last executing test programs: 38.200248009s ago: executing program 2 (id=207): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000100)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_lower}, {@uni_xlate}, {@fat=@tz_utc}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@rodir}, {@shortname_mixed}, {@fat=@nocase}, {@shortname_lower}, {@shortname_mixed}, {@fat=@errors_remount}, {@shortname_lower}], [{@smackfsdef={'smackfsdef', 0x3d, 'utf8=0'}}, {@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, '&'}}, {@euid_gt}, {@obj_role}, {@hash}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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") (async) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) move_mount(0xffffffffffffff9c, 0x0, r0, 0x0, 0x157) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000a000000000000000000e50003000000000085100000fcffffff2500ffff100000007a0ac0ff100000009500000000000000aab8aa8b767ad767f04e4b2597f3c5d9035bd448519817c9c5eaf2f451ef4b0b4fb3bd66668a4dce7ebe7cc353139b7009fe0cff82250d7705ecb310f3d4282025287b4ee1e1a9d51212971f1799cd99e3ce6080bc52f3d3aa923ce3a3cc0f1c5cfdf774f05dba7f844653ae745dd668ac536a0cf18e861eb8ab581f0633"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 37.85205072s ago: executing program 2 (id=213): clock_adjtime(0xa00000000000000, &(0x7f0000000380)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0xf423f, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0x1, 0x81, 0x9f, 0x2, 0xfffffffffffffffc, 0x6, 0x1ff, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x72a3, 0xe}) 37.814959403s ago: executing program 2 (id=214): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r1, 0x0, 0x1000, 0x7ff, &(0x7f0000000540)) ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r2, 0x0) 37.62801261s ago: executing program 2 (id=219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10c2, &(0x7f0000000040)={0x0, 0x815e, 0x180, 0x0, 0x2fe}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_clone(0x2002280, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x42, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x6080, 0x20, 0x1}, &(0x7f0000000380)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 37.52079704s ago: executing program 2 (id=223): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pimreg1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000ac0)=@deltaction={0x110, 0x31, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd4}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x4a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendfile(r2, r3, 0x0, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x7d34, &(0x7f00000020c0)={0x0, 0xffffffff, 0x1046}) close(r4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r6, 0xa) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000080)={0x1d, r8}, 0x10) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0xcd5ff02f3956bc1b, 0xffffffffffffffff, 0x8000000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r9) 37.344660965s ago: executing program 2 (id=227): close(0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x80000fb, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[], 0xf}, 0x0) (fail_nth: 3) 22.261827054s ago: executing program 32 (id=227): close(0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x80000fb, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[], 0xf}, 0x0) (fail_nth: 3) 4.795384474s ago: executing program 1 (id=564): r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x81284, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x6, 0x6, 0x7fc00100}]}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 4.661101756s ago: executing program 4 (id=565): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$watch_queue(r1, &(0x7f0000004280)=""/144, 0x90) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RSETATTR(r2, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 4.646288567s ago: executing program 1 (id=566): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$watch_queue(r1, &(0x7f0000004280)=""/144, 0x90) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RSETATTR(r2, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendfile(r3, r3, 0x0, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 3.670792334s ago: executing program 0 (id=568): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000200)={0x0, 0x1, 0x1006, 0xffffffffffffffff}) r0 = syz_io_uring_setup(0x749, &(0x7f0000000100)={0x0, 0xef9d, 0x0, 0x3, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) creat(0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_TARGET_INFO={0x2c, 0x3, "ac1a91d256ebf87b31fd38a2be95c85844a4f447fd7a4bfafc0f574e29fdc1532d88822344f6b765"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 3.530829866s ago: executing program 4 (id=570): timer_create(0x0, &(0x7f0000000140)={0x0, 0x17, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_gettime(r0, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r2, 0x89e1, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x254, 0x12, 0x300, 0x70bd2a, 0x25dfdbfb, {0xb, 0xa, 0x8, 0x1, {0x4e22, 0x4e20, [0x7fffffff, 0x6, 0x86, 0x5], [0x0, 0x81, 0x7, 0x3], 0x0, [0x3, 0x7]}, 0x0, 0xa6a}, [@INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "d697f06c171ffc1df80ed9e27161cfa9c4b9ad00d248cea6e6dc39a229fe9073348e37539a1fcca77653ae8a46b579b51c298db9a8181576c87243a8a49f592a373d4f73e165e02ed32f16594bee6ec3fe4dd889b93363978bb31df09a067780b747955adb68da91ced74915eafbee5c1ccce067071c7a06d3c13f1780fb2b8629f85da6ff714ae48b475ab7468e0466999fb518643ce0aba4279add026b9b25e32f94280e83ad12b0312ffee4"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "a186b7284f"}, @INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "52dc3e4f909fa4fdebcd202558a64efdd46d3d4ddf1d1f29"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "1186de05104f3b8250bc460fefce728601e2f38a7ed62d599af72c657b2e21df4fb59f6a4475b911c7cd2a7d09f80488b984ae71b6976b4e98a13e0d39d9d557b162030f598c2083f91d3c507a"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "0ba5fb30e0ff0466e6910c428f446f95ad062f27c51e9ec4f9343499d1f38a076254a4c0067e29b9d92319014fd2beeeb951a65a1a4fc8789741a252978929e242028418202c9bf8ea80db2aa998dae3101ce41343ce02fa605f9856fa7ffb415d51aae2ac39fe544ad454a66ae087b2695ce6cac8321776d59e839e4c1dd5788c2256953afef7344770356f62f1259b65bf1150df593453a88a3e50"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "d6988a8879c29c197268638cd48c4f8cb13d9efc8fad7083962f1f101ad3433afb37a0d4e281a690c8f002f62b4534b51ca5ff"}]}, 0x254}, 0x1, 0x0, 0x0, 0x48811}, 0x60004010) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 3.447853744s ago: executing program 0 (id=572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0c004500007800000010000190780a010102ac1414aa05009078010000004700000000000000001100007f000001ffffffff440c03010a0101014e210000443cbc01e0000001000000000000000000000000ac1414000000000000000000000000080000000000000000ac1e00010000000000000000fffffffc"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d5a6ef3912ffc9b77afbf73ee0572d3ff2d9a4f095765f46b73db181e33b6329f092aedeb0658090e3ba2548b5ed6255f818b1f64dec466a6320db81304d281dac7087f9db0000"], &(0x7f0000000040)='GPL\x00'}, 0x80) r5 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="11"], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="11"], 0x11) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f00000001c0)=[0xc2d, 0x6], 0x2) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x6, 0xfff8, 0x8, 0x4, 0x1, "9bae5e2d921e7302"}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x100, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xb, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_taprio={{0xb}, {0xc8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x3c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xc51}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0x0, 0x0, 0xe, 0x5, 0x7, 0x0, 0x0, 0x10, 0xa, 0x2, 0x3, 0x6, 0x2, 0xf, 0x3], 0x1, [0xa0, 0x8, 0x6, 0x1, 0x10, 0x1, 0x100, 0xff, 0x5, 0xe, 0x9, 0x2, 0x8, 0x3, 0x80, 0x3], [0x3, 0x5, 0x9, 0xe90b, 0xaa, 0x1, 0x2, 0x1000, 0x2, 0x100, 0x401, 0x4, 0x5, 0x6, 0x1000, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x6}]}}]}, 0x100}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x3, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000200), &(0x7f0000000400)=r3}, 0x20) shmdt(0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_io_uring_setup(0x4000066e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xfffffffb}, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.316984126s ago: executing program 4 (id=573): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004003ee96d9ea93e1100000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xffe, &(0x7f0000003680)=ANY=[], 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$char_usb(r6, &(0x7f0000000000)='-0', 0x2) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0xfc) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8, 0x4000000) sendmsg$inet(r7, 0x0, 0x4000080) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'}) syz_open_procfs(0x0, 0x0) r9 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.900911382s ago: executing program 1 (id=576): futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2.848451807s ago: executing program 0 (id=578): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891016000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x3e, 0x9, 0x0, 0x800, {0x3}}, 0x14}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4d5, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0x5, 0x8000000}}, 0xe8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 2.507767817s ago: executing program 3 (id=581): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8840}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000200)={0x3, 0xf}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8000}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044800) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000640000008500000006000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.320649764s ago: executing program 5 (id=582): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xe}], 0x2, 0x10023, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b000) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x8, 0x4, 0x9, 0xa1, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x7ff, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8c, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x116dad3, 0x0, 0x4, 0x2, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x225fa46b}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a030400000000000000000a0000050900010073797a3100000000300004802c0001800b00010074617267657400001c00028004000300080002400000000009000100534e4154000000000900020073797a3200000000140000001100010000000000000000000100000a2b1d4aad4239b2943bc25fb4d8b68f93c89b8819fe02293538a1325928"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000440)=0x5c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={r7, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x40, 0x7, 0x7, 0x9, 0x80, 0x3, 0x2}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB]) 2.239191431s ago: executing program 3 (id=583): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setuid(0xee01) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x100, 0x2, 0x0, 0xb, 0xd, 0xf}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) umount2(0x0, 0x16) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700ed310036e265e80a"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x3c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}}, 0x40) pwrite64(r0, &(0x7f00000005c0)='\b', 0x1, 0x4fed0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x2d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x200480c1}, 0x24000040) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x60) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$watch_queue(r8, &(0x7f0000004280)=""/144, 0x90) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mknod(&(0x7f0000000000)='./file0/../file0\x00', 0x200, 0x4) 2.165634918s ago: executing program 5 (id=584): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="fc", 0x7}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_io_uring_setup(0x4b3, &(0x7f0000000100)={0x0, 0xecb9, 0x400, 0x3, 0x212}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.948780897s ago: executing program 1 (id=585): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x1ff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xfff, &(0x7f0000002080)=""/4095}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0x7, 0x1, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) lseek(r0, 0x2000, 0x0) 1.840510036s ago: executing program 0 (id=586): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) unshare(0x6a040000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3, @loopback, 0xfffff801}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) syz_usb_disconnect(0xffffffffffffffff) unshare(0x40000000) 1.554933922s ago: executing program 4 (id=587): socket$inet6(0xa, 0x2, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1}, 0x18) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.515670055s ago: executing program 3 (id=588): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x3f84, 0x2, 0x0, 0x7fff0000}]}) io_getevents(0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r1, 0xc00}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x586}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRESHEX=0x0, @ANYBLOB="26d76ee14a1cc00f1c", @ANYRES8=r2, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0xa18442, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xed, 0x270, &(0x7f0000000c80)="$eJzs3T9oJFUcB/Df7J/ETRaJphHEPyAiGgixE2xioxCQEEQEFSIiVpIIMcEua2VjobVKQLAJYme0FJtgowhW0UuRaw7uwhUXrrgr9tid3WOTbO7P/hvY+XxgmTd57817E+b7JgRmNoDcmomIxYgoRsRcRJQjIuls8Gz6mWnt7lT2VyPq9beuJ8126X6q3W86ImoR8UpEqV23tffe0c2DN174arP8/I9771ZGdX6djo8O3zz5fvnLX5Ze3vr736vLSSxGtVXXeR6DlHT5WSmJeDwt1ocxZtaSUtYz4EGsfP7zf43cz0bEc838l6PQiuzXGxN/lOOl7y7q+821f54c5VyBwavXy417YK0O5E4hIqqRFOYjIi0XCvPz6d/w/xenCp+sb3w29/H65tpHWa9UwEDMNjN/+Ppvk79On8n/lWKaf2B8VSMO317ZvdQonxSzng0wHJMRnf9tfyrdNPI/98H2iyH/kDvyD/kl/zDOJu5ZK/8wBnrMrvxDfvWT/0eGNCdgNNz/YYyV24Va12r5h/ySfxhTP3R76vQ0+Yf86sw/AJAv9cmsn0AGspL1+gMAAAAAAAAAAAAAAAAAAJy3U9lfbX9GNeaf30YcvxYRpW7jF5vfR9x+2/jUjaTR7K4k7daX95/p8wB9+mlgT19Xeur16OVBjd+bv54eznG/OL174S9ney2i1mi8UCqdv/6S1vXXu8fuU1/+sM8BHlISp0/p1XdGO/5Zt3ezHX/pIOL3xvqz0G39KcQTzW339afa+YrlHn16q88DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDJ3AgAA///To28I") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYRES16=r7, @ANYRES32=r5, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX], 0xfe, 0x303, &(0x7f0000000f00)="$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") mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000400)={0x0, 0x2710}, 0x10) creat(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x79) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000700)=0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff}) recvfrom$packet(r10, 0x0, 0x0, 0x2000, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r11) sendmsg$NFC_CMD_DISABLE_SE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="56d56f91", @ANYRES16=r12, @ANYBLOB="010029bd7000fbdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000010) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r13) sendmsg$IEEE802154_LLSEC_SETPARAMS(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010025bd70000a0001007770616e3000000005002e00060000006db4272066b720fe1022d476a3dee2150c4b6a08f106424e5900e3ac400dd6affd147ba3f1ad01a79b41bb8fefa677199d127ee41f2366fa7c2309fba6b2ed0a6e84f8caf38acbe7d25be0b7e45ee515a5c4d72388"], 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4040) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r11, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r14, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) 1.284583796s ago: executing program 1 (id=589): syz_open_dev$usbfs(0x0, 0x205, 0x8401) readv(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000001040)={0x0, 0x80, 0x0, 0x0, 0x7, 0xff, 0x0, 0x6, 0x1020487, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x87d2, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$tmpfs(0x0, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000f80), 0x282840, &(0x7f0000000080)=ANY=[@ANYBLOB="06706f6c3d6269d05e6e643d7cc59a23a8bf060088e06544f2fc6976653a2d360a00", @ANYRES64=r2]) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r4, &(0x7f00000002c0)=""/253, 0xfd, 0x200) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800455c002c0000000000119078aca200000000000100184e200018907804000000630000000200000000000000"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8915, 