last executing test programs: 7m59.923050532s ago: executing program 32 (id=690): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_create(0x2, 0x0, &(0x7f0000044000)) close(r1) setgid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r4 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents64(r4, &(0x7f0000000840)=""/217, 0xd9) 5m35.375753791s ago: executing program 33 (id=1631): r0 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1, 0xffffffff, 0x8) 3m27.312421149s ago: executing program 34 (id=2510): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = socket(0xf, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891d, &(0x7f0000000740)={'bridge_slave_1\x00', @ifru_flags=0x2000}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4ea4, 0x20002, @dev={0xfe, 0x80, '\x00', 0x28}, 0xff7ffffd}}, {{0xa, 0x4e23, 0x4a3, @local, 0x4ef}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x850) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022cbd7000fcdbdf253700000008009f000500000008005700050000000800a10005000000080026006c0900000800a100ee04000008009f000200000008002201860200000800a1000b0301000800a0000001000005001901090000000800a000050000000800a100090000009533c0c6744dd06e9717d0ad8b3933038f3264f14d0600704bfaf660a0c656813913a558716315d2ca81d9aeab16d04096d56965"], 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x9000) mq_open(&(0x7f0000000080)='usrquota', 0x40, 0x197, &(0x7f0000000500)={0x8, 0x1, 0x100000000, 0xffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x17, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd236}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1e4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) fallocate(r3, 0x0, 0x0, 0x8800000) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 3m14.570800966s ago: executing program 35 (id=2560): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x20}, 0x41) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x13, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x3a, 0x8, "32418a740fb883526ffa82b00e866f666884cd127113122238cf2d503cce2cd447cefc458cb06c97aa78d521cba4bcc95e71133c3fea"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}}, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 3m3.565969694s ago: executing program 36 (id=2647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000000000000a"], 0x90) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xfdef) 2m51.833069807s ago: executing program 9 (id=2741): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x14}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7ff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\x7f\fG\xa75\xd8aM!\xe6\xe3\x05\xed.\x90\xae~\x93#*\xcc\xa0aZ-\x16\x1fmO\xfe|\x94\x7f\xf5\x8a\xf4\x83\x16\xf2L\x8b\xc7m\xf3m\xaa[\x03\x00\x00\x00R\xafg\xff\xbc3\xcd\xde\xe9F\xc2&b\xfd\xee3j\xf8\x8a\xa2\xbf\f\xe2Rxn\xa7.BW\xb6\x1bC\x91\x1fW\xaa\xc8z\xc4(\x12\xbc\xaa\x97_\xb8\xa9\xc1\x19ba\xbb\xf2\xe5H\xae\xa4\x05\xb6', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='-\x00', &(0x7f0000000340)='.{/^%:\xf6[]\x00', 0x0) close(r4) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) 2m51.328114864s ago: executing program 9 (id=2746): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) unshare(0x22020400) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) cachestat(r4, &(0x7f0000000100)={0x7f, 0x800004}, &(0x7f000009de80), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000b6ffffff47ffffff0600000000000000", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0400000004000000010000000200"/28], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5]}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020603000000000000000000000000060900020073797a300000000005000100070000001400078008001300560749740800124000000000850005000a000000050004000100000014000300686173683a69702c706f72742c697000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/4096, 0x1000}}, 0x10) write$cgroup_int(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r10, 0x402, 0x1a) r11 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000000180)={0x2000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) timerfd_settime(r9, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) 2m51.210133708s ago: executing program 37 (id=2620): syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000002d00)={0x2, 0x0, 0xffffffff}) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000000, 0xe}, 0x104f18, 0x6, 0x0, 0x1, 0x4000000000005, 0x4, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r2, &(0x7f0000000280), 0x0, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x29020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1e206, 0x400000, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) futex(&(0x7f00000000c0), 0xd, 0x2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0xc1cc6, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x2, 0x0, 0x7cce8c743ee810df, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000002480)=ANY=[@ANYBLOB="2173616e733dff03000066646e6f3d", @ANYRESHEX=r7, @ANYRESHEX=r7]) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x800) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 2m50.721004884s ago: executing program 38 (id=2759): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xff}, 'port0\x00', 0x109, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000680), 0x6e, 0x0}, 0x40) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket(0x2b, 0x80801, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport}, 0x90) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@nombcache}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r6 = open_tree(r5, &(0x7f0000000100)='./file1\x00', 0x80900) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x3, [@float={0x1, 0x0, 0x0, 0x10, 0x2}, @enum={0x5, 0x4, 0x0, 0x6, 0x4, [{}, {0x8, 0x9}, {0xa, 0x1c000}, {0x10, 0x3}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0xc, 0x9c7697}, {0x5, 0x7}, {0xb, 0x8001}, {0xb, 0x3}, {0xf, 0x5}, {0x3, 0x7}, {0x5, 0xa4}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x2c}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}, @typedef={0x10}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x2}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x78, 0x7}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x3}]}, @float={0xa, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/75, 0x10b, 0x4b, 0x1, 0x7ed}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x2, 0xa, 0x3, 0x40, r6, 0x10001, '\x00', 0x0, r7, 0x8, 0x4, 0x4}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x2c) r8 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000dd8000/0x3000)=nil, 0x3000, 0xc, 0x190111, 0xffffffffffffffff, 0x3000) 2m50.717881794s ago: executing program 9 (id=2762): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x101001, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40043d14, &(0x7f0000000740)={0x7fff, 0x2}) 2m50.499569121s ago: executing program 9 (id=2764): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) 2m50.460314203s ago: executing program 9 (id=2765): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 2m49.961951029s ago: executing program 9 (id=2769): r0 = syz_io_uring_setup(0x47a8, 0x0, 0x0, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f, 0x0, r0}, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, &(0x7f0000000180)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m49.849293493s ago: executing program 39 (id=2769): r0 = syz_io_uring_setup(0x47a8, 0x0, 0x0, &(0x7f0000000700)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f, 0x0, r0}, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, &(0x7f0000000180)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m24.636275488s ago: executing program 4 (id=2934): syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000050) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000014000180050002000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2m24.293082119s ago: executing program 4 (id=2937): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES16], 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x7}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000140)="f80204160000000000007f5386dd", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x6a9}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000005, 0x800, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009000000071b0102f3f24de5449"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0xfffffffffffffec2, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0xe8aff16bc247a885}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r7, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000040000701feffffff00000000027c0000040042800c00018006000600800a00009f931c628e3beec8932d72bd753d65df9aa730ec944824d78e03c4a926194c92dcf639bb4d096f5510991f58e81a63b85c7aef0e23f8d5236f"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') writev(r10, &(0x7f00000011c0)=[{&(0x7f00000001c0)="12", 0x1}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@polexpire={0x24c, 0x1b, 0x200, 0x70bd2d, 0x25dfdbfe, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x8, 0x4e23, 0x1, 0x2, 0x1a0, 0x20, 0x73, 0x0, r11}, {0x0, 0x3, 0x3, 0xeb85, 0x7fffffff, 0x3, 0x3ff}, {0x7, 0xc6, 0x1, 0x4}, 0x6, 0x0, 0x2, 0x1, 0x3, 0x1}, 0x7}, [@algo_aead={0x106, 0x12, {{'gcm(xeta)\x00'}, 0x5d0, 0x40, "882c6f114a1e0db291aab27c1ac4d68c85a1f92b238309e33d352a7421c0f0d35a99c319ddc6a8bae6da0cb3c8f6574e44380c184dfbfeab6a538864d4ef5f1c448f720a666566a17c0b7c1ba758bcf3b94ce38019ace9bb4b4cb80fa5cb5817e00ead207a185a17cbf50995707ff521b7c4d841b9cc80b808bf10b3d87e780cef6ace666c6990f9e34529a797e85976803eb6bcffcd1cda66cfed34229e2afae5dde949519ed5ef654af892603884d7f133dcb8ebf23cbced55"}}, @tmpl={0x84, 0x5, [{{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x3, 0xc, 0xd57, 0x7, 0x7}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x33}, 0x2, @in=@private=0xa010102, 0x3500, 0x1, 0x3, 0x7, 0x7, 0xffff94a4, 0x9}]}]}, 0x24c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x7fff, @remote, 0xd}, 0x1c) 2m23.180760236s ago: executing program 4 (id=2942): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x26}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x8, 0x1, 0x1}, &(0x7f0000000080)=[{}]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/18, @ANYRES32], 0x28}}, 0x802) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7ffd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8054}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x20, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m22.588811766s ago: executing program 4 (id=2946): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) 2m22.588551226s ago: executing program 1 (id=2947): syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000050) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000014000180050002000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2m22.516765918s ago: executing program 4 (id=2948): socket$inet6(0xa, 0x80003, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x2000000000000075, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r4) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x0, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x840) 2m22.505061119s ago: executing program 1 (id=2949): dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 2m22.288194946s ago: executing program 1 (id=2950): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="794500000012da8c9b374c6bd4dcd8571bbf6f02e5b432200008394e5c9ca48d682865b5000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x43) exit(0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xa404e, &(0x7f00000004c0), 0x3, 0x451, &(0x7f0000000f80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x440, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, @perf_bp={0x0, 0xb}, 0x102640, 0x400, 0xd0, 0x1, 0xffffffff, 0x1ff, 0x0, 0x0, 0x100, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req={0x4190, 0x1, 0x81, 0x20007}, 0x10) recvmmsg$unix(r7, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400000a0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2m22.072549213s ago: executing