ 227.718377][ T8952] loop5: detected capacity change from 0 to 1024 [ 227.723314][ T8952] EXT4-fs: Ignoring removed bh option [ 227.906505][ T8828] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 228.008608][ T5235] kworker/u8:9 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 228.008658][ T5235] CPU: 0 UID: 0 PID: 5235 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(lazy) [ 228.008689][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.008785][ T5235] Workqueue: loop2 loop_rootcg_workfn [ 228.008855][ T5235] Call Trace: [ 228.008864][ T5235] [ 228.008874][ T5235] __dump_stack+0x1d/0x30 [ 228.008901][ T5235] dump_stack_lvl+0x95/0xd0 [ 228.008927][ T5235] dump_stack+0x15/0x1b [ 228.009012][ T5235] dump_header+0x80/0x240 [ 228.009038][ T5235] oom_kill_process+0x294/0x420 [ 228.009064][ T5235] out_of_memory+0x981/0xbc0 [ 228.009090][ T5235] try_charge_memcg+0x6ba/0xae0 [ 228.009200][ T5235] charge_memcg+0x16f/0x220 [ 228.009228][ T5235] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 228.009285][ T5235] swap_cache_alloc_folio+0x47b/0x610 [ 228.009313][ T5235] swap_cluster_readahead+0x2b7/0x460 [ 228.009395][ T5235] ? swap_cache_get_folio+0x1f7/0x200 [ 228.009443][ T5235] shmem_swapin_folio+0x935/0x1300 [ 228.009479][ T5235] ? __rcu_read_unlock+0x4e/0x70 [ 228.009514][ T5235] ? filemap_get_entry+0x2a4/0x2e0 [ 228.009593][ T5235] shmem_get_folio_gfp+0x28a/0xd90 [ 228.009627][ T5235] ? inode_set_ctime_current+0x65b/0x8f0 [ 228.009726][ T5235] shmem_write_begin+0xfc/0x1f0 [ 228.009808][ T5235] generic_perform_write+0x186/0x490 [ 228.009837][ T5235] ? __mark_inode_dirty+0x1f5/0x700 [ 228.009884][ T5235] shmem_file_write_iter+0xc5/0xf0 [ 228.009928][ T5235] lo_rw_aio+0x6ab/0x760 [ 228.010111][ T5235] ? kthread_data+0x52/0x70 [ 228.010149][ T5235] ? wq_worker_running+0x76/0x120 [ 228.010190][ T5235] loop_process_work+0x569/0xad0 [ 228.010288][ T5235] ? __rcu_read_unlock+0x4e/0x70 [ 228.010378][ T5235] ? hrtimer_start_range_ns_common+0x55c/0x860 [ 228.010490][ T5235] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 228.010534][ T5235] ? hrtimer_start_range_ns+0x108/0x120 [ 228.010595][ T5235] loop_rootcg_workfn+0x22/0x30 [ 228.010632][ T5235] process_scheduled_works+0x56a/0xa50 [ 228.010673][ T5235] worker_thread+0x569/0x750 [ 228.010743][ T5235] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 228.010781][ T5235] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 228.010900][ T5235] ? __pfx_worker_thread+0x10/0x10 [ 228.010939][ T5235] kthread+0x223/0x270 [ 228.011030][ T5235] ? __pfx_kthread+0x10/0x10 [ 228.011063][ T5235] ret_from_fork+0x146/0x330 [ 228.011125][ T5235] ? __pfx_kthread+0x10/0x10 [ 228.011150][ T5235] ret_from_fork_asm+0x1a/0x30 [ 228.011213][ T5235] [ 228.096411][ T8952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.187850][ T5235] memory: usage 307200kB, limit 307200kB, failcnt 680 [ 228.187872][ T5235] memory+swap: usage 308440kB, limit 9007199254740988kB, failcnt 0 [ 228.187887][ T5235] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 228.187912][ T5235] Memory cgroup stats for /syz2: [ 228.188298][ T5235] cache 12288 [ 228.188308][ T5235] rss 0 [ 228.188341][ T5235] shmem 0 [ 228.188348][ T5235] mapped_file 4096 [ 228.188356][ T5235] dirty 0 [ 228.188363][ T5235] writeback 0 [ 228.188371][ T5235] workingset_refault_anon 325 [ 228.188444][ T5235] workingset_refault_file 6175 [ 228.188453][ T5235] swap 1269760 [ 228.188461][ T5235] swapcached 6111232 [ 228.188469][ T5235] pgpgin 373887 [ 228.188477][ T5235] pgpgout 373883 [ 228.188491][ T5235] pgfault 188536 [ 228.188500][ T5235] pgmajfault 186 [ 228.188513][ T5235] inactive_anon 0 [ 228.188521][ T5235] active_anon 4096 [ 228.188604][ T5235] inactive_file 0 [ 228.188613][ T5235] active_file 0 [ 228.188620][ T5235] unevictable 0 [ 228.188628][ T5235] hierarchical_memory_limit 314572800 [ 228.188638][ T5235] hierarchical_memsw_limit 9223372036854771712 [ 228.188648][ T5235] total_cache 12288 [ 228.188656][ T5235] total_rss 0 [ 228.188664][ T5235] total_shmem 0 [ 228.188672][ T5235] total_mapped_file 4096 [ 228.188680][ T5235] total_dirty 0 [ 228.188721][ T5235] total_writeback 0 [ 228.188729][ T5235] total_workingset_refault_anon 325 [ 228.188739][ T5235] total_workingset_refault_file 6175 [ 228.188803][ T5235] total_swap 1269760 [ 228.188811][ T5235] total_swapcached 6111232 [ 228.188820][ T5235] total_pgpgin 373887 [ 228.188828][ T5235] total_pgpgout 373883 [ 228.188836][ T5235] total_pgfault 188536 [ 228.188843][ T5235] total_pgmajfault 186 [ 228.188851][ T5235] total_inactive_anon 0 [ 228.188858][ T5235] total_active_anon 4096 [ 228.188866][ T5235] total_inactive_file 0 [ 228.188874][ T5235] total_active_file 0 [ 228.188995][ T5235] total_unevictable 0 [ 228.189004][ T5235] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2003,pid=8911,uid=0 [ 228.189089][ T5235] Memory cgroup out of memory: Killed process 8911 (syz.2.2003) total-vm:98552kB, anon-rss:1236kB, file-rss:26380kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 229.187794][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 229.207324][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.225815][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2022'. [ 229.291027][ T8979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2023'. [ 229.319935][ T29] audit: type=1400 audit(1788491162.235:835): avc: granted { setsecparam } for pid=8983 comm="syz.2.2025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 229.322676][ T29] audit: type=1400 audit(1788491162.235:836): avc: granted { setsecparam } for pid=8983 comm="syz.2.2025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 229.419414][ T8993] loop2: detected capacity change from 0 to 512 [ 229.454544][ T8999] loop5: detected capacity change from 0 to 1024 [ 229.454880][ T8999] EXT4-fs: Ignoring removed bh option [ 229.480262][ T8999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.724870][ T9003] lo speed is unknown, defaulting to 1000 [ 230.336560][ T9024] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2040'. [ 231.248140][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.294963][ T9039] loop5: detected capacity change from 0 to 512 [ 231.337780][ T29] audit: type=1400 audit(1788491164.245:837): avc: denied { allowed } for pid=9038 comm="syz.5.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 231.339356][ T29] audit: type=1400 audit(1788491164.255:838): avc: denied { prog_load } for pid=9043 comm="syz.4.