0x0) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000b40)) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000040)={0x8, 0x6, 0x83b, 0x10001, 0x101, 0x6}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYBLOB="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", @ANYRES32=r7], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, r9, &(0x7f0000000580)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x18, &(0x7f0000000800)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @alu={0x4, 0x0, 0x4, 0x9, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8002}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @alu={0x7, 0x0, 0x1, 0x0, 0x5, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x0, 0xa, 0x0, 0x40, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80006, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x8d, &(0x7f00000008c0)=""/141, 0x41100, 0x1d, '\x00', r6, 0x25, r4, 0x8, &(0x7f0000000980)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000009c0)=[{0x0, 0x3, 0x1, 0x6}, {0x5, 0x3, 0xa, 0xa}, {0x3, 0x2, 0x3, 0x1}, {0x4, 0x5, 0x1, 0x7}, {0x5, 0x3, 0x4, 0xb}], 0x10, 0x4}, 0x94) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000140)=0x3) fsmount(r4, 0x1, 0x9) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r6, @ANYBLOB="400000000000010000000000000000771ea0"], 0x30}}, 0x0) recvmsg$unix(r4, &(0x7f00000003c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/162, 0xa2}], 0x2}, 0x40014100) 1.052689106s ago: executing program 3 (id=590): epoll_create1(0x80000) (async) r0 = epoll_create1(0x80000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) rename(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x24044890) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x4032, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) (async) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x20000000000003, 0x6, 0x4, 0x0, 0x0, 0x0, 0x9}, r1, 0x5, 0xffffffffffffffff, 0x2) recvmsg(r2, 0x0, 0x140) (async) recvmsg(r2, 0x0, 0x140) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x306, 0xfffe, 0x55, 0xffffe, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x306, 0xfffe, 0x55, 0xffffe, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000100000000000200012800b000100697036746e6c00001000028005000900040000000400130008000400"], 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 1.051743686s ago: executing program 4 (id=591): prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0) mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a1000000004fe00002e000008001e8001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 1.002159211s ago: executing program 5 (id=592): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000000000000250500000000000000b50000a9a12b82b5a22f2649c5a7cbe9acb3197092b20000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xc4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x43c4, 0x44080) sendmsg$tipc(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000240)="3b62291b3d6aee013007bb7c361af66b99209e2ca30052d1096923d643f068b4a7d7ed20b156d3e643a2b156774dd5736c8a23aad4d01f256571b0a73d19fcd12731d35b5d827d45cbc32f5e1debbdb9caf52bcd9babe928ecaca6e66dedd142a871735f725fd634ac569de75d67dc28ddbf96a78175b9c6ea5ae5f4073380ce00235ee8ccd7161494e0e4784ed297116e223d05bf0f31d9eb255b3bf50059ce82a68089717d60d255f1907b1b3338bde5e652bc5ffcea68da4bb95bc57e159a75eda55dd7002a8b1787f80f48dd0d84f15483d2c34b868badf686b07139ea3ce956c508ba957e42b4341040", 0xec}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000000c0)="a45b3e31372f9e12ed2f", 0xa}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000100)="81165e1f72691856a1a1cb97bdd6b0b38253c05400a7e447e837ae7201a2597a8a544b9861f877dea89743547dfb4a8b328b", 0x32}, {&(0x7f0000002340)="02725285b1e96c4391f35be2dcd93c30eba89e10a7a922e24844252527e5b9617ca9caf28f3983fd601496b04fd2676782f2805ac91f031dd2ae2ecd277615d0c82771e6608c83eea5883bf8b4e6a2a48d0d3b4cfea57cf18a44cd3de5ea6e", 0x5f}, {&(0x7f00000023c0)="685bc1ce71182f5cc00559f4de69fe807702cc44035a0e5bf6d09b1d3271e16243f762c3f11b80e74373e974247d513756a5bc9e9374caf8621a03084c61b414e3f2d1cf50d71f510082e971d516295e3cb9be7e5c2ef84f26a093c078c8bcaa11a420cfc847f81687553ae5b94ff6b08ec10c47b21830804f4e01e7f9bcdeed77fc4faa7a545a0a86c7ddb79fab7f689fd7efd0c3072ce9cdb99c38bd1e349301ec789dc59a1479c66fc330852d16cf0872c9d20917085f794a8ae62c19f5e3ec208f5a80ae0a82b110645afcbc068bf2a63e76d24e7fbaac67", 0xda}, {&(0x7f00000024c0)="c8d3bd9303e95fb353d4c5b299c0d63b4a66fad717625b4ae4a3963f2a56b3167f18d2a0b2e68588ac7e8e92d847", 0x2e}], 0x8, &(0x7f0000002580)="926ef327ffd5201c41f15eaafff4a641f469ca423cb2d217cfeb", 0x1a, 0x400c1}, 0x4) 936.587777ms ago: executing program 1 (id=593): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, &(0x7f0000000100), 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x7fff, 0x92, &(0x7f0000000300)=""/146, 0x41100, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0x5, 0x6}, {0x3, 0x3, 0xf, 0x9}, {0x3, 0x4, 0x1, 0x5}, {0x0, 0x3, 0xc, 0x2}, {0x0, 0x4, 0x4, 0xb}, {0x1, 0x5, 0x10}, {0x5, 0x4, 0x1, 0x5}], 0x10, 0x6}, 0x94) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000003b0007010000000000000000047c00008dc0de000c0001"], 0x24}}, 0xc000) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)={0x88, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xff}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$inet6(0x10, 0x3, 0x0) 869.753732ms ago: executing program 5 (id=594): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 745.608423ms ago: executing program 4 (id=595): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0xff211, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="111099000000000095672a55f23e03ddb9640c9fe0ec9285b80eac3c595ce69d764156c7b916fbfab1cd0143d0aa25ebab6f0e6204524caddc3c6fb49493179358c7b23a3c58c73f9ddf2c3552ca94df5a58fcec067e2a8f0979e622dbb2c6e3ab1cefaae1076026c4b65d98e981"], &(0x7f0000000280)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x100010, 0xffffffffffffffff, 0xfdffa000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket(0x40000000015, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804000, &(0x7f0000000100)={[{@mblk_io_submit}, {@resuid}, {@lazytime}, {@acl}]}, 0xff, 0x591, &(0x7f0000000cc0)="$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") r4 = openat(r2, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ff"]) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 596.895797ms ago: executing program 3 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0xdb, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 596.249047ms ago: executing program 0 (id=597): r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f00000005c0)=0x12, 0x800) fstatfs(r0, &(0x7f00000006c0)=""/239) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0003", 0x23}], 0x1}, 0x48000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xa, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="09563120c6a2c54d00ccc32e13deea923c579435f52a4d86446e2e4c52da7d42695e838fa82f9164266cc831bed2a55f2ca611b3899e6981b213ca0d428f55d88b488d5c41dbb8fa9403487e607e458ceb13819e17da159079ac29a6082031023aefd196ad72b4553b060c731718e621c1fb4287638d23c7e9a2fe08bf565744", @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e746572"], 0xe4}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x24}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000580)={r4, 0x0, 0x25, 0x15, @void}, 0x10) set_mempolicy(0x1, &(0x7f0000000000)=0x4, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x20, 0x0, 0x0, 0x9, 0x5fc91, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfff, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x540a, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0xc267, 0xffffff7c) r10 = socket(0x10, 0x80002, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0xfffffffb, 0x2, 0xe31762b1, 0xa2, 0x101}) ioctl$TUNSETNOCSUM(r9, 0x400454c8, 0x1) ioctl$TCXONC(r8, 0x540a, 0x2) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 470.271418ms ago: executing program 3 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000500000000000000000000000000000000006027225e4d6452030be501902652042761bb18614c25042374b4cc321a66240012d59365dc81fdc4c0efe4e67dc2071405e057537440fb0a59a4696ecca2f40691433b646946662bb934f35b82a22851cdab7bf83928a6a63ef4ff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_emit_ethernet(0xa56, &(0x7f0000000800)=ANY=[], 0x0) fcntl$dupfd(r1, 0x406, r0) r3 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) socket$inet6(0xa, 0x2, 0x658336d3) r4 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a2d, 0x0, 0x7fc, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x22001) ioctl$USBDEVFS_ALLOW_SUSPEND(r9, 0x5522) ioctl$USBDEVFS_WAIT_FOR_RESUME(r9, 0x5523) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x12141, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 414.071243ms ago: executing program 5 (id=599): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xffffeff7, 0x10100150, 0x8, 0x7f, 0x2f, "fc2aff7f87680000810000001000007fcb3678", 0x0, 0xd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xd) 223.30264ms ago: executing program 5 (id=600): r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2000000000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0x400, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, r0, 0xb) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0xfffffee4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5d}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) 0s ago: executing program 0 (id=601): r0 = syz_io_uring_setup(0x10c2, &(0x7f0000002340)={0x0, 0x815e, 0x180, 0x0, 0x2fe}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x41000000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.951851][ T4053] RSP: 002b:00007f5e580a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 40.951914][ T4053] RAX: ffffffffffffffda RBX: 00007f5e598c5fa0 RCX: 00007f5e5964c629 [ 40.951929][ T4053] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 40.951986][ T4053] RBP: 00007f5e596e2b39 R08: 0000000000000000 R09: 0000000000000000 [ 40.952000][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.952012][ T4053] R13: 00007f5e598c6038 R14: 00007f5e598c5fa0 R15: 00007ffc725cf648 [ 40.952032][ T4053] [ 40.952040][ T4053] memory: usage 307200kB, limit 307200kB, failcnt 571 [ 40.985247][ T4069] sctp: [Deprecated]: syz.1.168 (pid 4069) Use of int in max_burst socket option. [ 40.985247][ T4069] Use struct sctp_assoc_value instead [ 40.986366][ T4053] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 40.986382][ T4053] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 40.993924][ T4069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 40.995511][ T4053] Memory cgroup stats for /syz2: [ 41.217582][ T4053] cache 0 [ 41.225918][ T4053] rss 0 [ 41.228736][ T4053] shmem 0 [ 41.231983][ T4053] mapped_file 0 [ 41.235471][ T4053] dirty 0 [ 41.238533][ T4053] writeback 0 [ 41.244063][ T4053] workingset_refault_anon 108 [ 41.248891][ T4053] workingset_refault_file 471 [ 41.255247][ T4053] swap 196608 [ 41.258627][ T4053] swapcached 13430784 [ 41.263569][ T4053] pgpgin 26831 [ 41.267031][ T4053] pgpgout 26830 [ 41.270902][ T4053] pgfault 9574 [ 41.274581][ T4053] pgmajfault 74 [ 41.285819][ T4053] inactive_anon 0 [ 41.289740][ T4053] active_anon 4096 [ 41.293479][ T4053] inactive_file 0 [ 41.297343][ T4053] active_file 0 [ 41.301127][ T4053] unevictable 0 [ 41.310186][ T4053] hierarchical_memory_limit 314572800 [ 41.316530][ T4053] hierarchical_memsw_limit 9223372036854771712 [ 41.323056][ T4053] total_cache 0 [ 41.326732][ T4053] total_rss 0 [ 41.330576][ T4053] total_shmem 0 [ 41.334662][ T4053] total_mapped_file 0 [ 41.338915][ T4053] total_dirty 0 [ 41.342674][ T4053] total_writeback 0 [ 41.346734][ T4053] total_workingset_refault_anon 108 [ 41.352348][ T4053] total_workingset_refault_file 471 [ 41.357718][ T4053] total_swap 196608 [ 41.362094][ T4053] total_swapcached 13430784 [ 41.385690][ T4053] total_pgpgin 26831 [ 41.389852][ T4053] total_pgpgout 26830 [ 41.393868][ T4053] total_pgfault 9574 [ 41.400302][ T4053] total_pgmajfault 74 [ 41.408681][ T4053] total_inactive_anon 0 [ 41.416969][ T4053] total_active_anon 4096 [ 41.421467][ T4053] total_inactive_file 0 [ 41.425809][ T4053] total_active_file 0 [ 41.430194][ T4053] total_unevictable 0 [ 41.434355][ T4053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.164,pid=4052,uid=0 [ 41.449292][ T4053] Memory cgroup out of memory: Killed process 4052 (syz.2.164) total-vm:94160kB, anon-rss:1224kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 41.575768][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.681037][ T4098] loop2: detected capacity change from 0 to 512 [ 41.737738][ T4098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.855389][ T4098] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.980620][ T4130] validate_nla: 4 callbacks suppressed [ 41.980635][ T4130] netlink: 'syz.3.186': attribute type 5 has an invalid length. [ 41.996326][ T4130] netlink: 'syz.3.186': attribute type 6 has an invalid length. [ 42.151524][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.294154][ T4157] netlink: 'syz.2.194': attribute type 83 has an invalid length. [ 42.382025][ T3308] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 42.433465][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 42.433488][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.433497][ T3308] Call Trace: [ 42.433502][ T3308] [ 42.433508][ T3308] __dump_stack+0x1d/0x30 [ 42.433605][ T3308] dump_stack_lvl+0x95/0xd0 [ 42.433625][ T3308] dump_stack+0x15/0x1b [ 42.433664][ T3308] dump_header+0x80/0x240 [ 42.433684][ T3308] oom_kill_process+0x295/0x350 [ 42.433702][ T3308] out_of_memory+0x97d/0xb80 [ 42.433720][ T3308] try_charge_memcg+0x62e/0xa10 [ 42.433779][ T3308] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 42.433804][ T3308] __swap_cache_prepare_and_add+0x386/0x530 [ 42.433830][ T3308] swap_cache_alloc_folio+0xa2/0x120 [ 42.433852][ T3308] swap_cluster_readahead+0x26e/0x3d0 [ 42.433916][ T3308] swapin_readahead+0xde/0x840 [ 42.434004][ T3308] ? __rcu_read_unlock+0x4e/0x70 [ 42.434024][ T3308] ? __perf_event_task_sched_in+0xa65/0xad0 [ 42.434101][ T3308] ? __list_add_valid_or_report+0x38/0xe0 [ 42.434126][ T3308] ? xfd_validate_state+0x45/0xf0 [ 42.434150][ T3308] ? __rcu_read_unlock+0x4e/0x70 [ 42.434239][ T3308] ? swap_cache_get_folio+0x26f/0x280 [ 42.434261][ T3308] do_swap_page+0x309/0x2210 [ 42.434284][ T3308] ? __schedule+0x85a/0xd40 [ 42.434303][ T3308] ? __rcu_read_lock+0x36/0x50 [ 42.434320][ T3308] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 42.434400][ T3308] handle_mm_fault+0xb40/0x3020 [ 42.434426][ T3308] ? vma_start_read+0x1c7/0x2c0 [ 42.434448][ T3308] do_user_addr_fault+0x62f/0x1050 [ 42.434547][ T4158] loop2: detected capacity change from 0 to 128 [ 42.434547][ T3308] ? trace_page_fault_user+0x1f/0xe0 [ 42.434579][ T3308] exc_page_fault+0x62/0xa0 [ 42.434600][ T3308] asm_exc_page_fault+0x26/0x30 [ 42.434659][ T3308] RIP: 0033:0x7f01e72f7817 [ 42.434676][ T3308] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 42.434694][ T3308] RSP: 002b:00007fff3ccd3870 EFLAGS: 00010202 [ 42.434711][ T3308] RAX: 0000000000000000 RBX: 000055558668c500 RCX: 00007f01e72f7817 [ 42.434725][ T3308] RDX: 00007fff3ccd38b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.434799][ T3308] RBP: 00007fff3ccd391c R08: 0000000000000000 R09: 0000000000000000 [ 42.434812][ T3308] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 42.434825][ T3308] R13: 00000000000927c0 R14: 000000000000a4a3 R15: 00007fff3ccd3970 [ 42.434843][ T3308] [ 42.434850][ T3308] memory: usage 307200kB, limit 307200kB, failcnt 231 [ 42.509035][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 42.509050][ T28] audit: type=1400 audit(1771456063.438:1135): avc: denied { create } for pid=4159 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.512258][ T3308] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 42.514723][ T28] audit: type=1400 audit(1771456063.438:1136): avc: denied { watch watch_reads } for pid=4159 comm="syz.4.195" path="/43" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.520003][ T3308] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 42.751782][ T3308] Memory cgroup stats for /syz0: [ 42.752235][ T3308] cache 0 [ 42.779187][ T3308] rss 0 [ 42.787529][ T3308] shmem 0 [ 42.790558][ T3308] mapped_file 0 [ 42.897241][ T3308] dirty 0 [ 42.903682][ T3308] writeback 0 [ 42.905873][ T4173] netlink: 'syz.4.200': attribute type 5 has an invalid length. [ 42.907069][ T3308] workingset_refault_anon 5 [ 42.907080][ T3308] workingset_refault_file 384 [ 42.907088][ T3308] swap 196608 [ 42.944252][ T3308] swapcached 196608 [ 42.945538][ T4173] netlink: 'syz.4.200': attribute type 6 has an invalid length. [ 42.971859][ T3308] pgpgin 7409 [ 42.975204][ T3308] pgpgout 7409 [ 42.987428][ T3308] pgfault 8954 [ 42.999141][ T3308] pgmajfault 10 [ 43.002648][ T3308] inactive_anon 0 [ 43.006368][ T3308] active_anon 0 [ 43.012762][ T3308] inactive_file 0 [ 43.019121][ T3308] active_file 0 [ 43.024746][ T3308] unevictable 0 [ 43.031021][ T3308] hierarchical_memory_limit 314572800 [ 43.040212][ T3308] hierarchical_memsw_limit 9223372036854771712 [ 43.051177][ T3308] total_cache 0 [ 43.057551][ T3308] total_rss 0 [ 43.064110][ T3308] total_shmem 0 [ 43.070819][ T3308] total_mapped_file 0 [ 43.077680][ T3308] total_dirty 0 [ 43.087789][ T3308] total_writeback 0 [ 43.091756][ T3308] total_workingset_refault_anon 5 [ 43.101230][ T3308] total_workingset_refault_file 384 [ 43.110872][ T3308] total_swap 196608 [ 43.117907][ T3308] total_swapcached 196608 [ 43.126614][ T3308] total_pgpgin 7409 [ 43.133764][ T3308] total_pgpgout 7409 [ 43.141335][ T3308] total_pgfault 8954 [ 43.148545][ T3308] total_pgmajfault 10 [ 43.159802][ T3308] total_inactive_anon 0 [ 43.164292][ T3308] total_active_anon 0 [ 43.168366][ T3308] total_inactive_file 0 [ 43.173065][ T3308] total_active_file 0 [ 43.177105][ T3308] total_unevictable 0 [ 43.181375][ T3308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=4136,uid=0 [ 43.196657][ T3308] Memory cgroup out of memory: Killed process 4136 (syz.0.188) total-vm:94160kB, anon-rss:1224kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 43.225204][ T4137] syz.0.188 (4137) used greatest stack depth: 6960 bytes left [ 43.282432][ T4183] loop3: detected capacity change from 0 to 512 [ 43.328064][ T4183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.349243][ T4183] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.374599][ T4200] loop2: detected capacity change from 0 to 256 [ 43.412685][ T4200] FAT-fs (loop2): Directory bread(block 64) failed [ 43.440534][ T4200] FAT-fs (loop2): Directory bread(block 65) failed [ 43.494519][ T4200] FAT-fs (loop2): Directory bread(block 66) failed [ 43.520187][ T4200] FAT-fs (loop2): Directory bread(block 67) failed [ 43.536907][ T4200] FAT-fs (loop2): Directory bread(block 68) failed [ 43.546256][ T4200] FAT-fs (loop2): Directory bread(block 69) failed [ 43.563859][ T4200] FAT-fs (loop2): Directory bread(block 70) failed [ 43.570939][ T4200] FAT-fs (loop2): Directory bread(block 71) failed [ 43.577951][ T4200] FAT-fs (loop2): Directory bread(block 72) failed [ 43.584865][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.594313][ T4200] FAT-fs (loop2): Directory bread(block 73) failed [ 43.614656][ T28] audit: type=1400 audit(1771456064.558:1137): avc: denied { create } for pid=4207 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.673501][ T4210] netlink: 'syz.3.211': attribute type 5 has an invalid length. [ 43.681627][ T4210] netlink: 'syz.3.211': attribute type 6 has an invalid length. [ 43.688494][ T28] audit: type=1400 audit(1771456064.578:1138): avc: denied { setopt } for pid=4207 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.851895][ T4222] team1: entered promiscuous mode [ 43.857283][ T4222] team1: entered allmulticast mode [ 43.862791][ T4222] 8021q: adding VLAN 0 to HW filter on device team1 [ 43.926900][ T3391] IPVS: starting estimator thread 0... [ 43.957695][ T4235] loop3: detected capacity change from 0 to 512 [ 43.964664][ T4235] EXT4-fs: Ignoring removed oldalloc option [ 43.981493][ T4235] EXT4-fs (loop3): 1 truncate cleaned up [ 43.987637][ T4235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.029037][ T4232] IPVS: using max 2112 ests per chain, 105600 per kthread [ 44.051988][ T28] audit: type=1400 audit(1771456320.975:1139): avc: denied { write } for pid=4243 comm="syz.2.223" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 44.052018][ T28] audit: type=1400 audit(1771456320.975:1140): avc: denied { write } for pid=4243 comm="syz.2.223" path="socket:[7534]" dev="sockfs" ino=7534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.052105][ T28] audit: type=1400 audit(1771456320.975:1141): avc: denied { remount } for pid=4243 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.088562][ T28] audit: type=1400 audit(1771456321.035:1142): avc: denied { read } for pid=4249 comm="syz.0.224" dev="sockfs" ino=7539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.095564][ T4251] openvswitch: netlink: Message has 8 unknown bytes. [ 44.096293][ T4248] SELinux: Context system_u:object_r:shell_exec_t:s0 is not valid (left unmapped). [ 44.105643][ T28] audit: type=1400 audit(1771456321.035:1143): avc: denied { mac_admin } for pid=4236 comm="syz.4.222" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.105701][ T28] audit: type=1400 audit(1771456321.035:1144): avc: denied { relabelto } for pid=4236 comm="syz.4.222" name="cgroup.controllers" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:shell_exec_t:s0" [ 44.208501][ T4258] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.220: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 44.302225][ T4266] netlink: 'syz.4.230': attribute type 5 has an invalid length. [ 44.302244][ T4266] netlink: 'syz.4.230': attribute type 6 has an invalid length. [ 44.303720][ T4258] EXT4-fs (loop3): Remounting filesystem read-only [ 44.840692][ T4295] __nla_validate_parse: 25 callbacks suppressed [ 44.840710][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 44.917355][ T4301] netlink: 44 bytes leftover after parsing attributes in process `syz.1.242'. [ 44.917379][ T4301] netlink: 35 bytes leftover after parsing attributes in process `syz.1.242'. [ 44.917391][ T4301] netlink: 'syz.1.242': attribute type 5 has an invalid length. [ 44.917404][ T4301] netlink: 35 bytes leftover after parsing attributes in process `syz.1.242'. [ 45.200243][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.621563][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 46.006183][ T4328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4328 comm=syz.1.251 [ 46.263712][ T4349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.255'. [ 46.319450][ T4349] netlink: 35 bytes leftover after parsing attributes in process `syz.1.255'. [ 46.349860][ T4349] netlink: 35 bytes leftover after parsing attributes in process `syz.1.255'. [ 46.518552][ T4360] mmap: syz.0.259 (4360) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.578492][ T4363] loop0: detected capacity change from 0 to 512 [ 46.666994][ T4363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.719079][ T4363] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.790364][ T4371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 46.805413][ T4360] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #18: comm syz.0.259: corrupted inode contents [ 46.826015][ T4371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 46.839070][ T4360] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 46.843381][ T4360] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #18: comm syz.0.259: mark_inode_dirty error [ 46.859344][ T4363] EXT4-fs (loop0): shut down requested (2) [ 46.876317][ T4373] geneve2: entered promiscuous mode [ 46.881597][ T4373] geneve2: entered allmulticast mode [ 46.919022][ T4360] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 46.920837][ T4360] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -5) [ 46.955086][ T4375] IPVS: length: 205 != 24 [ 47.036407][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.056556][ T4387] validate_nla: 3 callbacks suppressed [ 47.056570][ T4387] netlink: 'syz.1.268': attribute type 5 has an invalid length. [ 47.077965][ T4387] netlink: 'syz.1.268': attribute type 6 has an invalid length. [ 47.415327][ T4406] syz.4.274 uses obsolete (PF_INET,SOCK_PACKET) [ 47.509022][ T28] kauditd_printk_skb: 7345 callbacks suppressed [ 47.509136][ T28] audit: type=1326 audit(1771456324.445:8486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 47.578899][ T28] audit: type=1326 audit(1771456324.445:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 47.619032][ T28] audit: type=1326 audit(1771456324.455:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 47.649722][ T28] audit: type=1326 audit(1771456324.455:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 47.673219][ T28] audit: type=1326 audit(1771456324.455:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 47.699202][ T28] audit: type=1326 audit(1771456324.455:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 47.733161][ T28] audit: type=1326 audit(1771456324.455:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 47.756947][ T28] audit: type=1326 audit(1771456324.455:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 47.780298][ T28] audit: type=1326 audit(1771456324.455:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 47.803647][ T28] audit: type=1326 audit(1771456324.455:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x50000 [ 48.016473][ T4423] netlink: 'syz.4.281': attribute type 5 has an invalid length. [ 48.024235][ T4423] netlink: 'syz.4.281': attribute type 6 has an invalid length. [ 48.881246][ T4449] netlink: 'syz.4.293': attribute type 5 has an invalid length. [ 48.899110][ T4449] netlink: 'syz.4.293': attribute type 6 has an invalid length. [ 49.636256][ T4489] loop0: detected capacity change from 0 to 512 [ 49.659550][ T4489] EXT4-fs: Ignoring removed oldalloc option [ 49.686496][ T4489] EXT4-fs (loop0): 1 truncate cleaned up [ 49.711845][ T4494] syz_tun: entered promiscuous mode [ 49.719291][ T4489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.749580][ T4494] capability: warning: `syz.4.308' uses deprecated v2 capabilities in a way that may be insecure [ 49.760694][ T4468] syz.3.298 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 49.774950][ T4468] CPU: 0 UID: 0 PID: 4468 Comm: syz.3.298 Not tainted syzkaller #0 PREEMPT(full) [ 49.774978][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.774991][ T4468] Call Trace: [ 49.774998][ T4468] [ 49.775070][ T4468] __dump_stack+0x1d/0x30 [ 49.775100][ T4468] dump_stack_lvl+0x95/0xd0 [ 49.775123][ T4468] dump_stack+0x15/0x1b [ 49.775141][ T4468] dump_header+0x80/0x240 [ 49.775194][ T4468] oom_kill_process+0x295/0x350 [ 49.775216][ T4468] out_of_memory+0x97d/0xb80 [ 49.775263][ T4468] try_charge_memcg+0x62e/0xa10 [ 49.775302][ T4468] obj_cgroup_charge_pages+0x23/0xc0 [ 49.775412][ T4468] __memcg_kmem_charge_page+0x9e/0x170 [ 49.775436][ T4468] __alloc_frozen_pages_noprof+0x18a/0x360 [ 49.775464][ T4468] alloc_pages_mpol+0xb3/0x260 [ 49.775545][ T4468] alloc_pages_noprof+0x8f/0x130 [ 49.775625][ T4468] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 49.775661][ T4468] __kvmalloc_node_noprof+0x3d4/0x650 [ 49.775721][ T4468] ? futex_hash_allocate+0x190/0x9d0 [ 49.775750][ T4468] ? futex_hash_allocate+0x190/0x9d0 [ 49.775782][ T4468] futex_hash_allocate+0x190/0x9d0 [ 49.775809][ T4468] ? cap_task_prctl+0x13f/0x6e0 [ 49.775860][ T4468] futex_hash_prctl+0xd8/0xf0 [ 49.775887][ T4468] __se_sys_prctl+0xa3d/0x13f0 [ 49.775918][ T4468] __x64_sys_prctl+0x67/0x80 [ 49.775945][ T4468] x64_sys_call+0x2533/0x3020 [ 49.776065][ T4468] do_syscall_64+0x12c/0x370 [ 49.776101][ T4468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.776125][ T4468] RIP: 0033:0x7f403cfbc629 [ 49.776142][ T4468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.776169][ T4468] RSP: 002b:00007f403ba17028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 49.776214][ T4468] RAX: ffffffffffffffda RBX: 00007f403d235fa0 RCX: 00007f403cfbc629 [ 49.776230][ T4468] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 49.776244][ T4468] RBP: 00007f403d052b39 R08: 0000000000000000 R09: 0000000000000000 [ 49.776258][ T4468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.776269][ T4468] R13: 00007f403d236038 R14: 00007f403d235fa0 R15: 00007ffe0ecb01d8 [ 49.776358][ T4468] [ 49.776365][ T4468] memory: usage 303560kB, limit 307200kB, failcnt 287 [ 50.014471][ T4468] memory+swap: usage 138540kB, limit 9007199254740988kB, failcnt 0 [ 50.014521][ T4468] kmem: usage 137500kB, limit 9007199254740988kB, failcnt 0 [ 50.014533][ T4468] Memory cgroup stats for /syz3: [ 50.014802][ T4468] cache 524288 [ 50.014810][ T4468] rss 32768 [ 50.014881][ T4468] shmem 0 [ 50.014887][ T4468] mapped_file 65536 [ 50.014893][ T4468] dirty 0 [ 50.014899][ T4468] writeback 0 [ 50.014905][ T4468] workingset_refault_anon 7 [ 50.014912][ T4468] workingset_refault_file 679 [ 50.014919][ T4468] swap 360448 [ 50.014925][ T4468] swapcached 360448 [ 50.014933][ T4468] pgpgin 13676 [ 50.014940][ T4468] pgpgout 13540 [ 50.014948][ T4468] pgfault 15546 [ 50.015010][ T4468] pgmajfault 15 [ 50.015018][ T4468] inactive_anon 12288 [ 50.015027][ T4468] active_anon 20480 [ 50.015034][ T4468] inactive_file 0 [ 50.015042][ T4468] active_file 524288 [ 50.015050][ T4468] unevictable 0 [ 50.015056][ T4468] hierarchical_memory_limit 314572800 [ 50.015064][ T4468] hierarchical_memsw_limit 9223372036854771712 [ 50.015071][ T4468] total_cache 524288 [ 50.015107][ T4468] total_rss 32768 [ 50.015115][ T4468] total_shmem 0 [ 50.015123][ T4468] total_mapped_file 65536 [ 50.015131][ T4468] total_dirty 0 [ 50.015139][ T4468] total_writeback 0 [ 50.015147][ T4468] total_workingset_refault_anon 7 [ 50.015157][ T4468] total_workingset_refault_file 679 [ 50.015165][ T4468] total_swap 360448 [ 50.015174][ T4468] total_swapcached 360448 [ 50.015182][ T4468] total_pgpgin 13676 [ 50.015190][ T4468] total_pgpgout 13540 [ 50.015198][ T4468] total_pgfault 15546 [ 50.015241][ T4468] total_pgmajfault 15 [ 50.015249][ T4468] total_inactive_anon 12288 [ 50.015258][ T4468] total_active_anon 20480 [ 50.015266][ T4468] total_inactive_file 0 [ 50.015274][ T4468] total_active_file 524288 [ 50.015283][ T4468] total_unevictable 0 [ 50.015291][ T4468] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.298,pid=4467,uid=0 [ 50.015436][ T4468] Memory cgroup out of memory: Killed process 4467 (syz.3.298) total-vm:161612kB, anon-rss:1244kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 50.052967][ T4458] syz.1.296 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 50.053073][ T4458] CPU: 0 UID: 0 PID: 4458 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(full) [ 50.053150][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.053164][ T4458] Call Trace: [ 50.053172][ T4458] [ 50.053179][ T4458] __dump_stack+0x1d/0x30 [ 50.053204][ T4458] dump_stack_lvl+0x95/0xd0 [ 50.053251][ T4458] dump_stack+0x15/0x1b [ 50.053372][ T4458] dump_header+0x80/0x240 [ 50.053397][ T4458] oom_kill_process+0x295/0x350 [ 50.053426][ T4458] out_of_memory+0x97d/0xb80 [ 50.053449][ T4458] try_charge_memcg+0x62e/0xa10 [ 50.053513][ T4458] obj_cgroup_charge_pages+0x23/0xc0 [ 50.053541][ T4458] __memcg_kmem_charge_page+0x9e/0x170 [ 50.053570][ T4458] __alloc_frozen_pages_noprof+0x18a/0x360 [ 50.053613][ T4458] alloc_pages_mpol+0xb3/0x260 [ 50.053680][ T4458] alloc_pages_noprof+0x8f/0x130 [ 50.053704][ T4458] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 50.053734][ T4458] __kvmalloc_node_noprof+0x3d4/0x650 [ 50.053796][ T4458] ? futex_hash_allocate+0x190/0x9d0 [ 50.053826][ T4458] ? futex_hash_allocate+0x190/0x9d0 [ 50.053914][ T4458] futex_hash_allocate+0x190/0x9d0 [ 50.053943][ T4458] ? cap_task_prctl+0x13f/0x6e0 [ 50.053964][ T4458] futex_hash_prctl+0xd8/0xf0 [ 50.053994][ T4458] __se_sys_prctl+0xa3d/0x13f0 [ 50.054134][ T4458] __x64_sys_prctl+0x67/0x80 [ 50.054162][ T4458] x64_sys_call+0x2533/0x3020 [ 50.054187][ T4458] do_syscall_64+0x12c/0x370 [ 50.054264][ T4458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.054287][ T4458] RIP: 0033:0x7f29ea92c629 [ 50.054303][ T4458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.054345][ T4458] RSP: 002b:00007f29e937f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.054367][ T4458] RAX: ffffffffffffffda RBX: 00007f29eaba5fa0 RCX: 00007f29ea92c629 [ 50.054382][ T4458] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 50.054397][ T4458] RBP: 00007f29ea9c2b39 R08: 0000000000000000 R09: 0000000000000000 [ 50.054411][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.054484][ T4458] R13: 00007f29eaba6038 R14: 00007f29eaba5fa0 R15: 00007ffd1133b298 [ 50.054504][ T4458] [ 50.054563][ T4458] memory: usage 307200kB, limit 307200kB, failcnt 272 [ 50.054575][ T4458] memory+swap: usage 375124kB, limit 9007199254740988kB, failcnt 0 [ 50.054587][ T4458] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 50.054638][ T4458] Memory cgroup stats for /syz1: [ 50.054856][ T4458] cache 0 [ 50.054863][ T4458] rss 0 [ 50.054869][ T4458] shmem 0 [ 50.054875][ T4458] mapped_file 0 [ 50.054881][ T4458] dirty 0 [ 50.054886][ T4458] writeback 0 [ 50.054941][ T4458] workingset_refault_anon 22 [ 50.054948][ T4458] workingset_refault_file 582 [ 50.054954][ T4458] swap 69554176 [ 50.054961][ T4458] swapcached 69582848 [ 50.054967][ T4458] pgpgin 