program 4 (id=2952): socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m22.021880725s ago: executing program 40 (id=2952): socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m21.416966035s ago: executing program 1 (id=2957): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) 2m21.337071868s ago: executing program 1 (id=2959): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket(0x15, 0x5, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0xa}, 0x6e) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)='wg2\x00', 0x2, 0x800, 0x10}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 2m21.126535335s ago: executing program 1 (id=2961): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noinit_itable}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000280)={0x404043000, 0xfffffffffffffffa, 0x5, 0x9}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0xfffffffffffffd3e, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffedb, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) pidfd_send_signal(0xffffffffffffffff, 0x14, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x4a, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'vlan1\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = fsopen(&(0x7f0000000180)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x3}) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @local}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @local}, 0x40, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x3514, 0x7be8, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 2m20.995264079s ago: executing program 41 (id=2961): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noinit_itable}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000280)={0x404043000, 0xfffffffffffffffa, 0x5, 0x9}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0xfffffffffffffd3e, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffedb, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) pidfd_send_signal(0xffffffffffffffff, 0x14, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x4a, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'vlan1\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = fsopen(&(0x7f0000000180)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x3}) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @local}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @local}, 0x40, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x3514, 0x7be8, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 2m15.886693171s ago: executing program 2 (id=2975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xccd1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0xf1a, 0x0, 0x4048805}, 0x0) 2m15.264110191s ago: executing program 2 (id=2976): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x98, 0x340, 0x0, 0x288, 0x1f0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x2, 0x2, 0x71}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xb06f5130e5eca774], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@loopback, [0xff000000, 0xffffff00, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0x7f800000, 0xffffffff, 0xffffffff], 0x1, 0x5, 0x3a, 0x4e20, 0x4e22, 0x4e23, 0x4e20, 0x400}, 0xc0, 0x100}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x4, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x11, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES8, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRESDEC=r2], 0x30}], 0x1, 0x40800) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001380)={r2, 0x4}, &(0x7f00000013c0)=0x8) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x2, 0x30520cf7f25f0c64, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20) stat(0x0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0}) memfd_secret(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @local, 0x4f29, 0x3, 'rr\x00', 0x16, 0xc, 0x6b}, {@empty, 0x4e23, 0x1, 0x5, 0x1, 0x5da}}, 0x44) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioprio_set$uid(0x0, r6, 0x6000) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r7, @ANYRES32=r0, @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800410072786500140033006c6f00"/53], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}}, 0x20000880) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 2m15.161013834s ago: executing program 2 (id=2977): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket(0x15, 0x5, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0xa}, 0x6e) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 2m15.118480806s ago: executing program 2 (id=2978): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) 2m14.854164065s ago: executing program 2 (id=2979): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0x7, 0x510, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x200000000008, 0x5}, 0x7e75, 0xf, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$caif_stream(0x25, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) time(0x0) syz_io_uring_setup(0x83b, &(0x7f0000000140)={0x0, 0x11e, 0x800, 0x1, 0x315}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r3, &(0x7f0000000180)={&(0x7f0000000000)=@caif=@util={0x25, "575f29fdddd5f732cb451a2022947b3d"}, 0x80, 0x0}, 0x20000091) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000940)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x4000000, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, 0x0, 0x0, 0x20033, 0x51b) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x7e, 0x82) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0x560c89bb) r8 = creat(&(0x7f0000000200)='./file0\x00', 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0x0) r10 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000013010101000000000000000002000004080003409eca0ef708001a4000000005b1e61295451d8068c69bf4d19733c03925a99f142791de92eafdcf4ff7277851"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r10, 0x627, 0x4c1, 0x43, 0x0, 0x30) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000008e5ac85a8320e9c97c6c916ff5c55216128dc609007a92239324fa8243a1f6ac13b81a1d08a9d8d14711779c4cbb0f36f3d3222eeb40c68a444b0c2c080c8a13879e59b2fe0e6b91f9bbc282637f11ca9b57c1dec16f1ad828fad5c54a5f84f5b2d4983f45159bce0df11ca8bdedb0229ba0569ed259afaba9702d60ac7f2303139dac3def1b1019ead9ade505ca927286746258520542012e732bd52a9895a2b1df93004f5eed3681d226bd960f5774a0f99c148b0729190dd9cdba69f7be8d22f0236e14927674841b9f46cfd6ee3431f8145d9e319aae13b8aef0e0ebb488b1", @ANYRES16=r5, @ANYBLOB="040025bd7000fcdbdf250100000008000300", @ANYRES32=r14, @ANYBLOB="0c0099000080000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8800) 2m14.69611938s ago: executing program 2 (id=2980): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={0x110, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x800, 0x20}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a323832ea41b5a986cbe454014466262af825af9cf9e4dba"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e00000000000014000380100003800c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x4a, &(0x7f0000000040), 0x10) personality(0xfe47fef9f5ff7379) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_bcm(r6, &(0x7f0000000680)={&(0x7f0000000300)=@rc={0x1f, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000000580)=""/247, 0xf7}], 0x2}, 0x400120a3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r9, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8000, 0x1, 0x1}}], 0x38}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40043d14, &(0x7f0000000740)={0x7fff, 0x2}) 2m14.69579888s ago: executing program 42 (id=2980): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={0x110, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x800, 0x20}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a323832ea41b5a986cbe454014466262af825af9cf9e4dba"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e00000000000014000380100003800c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x4a, &(0x7f0000000040), 0x10) personality(0xfe47fef9f5ff7379) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_bcm(r6, &(0x7f0000000680)={&(0x7f0000000300)=@rc={0x1f, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000000580)=""/247, 0xf7}], 0x2}, 0x400120a3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r9, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8000, 0x1, 0x1}}], 0x38}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40043d14, &(0x7f0000000740)={0x7fff, 0x2}) 19.295316284s ago: executing program 0 (id=3665): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_setup(0x3, &(0x7f0000008240)) (fail_nth: 14) 18.858184388s ago: executing program 0 (id=3668): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x31}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) (async) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000800)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) (async) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) sendfile(r1, r1, 0x0, 0x7e4000) 18.775562671s ago: executing program 0 (id=3669): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x4, 0xbf, 0x9, 0x3}, {0xd, 0x8, 0x5, 0x5}, {0x4637, 0x4, 0x0, 0x100}, {0x5, 0x7, 0x80, 0x4}, {0x101, 0x0, 0x6, 0x100}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000100)={0x465, 0x33}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}, 0x2, 0x4, 0x7}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0xc0, 0x24, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0xf}, {0x5, 0x1}, {0x0, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_netem={{0xa}, {0x80, 0x2, {{0x8, 0xfffffffc, 0x3, 0x91, 0x2, 0xb207}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffffd}, @TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0xf28, 0xfffffff7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x400, 0xa, 0x2, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0xc6, 0x100, 0x8, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40, 0x0, 0x6f3, 0x8}}]}]}}}, @qdisc_kind_options=@q_mq={0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x9, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000580)=@ccm_128={{0x304}, "f6750ddffaf3d10c", "6c17d5c640de1db19f92fd037227293c", "e8fd24d2", "b477d5a77c1e342f"}, 0x28) fcntl$setstatus(r0, 0x4, 0x0) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f00000005c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="b256f8ce7e20b3da07bf0d0b9325a2c1e21a8991f2bf071306579fc2042526fc57b948523f47cda1b612362bc637609c9d3c9b77f4c502eafa78de1198cd754ae330b3c27c09f3b64efc5beda07713", 0x4f}, {&(0x7f0000000780)="159135e129164f22634b42925896bcfc02d7ee5de5fee7465d1471b201b0f7b277451833eacf7377", 0x28}], 0x3, &(0x7f0000000800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}, {{&(0x7f0000000840)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000880)="aebaf13197b704994d37076c4aedad536af26d4b3b9344321cf1ddebc14dcc07aefd1fcc349c693b27f4c5bd2819d8a82e3f76f626dc81cd5bd7f2315a91a156f098fc305c665ec161b9e19f2c7c21b84e1251116ad34f79f6d0656fb5a56dd5e36103579f10dc4e604feaafd9ba6645da5c401aadc586a2bf36b10cc2bfd56f452863d7c971f2bfd919ff7a2269ebe2a0ffcb2923efc37a3b2f93f39a910d24212a16dc57f3bea34932316a5bab35c3d83c0b22ef36", 0xb6}], 0x1, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @broadcast}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @generic={0x94, 0x12, "ed78a28e545903ec6713bf5d8d14afba"}]}}}], 0xc0}}, {{&(0x7f0000000a40)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="1a925355be2b5639270cb7d2d405e0883fa615aee30a293785e025d52721f2458350709751b5a1a355763465fae60064829cbbd385a6b86526a21c4bcdff40c6217f983abda93e51d2007429c06c6a991abfc644a6a0d27868e461a759068192060af7594479b86b6f2ffd8adbd2df37e6b484218762c11f0c339fbe835ccd1729d14e6cd3d902d5f17f65065d93f07d279f2643386fa93fda744ca3f383c3efedb538a2bc52c6506d40ca984106732c3d4eef7f8026861a646ae5f7ec0c111d6f0739", 0xc3}], 0x2, &(0x7f0000001bc0)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x50}}], 0x3, 0x40804) r4 = socket(0xf, 0x3, 0xa) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x74, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x12}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8000) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, &(0x7f00000024c0)={&(0x7f0000001e40)=0x7fffffffffffffff, 