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 231.353351][ T29] audit: type=1400 audit(1788491164.265:839): avc: denied { bpf } for pid=9043 comm="syz.4.2049" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.353384][ T29] audit: type=1400 audit(1788491164.265:840): avc: denied { perfmon } for pid=9043 comm="syz.4.2049" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.363968][ T29] audit: type=1400 audit(1788491164.275:841): avc: denied { bpf } for pid=9043 comm="syz.4.2049" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.363998][ T29] audit: type=1400 audit(1788491164.275:842): avc: denied { perfmon } for pid=9043 comm="syz.4.2049" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.372001][ T29] audit: type=1400 audit(1788491164.285:843): avc: denied { bpf } for pid=9043 comm="syz.4.2049" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.372032][ T29] audit: type=1400 audit(1788491164.285:844): avc: denied { perfmon } for pid=9043 comm="syz.4.2049" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.375005][ T29] audit: type=1400 audit(1788491164.285:845): avc: denied { create } for pid=9038 comm="syz.5.2045" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.482125][ T29] audit: type=1400 audit(1788491164.295:846): avc: denied { prog_run } for pid=9043 comm="syz.4.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 233.248063][ T9048] mmap: syz.1.2048 (9048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 233.940355][ T9065] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2054'. [ 234.020790][ T9067] loop2: detected capacity change from 0 to 8192 [ 234.361688][ T9072] lo speed is unknown, defaulting to 1000 [ 236.415983][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 236.416012][ T29] audit: type=1400 audit(1788491169.325:954): avc: denied { map_create } for pid=9074 comm="syz.0.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 236.562943][ T29] audit: type=1400 audit(1788491169.475:955): avc: denied { perfmon } for pid=9066 comm="syz.2.2055" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.641738][ T29] audit: type=1400 audit(1788491169.555:956): avc: denied { read write } for pid=5149 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.641776][ T29] audit: type=1400 audit(1788491169.555:957): avc: denied { open } for pid=5149 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.641812][ T29] audit: type=1400 audit(1788491169.555:958): avc: denied { ioctl } for pid=5149 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.757833][ T29] audit: type=1400 audit(1788491169.675:959): avc: denied { create } for pid=9085 comm="syz.5.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.779781][ T29] audit: type=1400 audit(1788491169.675:960): avc: denied { setopt } for pid=9085 comm="syz.5.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.779819][ T29] audit: type=1400 audit(1788491169.675:961): avc: denied { open } for pid=9087 comm="syz.1.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 236.779849][ T29] audit: type=1400 audit(1788491169.675:962): avc: denied { perfmon } for pid=9087 comm="syz.1.2058" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.779879][ T29] audit: type=1400 audit(1788491169.675:963): avc: denied { kernel } for pid=9087 comm="syz.1.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 237.044217][ T9092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 237.044247][ T9092] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 237.044358][ T9092] vhci_hcd vhci_hcd.0: Device attached [ 237.052969][ T9097] vhci_hcd: cannot find a urb of seqnum 2447 max seqnum 0 [ 237.053226][ T71] vhci_hcd vhci_hcd.1: stop threads [ 237.053243][ T71] vhci_hcd vhci_hcd.1: release socket [ 237.053259][ T71] vhci_hcd vhci_hcd.1: disconnect device [ 237.134080][ T9091] capability: warning: `syz.4.2059' uses 32-bit capabilities (legacy support in use) [ 237.199149][ T9086] FAULT_INJECTION: forcing a failure. [ 237.199149][ T9086] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.199203][ T9086] CPU: 0 UID: 0 PID: 9086 Comm: syz.5.2057 Not tainted syzkaller #0 PREEMPT(lazy) [ 237.199288][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.199304][ T9086] Call Trace: [ 237.199313][ T9086] [ 237.199323][ T9086] __dump_stack+0x1d/0x30 [ 237.199355][ T9086] dump_stack_lvl+0x95/0xd0 [ 237.199421][ T9086] dump_stack+0x15/0x1b [ 237.199441][ T9086] should_fail_ex+0x262/0x280 [ 237.199466][ T9086] should_fail_alloc_page+0xf2/0x100 [ 237.199515][ T9086] __alloc_frozen_pages_noprof+0x157/0x400 [ 237.199657][ T9086] alloc_pages_mpol+0xaf/0x1d0 [ 237.199684][ T9086] vma_alloc_folio_noprof+0x1b3/0x300 [ 237.199713][ T9086] handle_mm_fault+0x137d/0x3bb0 [ 237.199742][ T9086] __get_user_pages+0x12e9/0x1eb0 [ 237.199849][ T9086] __mm_populate+0x242/0x390 [ 237.199872][ T9086] do_mlock+0x44d/0x510 [ 237.199902][ T9086] ? __se_sys_futex+0x2f6/0x370 [ 237.199934][ T9086] ? xfd_validate_state+0x45/0xf0 [ 237.199979][ T9086] ? restore_fpregs_from_fpstate+0x61/0x110 [ 237.200005][ T9086] __x64_sys_mlock+0x4d/0x70 [ 237.200044][ T9086] x64_sys_call+0x2232/0x2550 [ 237.200077][ T9086] do_syscall_64+0x112/0x360 [ 237.200141][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.200201][ T9086] RIP: 0033:0x7f816bd1e159 [ 237.200220][ T9086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.200239][ T9086] RSP: 002b:00007f816a777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 237.200262][ T9086] RAX: ffffffffffffffda RBX: 00007f816bfa5fa0 RCX: 00007f816bd1e159 [ 237.200279][ T9086] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 237.200297][ T9086] RBP: 00007f816bdb5024 R08: 0000000000000000 R09: 0000000000000000 [ 237.200315][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.200341][ T9086] R13: 00007f816bfa6038 R14: 00007f816bfa5fa0 R15: 00007ffe189735b8 [ 237.200366][ T9086] [ 237.441920][ T9086] sctp: [Deprecated]: syz.5.2057 (pid 9086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.441920][ T9086] Use struct sctp_sack_info instead [ 237.642588][ T9102] lo speed is unknown, defaulting to 1000 [ 237.717723][ T9110] loop5: detected capacity change from 0 to 512 [ 237.834618][ T9112] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2065'. [ 238.016404][ T9119] netlink: 'syz.5.2068': attribute type 2 has an invalid length. [ 238.022995][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2068'. [ 238.400441][ T9135] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2076'. [ 238.700045][ T9138] lo speed is unknown, defaulting to 1000 [ 238.887466][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 239.239599][ T9165] netlink: 'syz.2.2083': attribute type 2 has an invalid length. [ 239.254915][ T9165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2083'. [ 239.578750][ T9167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2082'. [ 239.734253][ T4825] Bluetooth: hci1: Frame reassembly failed (-84) [ 239.933253][ T9178] FAULT_INJECTION: forcing a failure. [ 239.933253][ T9178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 239.933290][ T9178] CPU: 0 UID: 0 PID: 9178 Comm: syz.2.2088 Not tainted syzkaller #0 PREEMPT(lazy) [ 239.933322][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.933348][ T9178] Call Trace: [ 239.933356][ T9178] [ 239.933365][ T9178] __dump_stack+0x1d/0x30 [ 239.933440][ T9178] dump_stack_lvl+0x95/0xd0 [ 239.933464][ T9178] dump_stack+0x15/0x1b [ 239.933494][ T9178] should_fail_ex+0x262/0x280 [ 239.933518][ T9178] should_fail_alloc_page+0xf2/0x100 [ 239.933713][ T9178] __alloc_frozen_pages_noprof+0x157/0x400 [ 239.933751][ T9178] alloc_pages_mpol+0xaf/0x1d0 [ 239.933830][ T9178] vma_alloc_folio_noprof+0x1b3/0x300 [ 239.933901][ T9178] handle_mm_fault+0x137d/0x3bb0 [ 239.933934][ T9178] __get_user_pages+0x12e9/0x1eb0 [ 239.933964][ T9178] __mm_populate+0x242/0x390 [ 239.934056][ T9178] do_mlock+0x44d/0x510 [ 239.934084][ T9178] ? __se_sys_futex+0x2f6/0x370 [ 239.934123][ T9178] ? xfd_validate_state+0x45/0xf0 [ 239.934169][ T9178] ? restore_fpregs_from_fpstate+0x61/0x110 [ 239.934195][ T9178] __x64_sys_mlock+0x4d/0x70 [ 239.934271][ T9178] x64_sys_call+0x2232/0x2550 [ 239.934297][ T9178] do_syscall_64+0x112/0x360 [ 239.934329][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.934354][ T9178] RIP: 0033:0x7f755d18e159 [ 239.934373][ T9178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.934515][ T9178] RSP: 002b:00007f755bbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 239.934539][ T9178] RAX: ffffffffffffffda RBX: 00007f755d415fa0 RCX: 00007f755d18e159 [ 239.934555][ T9178] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 239.934571][ T9178] RBP: 00007f755d225024 R08: 0000000000000000 R09: 0000000000000000 [ 239.934585][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.934600][ T9178] R13: 00007f755d416038 R14: 00007f755d415fa0 R15: 00007fffe76bf5a8 [ 239.934699][ T9178] [ 240.046350][ T9178] sctp: [Deprecated]: syz.2.2088 (pid 9178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.046350][ T9178] Use struct sctp_sack_info instead [ 240.285034][ T9189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2091'. [ 240.707932][ T9202] netlink: 'syz.4.2096': attribute type 2 has an invalid length. [ 240.719123][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2096'. [ 240.896486][ T3552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 241.544962][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 241.544989][ T29] audit: type=1400 audit(1788491174.455:1534): avc: denied { create } for pid=9219 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.549136][ T29] audit: type=1400 audit(1788491174.465:1535): avc: denied { setopt } for pid=9219 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.550016][ T29] audit: type=1400 audit(1788491174.465:1536): avc: denied { create } for pid=9218 comm="syz.5.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.551749][ T29] audit: type=1400 audit(1788491174.465:1537): avc: denied { bind } for pid=9218 comm="syz.5.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.554222][ T29] audit: type=1400 audit(1788491174.465:1538): avc: denied { create } for pid=9219 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.556254][ T29] audit: type=1400 audit(1788491174.465:1539): avc: denied { prog_load } for pid=9219 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.556352][ T29] audit: type=1400 audit(1788491174.465:1540): avc: denied { bpf } for pid=9219 comm="syz.4.2102" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.556393][ T29] audit: type=1400 audit(1788491174.465:1541): avc: denied { perfmon } for pid=9219 comm="syz.4.2102" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.558543][ T29] audit: type=1400 audit(1788491174.475:1542): avc: denied { setopt } for pid=9218 comm="syz.5.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.559959][ T29] audit: type=1400 audit(1788491174.475:1543): avc: denied { bpf } for pid=9219 comm="syz.4.2102" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.776488][ T7829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 241.888170][ T9227] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2103'. [ 242.063248][ T9236] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 242.063295][ T9236] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 242.063344][ T9236] vhci_hcd vhci_hcd.0: Device attached [ 242.098036][ T9237] vhci_hcd: cannot find a urb of seqnum 2447 max seqnum 0 [ 242.098316][ T5235] vhci_hcd vhci_hcd.0: stop threads [ 242.098335][ T5235] vhci_hcd vhci_hcd.0: release socket [ 242.098353][ T5235] vhci_hcd vhci_hcd.0: disconnect device [ 242.139275][ T9236] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2105'. [ 242.213578][ T9240] loop2: detected capacity change from 0 to 512 [ 242.376014][ T9223] sctp: [Deprecated]: syz.4.2102 (pid 9223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.376014][ T9223] Use struct sctp_sack_info instead [ 243.085699][ T9264] netlink: 'syz.0.2113': attribute type 2 has an invalid length. [ 243.103877][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2113'. [ 243.229746][ T9272] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 243.310737][ T9274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2118'. [ 243.579777][ T9300] loop2: detected capacity change from 0 to 256 [ 243.591882][ T9296] lo speed is unknown, defaulting to 1000 [ 243.604021][ T9300] FAT-fs (loop2): bogus number of FAT sectors [ 243.604050][ T9300] FAT-fs (loop2): Can't find a valid FAT filesystem [ 243.740112][ T5235] Bluetooth: hci0: Frame reassembly failed (-84) [ 243.902843][ T9309] netlink: 'syz.5.2130': attribute type 2 has an invalid length. [ 243.928903][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2130'. [ 244.030382][ T5235] Bluetooth: hci1: Frame reassembly failed (-84) [ 244.158290][ T9317] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2133'. [ 244.305094][ T9322] loop5: detected capacity change from 0 to 2048 [ 244.358969][ T9322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.376573][ T9322] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2134: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 244.377027][ T9322] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2134: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 244.379393][ T9322] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2134: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 244.460857][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.567829][ T9332] syzkaller0: entered promiscuous mode [ 244.567865][ T9332] syzkaller0: entered allmulticast mode [ 244.841146][ T9346] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2144'. [ 