41251 [ 50.054973][ T4458] pgpgout 41244 [ 50.054979][ T4458] pgfault 20909 [ 50.055070][ T4458] pgmajfault 18 [ 50.055077][ T4458] inactive_anon 28672 [ 50.055083][ T4458] active_anon 0 [ 50.055089][ T4458] inactive_file 0 [ 50.055095][ T4458] active_file 0 [ 50.055145][ T4458] unevictable 0 [ 50.055152][ T4458] hierarchical_memory_limit 314572800 [ 50.055159][ T4458] hierarchical_memsw_limit 9223372036854771712 [ 50.055167][ T4458] total_cache 0 [ 50.055173][ T4458] total_rss 0 [ 50.055179][ T4458] total_shmem 0 [ 50.055195][ T4458] total_mapped_file 0 [ 50.055201][ T4458] total_dirty 0 [ 50.055207][ T4458] total_writeback 0 [ 50.055216][ T4458] total_workingset_refault_anon 22 [ 50.055280][ T4458] total_workingset_refault_file 582 [ 50.055287][ T4458] total_swap 69554176 [ 50.055294][ T4458] total_swapcached 69582848 [ 50.055372][ T4458] total_pgpgin 41251 [ 50.055431][ T4458] total_pgpgout 41244 [ 50.055438][ T4458] total_pgfault 20909 [ 50.055446][ T4458] total_pgmajfault 18 [ 50.055454][ T4458] total_inactive_anon 28672 [ 50.055462][ T4458] total_active_anon 0 [ 50.055470][ T4458] total_inactive_file 0 [ 50.055484][ T4458] total_active_file 0 [ 50.055526][ T4458] total_unevictable 0 [ 50.055533][ T4458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.296,pid=4457,uid=0 [ 50.055666][ T4458] Memory cgroup out of memory: Killed process 4457 (syz.1.296) total-vm:159564kB, anon-rss:1220kB, file-rss:22360kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 50.129370][ T4496] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.306: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 50.132729][ T4496] EXT4-fs (loop0): Remounting filesystem read-only [ 50.132890][ T4499] loop3: detected capacity change from 0 to 512 [ 50.150990][ T4499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.179986][ T4499] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.180577][ T4499] FAULT_INJECTION: forcing a failure. [ 50.180577][ T4499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.180664][ T4499] CPU: 0 UID: 0 PID: 4499 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(full) [ 50.180690][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.180703][ T4499] Call Trace: [ 50.180711][ T4499] [ 50.180719][ T4499] __dump_stack+0x1d/0x30 [ 50.180770][ T4499] dump_stack_lvl+0x95/0xd0 [ 50.180795][ T4499] dump_stack+0x15/0x1b [ 50.180874][ T4499] should_fail_ex+0x263/0x280 [ 50.180896][ T4499] should_fail+0xb/0x20 [ 50.180953][ T4499] should_fail_usercopy+0x1a/0x20 [ 50.180973][ T4499] _copy_from_user+0x1c/0xb0 [ 50.180996][ T4499] ext4_ioctl+0x188b/0x31b0 [ 50.181090][ T4499] ? ioctl_has_perm+0x27e/0x2d0 [ 50.181116][ T4499] ? do_vfs_ioctl+0x84f/0xe70 [ 50.181150][ T4499] ? selinux_file_ioctl+0x5f7/0xcb0 [ 50.181167][ T4499] ? __rcu_read_unlock+0x4e/0x70 [ 50.181204][ T4499] ? __rcu_read_unlock+0x4e/0x70 [ 50.181226][ T4499] ? __fget_files+0x184/0x1c0 [ 50.181249][ T4499] ? mutex_lock+0x57/0x90 [ 50.181278][ T4499] ? __pfx_ext4_ioctl+0x10/0x10 [ 50.181381][ T4499] __se_sys_ioctl+0xce/0x140 [ 50.181538][ T4499] __x64_sys_ioctl+0x43/0x50 [ 50.181575][ T4499] x64_sys_call+0x1563/0x3020 [ 50.181598][ T4499] do_syscall_64+0x12c/0x370 [ 50.181630][ T4499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.181654][ T4499] RIP: 0033:0x7f403cfbc629 [ 50.181726][ T4499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.181826][ T4499] RSP: 002b:00007f403ba17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.181845][ T4499] RAX: ffffffffffffffda RBX: 00007f403d235fa0 RCX: 00007f403cfbc629 [ 50.181860][ T4499] RDX: 0000000000000000 RSI: 00000000c0185879 RDI: 0000000000000004 [ 50.181874][ T4499] RBP: 00007f403ba17090 R08: 0000000000000000 R09: 0000000000000000 [ 50.181888][ T4499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.181938][ T4499] R13: 00007f403d236038 R14: 00007f403d235fa0 R15: 00007ffe0ecb01d8 [ 50.181958][ T4499] [ 50.281988][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.547651][ T4493] syz_tun: left promiscuous mode [ 50.861964][ T4503] loop3: detected capacity change from 0 to 512 [ 50.915677][ T4503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.916370][ T4503] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.495817][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.834549][ T4526] syz.1.320 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 51.834613][ T4526] CPU: 1 UID: 0 PID: 4526 Comm: syz.1.320 Not tainted syzkaller #0 PREEMPT(full) [ 51.834637][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.834649][ T4526] Call Trace: [ 51.834656][ T4526] [ 51.834663][ T4526] __dump_stack+0x1d/0x30 [ 51.834739][ T4526] dump_stack_lvl+0x95/0xd0 [ 51.834765][ T4526] dump_stack+0x15/0x1b [ 51.834788][ T4526] dump_header+0x80/0x240 [ 51.834890][ T4526] oom_kill_process+0x295/0x350 [ 51.834914][ T4526] out_of_memory+0x97d/0xb80 [ 51.834981][ T4526] try_charge_memcg+0x62e/0xa10 [ 51.835013][ T4526] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 51.835044][ T4526] __swap_cache_prepare_and_add+0x386/0x530 [ 51.835102][ T4526] swap_cache_alloc_folio+0xa2/0x120 [ 51.835129][ T4526] swap_cluster_readahead+0x26e/0x3d0 [ 51.835236][ T4526] swapin_readahead+0xde/0x840 [ 51.835260][ T4526] ? __rcu_read_unlock+0x4e/0x70 [ 51.835354][ T4526] ? __perf_event_task_sched_in+0xa65/0xad0 [ 51.835384][ T4526] ? __list_add_valid_or_report+0x38/0xe0 [ 51.835411][ T4526] ? __rcu_read_unlock+0x4e/0x70 [ 51.835428][ T4526] ? swap_cache_get_folio+0x26f/0x280 [ 51.835451][ T4526] do_swap_page+0x309/0x2210 [ 51.835515][ T4526] ? __schedule+0x85a/0xd40 [ 51.835536][ T4526] ? __rcu_read_lock+0x36/0x50 [ 51.835556][ T4526] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 51.835587][ T4526] handle_mm_fault+0xb40/0x3020 [ 51.835706][ T4526] ? vma_start_read+0x1c7/0x2c0 [ 51.835809][ T4526] do_user_addr_fault+0x62f/0x1050 [ 51.835844][ T4526] ? trace_page_fault_user+0x1f/0xe0 [ 51.835876][ T4526] exc_page_fault+0x62/0xa0 [ 51.836003][ T4526] asm_exc_page_fault+0x26/0x30 [ 51.836025][ T4526] RIP: 0033:0x7f29ea8ecece [ 51.836043][ T4526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.836176][ T4526] RSP: 002b:00007ffd1133b378 EFLAGS: 00010246 [ 51.836191][ T4526] RAX: 0000000000000000 RBX: 0000555559bab500 RCX: 00007f29ea8ecece [ 51.836202][ T4526] RDX: 00007ffd1133b3d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.836216][ T4526] RBP: 00007f29eaba7da0 R08: 0000000000000000 R09: 0000000000000000 [ 51.836230][ T4526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000ca5d [ 51.836244][ T4526] R13: 00007f29eaba5fac R14: 000000000000c796 R15: 00007ffd1133b500 [ 51.836265][ T4526] [ 51.836272][ T4526] memory: usage 307200kB, limit 307200kB, failcnt 652 [ 51.836286][ T4526] memory+swap: usage 375152kB, limit 9007199254740988kB, failcnt 0 [ 51.836365][ T4526] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 51.836377][ T4526] Memory cgroup stats for /syz1: [ 51.836652][ T4526] cache 0 [ 51.836659][ T4526] rss 0 [ 51.836665][ T4526] shmem 0 [ 51.836714][ T4526] mapped_file 0 [ 51.836720][ T4526] dirty 0 [ 51.836725][ T4526] writeback 0 [ 51.836731][ T4526] workingset_refault_anon 52 [ 51.836738][ T4526] workingset_refault_file 1132 [ 51.836745][ T4526] swap 69582848 [ 51.836751][ T4526] swapcached 69726208 [ 51.836757][ T4526] pgpgin 42068 [ 51.836763][ T4526] pgpgout 42068 [ 51.836769][ T4526] pgfault 21610 [ 51.836776][ T4526] pgmajfault 34 [ 51.836808][ T4526] inactive_anon 0 [ 51.836816][ T4526] active_anon 0 [ 51.836830][ T4526] inactive_file 0 [ 51.836838][ T4526] active_file 0 [ 51.836846][ T4526] unevictable 0 [ 51.836853][ T4526] hierarchical_memory_limit 314572800 [ 51.836861][ T4526] hierarchical_memsw_limit 9223372036854771712 [ 51.836872][ T4526] total_cache 0 [ 51.836879][ T4526] total_rss 0 [ 51.836885][ T4526] total_shmem 0 [ 51.836891][ T4526] total_mapped_file 0 [ 51.836897][ T4526] total_dirty 0 [ 51.836921][ T4526] total_writeback 0 [ 51.836928][ T4526] total_workingset_refault_anon 52 [ 51.837014][ T4526] total_workingset_refault_file 1132 [ 51.837022][ T4526] total_swap 69582848 [ 51.837029][ T4526] total_swapcached 69726208 [ 51.837035][ T4526] total_pgpgin 42068 [ 51.837042][ T4526] total_pgpgout 42068 [ 51.837092][ T4526] total_pgfault 21610 [ 51.837101][ T4526] total_pgmajfault 34 [ 51.837109][ T4526] total_inactive_anon 0 [ 51.837118][ T4526] total_active_anon 0 [ 51.837200][ T4526] total_inactive_file 0 [ 51.837208][ T4526] total_active_file 0 [ 51.837217][ T4526] total_unevictable 0 [ 51.837225][ T4526] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.320,pid=4526,uid=0 [ 51.837418][ T4526] Memory cgroup out of memory: Killed process 4526 (syz.1.320) total-vm:161612kB, anon-rss:1220kB, file-rss:22360kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 52.577712][ T28] kauditd_printk_skb: 6606 callbacks suppressed [ 52.577728][ T28] audit: type=1400 audit(1771456329.515:15106): avc: denied { create } for pid=4545 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.579444][ T28] audit: type=1400 audit(1771456329.515:15107): avc: denied { setopt } for pid=4545 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.589026][ T28] audit: type=1400 audit(1771456329.525:15108): avc: denied { ioctl } for pid=4545 comm="syz.4.324" path="socket:[9520]" dev="sockfs" ino=9520 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.603144][ T28] audit: type=1400 audit(1771456329.545:15109): avc: denied { prog_load } for pid=4542 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.603187][ T28] audit: type=1326 audit(1771456329.545:15110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x7ffc0000 [ 52.603212][ T28] audit: type=1326 audit(1771456329.545:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x7ffc0000 [ 52.603236][ T28] audit: type=1326 audit(1771456329.545:15112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403cfbc629 code=0x7ffc0000 [ 52.603302][ T28] audit: type=1326 audit(1771456329.545:15113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f403cfbc629 code=0x7ffc0000 [ 52.643127][ T28] audit: type=1400 audit(1771456329.585:15114): avc: denied { sys_module } for pid=4542 comm="syz.3.323" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.643221][ T28] audit: type=1400 audit(1771456329.585:15115): avc: denied { module_request } for pid=4542 comm="syz.3.323" kmod="veth1_to_hsr" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.654563][ T4544] __nla_validate_parse: 26 callbacks suppressed [ 52.654577][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 53.917731][ T4568] loop3: detected capacity change from 0 to 8192 [ 53.979713][ T3300] loop3: p1 p2 p4 [ 53.997615][ T3300] loop3: p4 size 262144 extends beyond EOD, truncated [ 54.027338][ T4568] loop3: p1 p2 p4 [ 54.036727][ T4568] loop3: p4 size 262144 extends beyond EOD, truncated [ 54.264449][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.387311][ T4588] syz.1.336 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 54.409263][ T4588] CPU: 1 UID: 0 PID: 4588 Comm: syz.1.336 Not tainted syzkaller #0 PREEMPT(full) [ 54.409335][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.409347][ T4588] Call Trace: [ 54.409353][ T4588] [ 54.409360][ T4588] __dump_stack+0x1d/0x30 [ 54.409384][ T4588] dump_stack_lvl+0x95/0xd0 [ 54.409443][ T4588] dump_stack+0x15/0x1b [ 54.409462][ T4588] dump_header+0x80/0x240 [ 54.409541][ T4588] oom_kill_process+0x295/0x350 [ 54.409560][ T4588] out_of_memory+0x97d/0xb80 [ 54.409581][ T4588] try_charge_memcg+0x62e/0xa10 [ 54.409613][ T4588] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 54.409641][ T4588] __swap_cache_prepare_and_add+0x386/0x530 [ 54.409693][ T4588] swap_cache_alloc_folio+0xa2/0x120 [ 54.409796][ T4588] swap_cluster_readahead+0x26e/0x3d0 [ 54.409824][ T4588] swapin_readahead+0xde/0x840 [ 54.409847][ T4588] ? __rcu_read_unlock+0x4e/0x70 [ 54.409865][ T4588] ? __perf_event_task_sched_in+0xa65/0xad0 [ 54.409952][ T4588] ? __list_add_valid_or_report+0x38/0xe0 [ 54.410003][ T4588] ? __rcu_read_unlock+0x4e/0x70 [ 54.410076][ T4588] ? swap_cache_get_folio+0x26f/0x280 [ 54.410099][ T4588] do_swap_page+0x309/0x2210 [ 54.410145][ T4588] ? __schedule+0x85a/0xd40 [ 54.410166][ T4588] ? __rcu_read_lock+0x36/0x50 [ 54.410183][ T4588] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 54.410206][ T4588] handle_mm_fault+0xb40/0x3020 [ 54.410249][ T4588] ? vma_start_read+0x1c7/0x2c0 [ 54.410272][ T4588] do_user_addr_fault+0x62f/0x1050 [ 54.410334][ T4588] ? trace_page_fault_user+0x1f/0xe0 [ 54.410361][ T4588] exc_page_fault+0x62/0xa0 [ 54.410385][ T4588] asm_exc_page_fault+0x26/0x30 [ 54.410483][ T4588] RIP: 0033:0x7f29ea7fa04c [ 54.410497][ T4588] Code: 4a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 54.410513][ T4588] RSP: 002b:00007ffd1133b400 EFLAGS: 00010202 [ 54.410529][ T4588] RAX: 0000000000000000 RBX: 00007f29eaba5fa0 RCX: 0000555559bab808 [ 54.410541][ T4588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.410613][ T4588] RBP: 00007f29eaba7da0 R08: 0000000000000000 R09: 0000000000000000 [ 54.410624][ T4588] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000d6af [ 54.410635][ T4588] R13: 00007f29eaba5fac R14: 000000000000d3ea R15: 00007ffd1133b500 [ 54.410652][ T4588] [ 54.413093][ T4588] memory: usage 279120kB, limit 307200kB, failcnt 885 [ 54.675654][ T4588] memory+swap: usage 170244kB, limit 9007199254740988kB, failcnt 0 [ 54.685847][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 54.698690][ T4588] kmem: usage 90184kB, limit 9007199254740988kB, failcnt 0 [ 54.705604][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 54.726916][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 54.756347][ T4588] Memory cgroup stats for /syz1: [ 54.756638][ T4588] cache 4096 [ 54.771893][ T4588] rss 4096 [ 54.774933][ T4588] shmem 0 [ 54.799034][ T4588] mapped_file 4096 [ 54.802778][ T4588] dirty 0 [ 54.805752][ T4588] writeback 8192 [ 54.849073][ T4588] workingset_refault_anon 79 [ 54.864528][ T4588] workingset_refault_file 1261 [ 54.925383][ T4588] swap 69554176 [ 54.928865][ T4588] swapcached 69857280 [ 54.988371][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 55.005801][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 55.017387][ T4588] pgpgin 43424 [ 55.052063][ T4588] pgpgout 43416 [ 55.055626][ T4588] pgfault 23174 [ 55.061710][ T4588] pgmajfault 47 [ 55.065307][ T4588] inactive_anon 20480 [ 55.073830][ T4588] active_anon 8192 [ 55.077635][ T4588] inactive_file 0 [ 55.152229][ T4588] active_file 4096 [ 55.164841][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 55.194778][ T4588] unevictable 0 [ 55.229491][ T4588] hierarchical_memory_limit 314572800 [ 55.280727][ T4588] hierarchical_memsw_limit 9223372036854771712 [ 55.348927][ T4588] total_cache 4096 [ 55.385088][ T4588] total_rss 4096 [ 55.419899][ T4588] total_shmem 0 [ 55.449059][ T4588] total_mapped_file 4096 [ 55.474105][ T4588] total_dirty 0 [ 55.480943][ T4613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 55.489085][ T4588] total_writeback 8192 [ 55.493759][ T4588] total_workingset_refault_anon 79 [ 55.498898][ T4588] total_workingset_refault_file 1261 [ 55.559689][ T4588] total_swap 69554176 [ 55.563770][ T4588] total_swapcached 69857280 [ 55.568261][ T4588] total_pgpgin 43424 [ 55.619019][ T4588] total_pgpgout 43416 [ 55.623022][ T4588] total_pgfault 23174 [ 55.626997][ T4588] total_pgmajfault 47 [ 55.659130][ T4588] total_inactive_anon 20480 [ 55.663649][ T4588] total_active_anon 8192 [ 55.667878][ T4588] total_inactive_file 0 [ 55.709189][ T4588] total_active_file 4096 [ 55.713531][ T4588] total_unevictable 0 [ 55.717504][ T4588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.336,pid=4588,uid=0 [ 55.805545][ T4620] loop0: detected capacity change from 0 to 512 [ 55.811887][ T4588] Memory cgroup out of memory: Killed process 4588 (syz.1.336) total-vm:159564kB, anon-rss:1220kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 55.822624][ T4622] loop3: detected capacity change from 0 to 512 [ 55.866736][ T4620] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.345: inode has both inline data and extents flags [ 55.909651][ T4622] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.346: inode has both inline data and extents flags [ 55.939080][ T4620] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.939155][ T4622] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.948382][ T4620] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.345: couldn't read orphan inode 15 (err -117) [ 55.957536][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 55.957564][ C1] EXT4-fs (loop0): initial error at time 1771456332: ext4_orphan_get:1391: inode 15 [ 55.957595][ C1] EXT4-fs (loop0): last error at time 1771456332: ext4_orphan_get:1391: inode 15 [ 