0x1, &(0x7f0000001e80)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002480)}) getpeername(r2, &(0x7f0000002500)=@ieee802154={0x24, @short}, &(0x7f0000002580)=0x80) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000025c0)={0x7e89, 0x2, "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"}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000002740), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000002880)={'tunl0\x00', &(0x7f0000002780)={'tunl0\x00', r3, 0x8, 0x700, 0x3, 0x9, {{0x2b, 0x4, 0x1, 0x12, 0xac, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0x5, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}]}, @timestamp={0x44, 0x24, 0x98, 0x0, 0x9, [0x401, 0xff, 0x3, 0x400, 0x5, 0xfc92, 0x7fff, 0x7f]}, @rr={0x7, 0x7, 0xba, [@broadcast]}, @noop, @timestamp_addr={0x44, 0x24, 0xa0, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb171}, {@rand_addr=0x64010102, 0x96}, {@broadcast, 0x7f}, {@broadcast, 0x7fffffff}]}, @ssrr={0x89, 0xb, 0x8, [@empty, @local]}, @timestamp_prespec={0x44, 0x14, 0xee, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x23}}]}, @cipso={0x86, 0x1d, 0x1, [{0x0, 0xb, "a0c56dfcc31eccf749"}, {0x7, 0x3, "f1"}, {0x2, 0x4, "afca"}, {0x0, 0x5, "915597"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000028c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002980)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002a40)={'syztnl2\x00', &(0x7f00000029c0)={'syztnl2\x00', r3, 0x29, 0x3, 0xd, 0x10001, 0x55, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x8000, 0x4, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003100)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002a80)={0x610, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x6, 0x1, 0x7}, {0x0, 0x7, 0x6, 0x9}, {0x2257, 0x1, 0xfb, 0xe}, {0x400, 0x3, 0xb, 0x2}, {0x6, 0x66, 0x5, 0x215cd7fc}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xf34b, 0x9, 0x0, 0x101}, {0x3, 0x9, 0x2, 0x6}, {0x5, 0x3, 0x8, 0x5}, {0xc, 0x7, 0x3, 0x797c152b}, {0x8, 0x7, 0x5}, {0x14, 0xa, 0x3, 0x2}, {0x9, 0x6, 0x3, 0x81}, {0x9e, 0x7, 0x3, 0xfff}, {0x3ff, 0x3, 0xea}]}}}]}}, {{0x8, 0x1, r7}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc815}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x99}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r10}, {0x4}}, {{0x8, 0x1, r11}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r3}}}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x40000}, 0x15) splice(r0, &(0x7f0000003140)=0x4, r2, &(0x7f0000003180), 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)=@getaddr={0x14, 0x16, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x4) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000032c0)={0x5, 0xb6ea, 0x7ff, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000003300)={0x3, 0x6, 0x7f}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x70, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x49}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) 18.686567334s ago: executing program 0 (id=3671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f00000014c0)=0xfffffffffffffffc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = syz_io_uring_setup(0x3488, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe66}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000300)) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "7f"}]}], {0x14}}, 0x70}}, 0x4004004) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="200000001e006bcd9e3fe3dc6e02000007000000010000007e05002500000000", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 18.352242235s ago: executing program 0 (id=3677): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 17.965557428s ago: executing program 0 (id=3679): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xfb55, 0x10, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r3, 0x8) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105000, 0x89) faccessat2(r4, &(0x7f00000000c0)='./file0\x00', 0x8, 0x100) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x2e4}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x8, 0x40, @empty, @mcast2, 0x10, 0x20, 0xfffffff9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x4, 0x2, 0x2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7800, 0x62, 0x9b}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0}, &(0x7f0000000900)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002cbd7000fbdbdf250100000014000180060001000a00000008000700", @ANYRES32=r6, @ANYBLOB="050005006100000008000400030000000800040007000000080004000200000024000180050002000400000008000700", @ANYRES32=r7, @ANYBLOB="021db2ea241e3f0fb4eb254b46214c05000200080008000700", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r12 = getpgrp(0xffffffffffffffff) brk(0x0) r13 = syz_open_dev$hiddev(&(0x7f0000000180), 0xd1, 0x18c80) read$hiddev(r13, &(0x7f0000000400)=""/42, 0x2a) syz_open_procfs(r12, &(0x7f00000003c0)='net/wireless\x00') sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3400007d89ebd2399d12ccc36835c8842b0f5cab91ab38fed1820e277e45fe39e1af2dd749d47a8b764ad28f62f6f30ea13afd5379eec08eef105823afc205bd74e07e870789e09fb8b849bae8b7e3240ef90eaf12681e2a54160f78db8b9d6fe84e81817d9cb1c7547fdb4a1d5ba2c26019148d7ce1a70b81fe39fcc6e87d5d58360d9424a88776581bbdd83090ef507cc15710a663895e9ba6ae9f188e095a4f756107b4bd614a2a9e807f1d8c83755f52beba", @ANYRES16=r11, @ANYBLOB="000226bd7000fedbdf250900000014000580070001006962000008000100657468000c00068008000100ff030000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x44894) 17.950181549s ago: executing program 43 (id=3679): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xfb55, 0x10, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r3, 0x8) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105000, 0x89) faccessat2(r4, &(0x7f00000000c0)='./file0\x00', 0x8, 0x100) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x2e4}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x8, 0x40, @empty, @mcast2, 0x10, 0x20, 0xfffffff9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x4, 0x2, 0x2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7800, 0x62, 0x9b}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0}, &(0x7f0000000900)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002cbd7000fbdbdf250100000014000180060001000a00000008000700", @ANYRES32=r6, @ANYBLOB="050005006100000008000400030000000800040007000000080004000200000024000180050002000400000008000700", @ANYRES32=r7, @ANYBLOB="021db2ea241e3f0fb4eb254b46214c05000200080008000700", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r12 = getpgrp(0xffffffffffffffff) brk(0x0) r13 = syz_open_dev$hiddev(&(0x7f0000000180), 0xd1, 0x18c80) read$hiddev(r13, &(0x7f0000000400)=""/42, 0x2a) syz_open_procfs(r12, &(0x7f00000003c0)='net/wireless\x00') sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3400007d89ebd2399d12ccc36835c8842b0f5cab91ab38fed1820e277e45fe39e1af2dd749d47a8b764ad28f62f6f30ea13afd5379eec08eef105823afc205bd74e07e870789e09fb8b849bae8b7e3240ef90eaf12681e2a54160f78db8b9d6fe84e81817d9cb1c7547fdb4a1d5ba2c26019148d7ce1a70b81fe39fcc6e87d5d58360d9424a88776581bbdd83090ef507cc15710a663895e9ba6ae9f188e095a4f756107b4bd614a2a9e807f1d8c83755f52beba", @ANYRES16=r11, @ANYBLOB="000226bd7000fedbdf250900000014000580070001006962000008000100657468000c00068008000100ff030000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x44894) 6.26929613s ago: executing program 8 (id=3773): kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000480)='z', 0x1, 0x0, 0x1000}], 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r5, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRES32=r2], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{r2, 0x6, 0x4, 0x0, 0x2, 0x3e99, 0x7, 0x81, 0xc, 0x400, 0x8, 0x5, 0x8, 0x74}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2c, 0x80, 0x2, 0x261}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r7, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r7, 0x22d0, 0x20, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) clock_getres(0x6, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xe0000, 0x0) r10 = epoll_create1(0x0) r11 = epoll_create(0x4e30) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x10}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.438883307s ago: executing program 8 (id=3779): symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x8a, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x4001, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000000600)="$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") syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086a1606410a600180400000000000000000000db000000000000ff02000000000000000000000000000116410000000000000708000000010002000000a1f65e5bff971a4cf52d9ec4a500000000009f960132d3de9e938161c552774d19c4913dd71050b1503c9250f4a95bcfb736000611fbe862d2814fc2ae26117eac6085f91187a7be50f39853ae51c6b4ec95efa7dc923ba6a1fb974815e9e93ac4a8d0d047b812c3556491ace5536af4280f68c6558a7dccc1436cf28d34ff18c222f773"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x200, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a2f00000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$kcm(0x10, 0x2, 0x0) r7 = syz_io_uring_setup(0x3d, &(0x7f0000000580)={0x0, 0xaa9d, 0x2, 0x1, 0xba}, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, 0x0, 0x1) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r9, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5, 0x401}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x7f00, 0x1, 0xe4c9, 0x200, {{0xe, 0x4, 0x0, 0x2b, 0x38, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0xc, 0x28, 0x1, 0x3, [{@remote, 0x9}]}, @lsrr={0x83, 0x7, 0xf4, [@multicast1]}, @rr={0x7, 0xf, 0x41, [@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000bc0)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000b40)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffdf9}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) 4.745082441s ago: executing program 8 (id=3786): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x4000000000000003, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 4.743670581s ago: executing program 3 (id=3788): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/195}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = epoll_create(0x7) epoll_pwait(r1, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x8) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25020202000900030073797a3200000000090001007307"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB="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"], 0x0, 0xfdffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r7, 0xffffffffffffffff, 0x35, 0x0, @void}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5c}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.670226587s ago: executing program 3 (id=3790): fcntl$getown(0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}}) 3.540765941s ago: executing program 3 (id=3791): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) socket$inet6(0xa, 0x2, 0x3a) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) remap_file_pages(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x4, 0x0, 0x0) r6 = inotify_init1(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r8 = socket(0xa, 0x801, 0x0) getsockopt(r8, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x77, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, r7}}, 0x30) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x20) read(r6, &(0x7f0000002040)=""/76, 0x4c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000032000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setrlimit(0x7, &(0x7f0000000040)) 2.725710918s ago: executing program 7 (id=3797): mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000951000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x2000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x858, 0x370, 0x288, 0x160, 0x160, 0x0, 0x788, 0x788, 0x788, 0x788, 0x788, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x1, 0x0, [0x4, 