245.080915][ T9356] loop5: detected capacity change from 0 to 1024 [ 245.088199][ T9356] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 245.100132][ T9356] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.2142: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.100180][ T9356] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.100378][ T9356] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.2142: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.100413][ T9356] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.100816][ T9356] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.2142: Failed to acquire dquot type 0 [ 245.100914][ T9356] loop5: lost filesystem error report for type 5 error -117 [ 245.101409][ T9356] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 245.101428][ T9356] loop5: lost filesystem error report for type 5 error -117 [ 245.102187][ T9356] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.2142: mark_inode_dirty error [ 245.102217][ T9356] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 245.103568][ T9356] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 245.103606][ T9356] EXT4-fs (loop5): 1 orphan inode deleted [ 245.104160][ T9356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.535117][ T9370] syzkaller0: entered promiscuous mode [ 245.535145][ T9370] syzkaller0: entered allmulticast mode [ 245.643679][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.656190][ T71] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.656239][ T71] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.657619][ T71] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 245.657650][ T71] loop5: lost filesystem error report for type 5 error -117 [ 245.658622][ T5149] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 245.658651][ T5149] loop5: lost filesystem error report for type 5 error -117 [ 245.658763][ T5149] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 245.658782][ T5149] loop5: lost filesystem error report for type 5 error -117 [ 245.658872][ T5149] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 245.658952][ T5149] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.659089][ T5149] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 245.659115][ T5149] loop5: lost filesystem error report for type 5 error -117 [ 245.776626][ T9180] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 245.878810][ T9375] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2155'. [ 245.962200][ T9387] loop5: detected capacity change from 0 to 2048 [ 245.999431][ T9387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.007075][ T9387] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2160: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 246.007498][ T9387] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2160: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 246.007834][ T9387] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2160: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 246.096394][ T9180] Bluetooth: hci1: command 0x1003 tx timeout [ 246.106372][ T7829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 246.473183][ T9404] syzkaller0: entered promiscuous mode [ 246.473316][ T9404] syzkaller0: entered allmulticast mode [ 246.673649][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 246.673686][ T29] audit: type=1400 audit(1788491179.585:2169): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.673723][ T29] audit: type=1400 audit(1788491179.585:2170): avc: denied { open } for pid=3311 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.733482][ T29] audit: type=1400 audit(1788491179.645:2171): avc: denied { create } for pid=9412 comm="syz.1.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.757940][ T29] audit: type=1400 audit(1788491179.675:2172): avc: denied { bind } for pid=9412 comm="syz.1.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.764698][ T29] audit: type=1400 audit(1788491179.675:2173): avc: denied { create } for pid=9414 comm="syz.0.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.807594][ T29] audit: type=1400 audit(1788491179.715:2174): avc: denied { setopt } for pid=9412 comm="syz.1.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.807638][ T29] audit: type=1400 audit(1788491179.715:2175): avc: denied { create } for pid=9412 comm="syz.1.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.807722][ T29] audit: type=1400 audit(1788491179.715:2176): avc: denied { ioctl } for pid=9412 comm="syz.1.2167" path="socket:[27580]" dev="sockfs" ino=27580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.833523][ T29] audit: type=1400 audit(1788491179.745:2177): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.833555][ T29] audit: type=1400 audit(1788491179.745:2178): avc: denied { open } for pid=3306 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.908888][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.282025][ T9436] 9p: Bad value for 'rfdno' [ 247.293662][ T5235] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.163477][ T9446] syzkaller0: entered promiscuous mode [ 248.163539][ T9446] syzkaller0: entered allmulticast mode [ 248.187653][ T9458] loop2: detected capacity change from 0 to 512 [ 248.198738][ T9458] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 249.361500][ T9180] Bluetooth: hci0: command 0x1003 tx timeout [ 249.361545][ T7829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 249.405128][ T9467] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 250.537270][ T9491] netlink: 'syz.2.2186': attribute type 2 has an invalid length. [ 250.541564][ T9491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2186'. [ 250.980499][ T9503] syzkaller0: entered promiscuous mode [ 250.980535][ T9503] syzkaller0: entered allmulticast mode [ 251.352981][ T9525] netlink: 'syz.1.2200': attribute type 2 has an invalid length. [ 251.363437][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2200'. [ 251.390390][ T9509] lo speed is unknown, defaulting to 1000 [ 251.490870][ T9534] loop2: detected capacity change from 0 to 512 [ 251.505681][ T9534] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.2204: corrupted in-inode xattr: invalid ea_ino [ 251.505785][ T9534] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.506042][ T9534] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2204: couldn't read orphan inode 15 (err -117) [ 251.506093][ T9534] loop2: lost filesystem error report for type 5 error -117 [ 251.554389][ T9534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.679740][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 251.679768][ T29] audit: type=1400 audit(1788491184.585:2602): avc: denied { node_bind } for pid=9531 comm="syz.5.2203" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 251.735324][ T29] audit: type=1400 audit(1788491184.645:2603): avc: denied { read write } for pid=5149 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.735376][ T29] audit: type=1400 audit(1788491184.645:2604): avc: denied { open } for pid=5149 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.735418][ T29] audit: type=1400 audit(1788491184.645:2605): avc: denied { ioctl } for pid=5149 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.811943][ T29] audit: type=1400 audit(1788491184.685:2606): avc: denied { create } for pid=9540 comm="syz.5.