55.999003][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 56.005447][ C1] EXT4-fs (loop3): initial error at time 1771456332: ext4_orphan_get:1391: inode 15 [ 56.014841][ C1] EXT4-fs (loop3): last error at time 1771456332: ext4_orphan_get:1391: inode 15 [ 56.035163][ T4622] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.346: couldn't read orphan inode 15 (err -117) [ 56.060275][ T4622] loop3: lost filesystem error report for type 5 error -117 [ 56.060356][ T4620] loop0: lost filesystem error report for type 5 error -117 [ 56.060779][ T4622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.098048][ T4620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.150482][ T4622] FAULT_INJECTION: forcing a failure. [ 56.150482][ T4622] name failslab, interval 1, probability 0, space 0, times 0 [ 56.184336][ T4622] CPU: 0 UID: 0 PID: 4622 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(full) [ 56.184362][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.184372][ T4622] Call Trace: [ 56.184426][ T4622] [ 56.184433][ T4622] __dump_stack+0x1d/0x30 [ 56.184505][ T4622] dump_stack_lvl+0x95/0xd0 [ 56.184587][ T4622] dump_stack+0x15/0x1b [ 56.184616][ T4622] should_fail_ex+0x263/0x280 [ 56.184639][ T4622] should_failslab+0x8c/0xb0 [ 56.184658][ T4622] kmem_cache_alloc_noprof+0x66/0x400 [ 56.184680][ T4622] ? do_getname+0x2e/0x1c0 [ 56.184702][ T4622] do_getname+0x2e/0x1c0 [ 56.184728][ T4622] getname_flags+0x1d/0x30 [ 56.184753][ T4622] do_sys_openat2+0x60/0x130 [ 56.184777][ T4622] __x64_sys_openat+0xf2/0x120 [ 56.184804][ T4622] x64_sys_call+0x1e39/0x3020 [ 56.184832][ T4622] do_syscall_64+0x12c/0x370 [ 56.184932][ T4622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.184955][ T4622] RIP: 0033:0x7f403cfbc629 [ 56.184971][ T4622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.184991][ T4622] RSP: 002b:00007f403ba17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.185011][ T4622] RAX: ffffffffffffffda RBX: 00007f403d235fa0 RCX: 00007f403cfbc629 [ 56.185032][ T4622] RDX: 00000000001c1202 RSI: 0000200000004400 RDI: ffffffffffffff9c [ 56.185046][ T4622] RBP: 00007f403ba17090 R08: 0000000000000000 R09: 0000000000000000 [ 56.185059][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.185071][ T4622] R13: 00007f403d236038 R14: 00007f403d235fa0 R15: 00007ffe0ecb01d8 [ 56.185089][ T4622] [ 56.394267][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.459926][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.584390][ T4638] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 56.605475][ T4638] bond0 (unregistering): Released all slaves [ 56.834702][ T4652] loop0: detected capacity change from 0 to 512 [ 56.911266][ T4652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.950580][ T4652] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.414121][ T4646] syz.4.354 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 57.428458][ T4646] CPU: 0 UID: 0 PID: 4646 Comm: syz.4.354 Not tainted syzkaller #0 PREEMPT(full) [ 57.428483][ T4646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.428504][ T4646] Call Trace: [ 57.428510][ T4646] [ 57.428517][ T4646] __dump_stack+0x1d/0x30 [ 57.428542][ T4646] dump_stack_lvl+0x95/0xd0 [ 57.428567][ T4646] dump_stack+0x15/0x1b [ 57.428669][ T4646] dump_header+0x80/0x240 [ 57.428689][ T4646] oom_kill_process+0x295/0x350 [ 57.428708][ T4646] out_of_memory+0x97d/0xb80 [ 57.428727][ T4646] try_charge_memcg+0x62e/0xa10 [ 57.428819][ T4646] obj_cgroup_charge_pages+0x23/0xc0 [ 57.428845][ T4646] __memcg_kmem_charge_page+0x9e/0x170 [ 57.428927][ T4646] __alloc_frozen_pages_noprof+0x18a/0x360 [ 57.429005][ T4646] alloc_pages_mpol+0xb3/0x260 [ 57.429034][ T4646] alloc_pages_noprof+0x8f/0x130 [ 57.429131][ T4646] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 57.429162][ T4646] __kvmalloc_node_noprof+0x3d4/0x650 [ 57.429240][ T4646] ? futex_hash_allocate+0x190/0x9d0 [ 57.429327][ T4646] ? futex_hash_allocate+0x190/0x9d0 [ 57.429422][ T4646] futex_hash_allocate+0x190/0x9d0 [ 57.429454][ T4646] ? cap_task_prctl+0x13f/0x6e0 [ 57.429488][ T4646] futex_hash_prctl+0xd8/0xf0 [ 57.429518][ T4646] __se_sys_prctl+0xa3d/0x13f0 [ 57.429543][ T4646] __x64_sys_prctl+0x67/0x80 [ 57.429566][ T4646] x64_sys_call+0x2533/0x3020 [ 57.429592][ T4646] do_syscall_64+0x12c/0x370 [ 57.429681][ T4646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.429706][ T4646] RIP: 0033:0x7f1717bec629 [ 57.429723][ T4646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.429744][ T4646] RSP: 002b:00007f171663f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 57.429840][ T4646] RAX: ffffffffffffffda RBX: 00007f1717e65fa0 RCX: 00007f1717bec629 [ 57.429857][ T4646] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 57.429922][ T4646] RBP: 00007f1717c82b39 R08: 0000000000000000 R09: 0000000000000000 [ 57.429962][ T4646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.429975][ T4646] R13: 00007f1717e66038 R14: 00007f1717e65fa0 R15: 00007ffcdb2af2f8 [ 57.430025][ T4646] [ 57.459578][ T4656] syz_tun: entered promiscuous mode [ 57.460044][ T4646] memory: usage 286132kB, limit 307200kB, failcnt 238 [ 57.680303][ T28] kauditd_printk_skb: 743 callbacks suppressed [ 57.680371][ T28] audit: type=1400 audit(1771456334.625:15859): avc: denied { bind } for pid=4655 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.691274][ T4646] memory+swap: usage 194476kB, limit 9007199254740988kB, failcnt 0 [ 57.725515][ T4646] kmem: usage 116524kB, limit 9007199254740988kB, failcnt 0 [ 57.736304][ T4646] Memory cgroup stats for [ 57.753163][ T28] audit: type=1400 audit(1771456334.655:15860): avc: denied { create } for pid=4658 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.807165][ T28] audit: type=1400 audit(1771456334.655:15861): avc: denied { write } for pid=4658 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.827017][ T4646] /syz4: [ 57.827269][ T4646] cache 12304384 [ 57.834787][ T4646] rss 200704 [ 57.838000][ T4646] shmem 11255808 [ 57.841592][ T4646] mapped_file 106496 [ 57.845482][ T4646] dirty 20480 [ 57.848772][ T4646] writeback 0 [ 57.852078][ T4646] workingset_refault_anon 0 [ 57.856570][ T4646] workingset_refault_file 639 [ 57.861332][ T4646] swap 56844288 [ 57.865288][ T4646] swapcached 58122240 [ 57.869319][ T4646] pgpgin 63605 [ 57.872755][ T4646] pgpgout 60240 [ 57.876267][ T4646] pgfault 45012 [ 57.881228][ T4646] pgmajfault 9 [ 57.881571][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.884607][ T4646] inactive_anon 1069056 [ 57.884617][ T4646] active_anon 11665408 [ 57.884624][ T4646] inactive_file 0 [ 57.884632][ T4646] active_file 1024000 [ 57.909836][ T4646] unevictable 0 [ 57.923861][ T28] audit: type=1400 audit(1771456334.655:15862): avc: denied { connect } for pid=4658 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.981513][ T4646] hierarchical_memory_limit 314572800 [ 57.987044][ T4646] hierarchical_memsw_limit 9223372036854771712 [ 58.000561][ T4646] total_cache 12304384 [ 58.025793][ T4646] total_rss 200704 [ 58.032743][ T28] audit: type=1400 audit(1771456334.655:15863): avc: denied { name_connect } for pid=4658 comm="syz.3.356" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 58.069073][ T4646] total_shmem 11255808 [ 58.098453][ T4646] total_mapped_file 106496 [ 58.124193][ T4646] total_dirty 20480 [ 58.142760][ T4646] total_writeback 0 [ 58.168398][ T4646] total_workingset_refault_anon 0 [ 58.186972][ T28] audit: type=1400 audit(1771456334.675:15864): avc: denied { execmem } for pid=4655 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.224479][ T4646] total_workingset_refault_file 639 [ 58.229745][ T4646] total_swap 56844288 [ 58.233775][ T4646] total_swapcached 58122240 [ 58.238273][ T4646] total_pgpgin 63605 [ 58.242284][ T4646] total_pgpgout 60240 [ 58.246328][ T4646] total_pgfault 45012 [ 58.250541][ T4646] total_pgmajfault 9 [ 58.254497][ T4646] total_inactive_anon 1069056 [ 58.256622][ T4655] syz_tun: left promiscuous mode [ 58.259270][ T4646] total_active_anon 11665408 [ 58.279059][ T4646] total_inactive_file 0 [ 58.283236][ T4646] total_active_file 1024000 [ 58.287733][ T4646] total_unevictable 0 [ 58.325114][ T28] audit: type=1400 audit(1771456334.685:15865): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.329116][ T4646] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.354,pid=4644,uid=0 [ 58.420951][ T28] audit: type=1400 audit(1771456334.905:15866): avc: denied { map_create } for pid=4655 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.422367][ T4646] Memory cgroup out of memory: Killed process 4646 (syz.4.354) total-vm:161612kB, anon-rss:1408kB, file-rss:22396kB, shmem-rss:8kB, UID:0 pgtables:132kB oom_score_adj:0 [ 58.464476][ T28] audit: type=1400 audit(1771456334.915:15867): avc: denied { prog_load } for pid=4655 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.518654][ T28] audit: type=1400 audit(1771456334.915:15868): avc: denied { bpf } for pid=4655 comm="syz.1.355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.656542][ T4678] random: crng reseeded on system resumption [ 58.753241][ T4678] syzkaller0: entered allmulticast mode [ 58.779200][ T4678] macvlan0: entered allmulticast mode [ 58.793820][ T4678] veth1_vlan: entered allmulticast mode [ 58.977168][ T4695] loop3: detected capacity change from 0 to 512 [ 59.000684][ T4695] EXT4-fs: Ignoring removed oldalloc option [ 59.039767][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 59.096812][ T4695] EXT4-fs (loop3): 1 truncate cleaned up [ 59.140003][ T4695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.404036][ T4709] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.363: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 59.409502][ T4709] EXT4-fs (loop3): Remounting filesystem read-only [ 59.413321][ T4705] 9p: Could not find request transport: xen [ 59.597546][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 59.610962][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 59.618550][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.621542][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 59.622897][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 59.622938][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 59.623041][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 59.623084][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 59.623175][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 59.623212][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 59.678303][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.735751][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.776026][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.941617][ T58] bridge_slave_1: left allmulticast mode [ 59.941657][ T58] bridge_slave_1: left promiscuous mode [ 59.941809][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.989217][ T58] bridge_slave_0: left allmulticast mode [ 59.989235][ T58] bridge_slave_0: left promiscuous mode [ 59.989422][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.201937][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.213713][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.223506][ T58] bond0 (unregistering): Released all slaves [ 60.335867][ T58] hsr_slave_0: left promiscuous mode [ 60.336359][ T58] hsr_slave_1: left promiscuous mode [ 60.362213][ T58] veth1_macvtap: left promiscuous mode [ 60.362240][ T58] veth0_macvtap: left promiscuous mode [ 60.362283][ T58] veth1_vlan: left promiscuous mode [ 60.362376][ T58] veth0_vlan: left promiscuous mode [ 60.507585][ T58] team0 (unregistering): Port device team_slave_1 removed [ 60.514957][ T58] team0 (unregistering): Port device team_slave_0 removed [ 60.551879][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.620943][ T4712] chnl_net:caif_netlink_parms(): no params data found [ 60.774531][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.799275][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.813346][ T4712] bridge_slave_0: entered allmulticast mode [ 60.829586][ T4712] bridge_slave_0: entered promiscuous mode [ 60.865296][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.882631][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.891951][ T4712] bridge_slave_1: entered allmulticast mode [ 60.908698][ T4712] bridge_slave_1: entered promiscuous mode [ 60.942963][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.963505][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.018667][ T4712] team0: Port device team_slave_0 added [ 61.030895][ T4712] team0: Port device team_slave_1 added [ 61.075597][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.093129][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.098437][ T4795] loop3: detected capacity change from 0 to 8192 [ 61.149051][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.181436][ T4795] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.183224][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.208304][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.255057][ T4793] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 61.268018][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.298192][ T4793] FAT-fs (loop3): Filesystem has been set read-only [ 61.328361][ T4793] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 61.357408][ T4793] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 61.398406][ T4712] hsr_slave_0: entered promiscuous mode [ 61.430814][ T4712] hsr_slave_1: entered promiscuous mode [ 61.443086][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 61.458963][ T4712] Cannot create hsr debugfs directory [ 61.549243][ T4828] FAULT_INJECTION: forcing a failure. [ 61.549243][ T4828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.566986][ T4828] CPU: 0 UID: 0 PID: 4828 Comm: syz.3.386 Not tainted syzkaller #0 PREEMPT(full) [ 61.567055][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.567065][ T4828] Call Trace: [ 61.567070][ T4828] [ 61.567211][ T4828] __dump_stack+0x1d/0x30 [ 61.567237][ T4828] dump_stack_lvl+0x95/0xd0 [ 61.567261][ T4828] dump_stack+0x15/0x1b [ 61.567283][ T4828] should_fail_ex+0x263/0x280 [ 61.567346][ T4828] should_fail+0xb/0x20 [ 61.567366][ T4828] should_fail_usercopy+0x1a/0x20 [ 61.567389][ T4828] _copy_from_user+0x1c/0xb0 [ 61.567471][ T4828] map_update_elem+0x3fa/0x6d0 [ 61.567493][ T4828] __sys_bpf+0x5e1/0x7e0 [ 61.567562][ T4828] __x64_sys_bpf+0x41/0x50 [ 61.567589][ T4828] x64_sys_call+0x10cb/0x3020 [ 61.567614][ T4828] do_syscall_64+0x12c/0x370 [ 61.567644][ T4828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.567691][ T4828] RIP: 0033:0x7f403cfbc629 [ 61.567762][ T4828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.567777][ T4828] RSP: 002b:00007f403ba17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.567795][ T4828] RAX: ffffffffffffffda RBX: 00007f403d235fa0 RCX: 00007f403cfbc629 [ 61.567839][ T4828] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 61.567852][ T4828] RBP: 00007f403ba17090 R08: 0000000000000000 R09: 0000000000000000 [ 61.567865][ T4828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.567876][ T4828] R13: 00007f403d236038 R14: 00007f403d235fa0 R15: 00007ffe0ecb01d8 [ 61.567893][ T4828] [ 61.804397][ T4837] loop0: detected capacity change from 0 to 512 [ 61.813970][ T4837] EXT4-fs: Ignoring removed bh option [ 61.844604][ T4837] EXT4-fs: Ignoring removed oldalloc option [ 61.869707][ T4837] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.903125][ T4837] EXT4-fs (loop0): 1 truncate cleaned up [ 61.919401][ T4837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.290199][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.311343][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.328658][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.335760][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.358570][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.384595][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.391752][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.731983][ T28] kauditd_printk_skb: 1125 callbacks suppressed [ 62.731996][ T28] audit: type=1400 audit(1771456339.675:16994): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.817703][ T4887] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 62.846150][ T28] audit: type=1400 audit(1771456339.675:16995): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.849108][ T4887] audit: out of memory in audit_log_start [ 62.898141][ T28] audit: type=1400 audit(1771456339.675:16996): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.905213][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.963134][ T28] audit: type=1400 audit(1771456339.685:16997): avc: denied { module_request } for pid=4712 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.012902][ T28] audit: type=1400 