0x8, 0x2, 0x0, 0x1, 0xe000, 0x6, 0x7, 0x8, 0x0, 0x7d, 0x2, 0x8, 0x8, 0xfff8, 0x3ff], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x6, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [0x0, 0x2], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private1, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b8) r2 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r2, &(0x7f00000008c0), 0x0, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.68571585s ago: executing program 7 (id=3798): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x81000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0xfffffffffffffffc}, 0x0, 0xb, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2b000000dc"], 0x20) 2.567778664s ago: executing program 7 (id=3800): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.510371406s ago: executing program 7 (id=3801): fcntl$getown(0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}}) 2.479427587s ago: executing program 3 (id=3804): kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000480)='z', 0x1, 0x0, 0x1000}], 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r5, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES32, @ANYRES32=r2], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{r2, 0x6, 0x4, 0x0, 0x2, 0x3e99, 0x7, 0x81, 0xc, 0x400, 0x8, 0x5, 0x8, 0x74}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2c, 0x80, 0x2, 0x261}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r7, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r7, 0x22d0, 0x20, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) clock_getres(0x6, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xe0000, 0x0) r10 = epoll_create1(0x0) r11 = epoll_create(0x4e30) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x10}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.407396239s ago: executing program 7 (id=3805): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x202, 0x2}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x3ff, 0x0, 0x0, 0x0, 0x200000000000005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setuid(0xee00) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) r8 = socket(0x14, 0x80000, 0x4) bind$packet(r8, &(0x7f0000000d00)={0x11, 0x3, r7, 0x1, 0x1, 0x6, @remote}, 0x14) r9 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x3}}, 0x10) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") 1.372404024s ago: executing program 8 (id=3808): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_emit_ethernet(0x7a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6106000200442f00fe80000000"], 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) 1.306180176s ago: executing program 5 (id=3810): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x858, 0x370, 0x288, 0x28, 0x160, 0x0, 0x788, 0x788, 0x788, 0x788, 0x788, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x1, 0x0, [0x4, 0x8, 0x2, 0x0, 0x1, 0xe000, 0x6, 0x7, 0x8, 0x0, 0x7d, 0x2, 0x8, 0x8, 0xfff8, 0x3ff], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x6, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [0x0, 0x2], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private1, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b8) 1.229348008s ago: executing program 3 (id=3811): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) madvise(&(0x7f0000446000/0x1000)=nil, 0x1000, 0x66) syz_open_dev$usbfs(0x0, 0x204, 0x22140) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) pipe(0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x15}, 0x94) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000580)=""/4096, 0x1000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7395, 0x80, 0x0, 0x26e}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x24, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) 1.18062196s ago: executing program 5 (id=3812): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.17979258s ago: executing program 5 (id=3813): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x0, &(0x7f0000000240)={0x2, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x33, 0x0}) syz_pidfd_open(0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0xf0) 1.019697025s ago: executing program 8 (id=3814): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000017c0)={@in6={{0xa, 0x4e22, 0xc1, @loopback, 0x40000005}}, 0x0, 0x0, 0x18, 0x0, "e07cdb96a021a60e90685e855b5fa304354f1161998649cee89ca36e5e5d8b7fd7172ac84b0ff701fb62db65fd7055f5bb273077d33d4f30ebc8470d07dfb3b3e117ee8de891218e137e070f0d357e0b"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x88ed}}, 0x0, 0x0, 0x32, 0x0, "ca7402e48d2f53f1b6e292e444cd364f7088e3f14dd23c45a8507340000018de7a660fc8039905df837bca0eeb4c8de4ef38988c35a08568ff036b1658f14d83000000dfffffffffffffff00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x4, @loopback, 0x4}}, 0x0, 0x0, 0x21, 0x0, "830b3b2884c69b16668c68a5daa845f387713f4048782ece1e755d8139d27ebf8d01106bb28200c01f690000000064417165bba0dd5ece522fa7881000000000000000000300"}, 0xd8) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x500c) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f00000000c0)=0xa, 0x9, 0x0) unshare(0x64040280) get_mempolicy(0x0, 0x0, 0xf2, &(0x7f0000fff000/0x1000)=nil, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000240)="000000000027cdc8e9f23bb2a934eacc3d27f828f7c429976662e8b0168afb79c40c4eddae0645762b7d424c042b2d3fa9cbc6a84be6876316bd737fa18ac96570771e4306e5c5db10edd5d9abe6c198f6de1cba0a5d01d747ad58828bd0614600", 0x0}, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_MM_EXE_FILE(0x2a, 0xd, 0xffffffffffffffff) dup2(r2, r3) setrlimit(0x6, 0x0) r4 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r8, 0xc0186e86, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x2, 0x4, 0x6, 0x1}], 0x1, 0x20, 0x1, 0x5}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) 998.565106ms ago: executing program 5 (id=3816): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000380)=@name={0x1e, 0x2, 0x1, {{0x43, 0x4}, 0xfffffc}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0xb093, 0x800000, 0x9, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2a020400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000000306030000000000000000000000000605020100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$kcm(0x11, 0xa, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a3100000000080004400000010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x4, 0x0, 0x0) 809.264303ms ago: executing program 5 (id=3818): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00') mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)=@known='security.apparmor\x00') r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) copy_file_range(r2, 0x0, r0, &(0x7f0000000000)=0x8, 0xff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) rename(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000400)='./file1/file4/file5\x00') read$char_usb(r2, &(0x7f0000000040)=""/84, 0x54) 474.236284ms ago: executing program 5 (id=3819): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x4000000000000003, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 473.081714ms ago: executing program 6 (id=3820): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) unshare(0x22020600) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000002340)={0xa, 0x4e1d, 0xc212, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e7a}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000003080)=0x7a) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x8000001, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='bond_slave_1\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r5, 0x7ff}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000004c0)={0x6, 0x118, 0xfa00, {{0x2, 0x7205, "d41c4c3b835edc5d3a3b5bae0b4d745801407bfff447dcd6e14b08882709d77266795bdaf00745eabb843fa23a4c705cf568309c8cff5060bf730dc23da49e5a40b57a1f0325ded7045279f7a5101037c7cfd46a646dc3c6bbfa5a59cff9fcda07e4b9834f16b224ccc04d425cb757f84d09e6f68a70582cb77a213722d8787f19d1e9ac95a747613196b9d2f6913adc911339937c53da71b34b0ca70f9ef248e02c3de9051d595b275b183f8b3c6f52c45396dc3f215617c448774315006feef2876dbe4850e4d3ecf517c13c88c2877b37e501a4a9a046b9a41c620eeb543060cd6b35ca4b4c4ba1183ec92138fbb21103475c7f6f09d3082040ff743c30a2", 0x3, 0x74, 0x6, 0xfd, 0xad, 0x7, 0x6}, r5}}, 0x120) 462.867294ms ago: executing program 7 (id=3821): set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) (async, rerun: 32) syz_clone(0x0, 0x0, 0x1f, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) io_setup(0x6, &(0x7f0000000040)) 383.754836ms ago: executing program 8 (id=3822): socket$kcm(0x10, 0x5, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x20a, 0xffffffff, 0x7}}], 0x20, 0x4855}, 0x24000052) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x47a8, 0x0, &(0x7f0000000180), &(0x7f0000000700)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a03000000000000000000030000000800034000000000"], 0x9c}}, 0x0) fallocate(r2, 0x1, 0xffc, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='vfat\x00') r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x7, 0x0, 0x8, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 383.317697ms ago: executing program 6 (id=3823): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x16) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005500e50026bd7000ffffffff07080000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="01030300ff"], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xf) 383.069507ms ago: executing program 6 (id=3824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 236.191992ms ago: executing program 6 (id=3825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0xa, 0x4, 0x4, 0xd, 0x8, 0x2, 0x80, 0x87f7, r4}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r1, 0x301, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) 175.357234ms ago: executing program 6 (id=3826): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x0, &(0x7f0000000240)={0x2, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x33, 0x0}) syz_pidfd_open(0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xf0) 133.111665ms ago: executing program 3 (id=3827): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noinit_itable}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000280)={0x404043000, 0xfffffffffffffffa, 0x5, 0x9}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0xfffffffffffffd3e, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffedb, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) pidfd_send_signal(0xffffffffffffffff, 0x14, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x4a, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'vlan1\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = fsopen(&(0x7f0000000180)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x3}) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @local}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @local}, 0x40, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r0, r0}) io_uring_enter(r3, 0x3514, 0x7be8, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 0s ago: executing program 6 (id=3828): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYBLOB="f90407fe7a656920f85afea08802c4e132d06a407a86ff54c7ecfd9f10029794f1e8b8f79157e550e6f5a9192e406a039b9bbd1b368ba5765cba1635640324513b99946f9be81e564eea9be989925bc4f55714a57919a2aee24a5d44f6fef1ff32811014b36ecb087c8528972ed7e194be1b0a47bbbb56a2cc346ae5cf1b179fbb9c19595562bbc4de1739186301b6d3eec6fdd815862287b4e5fde9543a26220fb9099cc01c65a3fd240a074dcc9eb4a5dfa7f5b827a605c3ff5c41b42364443f5765b69767166c95cc6f27a6538fbfc5020bd54f49ade2a9b97c7b7dadf1cc589d3a221f0f6766af6776de2bedb1ada751eac27e6d651868a3d711502fc19eaefb6d34196aa722f3a3f9ddf4122caa024e979524c02786b836dda6053b08cd5c73f409dca8528f0248d206b8e46698c95d234df5335230d482477cde90a81a569bee6cb478c4d38a784d3c6847c1170b3178b1d644c29160a1ac13234ac41581d3acd25aacc409a1f548adb1882533a53c18510604dffbb18012ecc66d24a13e20e337a769ef2b85dff63d5230a23443aa211dae2c313db5c5d37a077b"], 0x28}}, 0x841) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @cgroup_sockopt=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) syz_open_pts(r3, 