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.811985][ T29] audit: type=1400 audit(1788491184.685:2607): avc: denied { create } for pid=9540 comm="syz.5.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 251.812041][ T29] audit: type=1400 audit(1788491184.685:2608): avc: denied { write } for pid=9540 comm="syz.5.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 251.858623][ T29] audit: type=1400 audit(1788491184.735:2609): avc: denied { read write } for pid=5149 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.858657][ T29] audit: type=1400 audit(1788491184.735:2610): avc: denied { open } for pid=5149 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.858766][ T29] audit: type=1400 audit(1788491184.735:2611): avc: denied { ioctl } for pid=5149 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.908881][ T9543] syzkaller0: entered promiscuous mode [ 251.908903][ T9543] syzkaller0: entered allmulticast mode [ 251.920618][ T9543] tipc: Enabling of bearer rejected, failed to enable media [ 252.112040][ T9544] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.2204: invalid fast symlink length 39 [ 252.285846][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.766430][ T9574] syzkaller0: entered promiscuous mode [ 252.766467][ T9574] syzkaller0: entered allmulticast mode [ 252.770116][ T9574] tipc: Enabling of bearer rejected, failed to enable media [ 253.687684][ T9587] netlink: 'syz.5.2224': attribute type 2 has an invalid length. [ 253.707136][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2224'. [ 253.831981][ T9576] lo speed is unknown, defaulting to 1000 [ 254.154217][ T9603] loop2: detected capacity change from 0 to 1024 [ 254.169628][ T9603] EXT4-fs: Ignoring removed bh option [ 254.189141][ T9603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.357905][ T9611] team0: Port device bridge0 added [ 254.506692][ T9613] tipc: Enabling of bearer rejected, failed to enable media [ 255.123815][ T9629] loop5: detected capacity change from 0 to 512 [ 255.172481][ T9629] EXT4-fs (loop5): 1 orphan inode deleted [ 255.173145][ T9629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.193106][ T9629] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.194432][ T31] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 1 [ 255.759846][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.817854][ T9637] loop5: detected capacity change from 0 to 512 [ 255.840368][ T9637] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.2238: corrupted in-inode xattr: invalid ea_ino [ 255.840422][ T9637] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.841172][ T9637] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2238: couldn't read orphan inode 15 (err -117) [ 255.841203][ T9637] loop5: lost filesystem error report for type 5 error -117 [ 255.841692][ T9637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.869341][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.178230][ T9646] netlink: 'syz.0.2239': attribute type 12 has an invalid length. [ 256.906913][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 256.906943][ T29] audit: type=1400 audit(1788491189.825:3023): avc: denied { perfmon } for pid=9643 comm="syz.1.2242" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.956707][ T29] audit: type=1400 audit(1788491189.865:3024): avc: denied { create } for pid=9648 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.956751][ T29] audit: type=1400 audit(1788491189.575:3022): avc: denied { setopt } for pid=9643 comm="syz.1.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.956786][ T29] audit: type=1400 audit(1788491189.865:3025): avc: denied { perfmon } for pid=9643 comm="syz.1.2242" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.956816][ T29] audit: type=1400 audit(1788491189.865:3026): avc: denied { bpf } for pid=9643 comm="syz.1.2242" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.956905][ T29] audit: type=1400 audit(1788491189.865:3027): avc: denied { prog_load } for pid=9643 comm="syz.1.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 256.956944][ T29] audit: type=1400 audit(1788491189.865:3028): avc: denied { prog_run } for pid=9643 comm="syz.1.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 256.996062][ T29] audit: type=1400 audit(1788491189.905:3029): avc: denied { create } for pid=9648 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.098667][ T29] audit: type=1400 audit(1788491190.015:3030): avc: denied { write } for pid=9648 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.101210][ T29] audit: type=1400 audit(1788491190.015:3031): avc: denied { allowed } for pid=9648 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 257.825475][ T9661] lo speed is unknown, defaulting to 1000 [ 257.974246][ T9673] loop2: detected capacity change from 0 to 1024 [ 258.008155][ T9673] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 258.123635][ T9673] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.2248: lblock 2 mapped to illegal pblock 2 (length 1) [ 258.123680][ T9673] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 258.123845][ T9673] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.2248: lblock 0 mapped to illegal pblock 48 (length 1) [ 258.123882][ T9673] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 258.124084][ T9673] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.2248: Failed to acquire dquot type 0 [ 258.124112][ T9673] loop2: lost filesystem error report for type 5 error -117 [ 258.124248][ T9673] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 258.124269][ T9673] loop2: lost filesystem error report for type 5 error -117 [ 258.124411][ T9673] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.2248: mark_inode_dirty error [ 258.124488][ T9673] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 258.124599][ T9673] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 258.124685][ T9673] EXT4-fs (loop2): 1 orphan inode deleted [ 258.125189][ T9673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.242990][ T71] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 258.243134][ T71] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 258.534487][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.534961][ T3306] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 258.535006][ T3306] loop2: lost filesystem error report for type 5 error -117 [ 258.535182][ T3306] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 258.535205][ T3306] loop2: lost filesystem error report for type 5 error -117 [ 258.535281][ T3306] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 258.535310][ T3306] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 258.535392][ T3306] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 258.535436][ T3306] loop2: lost filesystem error report for type 5 error -117 [ 258.806759][ T9637] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.2238: invalid fast symlink length 39 [ 258.807346][ T9637] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.2238: invalid fast symlink length 39 [ 258.885647][ T9683] loop2: detected capacity change from 0 to 1024 [ 258.894045][ T9683] EXT4-fs: Ignoring removed bh option [ 258.896259][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.924877][ T9683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.158176][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.495982][ T9719] loop2: detected capacity change from 0 to 512 [ 260.620405][ T9719] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.2263: corrupted in-inode xattr: invalid ea_ino [ 260.620514][ T9719] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 260.634359][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 260.634392][ C1] EXT4-fs (loop2): initial error at time 1788491193: ext4_iget_extra_inode:5210: inode 15 [ 260.634423][ C1] EXT4-fs (loop2): last error at time 1788491193: ext4_iget_extra_inode:5210: inode 15 [ 260.669722][ T9719] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2263: couldn't read orphan inode 15 (err -117) [ 260.669759][ T9719] loop2: lost filesystem error report for type 5 error -117 [ 260.670398][ T9719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.528240][ T9737] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.2263: invalid fast symlink length 39 [ 261.530117][ T9737] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.2263: invalid fast symlink length 39 [ 261.762166][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.919398][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 261.919439][ T29] audit: type=1400 audit(1788491194.835:3429): avc: denied { write } for pid=9748 comm="syz.4.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 261.954267][ T29] audit: type=1400 audit(1788491194.865:3430): avc: denied { map_create } for pid=9751 comm="syz.2.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.954321][ T29] audit: type=1400 audit(1788491194.865:3431): avc: denied { bpf } for pid=9751 comm="syz.2.2274" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.954352][ T29] audit: type=1400 audit(1788491194.865:3432): avc: denied { perfmon } for pid=9747 comm="syz.0.2272" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.971115][ T29] audit: type=1400 audit(1788491194.865:3433): avc: denied { map_create } for pid=9751 comm="syz.2.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.971298][ T29] audit: type=1400 audit(1788491194.865:3434): avc: denied { map_read map_write } for pid=9751 comm="syz.2.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.973800][ T29] audit: type=1400 audit(1788491194.865:3435): avc: denied { prog_load } for pid=9751 comm="syz.2.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.973829][ T29] audit: type=1400 audit(1788491194.865:3436): avc: denied { bpf } for pid=9751 comm="syz.2.2274" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.976125][ T29] audit: type=1400 audit(1788491194.865:3437): avc: denied { perfmon } for pid=9751 comm="syz.2.2274" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.978895][ T29] audit: type=1400 audit(1788491194.895:3438): avc: denied { bpf } for pid=9751 comm="syz.2.2274" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 262.398572][ T4825] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.765367][ T9754] syz.4.2275 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 262.765477][ T9754] CPU: 1 UID: 0 PID: 9754 Comm: syz.4.2275 Not tainted syzkaller #0 PREEMPT(lazy) [ 262.765508][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.765597][ T9754] Call Trace: [ 262.765604][ T9754] [ 262.765612][ T9754] __dump_stack+0x1d/0x30 [ 262.765642][ T9754] dump_stack_lvl+0x95/0xd0 [ 262.765702][ T9754] dump_stack+0x15/0x1b [ 262.765723][ T9754] dump_header+0x80/0x240 [ 262.765745][ T9754] oom_kill_process+0x294/0x420 [ 262.765768][ T9754] out_of_memory+0x981/0xbc0 [ 262.765845][ T9754] try_charge_memcg+0x6ba/0xae0 [ 262.765878][ T9754] charge_memcg+0x16f/0x220 [ 262.765982][ T9754] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 262.766011][ T9754] swap_cache_alloc_folio+0x47b/0x610 [ 262.766039][ T9754] swap_cluster_readahead+0x2b7/0x460 [ 262.766069][ T9754] swapin_readahead+0xd8/0x8a0 [ 262.766089][ T9754] ? _raw_spin_unlock+0x9/0x30 [ 262.766121][ T9754] ? swap_put_entries_cluster+0x49c/0x4c0 [ 262.766223][ T9754] ? __rcu_read_unlock+0x4e/0x70 [ 262.766252][ T9754] ? swap_cache_get_folio+0x1f7/0x200 [ 262.766383][ T9754] do_swap_page+0x2b7/0x1e40 [ 262.766417][ T9754] ? __css_rstat_updated+0xbb/0x280 [ 262.766449][ T9754] ? __rcu_read_lock+0x36/0x50 [ 262.766535][ T9754] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 262.766594][ T9754] handle_mm_fault+0xb29/0x3bb0 [ 262.766624][ T9754] do_user_addr_fault+0x636/0x1060 [ 262.766654][ T9754] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 262.766737][ T9754] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 262.766776][ T9754] ? trace_page_fault_user+0x1f/0xa0 [ 262.766808][ T9754] exc_page_fault+0x62/0xa0 [ 262.766903][ T9754] asm_exc_page_fault+0x26/0x30 [ 262.766923][ T9754] RIP: 0033:0x7f999a4192b8 [ 262.766941][ T9754] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 262.766960][ T9754] RSP: 002b:00007ffd8f273c80 EFLAGS: 00010246 [ 262.767059][ T9754] RAX: 0000000000000000 RBX: 00005555942de500 RCX: 00007f999a41e98e [ 262.767074][ T9754] RDX: 00007ffd8f273cd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.767087][ T9754] RBP: 00007f999a6e7da0 R08: 0000000000000000 R09: 0000000000000000 [ 262.767110][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000402e2 [ 262.767125][ T9754] R13: 00007f999a6e636c R14: 00000000000400f6 R15: 00007f999a6e6360 [ 262.767163][ T9754] [ 262.837762][ T9754] memory: usage 109340kB, limit 307200kB, failcnt 940 [ 