audit(1771456339.685:16998): avc: denied { search } for pid=4881 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.035388][ T28] audit: type=1400 audit(1771456339.745:16999): avc: denied { sys_module } for pid=4712 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.057253][ T28] audit: type=1400 audit(1771456339.745:17000): avc: denied { create } for pid=4885 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.076976][ T28] audit: type=1400 audit(1771456339.745:17001): avc: denied { module_request } for pid=4712 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.193265][ T4899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.213943][ T4899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.230462][ T4899] bond0 (unregistering): Released all slaves [ 63.268724][ T4906] loop3: detected capacity change from 0 to 512 [ 63.314324][ T4906] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 63.567109][ T4712] veth0_vlan: entered promiscuous mode [ 63.582033][ T4712] veth1_vlan: entered promiscuous mode [ 63.605743][ T4920] loop0: detected capacity change from 0 to 2048 [ 63.632787][ T4712] veth0_macvtap: entered promiscuous mode [ 63.667506][ T4920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.672039][ T4712] veth1_macvtap: entered promiscuous mode [ 63.706072][ T4920] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.740765][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.762587][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.867620][ T4934] loop3: detected capacity change from 0 to 512 [ 63.884356][ T4934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.894303][ T4934] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 64.132930][ T4948] FAULT_INJECTION: forcing a failure. [ 64.132930][ T4948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.203775][ T4948] CPU: 1 UID: 0 PID: 4948 Comm: syz.5.368 Not tainted syzkaller #0 PREEMPT(full) [ 64.203851][ T4948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.203864][ T4948] Call Trace: [ 64.203871][ T4948] [ 64.203880][ T4948] __dump_stack+0x1d/0x30 [ 64.203907][ T4948] dump_stack_lvl+0x95/0xd0 [ 64.203969][ T4948] dump_stack+0x15/0x1b [ 64.204000][ T4948] should_fail_ex+0x263/0x280 [ 64.204023][ T4948] should_fail+0xb/0x20 [ 64.204042][ T4948] should_fail_usercopy+0x1a/0x20 [ 64.204066][ T4948] _copy_from_user+0x1c/0xb0 [ 64.204140][ T4948] input_event_from_user+0x5e/0x190 [ 64.204171][ T4948] ? input_inject_event+0x104/0x120 [ 64.204195][ T4948] evdev_write+0x1b0/0x2b0 [ 64.204250][ T4948] ? __pfx_evdev_write+0x10/0x10 [ 64.204278][ T4948] vfs_write+0x269/0x9f0 [ 64.204338][ T4948] ? __rcu_read_unlock+0x4e/0x70 [ 64.204360][ T4948] ? __fget_files+0x184/0x1c0 [ 64.204387][ T4948] ksys_write+0xdc/0x1a0 [ 64.204443][ T4948] __x64_sys_write+0x40/0x50 [ 64.204470][ T4948] x64_sys_call+0x27e1/0x3020 [ 64.204518][ T4948] do_syscall_64+0x12c/0x370 [ 64.204550][ T4948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.204571][ T4948] RIP: 0033:0x7f402bfac629 [ 64.204588][ T4948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.204644][ T4948] RSP: 002b:00007f402aa07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.204665][ T4948] RAX: ffffffffffffffda RBX: 00007f402c225fa0 RCX: 00007f402bfac629 [ 64.204678][ T4948] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 64.204690][ T4948] RBP: 00007f402aa07090 R08: 0000000000000000 R09: 0000000000000000 [ 64.204777][ T4948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.204788][ T4948] R13: 00007f402c226038 R14: 00007f402c225fa0 R15: 00007ffd0e1d6e68 [ 64.204805][ T4948] [ 64.549339][ T4955] __nla_validate_parse: 30 callbacks suppressed [ 64.549357][ T4955] netlink: 14 bytes leftover after parsing attributes in process `syz.5.412'. [ 64.620962][ T4955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.688010][ T30] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 64.713758][ T4955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.728219][ T30] EXT4-fs (loop0): Remounting filesystem read-only [ 64.736361][ T4955] bond0 (unregistering): Released all slaves [ 64.893978][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.949851][ T4979] loop3: detected capacity change from 0 to 512 [ 64.990906][ T4979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.021978][ T4979] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.043513][ T4982] FAULT_INJECTION: forcing a failure. [ 65.043513][ T4982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.145428][ T4982] CPU: 0 UID: 0 PID: 4982 Comm: syz.5.420 Not tainted syzkaller #0 PREEMPT(full) [ 65.145453][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.145463][ T4982] Call Trace: [ 65.145471][ T4982] [ 65.145485][ T4982] __dump_stack+0x1d/0x30 [ 65.145513][ T4982] dump_stack_lvl+0x95/0xd0 [ 65.145535][ T4982] dump_stack+0x15/0x1b [ 65.145617][ T4982] should_fail_ex+0x263/0x280 [ 65.145640][ T4982] should_fail+0xb/0x20 [ 65.145660][ T4982] should_fail_usercopy+0x1a/0x20 [ 65.145761][ T4982] _copy_from_user+0x1c/0xb0 [ 65.145786][ T4982] __sys_bpf+0x183/0x7e0 [ 65.145809][ T4982] __x64_sys_bpf+0x41/0x50 [ 65.145842][ T4982] x64_sys_call+0x10cb/0x3020 [ 65.145934][ T4982] do_syscall_64+0x12c/0x370 [ 65.145970][ T4982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.145989][ T4982] RIP: 0033:0x7f402bfac629 [ 65.146005][ T4982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.146022][ T4982] RSP: 002b:00007f402aa07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.146123][ T4982] RAX: ffffffffffffffda RBX: 00007f402c225fa0 RCX: 00007f402bfac629 [ 65.146135][ T4982] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 65.146147][ T4982] RBP: 00007f402aa07090 R08: 0000000000000000 R09: 0000000000000000 [ 65.146159][ T4982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.146170][ T4982] R13: 00007f402c226038 R14: 00007f402c225fa0 R15: 00007ffd0e1d6e68 [ 65.146188][ T4982] [ 65.347905][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 65.485317][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.625350][ T4998] loop0: detected capacity change from 0 to 1024 [ 65.665976][ T4998] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 65.676387][ T5003] netlink: 96 bytes leftover after parsing attributes in process `syz.3.425'. [ 65.717992][ T4998] System zones: 0-1, 3-36 [ 65.726070][ T5003] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 65.739601][ T4998] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.424: bad orphan inode 134217728 [ 65.760204][ T4998] loop0: lost filesystem error report for type 5 error -117 [ 65.762320][ T4998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.825606][ T5012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.429'. [ 65.873180][ T5012] loop3: detected capacity change from 0 to 1024 [ 65.943287][ T5012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.971831][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.001914][ T5028] gre0: entered allmulticast mode [ 66.046537][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.064722][ T5029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.432'. [ 66.099340][ T5029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.432'. [ 66.130481][ T5029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.432'. [ 66.177403][ T5029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 66.349900][ T5044] netlink: 44 bytes leftover after parsing attributes in process `syz.4.438'. [ 66.373575][ T5044] netlink: 43 bytes leftover after parsing attributes in process `syz.4.438'. [ 66.382756][ T5044] netlink: 'syz.4.438': attribute type 5 has an invalid length. [ 66.836548][ T5064] FAULT_INJECTION: forcing a failure. [ 66.836548][ T5064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.850788][ T5064] CPU: 0 UID: 0 PID: 5064 Comm: syz.5.445 Not tainted syzkaller #0 PREEMPT(full) [ 66.850865][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.850877][ T5064] Call Trace: [ 66.850883][ T5064] [ 66.850890][ T5064] __dump_stack+0x1d/0x30 [ 66.850965][ T5064] dump_stack_lvl+0x95/0xd0 [ 66.850985][ T5064] dump_stack+0x15/0x1b [ 66.851004][ T5064] should_fail_ex+0x263/0x280 [ 66.851023][ T5064] should_fail+0xb/0x20 [ 66.851073][ T5064] should_fail_usercopy+0x1a/0x20 [ 66.851174][ T5064] _copy_from_user+0x1c/0xb0 [ 66.851225][ T5064] kstrtouint_from_user+0x69/0xf0 [ 66.851245][ T5064] proc_fail_nth_write+0x50/0x160 [ 66.851272][ T5064] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.851333][ T5064] vfs_write+0x269/0x9f0 [ 66.851363][ T5064] ? __rcu_read_unlock+0x4e/0x70 [ 66.851407][ T5064] ? __fget_files+0x184/0x1c0 [ 66.851429][ T5064] ? mutex_lock+0x57/0x90 [ 66.851455][ T5064] ksys_write+0xdc/0x1a0 [ 66.851505][ T5064] __x64_sys_write+0x40/0x50 [ 66.851532][ T5064] x64_sys_call+0x27e1/0x3020 [ 66.851557][ T5064] do_syscall_64+0x12c/0x370 [ 66.851623][ T5064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.851644][ T5064] RIP: 0033:0x7f402bf6cece [ 66.851660][ T5064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.851677][ T5064] RSP: 002b:00007f402aa06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.851778][ T5064] RAX: ffffffffffffffda RBX: 00007f402aa076c0 RCX: 00007f402bf6cece [ 66.851822][ T5064] RDX: 0000000000000001 RSI: 00007f402aa070a0 RDI: 0000000000000004 [ 66.851833][ T5064] RBP: 00007f402aa07090 R08: 0000000000000000 R09: 0000000000000000 [ 66.851844][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.851855][ T5064] R13: 00007f402c226038 R14: 00007f402c225fa0 R15: 00007ffd0e1d6e68 [ 66.851887][ T5064] [ 66.917722][ T5045] syz.3.437 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 66.986486][ T5066] FAULT_INJECTION: forcing a failure. [ 66.986486][ T5066] name failslab, interval 1, probability 0, space 0, times 0 [ 66.998360][ T5045] CPU: 1 UID: 0 PID: 5045 Comm: syz.3.437 Not tainted syzkaller #0 PREEMPT(full) [ 66.998421][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.998433][ T5045] Call Trace: [ 66.998440][ T5045] [ 66.998449][ T5045] __dump_stack+0x1d/0x30 [ 66.998476][ T5045] dump_stack_lvl+0x95/0xd0 [ 66.998539][ T5045] dump_stack+0x15/0x1b [ 66.998568][ T5045] dump_header+0x80/0x240 [ 66.998592][ T5045] oom_kill_process+0x295/0x350 [ 66.998659][ T5045] out_of_memory+0x97d/0xb80 [ 66.998681][ T5045] try_charge_memcg+0x62e/0xa10 [ 66.998720][ T5045] obj_cgroup_charge_pages+0x23/0xc0 [ 66.998814][ T5045] __memcg_kmem_charge_page+0x9e/0x170 [ 66.998843][ T5045] __alloc_frozen_pages_noprof+0x18a/0x360 [ 66.998914][ T5045] alloc_pages_mpol+0xb3/0x260 [ 66.998943][ T5045] alloc_pages_noprof+0x8f/0x130 [ 66.999050][ T5045] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 66.999107][ T5045] __kvmalloc_node_noprof+0x3d4/0x650 [ 66.999132][ T5045] ? futex_hash_allocate+0x190/0x9d0 [ 66.999219][ T5045] ? futex_hash_allocate+0x190/0x9d0 [ 66.999250][ T5045] futex_hash_allocate+0x190/0x9d0 [ 66.999344][ T5045] ? cap_task_prctl+0x13f/0x6e0 [ 66.999366][ T5045] futex_hash_prctl+0xd8/0xf0 [ 66.999465][ T5045] __se_sys_prctl+0xa3d/0x13f0 [ 66.999495][ T5045] __x64_sys_prctl+0x67/0x80 [ 66.999599][ T5045] x64_sys_call+0x2533/0x3020 [ 66.999646][ T5045] do_syscall_64+0x12c/0x370 [ 66.999681][ T5045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.999777][ T5045] RIP: 0033:0x7f403cfbc629 [ 66.999809][ T5045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.999827][ T5045] RSP: 002b:00007f403b9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 66.999847][ T5045] RAX: ffffffffffffffda RBX: 00007f403d236090 RCX: 00007f403cfbc629 [ 66.999861][ T5045] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 66.999875][ T5045] RBP: 00007f403d052b39 R08: 0000000000000000 R09: 0000000000000000 [ 66.999888][ T5045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.999901][ T5045] R13: 00007f403d236128 R14: 00007f403d236090 R15: 00007ffe0ecb01d8 [ 66.999990][ T5045] [ 67.000196][ T5045] memory: usage 307200kB, limit 307200kB, failcnt 703 [ 67.011777][ T5066] CPU: 0 UID: 0 PID: 5066 Comm: syz.5.446 Not tainted syzkaller #0 PREEMPT(full) [ 67.011803][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 67.011815][ T5066] Call Trace: [ 67.011823][ T5066] [ 67.011900][ T5066] __dump_stack+0x1d/0x30 [ 67.011927][ T5066] dump_stack_lvl+0x95/0xd0 [ 67.011950][ T5066] dump_stack+0x15/0x1b [ 67.011970][ T5066] should_fail_ex+0x263/0x280 [ 67.012068][ T5066] should_failslab+0x8c/0xb0 [ 67.012088][ T5066] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 67.012160][ T5066] ? __alloc_skb+0x2d6/0x690 [ 67.012183][ T5066] __alloc_skb+0x2d6/0x690 [ 67.012204][ T5066] ? __alloc_skb+0x200/0x690 [ 67.012248][ T5066] alloc_skb_with_frags+0x7d/0x470 [ 67.012272][ T5066] ? constraint_expr_eval+0x8ef/0x9a0 [ 67.012357][ T5066] ? avtab_search_node+0x2c/0x2b0 [ 67.012379][ T5066] sock_alloc_send_pskb+0x44d/0x500 [ 67.012409][ T5066] ? context_struct_compute_av+0x9bb/0xaf0 [ 67.012460][ T5066] __ip6_append_data+0x18ba/0x2410 [ 67.012491][ T5066] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 67.012522][ T5066] ? rcu_read_unlock_special+0x9f/0x200 [ 67.012635][ T5066] ? __rcu_read_unlock+0x4e/0x70 [ 67.012658][ T5066] ? ip6_mtu+0xf5/0x120 [ 67.012731][ T5066] ip6_append_data+0xd3/0x1d0 [ 67.012755][ T5066] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 67.012786][ T5066] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 67.012842][ T5066] udpv6_sendmsg+0x8dd/0x17d0 [ 67.012912][ T5066] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 67.012948][ T5066] ? avc_has_perm+0x101/0x190 [ 67.012976][ T5066] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 67.013052][ T5066] inet6_sendmsg+0xac/0xd0 [ 67.013082][ T5066] sock_sendmsg+0x144/0x280 [ 67.013154][ T5066] io_send_zc+0x2ae/0x610 [ 67.013177][ T5066] __io_issue_sqe+0xfd/0x2d0 [ 67.013231][ T5066] io_issue_sqe+0x206/0xc00 [ 67.013259][ T5066] ? io_send_zc_prep+0x3e2/0x4d0 [ 67.013318][ T5066] io_submit_sqes+0x7fb/0x1270 [ 67.013352][ T5066] __se_sys_io_uring_enter+0x1c9/0xf50 [ 67.013384][ T5066] ? __fget_files+0x184/0x1c0 [ 67.013407][ T5066] ? mutex_unlock+0x4e/0x90 [ 67.013432][ T5066] ? fput+0x8f/0xc0 [ 67.013456][ T5066] __x64_sys_io_uring_enter+0x78/0x90 [ 67.013528][ T5066] x64_sys_call+0x1e16/0x3020 [ 67.013554][ T5066] do_syscall_64+0x12c/0x370 [ 67.013586][ T5066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.013608][ T5066] RIP: 0033:0x7f402bfac629 [ 67.013625][ T5066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.013643][ T5066] RSP: 002b:00007f402aa07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 67.013663][ T5066] RAX: ffffffffffffffda RBX: 00007f402c225fa0 RCX: 00007f402bfac629 [ 67.013676][ T5066] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 67.013760][ T5066] RBP: 00007f402aa07090 R08: 0000000000000000 R09: 0000000000000000 [ 67.013773][ T5066] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 67.013785][ T5066] R13: 00007f402c226038 R14: 00007f402c225fa0 R15: 00007ffd0e1d6e68 [ 67.013805][ T5066] [ 67.649140][ T5075] Illegal XDP return value 4294965632 on prog (id 54) dev syz_tun, expect packet loss! [ 67.679422][ T5045] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0 [ 67.688121][ T5045] kmem: usage 306924kB, limit 9007199254740988kB, failcnt 0 [ 67.706072][ T5045] Memory cgroup stats for /syz3: [ 67.706329][ T5045] cache 24576 [ 67.715943][ T5045] rss 151552 [ 67.725280][ T5045] shmem 0 [ 67.728229][ T5045] mapped_file 24576 [ 67.745495][ T5045] dirty 8192 [ 67.748703][ T5045] writeback 0 [ 67.760080][ T28] kauditd_printk_skb: 1036 callbacks suppressed [ 67.760093][ T28] audit: type=1400 audit(1771456344.705:18038): avc: denied { write } for pid=5077 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.779032][ T5045] workingset_refault_anon 84 [ 67.818456][ T28] audit: type=1400 audit(1771456344.705:18039): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.821351][ T5045] workingset_refault_file 3015 [ 67.885277][ T28] audit: type=1400 audit(1771456344.705:18040): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.899029][ T5045] swap 188416 [ 67.938133][ T5086] netlink: 'syz.5.451': attribute type 5 has an invalid length. [ 67.938456][ T28] audit: type=1400 audit(1771456344.705:18041): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.945985][ T5045] swapcached 729088 [ 67.996747][ T28] audit: type=1400 audit(1771456344.745:18042): avc: denied { create } for pid=5056 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.997813][ T5045] pgpgin 26684 [ 68.032071][ T28] audit: type=1400 audit(1771456344.745:18043): avc: denied { read write } for pid=4712 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.049070][ T5045] pgpgout 26628 [ 68.072805][ T5045] pgfault 27987 [ 68.076301][ T5045] pgmajfault 95 [ 68.092353][ T5045] inactive_anon 159744 [ 68.094253][ T5094] loop5: detected capacity change from 0 to 1024 [ 