0x80) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x20f6b1, 0x3180, 0x2, 0x60024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x1}) io_uring_enter(r6, 0xd44, 0x44c1, 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) kernel console output (not intermixed with test programs): -000000000000 r/w without journal. Quota mode: none. [ 565.312463][T16349] EXT4-fs (loop5): 1 truncate cleaned up [ 565.333553][T16349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.979653][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.063525][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.143912][T16373] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3319'. [ 566.160917][ T5894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.355694][T16373] tipc: Failed to remove unknown binding: 66,1,1/0:2442543263/2442543265 [ 566.454685][T16393] loop5: detected capacity change from 0 to 512 [ 566.462675][T16393] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 566.480565][T16393] EXT4-fs (loop5): 1 truncate cleaned up [ 566.487359][T16393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.036057][T16372] tipc: Failed to remove unknown binding: 66,1,1/0:2442543263/2442543265 [ 567.046451][T16372] tipc: Failed to remove unknown binding: 66,1,1/0:2442543263/2442543265 [ 567.228841][T16406] loop6: detected capacity change from 0 to 256 [ 567.237845][T16406] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 567.257299][T16406] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 8200) [ 567.272314][T16406] FAT-fs (loop6): Filesystem has been set read-only [ 567.311964][ T5894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.336108][T16408] loop5: detected capacity change from 0 to 128 [ 567.397580][ T9143] bond0 (unregistering): Released all slaves [ 567.407452][ T9143] bond1 (unregistering): Released all slaves [ 567.418079][ T9143] bond2 (unregistering): Released all slaves [ 567.562118][T16416] lo speed is unknown, defaulting to 1000 [ 567.585711][ T9143] hsr_slave_0: left promiscuous mode [ 567.611347][ T9143] hsr_slave_1: left promiscuous mode [ 567.630673][ T9143] veth1_macvtap: left promiscuous mode [ 567.644887][ T9143] veth0_macvtap: left promiscuous mode [ 567.654062][ T9143] veth1_vlan: left promiscuous mode [ 567.662906][ T9143] veth0_vlan: left promiscuous mode [ 567.925532][T16417] loop5: detected capacity change from 0 to 2048 [ 568.063993][T16416] lo speed is unknown, defaulting to 1000 [ 568.188629][T16417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.215391][T16417] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.475590][T16417] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3334: bg 0: block 345: padding at end of block bitmap is not set [ 568.522469][T16417] EXT4-fs (loop5): Remounting filesystem read-only [ 568.711391][ T5894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.804680][T16439] loop5: detected capacity change from 0 to 512 [ 568.849281][T16440] loop6: detected capacity change from 0 to 256 [ 568.923198][T16439] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 568.975626][T16440] FAT-fs (loop6): Directory bread(block 64) failed [ 568.983741][T16440] FAT-fs (loop6): Directory bread(block 65) failed [ 568.992603][T16440] FAT-fs (loop6): Directory bread(block 66) failed [ 569.001579][T16440] FAT-fs (loop6): Directory bread(block 67) failed [ 569.011805][T16440] FAT-fs (loop6): Directory bread(block 68) failed [ 569.022547][T16440] FAT-fs (loop6): Directory bread(block 69) failed [ 569.032366][T16440] FAT-fs (loop6): Directory bread(block 70) failed [ 569.042142][T16440] FAT-fs (loop6): Directory bread(block 71) failed [ 569.051144][T16440] FAT-fs (loop6): Directory bread(block 72) failed [ 569.059451][T16440] FAT-fs (loop6): Directory bread(block 73) failed [ 569.128457][T16439] EXT4-fs (loop5): 1 truncate cleaned up [ 569.328122][T16439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.411985][T16444] loop7: detected capacity change from 0 to 764 [ 569.454803][T16444] FAULT_INJECTION: forcing a failure. [ 569.454803][T16444] name failslab, interval 1, probability 0, space 0, times 0 [ 569.576743][T16444] CPU: 0 UID: 0 PID: 16444 Comm: syz.7.3342 Tainted: G W syzkaller #0 PREEMPT(full) [ 569.576821][T16444] Tainted: [W]=WARN [ 569.576848][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.576860][T16444] Call Trace: [ 569.576867][T16444] [ 569.576878][T16444] __dump_stack+0x1d/0x30 [ 569.576975][T16444] dump_stack_lvl+0x95/0xd0 [ 569.577063][T16444] dump_stack+0x15/0x1b [ 569.577153][T16444] should_fail_ex+0x263/0x280 [ 569.577185][T16444] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 569.577214][T16444] should_failslab+0x8c/0xb0 [ 569.577241][T16444] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 569.577293][T16444] ? isofs_alloc_inode+0x34/0x50 [ 569.577321][T16444] ? __pfx_isofs_iget5_test+0x10/0x10 [ 569.577349][T16444] ? __pfx_isofs_iget5_test+0x10/0x10 [ 569.577375][T16444] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 569.577397][T16444] isofs_alloc_inode+0x34/0x50 [ 569.577498][T16444] alloc_inode+0x40/0x170 [ 569.577529][T16444] ? __pfx_isofs_iget5_set+0x10/0x10 [ 569.577549][T16444] iget5_locked+0x4a/0xa0 [ 569.577627][T16444] __isofs_iget+0xe9/0x1110 [ 569.577772][T16444] ? _raw_spin_unlock+0x9/0x30 [ 569.577804][T16444] ? finish_task_switch+0x7d/0x280 [ 569.577833][T16444] ? __schedule+0x93c/0xd40 [ 569.577872][T16444] isofs_get_blocks+0x185/0x490 [ 569.578030][T16444] isofs_bread+0x6a/0x120 [ 569.578062][T16444] isofs_lookup+0x1a3/0x920 [ 569.578095][T16444] ? __pfx_isofs_lookup+0x10/0x10 [ 569.578115][T16444] path_openat+0xbf0/0x2050 [ 569.578162][T16444] do_file_open+0x16c/0x290 [ 569.578219][T16444] do_sys_openat2+0x94/0x130 [ 569.578255][T16444] __x64_sys_openat+0xf2/0x120 [ 569.578309][T16444] x64_sys_call+0x1e39/0x3020 [ 569.578342][T16444] do_syscall_64+0x12c/0x370 [ 569.578371][T16444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.578445][T16444] RIP: 0033:0x7f7ede13c799 [ 569.578465][T16444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.578492][T16444] RSP: 002b:00007f7edcb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 569.578516][T16444] RAX: ffffffffffffffda RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 569.578541][T16444] RDX: 0000000000004042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 569.578557][T16444] RBP: 00007f7edcb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 569.578574][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.578630][T16444] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 569.578651][T16444] [ 569.897508][T16440] team0: Port device dummy0 removed [ 569.913195][T16440] bridge_slave_0: left allmulticast mode [ 569.919051][T16440] bridge_slave_0: left promiscuous mode [ 569.925071][T16440] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.954389][T16440] bridge_slave_1: left allmulticast mode [ 569.960219][T16440] bridge_slave_1: left promiscuous mode [ 569.966145][T16440] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.054943][T16440] bond0: (slave bond_slave_0): Releasing backup interface [ 570.073117][T16440] bond0: (slave bond_slave_1): Releasing backup interface [ 570.093988][T16440] team0: Port device team_slave_0 removed [ 570.107825][T16440] team0: Port device team_slave_1 removed [ 570.116292][T16440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.123794][T16440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.133931][T16440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.141428][T16440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.164610][T16440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 570.466690][ T5894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.815905][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3345'. [ 571.123605][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3344'. [ 571.813606][T16470] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3348'. [ 571.843941][ T5898] Bluetooth: hci0: Frame reassembly failed (-84) [ 571.893124][ T28] audit: type=1400 audit(1774678705.585:3343): avc: denied { bind } for pid=16464 comm="syz.3.3347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 572.070845][T16465] lo speed is unknown, defaulting to 1000 [ 572.120605][T16465] lo speed is unknown, defaulting to 1000 [ 572.263893][T16479] loop5: detected capacity change from 0 to 1024 [ 572.285063][T16479] EXT4-fs: Ignoring removed orlov option [ 572.290764][T16479] EXT4-fs: Ignoring removed bh option [ 572.450419][T16479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.568755][ T5894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.273344][T16501] loop6: detected capacity change from 0 to 512 [ 573.285165][T16501] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 573.296788][T16501] EXT4-fs (loop6): 1 truncate cleaned up [ 573.316257][T16501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.707798][T16504] loop3: detected capacity change from 0 to 7 [ 573.874379][ T3580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 574.103860][T16529] loop5: detected capacity change from 0 to 512 [ 574.112102][T16529] EXT4-fs: Ignoring removed oldalloc option [ 574.121287][T16528] lo speed is unknown, defaulting to 1000 [ 574.129099][T16530] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.144024][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.153442][T16529] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3368: invalid indirect mapped block 4294967295 (level 1) [ 574.193211][T16528] lo speed is unknown, defaulting to 1000 [ 574.204937][T16529] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 574.205099][T16529] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3368: invalid indirect mapped block 4294967295 (level 1) [ 574.214283][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 574.214310][ C1] EXT4-fs (loop5): initial error at time 1774678707: ext4_free_branches:1023: inode 11 [ 574.214337][ C1] EXT4-fs (loop5): last error at time 1774678707: ext4_free_branches:1023: inode 11 [ 574.255104][T16529] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 574.262183][T16529] EXT4-fs (loop5): 2 truncates cleaned up [ 574.313261][T16529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.333579][ T3419] IPVS: starting estimator thread 0... [ 574.404656][ T5894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.454669][T16543] loop3: detected capacity change from 0 to 7 [ 574.463092][T16538] IPVS: using max 1728 ests per chain, 86400 per kthread [ 575.083673][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3380'. [ 575.253466][T16575] FAULT_INJECTION: forcing a failure. [ 575.253466][T16575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.267085][T16575] CPU: 1 UID: 0 PID: 16575 Comm: syz.0.3385 Tainted: G W syzkaller #0 PREEMPT(full) [ 575.267121][T16575] Tainted: [W]=WARN [ 575.267128][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.267215][T16575] Call Trace: [ 575.267223][T16575] [ 575.267234][T16575] __dump_stack+0x1d/0x30 [ 575.267269][T16575] dump_stack_lvl+0x95/0xd0 [ 575.267294][T16575] dump_stack+0x15/0x1b [ 575.267382][T16575] should_fail_ex+0x263/0x280 [ 575.267420][T16575] should_fail+0xb/0x20 [ 575.267452][T16575] should_fail_usercopy+0x1a/0x20 [ 575.267483][T16575] _copy_from_user+0x1c/0xb0 [ 575.267523][T16575] core_sys_select+0x323/0x730 [ 575.267575][T16575] __se_sys_select+0x1f4/0x230 [ 575.267642][T16575] __x64_sys_select+0x67/0x80 [ 575.267666][T16575] x64_sys_call+0x29e6/0x3020 [ 575.267700][T16575] do_syscall_64+0x12c/0x370 [ 575.267737][T16575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.267833][T16575] RIP: 0033:0x7f34d366c799 [ 575.267859][T16575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.267882][T16575] RSP: 002b:00007f34d20bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 575.267906][T16575] RAX: ffffffffffffffda RBX: 00007f34d38e5fa0 RCX: 00007f34d366c799 [ 575.267926][T16575] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000020000088 [ 575.267945][T16575] RBP: 00007f34d20bf090 R08: 0000200000000200 