262.837840][ T9754] memory+swap: usage 121316kB, limit 9007199254740988kB, failcnt 0 [ 262.837912][ T9754] kmem: usage 109120kB, limit 9007199254740988kB, failcnt 0 [ 262.837926][ T9754] Memory cgroup stats for /syz4: [ 262.838215][ T9754] cache 0 [ 262.838242][ T9754] rss 4096 [ 262.838249][ T9754] shmem 0 [ 262.838257][ T9754] mapped_file 0 [ 262.838265][ T9754] dirty 0 [ 262.838272][ T9754] writeback 4096 [ 262.838280][ T9754] workingset_refault_anon 260 [ 262.838289][ T9754] workingset_refault_file 1995 [ 262.838344][ T9754] swap 12263424 [ 262.838352][ T9754] swapcached 15233024 [ 262.838360][ T9754] pgpgin 375147 [ 262.838368][ T9754] pgpgout 375144 [ 262.838376][ T9754] pgfault 239484 [ 262.838383][ T9754] pgmajfault 190 [ 262.838391][ T9754] inactive_anon 4096 [ 262.838399][ T9754] active_anon 4096 [ 262.838407][ T9754] inactive_file 0 [ 262.838415][ T9754] active_file 0 [ 262.838483][ T9754] unevictable 0 [ 262.838491][ T9754] hierarchical_memory_limit 314572800 [ 262.838559][ T9754] hierarchical_memsw_limit 9223372036854771712 [ 262.838569][ T9754] total_cache 0 [ 262.838577][ T9754] total_rss 4096 [ 262.838585][ T9754] total_shmem 0 [ 262.838593][ T9754] total_mapped_file 0 [ 262.838601][ T9754] total_dirty 0 [ 262.838633][ T9754] total_writeback 4096 [ 262.838642][ T9754] total_workingset_refault_anon 260 [ 262.838651][ T9754] total_workingset_refault_file 1995 [ 262.838661][ T9754] total_swap 12263424 [ 262.838669][ T9754] total_swapcached 15233024 [ 262.838677][ T9754] total_pgpgin 375147 [ 262.838686][ T9754] total_pgpgout 375144 [ 262.838700][ T9754] total_pgfault 239484 [ 262.838758][ T9754] total_pgmajfault 190 [ 262.838767][ T9754] total_inactive_anon 4096 [ 262.838775][ T9754] total_active_anon 4096 [ 262.838784][ T9754] total_inactive_file 0 [ 262.838792][ T9754] total_active_file 0 [ 262.838800][ T9754] total_unevictable 0 [ 262.838809][ T9754] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.102,pid=3860,uid=0 [ 262.838936][ T9754] Memory cgroup out of memory: Killed process 3860 (syz.4.102) total-vm:96368kB, anon-rss:1240kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 264.418221][ T7829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 264.821610][ T9821] netlink: 'syz.5.2293': attribute type 2 has an invalid length. [ 264.832630][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2293'. [ 264.896398][ T9814] ================================================================== [ 264.896443][ T9814] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 264.896495][ T9814] [ 264.896500][ T9814] read-write to 0xffffffff86e07a00 of 8 bytes by interrupt on cpu 1: [ 264.896521][ T9814] tick_do_update_jiffies64+0x113/0x1c0 [ 264.896553][ T9814] tick_nohz_handler+0x88/0x380 [ 264.896581][ T9814] __hrtimer_run_queues+0x1f8/0x510 [ 264.896603][ T9814] hrtimer_interrupt+0x27b/0x860 [ 264.896626][ T9814] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 264.896654][ T9814] sysvec_apic_timer_interrupt+0x32/0x80 [ 264.896679][ T9814] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 264.896712][ T9814] bio_endio+0x1b5/0x570 [ 264.896736][ T9814] blk_update_request+0x33a/0x710 [ 264.896771][ T9814] scsi_end_request+0x4b/0x4c0 [ 264.896792][ T9814] scsi_io_completion+0x7f/0x1d0 [ 264.896812][ T9814] scsi_finish_command+0x1c7/0x1e0 [ 264.896837][ T9814] scsi_complete+0x155/0x4d0 [ 264.896861][ T9814] blk_done_softirq+0x77/0xb0 [ 264.896897][ T9814] handle_softirqs+0xcc/0x2a0 [ 264.896921][ T9814] __irq_exit_rcu+0x44/0xe0 [ 264.896945][ T9814] common_interrupt+0x83/0x90 [ 264.896977][ T9814] asm_common_interrupt+0x26/0x40 [ 264.897000][ T9814] __sanitizer_cov_trace_const_cmp4+0x0/0xb0 [ 264.897029][ T9814] avtab_search_node+0x38/0x2b0 [ 264.897061][ T9814] context_struct_compute_av+0x347/0xae0 [ 264.897091][ T9814] security_compute_av+0x360/0xa30 [ 264.897123][ T9814] avc_compute_av+0x5d/0x420 [ 264.897145][ T9814] avc_perm_nonode+0x5e/0xe0 [ 264.897167][ T9814] avc_has_perm_noaudit+0xea/0x120 [ 264.897190][ T9814] cred_has_capability+0x121/0x2a0 [ 264.897225][ T9814] selinux_capable+0x31/0x40 [ 264.897250][ T9814] security_capable+0x7b/0x90 [ 264.897284][ T9814] capable+0x4d/0xb0 [ 264.897305][ T9814] hugetlb_file_setup+0x12c/0x3d0 [ 264.897340][ T9814] newseg+0x335/0x670 [ 264.897365][ T9814] ipcget+0x33e/0x4f0 [ 264.897392][ T9814] __x64_sys_shmget+0xb8/0xe0 [ 264.897418][ T9814] x64_sys_call+0x2001/0x2550 [ 264.897447][ T9814] do_syscall_64+0x112/0x360 [ 264.897475][ T9814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.897500][ T9814] [ 264.897507][ T9814] read to 0xffffffff86e07a00 of 8 bytes by task 9814 on cpu 0: [ 264.897525][ T9814] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 264.897560][ T9814] count_shadow_nodes+0x6a/0x250 [ 264.897600][ T9814] do_shrink_slab+0x61/0x650 [ 264.897625][ T9814] shrink_slab+0x53b/0x8e0 [ 264.897649][ T9814] shrink_node+0x6b8/0x2000 [ 264.897672][ T9814] do_try_to_free_pages+0x408/0xca0 [ 264.897711][ T9814] try_to_free_mem_cgroup_pages+0x201/0x420 [ 264.897745][ T9814] try_charge_memcg+0x422/0xae0 [ 264.897773][ T9814] __memcg_kmem_charge_page+0x19a/0x3a0 [ 264.897797][ T9814] __alloc_frozen_pages_noprof+0x21d/0x400 [ 264.897830][ T9814] alloc_pages_mpol+0xaf/0x1d0 [ 264.897853][ T9814] alloc_pages_noprof+0x94/0x140 [ 264.897872][ T9814] __vmalloc_node_range_noprof+0x96f/0x1000 [ 264.897905][ T9814] __kvmalloc_node_noprof+0x3be/0x5c0 [ 264.897938][ T9814] futex_hash_allocate+0x163/0x890 [ 264.897967][ T9814] futex_hash_prctl+0xd8/0xf0 [ 264.897996][ T9814] __se_sys_prctl+0x4f4/0x13b0 [ 264.898026][ T9814] __x64_sys_prctl+0x67/0x80 [ 264.898054][ T9814] x64_sys_call+0x2421/0x2550 [ 264.898082][ T9814] do_syscall_64+0x112/0x360 [ 264.898110][ T9814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.898134][ T9814] [ 264.898139][ T9814] value changed: 0x00000000fffff1ff -> 0x00000000fffff200 [ 264.898152][ T9814] [ 264.898157][ T9814] Reported by Kernel Concurrency Sanitizer on: [ 264.898169][ T9814] CPU: 0 UID: 0 PID: 9814 Comm: syz.4.2290 Not tainted syzkaller #0 PREEMPT(lazy) [ 264.898199][ T9814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.898213][ T9814] ================================================================== [ 264.996593][ T9825] loop5: detected capacity change from 0 to 2048 [ 265.041861][ T9825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.060383][ T9825] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2294: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 265.060729][ T9825] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2294: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 265.065853][ T9825] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2294: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 