68.096482][ T5045] active_anon 40960 [ 68.102857][ T28] audit: type=1400 audit(1771456344.745:18044): avc: denied { open } for pid=4712 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.116766][ T5045] inactive_file 0 [ 68.132878][ T28] audit: type=1400 audit(1771456344.745:18045): avc: denied { ioctl } for pid=4712 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.160045][ T5094] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 68.163368][ T5045] active_file 28672 [ 68.173518][ T5045] unevictable 0 [ 68.173804][ T5094] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.179010][ T5045] hierarchical_memory_limit 314572800 [ 68.192263][ T5094] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 68.204436][ T28] audit: type=1400 audit(1771456344.755:18046): avc: denied { create } for pid=5077 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.208955][ T5045] hierarchical_memsw_limit 9223372036854771712 [ 68.226180][ T5094] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.242402][ T28] audit: type=1400 audit(1771456344.755:18047): avc: denied { create } for pid=5081 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.263373][ T5094] EXT4-fs error (device loop5): ext4_get_journal_inode:5865: inode #17: comm syz.5.453: iget: bad i_size value: 4398046511204 [ 68.277423][ T5094] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 68.279123][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 68.294715][ C1] EXT4-fs (loop5): initial error at time 1771456345: ext4_get_journal_inode:5865: inode 17 [ 68.300799][ T5045] total_cache 24576 [ 68.304730][ C1] EXT4-fs (loop5): last error at time 1771456345: ext4_get_journal_inode:5865 [ 68.308504][ T5045] total_rss 151552 [ 68.308510][ C1] : inode 17 [ 68.327215][ T5094] EXT4-fs (loop5): no journal found [ 68.366615][ T5045] total_shmem 0 [ 68.370273][ T5045] total_mapped_file 24576 [ 68.376449][ T5045] total_dirty 8192 [ 68.399040][ T5045] total_writeback 0 [ 68.486118][ T5045] total_workingset_refault_anon 84 [ 68.506491][ T5045] total_workingset_refault_file 3015 [ 68.529210][ T5045] total_swap 188416 [ 68.533144][ T5045] total_swapcached 729088 [ 68.537597][ T5045] total_pgpgin 26684 [ 68.541622][ T5045] total_pgpgout 26628 [ 68.545611][ T5045] total_pgfault 27987 [ 68.569112][ T5045] total_pgmajfault 95 [ 68.573242][ T5045] total_inactive_anon 159744 [ 68.577828][ T5045] total_active_anon 40960 [ 68.589048][ T5045] total_inactive_file 0 [ 68.593239][ T5045] total_active_file 28672 [ 68.607787][ T5045] total_unevictable 0 [ 68.614415][ T5045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.437,pid=5038,uid=0 [ 68.659095][ T5045] Memory cgroup out of memory: Killed process 5045 (syz.3.437) total-vm:94160kB, anon-rss:1364kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 68.994956][ T5119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.028438][ T5119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.067323][ T5119] bond0 (unregistering): Released all slaves [ 69.076166][ T5131] netlink: 'syz.4.463': attribute type 5 has an invalid length. [ 69.098143][ T5132] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 69.098143][ T5132] The task syz.0.461 (5132) triggered the difference, watch for misbehavior. [ 69.364049][ T5155] FAULT_INJECTION: forcing a failure. [ 69.364049][ T5155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.399954][ T5149] loop5: detected capacity change from 0 to 512 [ 69.408466][ T5155] CPU: 1 UID: 0 PID: 5155 Comm: syz.3.467 Not tainted syzkaller #0 PREEMPT(full) [ 69.408557][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.408569][ T5155] Call Trace: [ 69.408576][ T5155] [ 69.408583][ T5155] __dump_stack+0x1d/0x30 [ 69.408608][ T5155] dump_stack_lvl+0x95/0xd0 [ 69.408628][ T5155] dump_stack+0x15/0x1b [ 69.408648][ T5155] should_fail_ex+0x263/0x280 [ 69.408778][ T5155] should_fail+0xb/0x20 [ 69.408797][ T5155] should_fail_usercopy+0x1a/0x20 [ 69.408844][ T5155] _copy_to_user+0x20/0xa0 [ 69.408870][ T5155] simple_read_from_buffer+0xb5/0x130 [ 69.408891][ T5155] proc_fail_nth_read+0x10e/0x150 [ 69.408943][ T5155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.409039][ T5155] vfs_read+0x1ab/0x7f0 [ 69.409066][ T5155] ? __rcu_read_unlock+0x4e/0x70 [ 69.409086][ T5155] ? __fget_files+0x184/0x1c0 [ 69.409111][ T5155] ? mutex_lock+0x57/0x90 [ 69.409186][ T5155] ksys_read+0xdc/0x1a0 [ 69.409218][ T5155] __x64_sys_read+0x40/0x50 [ 69.409279][ T5155] x64_sys_call+0x2886/0x3020 [ 69.409302][ T5155] do_syscall_64+0x12c/0x370 [ 69.409332][ T5155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.409351][ T5155] RIP: 0033:0x7f403cf7cece [ 69.409366][ T5155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.409462][ T5155] RSP: 002b:00007f403ba16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.409484][ T5155] RAX: ffffffffffffffda RBX: 00007f403ba176c0 RCX: 00007f403cf7cece [ 69.409499][ T5155] RDX: 000000000000000f RSI: 00007f403ba170a0 RDI: 0000000000000004 [ 69.409520][ T5155] RBP: 00007f403ba17090 R08: 0000000000000000 R09: 0000000000000000 [ 69.409532][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.409543][ T5155] R13: 00007f403d236038 R14: 00007f403d235fa0 R15: 00007ffe0ecb01d8 [ 69.409560][ T5155] [ 69.436205][ T5149] EXT4-fs: Ignoring removed oldalloc option [ 69.738070][ T5166] syz.3.470 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 69.758322][ T5175] __nla_validate_parse: 14 callbacks suppressed [ 69.758338][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 69.790218][ T5166] CPU: 0 UID: 0 PID: 5166 Comm: syz.3.470 Not tainted syzkaller #0 PREEMPT(full) [ 69.790306][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.790319][ T5166] Call Trace: [ 69.790326][ T5166] [ 69.790334][ T5166] __dump_stack+0x1d/0x30 [ 69.790358][ T5166] dump_stack_lvl+0x95/0xd0 [ 69.790381][ T5166] dump_stack+0x15/0x1b [ 69.790414][ T5166] dump_header+0x80/0x240 [ 69.790443][ T5166] oom_kill_process+0x295/0x350 [ 69.790519][ T5166] out_of_memory+0x97d/0xb80 [ 69.790546][ T5166] try_charge_memcg+0x62e/0xa10 [ 69.790632][ T5166] obj_cgroup_charge_pages+0x23/0xc0 [ 69.790659][ T5166] __memcg_kmem_charge_page+0x9e/0x170 [ 69.790688][ T5166] __alloc_frozen_pages_noprof+0x18a/0x360 [ 69.790715][ T5166] alloc_pages_bulk_noprof+0x4aa/0x530 [ 69.790755][ T5166] ? policy_nodemask+0x417/0x5e0 [ 69.790781][ T5166] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 69.790824][ T5166] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 69.790855][ T5166] ? alloc_pages_mpol+0x217/0x260 [ 69.790959][ T5166] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 69.790992][ T5166] __kvmalloc_node_noprof+0x3d4/0x650 [ 69.791089][ T5166] ? futex_hash_allocate+0x190/0x9d0 [ 69.791122][ T5166] ? futex_hash_allocate+0x190/0x9d0 [ 69.791213][ T5166] futex_hash_allocate+0x190/0x9d0 [ 69.791297][ T5166] ? cap_task_prctl+0x13f/0x6e0 [ 69.791316][ T5166] futex_hash_prctl+0xd8/0xf0 [ 69.791358][ T5166] __se_sys_prctl+0xa3d/0x13f0 [ 69.791384][ T5166] __x64_sys_prctl+0x67/0x80 [ 69.791439][ T5166] x64_sys_call+0x2533/0x3020 [ 69.791549][ T5166] do_syscall_64+0x12c/0x370 [ 69.791626][ T5166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.791647][ T5166] RIP: 0033:0x7f403cfbc629 [ 69.791707][ T5166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.791725][ T5166] RSP: 002b:00007f403ba17028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 69.791743][ T5166] RAX: ffffffffffffffda RBX: 00007f403d235fa0 RCX: 00007f403cfbc629 [ 69.791757][ T5166] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 69.791770][ T5166] RBP: 00007f403d052b39 R08: 0000000000000000 R09: 0000000000000000 [ 69.791782][ T5166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.791817][ T5166] R13: 00007f403d236038 R14: 00007f403d235fa0 R15: 00007ffe0ecb01d8 [ 69.791835][ T5166] [ 69.791848][ T5166] memory: usage 276260kB, limit 307200kB, failcnt 933 [ 70.040045][ T5166] memory+swap: usage 272284kB, limit 9007199254740988kB, failcnt 0 [ 70.067056][ T5149] EXT4-fs (loop5): 1 truncate cleaned up [ 70.080017][ T5149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.135361][ T5166] kmem: usage 225520kB, limit 9007199254740988kB, failcnt 0 [ 70.176753][ T5166] Memory cgroup stats for /syz3: [ 70.177024][ T5166] cache 16384 [ 70.187960][ T5183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.474'. [ 70.209103][ T5166] rss 69632 [ 70.215823][ T5166] shmem 0 [ 70.215834][ T5166] mapped_file 4096 [ 70.215842][ T5166] dirty 0 [ 70.215849][ T5166] writeback 0 [ 70.215857][ T5166] workingset_refault_anon 84 [ 70.265194][ T5166] workingset_refault_file 3142 [ 70.265206][ T5166] swap 188416 [ 70.265246][ T5166] swapcached 802816 [ 70.265252][ T5166] pgpgin 26901 [ 70.265258][ T5166] pgpgout 26849 [ 70.265265][ T5166] pgfault 28261 [ 70.265272][ T5166] pgmajfault 96 [ 70.265280][ T5166] inactive_anon 40960 [ 70.265288][ T5166] active_anon 151552 [ 70.265297][ T5166] inactive_file 20480 [ 70.265304][ T5166] active_file 0 [ 70.265352][ T5166] unevictable 0 [ 70.265360][ T5166] hierarchical_memory_limit 314572800 [ 70.265369][ T5166] hierarchical_memsw_limit 9223372036854771712 [ 70.265379][ T5166] total_cache 16384 [ 70.265387][ T5166] total_rss 69632 [ 70.265412][ T5166] total_shmem 0 [ 70.265420][ T5166] total_mapped_file 4096 [ 70.265428][ T5166] total_dirty 0 [ 70.265527][ T5166] total_writeback 0 [ 70.265534][ T5166] total_workingset_refault_anon 84 [ 70.265542][ T5166] total_workingset_refault_file 3142 [ 70.265549][ T5166] total_swap 188416 [ 70.265556][ T5166] total_swapcached 802816 [ 70.265564][ T5166] total_pgpgin 26901 [ 70.265572][ T5166] total_pgpgout 26849 [ 70.265648][ T5166] total_pgfault 28261 [ 70.265667][ T5166] total_pgmajfault 96 [ 70.265675][ T5166] total_inactive_anon 40960 [ 70.265684][ T5166] total_active_anon 151552 [ 70.265693][ T5166] total_inactive_file 20480 [ 70.265702][ T5166] total_active_file 0 [ 70.265710][ T5166] total_unevictable 0 [ 70.265720][ T5166] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.470,pid=5162,uid=0 [ 70.265880][ T5166] Memory cgroup out of memory: Killed process 5162 (syz.3.470) total-vm:94028kB, anon-rss:1280kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 70.289349][ T5183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.474'. [ 70.370584][ T5188] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.462: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 70.375012][ T5188] EXT4-fs (loop5): Remounting filesystem read-only [ 70.492729][ T5197] loop3: detected capacity change from 0 to 512 [ 70.494200][ T5197] EXT4-fs: Ignoring removed oldalloc option [ 70.518050][ T5197] EXT4-fs (loop3): 1 truncate cleaned up [ 70.518458][ T5197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.661508][ T5210] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.478: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 70.672933][ T5210] EXT4-fs (loop3): Remounting filesystem read-only [ 70.746520][ T5204] syz.0.488 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 70.746576][ T5204] CPU: 0 UID: 0 PID: 5204 Comm: syz.0.488 Not tainted syzkaller #0 PREEMPT(full) [ 70.746605][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.746618][ T5204] Call Trace: [ 70.746625][ T5204] [ 70.746662][ T5204] __dump_stack+0x1d/0x30 [ 70.746689][ T5204] dump_stack_lvl+0x95/0xd0 [ 70.746712][ T5204] dump_stack+0x15/0x1b [ 70.746766][ T5204] dump_header+0x80/0x240 [ 70.746789][ T5204] oom_kill_process+0x295/0x350 [ 70.746811][ T5204] out_of_memory+0x97d/0xb80 [ 70.746888][ T5204] try_charge_memcg+0x62e/0xa10 [ 70.746928][ T5204] obj_cgroup_charge_pages+0x23/0xc0 [ 70.746956][ T5204] __memcg_kmem_charge_page+0x9e/0x170 [ 70.747030][ T5204] __alloc_frozen_pages_noprof+0x18a/0x360 [ 70.747066][ T5204] alloc_pages_bulk_noprof+0x4aa/0x530 [ 70.747091][ T5204] ? policy_nodemask+0x417/0x5e0 [ 70.747183][ T5204] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 70.747207][ T5204] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 70.747235][ T5204] ? alloc_pages_mpol+0x217/0x260 [ 70.747265][ T5204] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 70.747355][ T5204] __kvmalloc_node_noprof+0x3d4/0x650 [ 70.747380][ T5204] ? futex_hash_allocate+0x190/0x9d0 [ 70.747406][ T5204] ? futex_hash_allocate+0x190/0x9d0 [ 70.747499][ T5204] futex_hash_allocate+0x190/0x9d0 [ 70.747525][ T5204] ? cap_task_prctl+0x13f/0x6e0 [ 70.747543][ T5204] futex_hash_prctl+0xd8/0xf0 [ 70.747567][ T5204] __se_sys_prctl+0xa3d/0x13f0 [ 70.747626][ T5204] __x64_sys_prctl+0x67/0x80 [ 70.747649][ T5204] x64_sys_call+0x2533/0x3020 [ 70.747678][ T5204] do_syscall_64+0x12c/0x370 [ 70.747860][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.747903][ T5204] RIP: 0033:0x7f01e733c629 [ 70.747919][ T5204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.747935][ T5204] RSP: 002b:00007f01e5d76028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 70.747980][ T5204] RAX: ffffffffffffffda RBX: 00007f01e75b6090 RCX: 00007f01e733c629 [ 70.747994][ T5204] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 70.748007][ T5204] RBP: 00007f01e73d2b39 R08: 0000000000000000 R09: 0000000000000000 [ 70.748069][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.748082][ T5204] R13: 00007f01e75b6128 R14: 00007f01e75b6090 R15: 00007fff3ccd3578 [ 70.748099][ T5204] [ 70.748110][ T5204] memory: usage 307200kB, limit 307200kB, failcnt 694 [ 70.748124][ T5204] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 70.748190][ T5204] kmem: usage 307008kB, limit 9007199254740988kB, failcnt 0 [ 70.748201][ T5204] Memory cgroup stats for /syz0: [ 70.748433][ T5204] cache 0 [ 70.748442][ T5204] rss 73728 [ 70.748449][ T5204] shmem 0 [ 70.748517][ T5204] mapped_file 0 [ 70.748523][ T5204] dirty 0 [ 70.748529][ T5204] writeback 0 [ 70.748537][ T5204] workingset_refault_anon 89 [ 70.748545][ T5204] workingset_refault_file 2118 [ 70.748553][ T5204] swap 0 [ 70.748560][ T5204] swapcached 299008 [ 70.748568][ T5204] pgpgin 52455 [ 70.748575][ T5204] pgpgout 52407 [ 70.748649][ T5204] pgfault 29854 [ 70.748656][ T5204] pgmajfault 80 [ 70.748662][ T5204] inactive_anon 53248 [ 70.748668][ T5204] active_anon 143360 [ 70.748675][ T5204] inactive_file 0 [ 70.748681][ T5204] active_file 0 [ 70.748689][ T5204] unevictable 0 [ 70.748697][ T5204] hierarchical_memory_limit 314572800 [ 70.748706][ T5204] hierarchical_memsw_limit 9223372036854771712 [ 70.748716][ T5204] total_cache 0 [ 70.748723][ T5204] total_rss 73728 [ 70.748731][ T5204] total_shmem 0 [ 70.748739][ T5204] total_mapped_file 0 [ 70.748771][ T5204] total_dirty 0 [ 70.748777][ T5204] total_writeback 0 [ 70.748783][ T5204] total_workingset_refault_anon 89 [ 70.748792][ T5204] total_workingset_refault_file 2118 [ 70.748801][ T5204] total_swap 0 [ 70.748808][ T5204] total_swapcached 299008 [ 70.748817][ T5204] total_pgpgin 52455 [ 70.748903][ T5204] total_pgpgout 52407 [ 70.748910][ T5204] total_pgfault 29854 [ 70.748917][ T5204] total_pgmajfault 80 [ 70.748924][ T5204] total_inactive_anon 53248 [ 70.748931][ T5204] total_active_anon 143360 [ 70.748937][ T5204] total_inactive_file 0 [ 70.748944][ T5204] total_active_file 0 [ 70.748951][ T5204] total_unevictable 0 [ 70.748958][ T5204] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.488,pid=5198,uid=0 [ 70.759124][ T5204] Memory cgroup out of memory: Killed process 5198 (syz.0.488) total-vm:94160kB, anon-rss:1288kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 71.375964][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 71.679730][ T5221] hsr_slave_1 (unregistering): left promiscuous mode [ 71.763661][ T5223] netlink: 40 bytes leftover after parsing attributes in process `syz.0.484'. [ 71.879684][ T5226] netlink: 44 bytes leftover after parsing attributes in process `syz.1.485'. [ 71.879702][ T5226] netlink: 43 bytes leftover after parsing attributes in process `syz.1.485'. [ 71.879715][ T5226] netlink: 'syz.1.485': attribute type 5 has an invalid length. [ 71.879727][ T5226] netlink: 43 bytes leftover after parsing attributes in process `syz.1.485'. [ 71.927742][ T5232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.484'. [ 72.014989][ T5236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.486'. [ 72.348840][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.360177][ T4712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.553674][ T5265] loop5: detected capacity change from 0 to 512 [ 72.575401][ T5265] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.608114][ T5265] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 72.627843][ T5265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 72.657734][ T5265] System zones: 1-12 [ 72.662695][ T5265] EXT4-fs (loop5): orphan cleanup on readonly fs [ 72.669363][ T5265] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.493: bg 0: block 361: padding at end of block bitmap is not set [ 72.684110][ T5265] loop5: lost filesystem error report for type 5 error -117 [ 72.684307][ T5265] EXT4-fs (loop5): Remounting filesystem read-only [ 72.691743][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 72.691758][ C1] EXT4-fs (loop5): initial error at time 1771456349: ext4_validate_block_bitmap:441 [ 72.691778][ C1] EXT4-fs (loop5): last error at time 1771456349: ext4_validate_block_bitmap:441 [ 72.725145][ T5265] EXT4-fs (loop5): 1 truncate cleaned up [ 72.731212][ T5265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 72.745356][ T5265] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.493: error -117 reading directory block [ 72.770188][ T28] kauditd_printk_skb: 1028 callbacks suppressed [ 72.770200][ T28] audit: type=1400 audit(1771456349.715:19076): avc: denied { create } for pid=5264 comm="syz.5.