265.160242][ T5235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.265443][ T9814] syz.4.2290 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 265.265534][ T9814] CPU: 1 UID: 0 PID: 9814 Comm: syz.4.2290 Not tainted syzkaller #0 PREEMPT(lazy) [ 265.265564][ T9814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.265578][ T9814] Call Trace: [ 265.265588][ T9814] [ 265.265597][ T9814] __dump_stack+0x1d/0x30 [ 265.265624][ T9814] dump_stack_lvl+0x95/0xd0 [ 265.265648][ T9814] dump_stack+0x15/0x1b [ 265.265674][ T9814] dump_header+0x80/0x240 [ 265.265747][ T9814] oom_kill_process+0x294/0x420 [ 265.265770][ T9814] out_of_memory+0x981/0xbc0 [ 265.265791][ T9814] try_charge_memcg+0x6ba/0xae0 [ 265.265823][ T9814] __memcg_kmem_charge_page+0x19a/0x3a0 [ 265.265846][ T9814] __alloc_frozen_pages_noprof+0x21d/0x400 [ 265.265962][ T9814] alloc_pages_mpol+0xaf/0x1d0 [ 265.265985][ T9814] alloc_pages_noprof+0x94/0x140 [ 265.266008][ T9814] __vmalloc_node_range_noprof+0x96f/0x1000 [ 265.266077][ T9814] __kvmalloc_node_noprof+0x3be/0x5c0 [ 265.266167][ T9814] ? futex_hash_allocate+0x163/0x890 [ 265.266196][ T9814] ? futex_hash_allocate+0x163/0x890 [ 265.266224][ T9814] ? futex_hash_allocate+0x163/0x890 [ 265.266262][ T9814] futex_hash_allocate+0x163/0x890 [ 265.266298][ T9814] ? cap_task_prctl+0x13f/0x6b0 [ 265.266387][ T9814] futex_hash_prctl+0xd8/0xf0 [ 265.266452][ T9814] __se_sys_prctl+0x4f4/0x13b0 [ 265.266550][ T9814] __x64_sys_prctl+0x67/0x80 [ 265.266595][ T9814] x64_sys_call+0x2421/0x2550 [ 265.266685][ T9814] do_syscall_64+0x112/0x360 [ 265.266717][ T9814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.266741][ T9814] RIP: 0033:0x7f999a45e159 [ 265.266805][ T9814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.266824][ T9814] RSP: 002b:00007f9998a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 265.266847][ T9814] RAX: ffffffffffffffda RBX: 00007f999a6e6270 RCX: 00007f999a45e159 [ 265.266946][ T9814] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 265.266961][ T9814] RBP: 00007f999a4f5024 R08: 0000000000000000 R09: 0000000000000000 [ 265.266975][ T9814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.266989][ T9814] R13: 00007f999a6e6308 R14: 00007f999a6e6270 R15: 00007ffd8f273b98 [ 265.267011][ T9814] [ 265.278077][ T9814] memory: usage 307200kB, limit 307200kB, failcnt 1117 [ 265.278099][ T9814] memory+swap: usage 307512kB, limit 9007199254740988kB, failcnt 0 [ 265.278114][ T9814] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 265.278182][ T9814] Memory cgroup stats for /syz4: [ 265.278425][ T9814] cache 0 [ 265.278435][ T9814] rss 4096 [ 265.278442][ T9814] shmem 0 [ 265.278450][ T9814] mapped_file 0 [ 265.278458][ T9814] dirty 0 [ 265.278550][ T9814] writeback 0 [ 265.278559][ T9814] workingset_refault_anon 351 [ 265.278567][ T9814] workingset_refault_file 2251 [ 265.278621][ T9814] swap 319488 [ 265.278629][ T9814] swapcached 16576512 [ 265.278637][ T9814] pgpgin 376244 [ 265.278645][ T9814] pgpgout 376242 [ 265.278679][ T9814] pgfault 240728 [ 265.278700][ T9814] pgmajfault 250 [ 265.278708][ T9814] inactive_anon 0 [ 265.278716][ T9814] active_anon 0 [ 265.278724][ T9814] inactive_file 0 [ 265.278732][ T9814] active_file 0 [ 265.278740][ T9814] unevictable 0 [ 265.278748][ T9814] hierarchical_memory_limit 314572800 [ 265.278757][ T9814] hierarchical_memsw_limit 9223372036854771712 [ 265.278792][ T9814] total_cache 0 [ 265.278799][ T9814] total_rss 4096 [ 265.278806][ T9814] total_shmem 0 [ 265.278814][ T9814] total_mapped_file 0 [ 265.278821][ T9814] total_dirty 0 [ 265.278828][ T9814] total_writeback 0 [ 265.278835][ T9814] total_workingset_refault_anon 351 [ 265.278844][ T9814] total_workingset_refault_file 2251 [ 265.278852][ T9814] total_swap 319488 [ 265.278859][ T9814] total_swapcached 16576512 [ 265.278868][ T9814] total_pgpgin 376244 [ 265.278882][ T9814] total_pgpgout 376242 [ 265.278891][ T9814] total_pgfault 240728 [ 265.278900][ T9814] total_pgmajfault 250 [ 265.278908][ T9814] total_inactive_anon 0 [ 265.278917][ T9814] total_active_anon 0 [ 265.278925][ T9814] total_inactive_file 0 [ 265.278942][ T9814] total_active_file 0 [ 265.278951][ T9814] total_unevictable 0 [ 265.278959][ T9814] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2290,pid=9806,uid=0 [ 265.279092][ T9814] Memory cgroup out of memory: Killed process 9806 (syz.4.2290) total-vm:102788kB, anon-rss:1240kB, file-rss:30476kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:0 [ 265.372642][ T5235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.374112][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.466033][ T5235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.539957][ T5235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.738819][ T5235] bridge_slave_1: left allmulticast mode [ 265.738851][ T5235] bridge_slave_1: left promiscuous mode [ 265.739072][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.747863][ T5235] bridge_slave_0: left allmulticast mode [ 265.747901][ T5235] bridge_slave_0: left promiscuous mode [ 265.748129][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.875343][ T5235] bond1 (unregistering): (slave geneve2): Releasing active interface [ 265.927750][ T5235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.939442][ T5235] bond0 (unregistering): Released all slaves [ 265.945544][ T5235] bond1 (unregistering): Released all slaves [ 265.982782][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 265.991198][ T5235] IPVS: stopping backup sync thread 4554 ... [ 266.041638][ T5235] hsr_slave_0: left promiscuous mode [ 266.048012][ T5235] hsr_slave_1: left promiscuous mode [ 266.048600][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.048617][ T5235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.048946][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.048966][ T5235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.055564][ T5235] veth1_macvtap: left promiscuous mode [ 266.055669][ T5235] veth0_macvtap: left promiscuous mode [ 266.055747][ T5235] veth1_vlan: left promiscuous mode [ 266.055781][ T5235] veth0_vlan: left promiscuous mode [ 266.165856][ T5235] team0 (unregistering): Port device team_slave_1 removed [ 266.174003][ T5235] team0 (unregistering): Port device team_slave_0 removed [ 266.211187][ T4825] smc: removing ib device syz0 [ 266.220860][ T3388] lo speed is unknown, defaulting to 1000 [ 266.220889][ T3388] syz0: Port: 1 Link DOWN [ 266.223158][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 266.418915][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 266.543954][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2