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.817376][ T28] audit: type=1400 audit(1771456349.715:19077): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.845879][ T28] audit: type=1400 audit(1771456349.715:19078): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.872147][ T28] audit: type=1400 audit(1771456349.715:19079): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.905127][ T28] audit: type=1400 audit(1771456349.735:19080): avc: denied { open } for pid=5264 comm="syz.5.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 72.925288][ T28] audit: type=1400 audit(1771456349.735:19081): avc: denied { perfmon } for pid=5264 comm="syz.5.493" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.975248][ T4712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 72.999644][ T28] audit: type=1400 audit(1771456349.735:19082): avc: denied { kernel } for pid=5264 comm="syz.5.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.069049][ T28] audit: type=1400 audit(1771456349.745:19083): avc: denied { perfmon } for pid=5264 comm="syz.5.493" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.093709][ T5282] loop5: detected capacity change from 0 to 1024 [ 73.101593][ T5282] ext3: Unknown parameter 'a@' [ 73.125622][ T28] audit: type=1400 audit(1771456349.755:19084): avc: denied { tracepoint } for pid=5264 comm="syz.5.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.176465][ T28] audit: type=1400 audit(1771456349.755:19085): avc: denied { write } for pid=5264 comm="syz.5.493" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.366165][ T5297] loop3: detected capacity change from 0 to 512 [ 73.382295][ T5297] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.426968][ T5297] EXT4-fs (loop3): 1 truncate cleaned up [ 73.433962][ T5297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.523138][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.666534][ T5318] loop5: detected capacity change from 0 to 512 [ 73.786960][ T5318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.819128][ T5318] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.969860][ T4712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.648315][ T5391] loop0: detected capacity change from 0 to 256 [ 74.713881][ T5392] loop3: detected capacity change from 0 to 128 [ 74.727203][ T5392] FAT-fs (loop3): Directory bread(block 162) failed [ 74.744474][ T5392] FAT-fs (loop3): Directory bread(block 163) failed [ 74.769085][ T5392] FAT-fs (loop3): Directory bread(block 164) failed [ 74.791907][ T5392] FAT-fs (loop3): Directory bread(block 165) failed [ 74.801950][ T5392] FAT-fs (loop3): Directory bread(block 166) failed [ 74.808579][ T5392] FAT-fs (loop3): Directory bread(block 167) failed [ 74.816323][ T5392] FAT-fs (loop3): Directory bread(block 168) failed [ 74.832118][ T5392] FAT-fs (loop3): Directory bread(block 169) failed [ 74.856153][ T5392] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.871948][ T5392] veth0_vlan: entered allmulticast mode [ 74.878604][ T5392] __nla_validate_parse: 4 callbacks suppressed [ 74.878616][ T5392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 74.935027][ T5392] veth0_vlan (unregistering): left allmulticast mode [ 74.963315][ T5404] FAT-fs (loop3): Directory bread(block 162) failed [ 74.985517][ T5404] FAT-fs (loop3): Directory bread(block 163) failed [ 74.991311][ T5406] netlink: 40 bytes leftover after parsing attributes in process `syz.5.529'. [ 75.009737][ T5404] syz.3.523: attempt to access beyond end of device [ 75.009737][ T5404] loop3: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 75.032558][ T5404] syz.3.523: attempt to access beyond end of device [ 75.032558][ T5404] loop3: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 75.053041][ T5392] veth1_vlan (unregistering): left allmulticast mode [ 75.074527][ T5392] macvlan0 (unregistering): left allmulticast mode [ 75.177199][ T5406] netlink: 40 bytes leftover after parsing attributes in process `syz.5.529'. [ 75.402087][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 75.618802][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 75.844660][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 75.850258][ T5451] loop3: detected capacity change from 0 to 2048 [ 75.965574][ T5451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.105727][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.114798][ T5486] FAULT_INJECTION: forcing a failure. [ 76.114798][ T5486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.128767][ T5486] CPU: 1 UID: 0 PID: 5486 Comm: syz.5.553 Not tainted syzkaller #0 PREEMPT(full) [ 76.128795][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.128808][ T5486] Call Trace: [ 76.128816][ T5486] [ 76.128824][ T5486] __dump_stack+0x1d/0x30 [ 76.128860][ T5486] dump_stack_lvl+0x95/0xd0 [ 76.128885][ T5486] dump_stack+0x15/0x1b [ 76.128907][ T5486] should_fail_ex+0x263/0x280 [ 76.128999][ T5486] should_fail+0xb/0x20 [ 76.129051][ T5486] should_fail_usercopy+0x1a/0x20 [ 76.129073][ T5486] _copy_from_user+0x1c/0xb0 [ 76.129098][ T5486] ___sys_sendmsg+0xc1/0x1e0 [ 76.129137][ T5486] __x64_sys_sendmsg+0xd4/0x160 [ 76.129185][ T5486] x64_sys_call+0x194c/0x3020 [ 76.129291][ T5486] do_syscall_64+0x12c/0x370 [ 76.129327][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.129396][ T5486] RIP: 0033:0x7f402bfac629 [ 76.129413][ T5486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.129506][ T5486] RSP: 002b:00007f402aa07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.129662][ T5486] RAX: ffffffffffffffda RBX: 00007f402c225fa0 RCX: 00007f402bfac629 [ 76.129678][ T5486] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 76.129692][ T5486] RBP: 00007f402aa07090 R08: 0000000000000000 R09: 0000000000000000 [ 76.129703][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.129717][ T5486] R13: 00007f402c226038 R14: 00007f402c225fa0 R15: 00007ffd0e1d6e68 [ 76.129735][ T5486] [ 76.379087][ T5491] syzkaller0: entered promiscuous mode [ 76.391332][ T5491] syzkaller0: entered allmulticast mode [ 76.445643][ T5496] netlink: 68 bytes leftover after parsing attributes in process `syz.5.557'. [ 76.493273][ T5500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'. [ 76.595207][ T5506] loop5: detected capacity change from 0 to 8192 [ 76.684474][ T5511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.561'. [ 76.692205][ T5508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'. [ 77.544880][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 77.558338][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 77.558367][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.558457][ T3316] Call Trace: [ 77.558464][ T3316] [ 77.558472][ T3316] __dump_stack+0x1d/0x30 [ 77.558499][ T3316] dump_stack_lvl+0x95/0xd0 [ 77.558522][ T3316] dump_stack+0x15/0x1b [ 77.558548][ T3316] dump_header+0x80/0x240 [ 77.558595][ T3316] oom_kill_process+0x295/0x350 [ 77.558619][ T3316] out_of_memory+0x97d/0xb80 [ 77.558637][ T3316] try_charge_memcg+0x62e/0xa10 [ 77.558749][ T3316] __mem_cgroup_charge+0x65/0x150 [ 77.558779][ T3316] filemap_add_folio+0x110/0x350 [ 77.558814][ T3316] __filemap_get_folio_mpol+0x326/0x680 [ 77.558865][ T3316] filemap_fault+0x486/0xb90 [ 77.558887][ T3316] __do_fault+0xbc/0x200 [ 77.558915][ T3316] handle_mm_fault+0x11d7/0x3020 [ 77.558996][ T3316] ? vma_start_read+0x1c7/0x2c0 [ 77.559077][ T3316] do_user_addr_fault+0x62f/0x1050 [ 77.559108][ T3316] ? trace_page_fault_user+0x1f/0xe0 [ 77.559135][ T3316] exc_page_fault+0x62/0xa0 [ 77.559211][ T3316] asm_exc_page_fault+0x26/0x30 [ 77.559286][ T3316] RIP: 0033:0x7f29ea7fa6b4 [ 77.559301][ T3316] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 [ 77.559317][ T3316] RSP: 002b:00007ffd1133b600 EFLAGS: 00010202 [ 77.559332][ T3316] RAX: 0000001b33424000 RBX: 0000000000000179 RCX: 0000000000012cc8 [ 77.559410][ T3316] RDX: 0000000007ebd0c2 RSI: 00007ffd1133b690 RDI: 0000000000000001 [ 77.559424][ T3316] RBP: 00007ffd1133b63c R08: 000000001e37808b R09: 7fffffffffffffff [ 77.559489][ T3316] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 77.559501][ T3316] R13: 00000000000927c0 R14: 0000000000012cb0 R15: 00007ffd1133b690 [ 77.559519][ T3316] [ 77.815758][ T28] kauditd_printk_skb: 1145 callbacks suppressed [ 77.815774][ T28] audit: type=1400 audit(1771456354.755:20225): avc: denied { write } for pid=5529 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.826421][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 962 [ 77.844477][ T5532] SELinux: failed to load policy [ 77.884366][ T5532] loop3: detected capacity change from 0 to 512 [ 77.930376][ T28] audit: type=1400 audit(1771456354.755:20226): avc: denied { connect } for pid=5529 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.939051][ T5532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.953019][ T3316] memory+swap: usage 342168kB, limit 9007199254740988kB, failcnt 0 [ 78.015171][ T28] audit: type=1400 audit(1771456354.755:20227): avc: denied { name_connect } for pid=5529 comm="syz.3.567" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 78.069442][ T5532] EXT4-fs (loop3): 1 truncate cleaned up [ 78.075604][ T5532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.114872][ T5530] program syz.3.567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.149122][ T3316] kmem: usage 54956kB, limit 9007199254740988kB, failcnt 0 [ 78.156398][ T3316] Memory cgroup stats for /syz1: [ 78.156819][ T3316] cache 524288 [ 78.179037][ T28] audit: type=1400 audit(1771456354.755:20228): avc: denied { write } for pid=5529 comm="syz.3.567" laddr=::ffff:172.20.20.57 lport=55949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.232671][ T3316] rss 53248 [ 78.234382][ T5544] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.235809][ T3316] shmem 0 [ 78.235817][ T3316] mapped_file 0 [ 78.235823][ T3316] dirty 4096 [ 78.235829][ T3316] writeback 0 [ 78.235835][ T3316] workingset_refault_anon 101 [ 78.235842][ T3316] workingset_refault_file 1812 [ 78.235862][ T3316] swap 69361664 [ 78.235869][ T3316] swapcached 69754880 [ 78.235875][ T3316] pgpgin 65487 [ 78.235881][ T3316] pgpgout 65343 [ 78.235888][ T3316] pgfault 42827 [ 78.235895][ T3316] pgmajfault 60 [ 78.242420][ T5544] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 78.262181][ T3316] inactive_anon 65536 [ 78.266950][ T5547] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.269923][ T3316] active_anon 0 [ 78.283101][ T28] audit: type=1400 audit(1771456354.765:20229): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.286834][ T3316] inactive_file 0 [ 78.300934][ T5547] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 78.303994][ T5544] audit: backlog limit exceeded [ 78.356395][ T3316] active_file 524288 [ 78.363930][ T5545] hsr_slave_1 (unregistering): left promiscuous mode [ 78.375435][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.385421][ T3316] unevictable 0 [ 78.388876][ T3316] hierarchical_memory_limit 314572800 [ 78.439305][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 78.469153][ T3316] total_cache 524288 [ 78.473143][ T3316] total_rss 53248 [ 78.491513][ T3316] total_shmem 0 [ 78.495023][ T3316] total_mapped_file 0 [ 78.509782][ T3316] total_dirty 4096 [ 78.513576][ T3316] total_writeback 0 [ 78.517376][ T3316] total_workingset_refault_anon 101 [ 78.530790][ T3316] total_workingset_refault_file 1812 [ 78.536183][ T3316] total_swap 69361664 [ 78.540907][ T3316] total_swapcached 69754880 [ 78.545415][ T3316] total_pgpgin 65487 [ 78.552159][ T3316] total_pgpgout 65343 [ 78.556147][ T3316] total_pgfault 42827 [ 78.562269][ T3316] total_pgmajfault 60 [ 78.566328][ T3316] total_inactive_anon 65536 [ 78.571832][ T3316] total_active_anon 0 [ 78.575859][ T3316] total_inactive_file 0 [ 78.580763][ T3316] total_active_file 524288 [ 78.585255][ T3316] total_unevictable 0 [ 78.589970][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.566,pid=5524,uid=0 [ 78.612391][ T3316] Memory cgroup out of memory: OOM victim 5524 (syz.1.566) is already exiting. Skip killing the task [ 79.367238][ T5604] loop3: detected capacity change from 0 to 512 [ 79.425465][ T5604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.438420][ T5604] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.599277][ T5604] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.583: iget: bad i_size value: 2533274857506816 [ 79.645426][ T5604] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.583: iget: bad i_size value: 2533274857506816 [ 79.958836][ T5660] loop0: detected capacity change from 0 to 128 [ 79.989301][ T5660] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.020221][ T5618] __nla_validate_parse: 2 callbacks suppressed [ 80.020267][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 80.037627][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.147940][ T5668] loop3: detected capacity change from 0 to 128 [ 80.167257][ T5668] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.229498][ T5668] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.449946][ T5668] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.451780][ T5677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 80.723568][ T5704] loop5: detected capacity change from 0 to 512 [ 80.735625][ T5704] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 80.768288][ T5704] EXT4-fs (loop5): 1 truncate cleaned up [ 80.810524][ T5704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.095285][ T5726] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 81.127215][ T5722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'. [ 81.147189][ T4712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.174086][ T5722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'. [ 81.222236][ T5722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'. [ 81.299466][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 81.609343][ T5720] ================================================================== [ 81.617451][ T5720] BUG: KCSAN: data-race in atime_needs_update / inode_update_time [ 81.625271][ T5720] [ 81.627589][ T5720] write to 0xffff88811c5adb1c of 4 bytes by task 5712 on cpu 0: [ 81.635211][ T5720] inode_update_time+0x2cc/0x360 [ 81.640149][ T5720] file_update_time_flags+0x277/0x2e0 [ 81.645532][ T5720] file_update_time+0x17/0x20 [ 81.650206][ T5720] shmem_file_write_iter+0x9c/0xf0 [ 81.655313][ T5720] iter_file_splice_write+0x6bc/0xa80 [ 81.660676][ T5720] direct_splice_actor+0x156/0x2a0 [ 81.665772][ T5720] splice_direct_to_actor+0x311/0x670 [ 81.671135][ T5720] do_splice_direct+0x119/0x1a0 [ 81.675971][ T5720] do_sendfile+0x382/0x650 [ 81.680375][ T5720] __x64_sys_sendfile64+0x105/0x150 [ 81.685563][ T5720] x64_sys_call+0x2dc4/0x3020 [ 81.690235][ T5720] do_syscall_64+0x12c/0x370 [ 81.694824][ T5720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.700704][ T5720] [ 81.703013][ T5720] read to 0xffff88811c5adb1c of 4 bytes by task 5720 on cpu 1: [ 81.710537][ T5720] atime_needs_update+0x2a8/0x3e0 [ 81.715557][ T5720] touch_atime+0x4a/0x330 [ 81.719880][ T5720] shmem_file_read_iter+0x477/0x540 [ 81.725076][ T5720] copy_splice_read+0x471/0x6c0 [ 81.729926][ T5720] splice_direct_to_actor+0x28f/0x670 [ 81.735284][ T5720] do_splice_direct+0x119/0x1a0 [ 81.740121][ T5720] do_sendfile+0x382/0x650 [ 81.744534][ T5720] __x64_sys_sendfile64+0x105/0x150 [ 81.749721][ T5720] x64_sys_call+0x2dc4/0x3020 [ 81.754393][ T5720] do_syscall_64+0x12c/0x370 [ 81.758979][ T5720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.764862][ T5720] [ 81.767167][ T5720] value changed: 0x1fe429fb -> 0x21155700 [ 81.772866][ T5720] [ 81.775173][ T5720] Reported by Kernel Concurrency Sanitizer on: [ 81.781305][ T5720] CPU: 1 UID: 0 PID: 5720 Comm: syz.4.595 Not tainted syzkaller #0 PREEMPT(full) [ 81.790495][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.800534][ T5720] ==================================================================