R09: 0000000000000000 [ 575.268014][T16575] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 575.268104][T16575] R13: 00007f34d38e6038 R14: 00007f34d38e5fa0 R15: 00007ffccb3d6568 [ 575.268206][T16575] [ 575.504734][T16579] loop7: detected capacity change from 0 to 2048 [ 575.555856][T16579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.564221][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3391'. [ 575.581906][T16579] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.593896][T16579] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3388: bg 0: block 345: padding at end of block bitmap is not set [ 575.623296][T16579] EXT4-fs (loop7): Remounting filesystem read-only [ 575.639795][ T28] audit: type=1400 audit(1774678709.335:3344): avc: denied { create } for pid=16578 comm="syz.7.3388" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 575.759550][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.870001][T16601] netlink: 'syz.7.3395': attribute type 2 has an invalid length. [ 575.879408][T16601] rdma_op ffff888100a40180 conn xmit_rdma 0000000000000000 [ 576.017653][T16614] loop7: detected capacity change from 0 to 256 [ 576.082073][T16615] loop5: detected capacity change from 0 to 512 [ 576.096408][T16614] FAT-fs (loop7): Directory bread(block 64) failed [ 576.123617][T16614] FAT-fs (loop7): Directory bread(block 65) failed [ 576.152588][T16614] FAT-fs (loop7): Directory bread(block 66) failed [ 576.172882][T16614] FAT-fs (loop7): Directory bread(block 67) failed [ 576.179538][T16614] FAT-fs (loop7): Directory bread(block 68) failed [ 576.194687][T16614] FAT-fs (loop7): Directory bread(block 69) failed [ 576.201478][T16614] FAT-fs (loop7): Directory bread(block 70) failed [ 576.208402][T16614] FAT-fs (loop7): Directory bread(block 71) failed [ 576.215887][T16614] FAT-fs (loop7): Directory bread(block 72) failed [ 576.223980][T16614] FAT-fs (loop7): Directory bread(block 73) failed [ 576.230583][T16617] netlink: 'syz.0.3401': attribute type 32 has an invalid length. [ 576.445631][T16625] loop5: detected capacity change from 0 to 512 [ 576.531750][T16626] team0: left promiscuous mode [ 576.537640][T16626] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.567581][T16625] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 576.604405][T16626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 576.687868][T16625] EXT4-fs (loop5): 1 truncate cleaned up [ 576.713532][T16625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.838755][T16630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3405'. [ 577.090275][ T5894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.218512][T16634] FAULT_INJECTION: forcing a failure. [ 577.218512][T16634] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 577.231946][T16634] CPU: 0 UID: 0 PID: 16634 Comm: syz.7.3406 Tainted: G W syzkaller #0 PREEMPT(full) [ 577.232006][T16634] Tainted: [W]=WARN [ 577.232013][T16634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.232029][T16634] Call Trace: [ 577.232037][T16634] [ 577.232046][T16634] __dump_stack+0x1d/0x30 [ 577.232081][T16634] dump_stack_lvl+0x95/0xd0 [ 577.232113][T16634] dump_stack+0x15/0x1b [ 577.232185][T16634] should_fail_ex+0x263/0x280 [ 577.232214][T16634] should_fail_alloc_page+0xf2/0x100 [ 577.232288][T16634] __alloc_frozen_pages_noprof+0x108/0x360 [ 577.232351][T16634] alloc_pages_mpol+0xb3/0x260 [ 577.232381][T16634] alloc_pages_noprof+0x8f/0x130 [ 577.232413][T16634] pte_alloc_one+0x1c/0xc0 [ 577.232439][T16634] __do_fault+0x7b/0x200 [ 577.232476][T16634] handle_mm_fault+0x11e2/0x3020 [ 577.232527][T16634] ? lock_mm_and_find_vma+0x8b/0x440 [ 577.232560][T16634] do_user_addr_fault+0x3fd/0x1050 [ 577.232642][T16634] exc_page_fault+0x62/0xa0 [ 577.232668][T16634] asm_exc_page_fault+0x26/0x30 [ 577.232785][T16634] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 577.232831][T16634] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 577.232850][T16634] RSP: 0018:ffffc900021bfdf0 EFLAGS: 00050206 [ 577.232867][T16634] RAX: ffff88810ae01b88 RBX: 000000000000001c RCX: 000000000000001c [ 577.232912][T16634] RDX: 0000000000000001 RSI: 00002000004b8fe4 RDI: ffffc900021bfe18 [ 577.232931][T16634] RBP: 000000000000001c R08: 0000000000000102 R09: 0000000000000000 [ 577.232948][T16634] R10: 0001c900021bfe18 R11: 0001c900021bfe33 R12: 00002000004b8fe4 [ 577.232966][T16634] R13: 000000000000001c R14: ffffc900021bfe18 R15: 00002000004b8fe4 [ 577.232991][T16634] _copy_from_user+0x6f/0xb0 [ 577.233063][T16634] __sys_bind+0x106/0x290 [ 577.233175][T16634] __x64_sys_bind+0x3f/0x50 [ 577.233279][T16634] x64_sys_call+0x2b30/0x3020 [ 577.233306][T16634] do_syscall_64+0x12c/0x370 [ 577.233400][T16634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.233495][T16634] RIP: 0033:0x7f7ede13c799 [ 577.233510][T16634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.233527][T16634] RSP: 002b:00007f7edcb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 577.233544][T16634] RAX: ffffffffffffffda RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 577.233558][T16634] RDX: 000000000000001c RSI: 00002000004b8fe4 RDI: 0000000000000006 [ 577.233570][T16634] RBP: 00007f7edcb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 577.233582][T16634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.233675][T16634] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 577.233696][T16634] [ 577.713545][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3409'. [ 577.793015][T16651] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3409'. [ 577.808907][T16651] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 577.834921][T16651] bond1 (unregistering): Released all slaves [ 578.091756][T16667] lo speed is unknown, defaulting to 1000 [ 578.102714][T16667] lo speed is unknown, defaulting to 1000 [ 578.877197][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3419'. [ 579.173009][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3425'. [ 579.799227][T16701] loop6: detected capacity change from 0 to 256 [ 579.927346][T16701] FAT-fs (loop6): Directory bread(block 64) failed [ 579.934275][T16701] FAT-fs (loop6): Directory bread(block 65) failed [ 579.941037][T16701] FAT-fs (loop6): Directory bread(block 66) failed [ 579.947619][T16701] FAT-fs (loop6): Directory bread(block 67) failed [ 579.954398][T16701] FAT-fs (loop6): Directory bread(block 68) failed [ 579.961069][T16701] FAT-fs (loop6): Directory bread(block 69) failed [ 579.967869][T16701] FAT-fs (loop6): Directory bread(block 70) failed [ 579.974558][T16701] FAT-fs (loop6): Directory bread(block 71) failed [ 579.981180][T16701] FAT-fs (loop6): Directory bread(block 72) failed [ 579.987840][T16701] FAT-fs (loop6): Directory bread(block 73) failed [ 580.097232][T16701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 580.964804][T16711] netlink: 'syz.3.3430': attribute type 10 has an invalid length. [ 581.027651][T16713] loop5: detected capacity change from 0 to 256 [ 581.118030][T16713] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 581.252598][T16713] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 581.372440][ T28] audit: type=1326 audit(1774678715.065:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25951fc799 code=0x7ffc0000 [ 581.397735][T16713] random: crng reseeded on system resumption [ 581.650423][ T28] audit: type=1326 audit(1774678715.065:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25951fc799 code=0x7ffc0000 [ 581.774834][ T28] audit: type=1326 audit(1774678715.095:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25951fc799 code=0x7ffc0000 [ 581.798801][ T28] audit: type=1326 audit(1774678715.095:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25951fc799 code=0x7ffc0000 [ 581.846287][T16723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.854667][ T28] audit: type=1326 audit(1774678715.095:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25951fc799 code=0x7ffc0000 [ 581.878525][ T28] audit: type=1326 audit(1774678715.165:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25951fc799 code=0x7ffc0000 [ 581.885087][T16723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.904076][ T28] audit: type=1326 audit(1774678715.165:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25951fc502 code=0x7ffc0000 [ 581.936574][ T28] audit: type=1326 audit(1774678715.165:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f25951fc597 code=0x7ffc0000 [ 581.967328][ T28] audit: type=1326 audit(1774678715.165:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f25951b9491 code=0x7ffc0000 [ 582.039737][ T28] audit: type=1326 audit(1774678715.165:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f25951fd589 code=0x7ffc0000 [ 582.253893][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3438'. [ 582.293983][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3438'. [ 582.344267][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3438'. [ 582.449475][T16736] loop3: detected capacity change from 0 to 7 [ 582.497881][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 582.791216][T16748] FAULT_INJECTION: forcing a failure. [ 582.791216][T16748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.804784][T16748] CPU: 1 UID: 0 PID: 16748 Comm: syz.0.3445 Tainted: G W syzkaller #0 PREEMPT(full) [ 582.804821][T16748] Tainted: [W]=WARN [ 582.804888][T16748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.804904][T16748] Call Trace: [ 582.804913][T16748] [ 582.804923][T16748] __dump_stack+0x1d/0x30 [ 582.804960][T16748] dump_stack_lvl+0x95/0xd0 [ 582.804994][T16748] dump_stack+0x15/0x1b [ 582.805069][T16748] should_fail_ex+0x263/0x280 [ 582.805105][T16748] should_fail+0xb/0x20 [ 582.805259][T16748] should_fail_usercopy+0x1a/0x20 [ 582.805299][T16748] _copy_from_user+0x1c/0xb0 [ 582.805408][T16748] kstrtouint_from_user+0x69/0xf0 [ 582.805457][T16748] proc_fail_nth_write+0x50/0x160 [ 582.805563][T16748] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 582.805650][T16748] vfs_write+0x269/0x9f0 [ 582.805671][T16748] ? __rcu_read_unlock+0x4e/0x70 [ 582.805701][T16748] ? __fget_files+0x184/0x1c0 [ 582.805795][T16748] ? mutex_lock+0x57/0x90 [ 582.805841][T16748] ksys_write+0xdc/0x1a0 [ 582.805864][T16748] __x64_sys_write+0x40/0x50 [ 582.805889][T16748] x64_sys_call+0x27e1/0x3020 [ 582.805949][T16748] do_syscall_64+0x12c/0x370 [ 582.805985][T16748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.806016][T16748] RIP: 0033:0x7f34d362cfce [ 582.806045][T16748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.806084][T16748] RSP: 002b:00007f34d20befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 582.806109][T16748] RAX: ffffffffffffffda RBX: 00007f34d20bf6c0 RCX: 00007f34d362cfce [ 582.806135][T16748] RDX: 0000000000000001 RSI: 00007f34d20bf0a0 RDI: 0000000000000005 [ 582.806153][T16748] RBP: 00007f34d20bf090 R08: 0000000000000000 R09: 0000000000000000 [ 582.806171][T16748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.806188][T16748] R13: 00007f34d38e6038 R14: 00007f34d38e5fa0 R15: 00007ffccb3d6568 [ 582.806238][T16748] [ 583.200574][T16757] loop6: detected capacity change from 0 to 256 [ 583.352300][T16771] loop7: detected capacity change from 0 to 512 [ 583.359930][T16771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 583.374106][T16771] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.432911][T16771] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 583.441098][T16771] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 583.457159][T16771] EXT4-fs (loop7): 1 truncate cleaned up [ 583.467482][T16771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.560573][T16763] lo speed is unknown, defaulting to 1000 [ 583.576416][T16788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3457'. [ 583.585921][T16763] lo speed is unknown, defaulting to 1000 [ 583.755337][T16788] lo speed is unknown, defaulting to 1000 [ 583.768531][T16788] lo speed is unknown, defaulting to 1000 [ 583.807621][T16763] chnl_net:caif_netlink_parms(): no params data found [ 583.858435][T16763] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.877194][T16763] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.924993][T16763] bridge_slave_0: entered allmulticast mode [ 583.942799][T16763] bridge_slave_0: entered promiscuous mode [ 583.956970][T16763] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.964215][T16763] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.971468][T16763] bridge_slave_1: entered allmulticast mode [ 583.975404][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.979171][T16763] bridge_slave_1: entered promiscuous mode [ 584.007597][T16763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.070930][T16763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.082969][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3461'. [ 584.151471][T16763] team0: Port device team_slave_0 added [ 584.162410][T16763] team0: Port device team_slave_1 added [ 584.182375][T16763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.190287][T16805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3461'. [ 584.210281][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.372112][T16763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.398939][T16809] loop6: detected capacity change from 0 to 512 [ 584.413883][T16763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.420864][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.451235][T16809] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 584.477931][T16763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.479398][T16809] EXT4-fs (loop6): 1 truncate cleaned up [ 584.495449][T16809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.513467][T16805] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 584.523922][T16805] bond1 (unregistering): Released all slaves [ 584.618258][T16763] hsr_slave_0: entered promiscuous mode [ 584.624505][T16763] hsr_slave_1: entered promiscuous mode [ 584.630302][T16763] debugfs: 'hsr0' already exists in 'hsr' [ 584.652863][T16763] Cannot create hsr debugfs directory [ 584.656240][T16813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3463'. [ 584.825494][T16823] loop3: detected capacity change from 0 to 1024 [ 584.868091][T16763] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.899370][T16823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.934936][T16763] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.942615][T16823] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3467: missing EA_INODE flag [ 584.980116][T16823] EXT4-fs (loop3): Remounting filesystem read-only [ 585.025133][T16763] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.065519][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.097736][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.117133][T16763] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.211556][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3474'. [ 585.235475][T16763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 585.247062][T16763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 585.289494][T16763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 585.304476][T16846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3476'. [ 585.436579][T16763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 585.509495][T16855] loop3: detected capacity change from 0 to 512 [ 585.539312][T16855] serio: Serial port ptm0 [ 585.724277][T16763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.739630][T16763] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.765261][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.772386][ T5898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.822240][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.829598][ T5898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.046308][T16877] FAULT_INJECTION: forcing a failure. [ 586.046308][T16877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.122410][T16877] CPU: 1 UID: 0 PID: 16877 Comm: syz.6.3482 Tainted: G W syzkaller #0 PREEMPT(full) [ 586.122446][T16877] Tainted: [W]=WARN [ 586.122455][T16877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.122471][T16877] Call Trace: [ 586.122478][T16877] [ 586.122489][T16877] __dump_stack+0x1d/0x30 [ 586.122557][T16877] dump_stack_lvl+0x95/0xd0 [ 586.122581][T16877] dump_stack+0x15/0x1b [ 586.122670][T16877] should_fail_ex+0x263/0x280 [ 586.122705][T16877] should_fail+0xb/0x20 [ 586.122730][T16877] should_fail_usercopy+0x1a/0x20 [ 586.122765][T16877] _copy_from_user+0x1c/0xb0 [ 586.122837][T16877] kstrtouint_from_user+0x69/0xf0 [ 586.122867][T16877] proc_fail_nth_write+0x50/0x160 [ 586.122974][T16877] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 586.123004][T16877] vfs_write+0x269/0x9f0 [ 586.123053][T16877] ? __rcu_read_unlock+0x4e/0x70 [ 586.123076][T16877] ? __fget_files+0x184/0x1c0 [ 586.123100][T16877] ? mutex_lock+0x57/0x90 [ 586.123180][T16877] ksys_write+0xdc/0x1a0 [ 586.123204][T16877] __x64_sys_write+0x40/0x50 [ 586.123253][T16877] x64_sys_call+0x27e1/0x3020 [ 586.123341][T16877] do_syscall_64+0x12c/0x370 [ 586.123365][T16877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.123399][T16877] RIP: 0033:0x7fb72453cfce [ 586.123419][T16877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 586.123494][T16877] RSP: 002b:00007fb722fcefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.123518][T16877] RAX: ffffffffffffffda RBX: 00007fb722fcf6c0 RCX: 00007fb72453cfce [ 586.123533][T16877] RDX: 0000000000000001 RSI: 00007fb722fcf0a0 RDI: 0000000000000004 [ 586.123545][T16877] RBP: 00007fb722fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 586.123627][T16877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.123643][T16877] R13: 00007fb7247f6038 R14: 00007fb7247f5fa0 R15: 00007ffcf17ee4f8 [ 586.123668][T16877] [ 586.348906][T16763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.871577][T16763] veth0_vlan: entered promiscuous mode [ 586.932328][T16763] veth1_vlan: entered promiscuous mode [ 586.938920][T16907] loop7: detected capacity change from 0 to 2048 [ 586.953204][T16909] loop3: detected capacity change from 0 to 7 [ 587.009498][T16763] veth0_macvtap: entered promiscuous mode [ 587.016129][T16907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.025344][T16763] veth1_macvtap: entered promiscuous mode [ 587.080472][T16763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.103669][T16763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.117493][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.135662][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.172602][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.236197][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.362916][T16912] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 587.535402][T16936] __nla_validate_parse: 3 callbacks suppressed [ 587.535448][T16936] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3493'. [ 587.766166][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.056586][T16947] wireguard0: entered promiscuous mode [ 588.068456][T16947] wireguard0: entered allmulticast mode [ 588.095233][T16954] loop6: detected capacity change from 0 to 512 [ 588.112657][T16949] netlink: 'syz.0.3502': attribute type 10 has an invalid length. [ 588.122707][T16949] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3502'. [ 588.255320][T16960] loop7: detected capacity change from 0 to 512 [ 588.273943][T16954] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 588.287986][T16960] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 588.323190][T16954] EXT4-fs (loop6): 1 truncate cleaned up [ 588.330951][T16960] EXT4-fs (loop7): 1 truncate cleaned up [ 588.345364][T16954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.366838][T16960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.395978][T16954] EXT4-fs error (device loop6): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.6.3504: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 588.439463][T16954] EXT4-fs (loop6): Remounting filesystem read-only [ 588.452888][T16954] EXT4-fs warning (device loop6): ext4_rename_delete:3729: inode #2: comm syz.6.3504: Deleting old file: nlink 4, error=-117 [ 588.535867][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.558375][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3509'. [ 588.715903][T16980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 588.864092][T16976] loop3: detected capacity change from 0 to 7 [ 588.885040][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.907064][ T28] kauditd_printk_skb: 114 callbacks suppressed [ 588.907087][ T28] audit: type=1400 audit(1774678722.575:3469): avc: denied { create } for pid=16973 comm="syz.6.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 589.164110][T17003] loop5: detected capacity change from 0 to 256 [ 589.192095][T17003] FAT-fs (loop5): Directory bread(block 64) failed [ 589.198718][T17003] FAT-fs (loop5): Directory bread(block 65) failed [ 589.205427][T17003] FAT-fs (loop5): Directory bread(block 66) failed [ 589.212115][T17003] FAT-fs (loop5): Directory bread(block 67) failed [ 589.217405][T17009] loop7: detected capacity change from 0 to 512 [ 589.219257][T17003] FAT-fs (loop5): Directory bread(block 68) failed [ 589.231546][T17003] FAT-fs (loop5): Directory bread(block 69) failed [ 589.238186][T17003] FAT-fs (loop5): Directory bread(block 70) failed [ 589.244829][T17003] FAT-fs (loop5): Directory bread(block 71) failed [ 589.251367][T17003] FAT-fs (loop5): Directory bread(block 72) failed [ 589.258111][T17003] FAT-fs (loop5): Directory bread(block 73) failed [ 589.270591][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3515'. [ 589.284301][T17009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.303202][T17009] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.313885][T17003] team0: Port device team_slave_0 removed [ 589.378592][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.432540][T17017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3523'. [ 589.488555][T17019] loop7: detected capacity change from 0 to 1024 [ 589.513252][T17020] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 589.519199][T17019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 589.561306][T17020] EXT4-fs (loop6): 1 truncate cleaned up [ 589.577953][T17019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.593710][T17014] bridge_slave_0: default FDB implementation only supports local addresses [ 589.605571][T17020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.262973][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.798166][T17033] set_capacity_and_notify: 1 callbacks suppressed [ 590.798187][T17033] loop6: detected capacity change from 0 to 512 [ 590.833208][T17033] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 590.851641][T17033] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 590.884013][T17033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.978970][T17033] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.3526: Unimplemented hash flags: 0x0001 [ 591.034769][T17033] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3526: Corrupt directory, running e2fsck is recommended [ 591.262073][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.281648][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.312680][T17038] loop3: detected capacity change from 0 to 7 [ 591.380585][T17042] lo speed is unknown, defaulting to 1000 [ 591.386994][T17042] lo speed is unknown, defaulting to 1000 [ 591.388967][T17044] loop6: detected capacity change from 0 to 512 [ 591.443576][T17044] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 591.477497][T17044] EXT4-fs (loop6): 1 truncate cleaned up [ 591.497040][T17044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.555940][T17044] EXT4-fs error (device loop6): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.6.3530: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 591.607367][T17044] EXT4-fs (loop6): Remounting filesystem read-only [ 591.613964][T17044] EXT4-fs warning (device loop6): ext4_rename_delete:3729: inode #2: comm syz.6.3530: Deleting old file: nlink 4, error=-117 [ 591.673364][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.733389][T17056] loop6: detected capacity change from 0 to 512 [ 591.757839][T17056] EXT4-fs (loop6): 1 truncate cleaned up [ 591.773190][T17056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.803938][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.832983][T17005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3518'. [ 592.389929][T17073] loop6: detected capacity change from 0 to 256 [ 592.489918][T17073] FAT-fs (loop6): Directory bread(block 64) failed [ 592.496613][T17073] FAT-fs (loop6): Directory bread(block 65) failed [ 592.503263][T17073] FAT-fs (loop6): Directory bread(block 66) failed [ 592.509808][T17073] FAT-fs (loop6): Directory bread(block 67) failed [ 592.516558][T17073] FAT-fs (loop6): Directory bread(block 68) failed [ 592.523199][T17073] FAT-fs (loop6): Directory bread(block 69) failed [ 592.529829][T17073] FAT-fs (loop6): Directory bread(block 70) failed [ 592.536414][T17073] FAT-fs (loop6): Directory bread(block 71) failed [ 592.543013][T17073] FAT-fs (loop6): Directory bread(block 72) failed [ 592.549585][T17073] FAT-fs (loop6): Directory bread(block 73) failed [ 592.612318][T17073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 592.851179][T17076] loop5: detected capacity change from 0 to 512 [ 592.875432][T17042] loop7: detected capacity change from 0 to 512 [ 593.064412][T17078] loop3: detected capacity change from 0 to 2048 [ 593.215387][T17076] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 593.227286][T17078] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.3537: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2053(2053) [ 593.346444][T17076] EXT4-fs (loop5): 1 truncate cleaned up [ 593.393618][T17076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.413698][T17078] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 593.421391][T17078] EXT4-fs (loop3): Remounting filesystem read-only [ 593.430575][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 593.430607][ C1] EXT4-fs (loop3): initial error at time 1774678727: ext4_ext_check_inode:521: inode 2 [ 593.430646][ C1] EXT4-fs (loop3): last error at time 1774678727: ext4_ext_check_inode:521: inode 2 [ 593.669592][T17078] EXT4-fs (loop3): get root inode failed [ 593.724288][T17078] EXT4-fs (loop3): mount failed [ 594.138552][T17078] netlink: 'syz.3.3537': attribute type 8 has an invalid length. [ 594.265178][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.299046][T17096] loop3: detected capacity change from 0 to 512 [ 594.315748][T17096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 594.373148][T17096] EXT4-fs (loop3): 1 truncate cleaned up [ 594.379344][T17096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.421884][T17096] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.3542: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 594.485031][T17096] EXT4-fs (loop3): Remounting filesystem read-only [ 594.493727][T17096] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.3542: Deleting old file: nlink 4, error=-117 [ 594.520457][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.550078][T17104] loop3: detected capacity change from 0 to 512 [ 594.560384][T17104] EXT4-fs: Ignoring removed oldalloc option [ 594.575456][T17104] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3543: invalid indirect mapped block 4294967295 (level 1) [ 594.623422][T17104] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 594.661774][T17104] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3543: invalid indirect mapped block 4294967295 (level 1) [ 594.767587][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 594.774163][ C1] EXT4-fs (loop3): initial error at time 1774678728: ext4_free_branches:1023: inode 11 [ 594.783929][ C1] EXT4-fs (loop3): last error at time 1774678728: ext4_free_branches:1023: inode 11 [ 594.803803][T17104] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 594.804194][T17104] EXT4-fs (loop3): 2 truncates cleaned up [ 594.823451][T17104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.990114][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.048693][T17115] EXT4-fs: inline encryption not supported [ 595.054977][T17115] EXT4-fs: Ignoring removed nobh option [ 595.060608][T17115] EXT4-fs: Ignoring removed bh option [ 595.105000][T17115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.254054][T17125] ªªªªªª: renamed from vlan0 (while UP) [ 599.002024][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.138247][T17137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3551'. [ 599.150350][T17139] set_capacity_and_notify: 1 callbacks suppressed [ 599.150369][T17139] loop5: detected capacity change from 0 to 512 [ 599.163598][T17135] loop3: detected capacity change from 0 to 512 [ 599.190576][T17139] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 599.224916][T17139] EXT4-fs (loop5): 1 truncate cleaned up [ 599.227167][T17143] loop3: detected capacity change from 0 to 512 [ 599.237447][T17139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.287761][T17143] /dev/loop3: Can't open blockdev [ 599.780219][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.927399][T17155] loop5: detected capacity change from 0 to 128 [ 600.264323][T17160] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3559'. [ 600.293443][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3559'. [ 600.313320][T17160] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3559'. [ 600.336251][ T28] audit: type=1400 audit(1774678734.035:3470): avc: denied { map } for pid=17154 comm="syz.5.3557" path="pipe:[51930]" dev="pipefs" ino=51930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 600.338271][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3560'. [ 601.368796][T17175] loop5: detected capacity change from 0 to 512 [ 601.378842][T17177] loop3: detected capacity change from 0 to 512 [ 601.403455][T17177] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 601.460239][T17177] EXT4-fs (loop3): 1 truncate cleaned up [ 601.468769][T17177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.572344][ T28] audit: type=1400 audit(1774678735.255:3471): avc: denied { listen } for pid=17179 comm="syz.5.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 601.594165][T17177] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.3565: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 601.638213][T17187] loop5: detected capacity change from 0 to 512 [ 601.667065][T17187] EXT4-fs: Ignoring removed oldalloc option [ 601.676238][T17177] EXT4-fs (loop3): Remounting filesystem read-only [ 601.690921][T17177] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.3565: Deleting old file: nlink 4, error=-117 [ 601.705819][T17187] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3568: invalid indirect mapped block 4294967295 (level 1) [ 601.737609][T17187] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 601.737771][T17187] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3568: invalid indirect mapped block 4294967295 (level 1) [ 601.746995][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 601.747012][ C0] EXT4-fs (loop5): initial error at time 1774678735: ext4_free_branches:1023: inode 11 [ 601.747054][ C0] EXT4-fs (loop5): last error at time 1774678735: ext4_free_branches:1023: inode 11 [ 601.819911][T17177] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 601.843009][T17187] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 601.843300][T17187] EXT4-fs (loop5): 2 truncates cleaned up [ 601.874601][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.894111][T17187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.934205][T17196] loop3: detected capacity change from 0 to 512 [ 601.961345][T17196] EXT4-fs: Ignoring removed oldalloc option [ 602.112264][T17196] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3570: invalid indirect mapped block 4294967295 (level 1) [ 602.147344][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.157539][T17196] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 602.157709][T17196] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3570: invalid indirect mapped block 4294967295 (level 1) [ 602.166882][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 602.166907][ C1] EXT4-fs (loop3): initial error at time 1774678735: ext4_free_branches:1023: inode 11 [ 602.166945][ C1] EXT4-fs (loop3): last error at time 1774678735: ext4_free_branches:1023: inode 11 [ 602.246519][T17196] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 602.247060][T17196] EXT4-fs (loop3): 2 truncates cleaned up [ 602.343246][T17196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.649569][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3574'. [ 602.775002][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.809291][T17213] loop7: detected capacity change from 0 to 1024 [ 602.963295][T17213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.008239][T17213] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.3576: missing EA_INODE flag [ 603.136612][T17213] EXT4-fs (loop7): Remounting filesystem read-only [ 603.233390][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.524709][T17226] loop7: detected capacity change from 0 to 512 [ 603.551199][T17226] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 603.603337][T17226] EXT4-fs (loop7): 1 truncate cleaned up [ 603.624196][T17226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.657500][T17226] EXT4-fs error (device loop7): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.7.3580: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 603.812922][T17226] EXT4-fs (loop7): Remounting filesystem read-only [ 603.819626][T17226] EXT4-fs warning (device loop7): ext4_rename_delete:3729: inode #2: comm syz.7.3580: Deleting old file: nlink 4, error=-117 [ 603.841603][T17233] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 604.014598][T17237] FAT-fs (loop5): Directory bread(block 64) failed [ 604.021304][T17237] FAT-fs (loop5): Directory bread(block 65) failed [ 604.028072][T17237] FAT-fs (loop5): Directory bread(block 66) failed [ 604.034750][T17237] FAT-fs (loop5): Directory bread(block 67) failed [ 604.041391][T17237] FAT-fs (loop5): Directory bread(block 68) failed [ 604.048037][T17237] FAT-fs (loop5): Directory bread(block 69) failed [ 604.054695][T17237] FAT-fs (loop5): Directory bread(block 70) failed [ 604.061435][T17237] FAT-fs (loop5): Directory bread(block 71) failed [ 604.068273][T17237] FAT-fs (loop5): Directory bread(block 72) failed [ 604.075089][T17237] FAT-fs (loop5): Directory bread(block 73) failed [ 604.144713][T17237] bridge_slave_0: left allmulticast mode [ 604.150481][T17237] bridge_slave_0: left promiscuous mode [ 604.156654][T17237] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.167984][T17237] bridge_slave_1: left allmulticast mode [ 604.173840][T17237] bridge_slave_1: left promiscuous mode [ 604.179658][T17237] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.383460][T17237] bond0: (slave bond_slave_0): Releasing backup interface [ 604.402579][T17237] bond0: (slave bond_slave_1): Releasing backup interface [ 604.423267][T17237] team0: Port device team_slave_1 removed [ 604.432063][T17237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.439699][T17237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.450458][T17237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.457999][T17237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.469930][T17237] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 604.616246][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.537558][T17236] set_capacity_and_notify: 1 callbacks suppressed [ 605.537665][T17236] loop3: detected capacity change from 0 to 7 [ 605.957816][T17246] loop3: detected capacity change from 0 to 512 [ 605.975224][T17246] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 606.024194][T17246] EXT4-fs (loop3): 1 truncate cleaned up [ 606.030300][T17246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.168938][T17251] block device autoloading is deprecated and will be removed. [ 606.237468][T17252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3585'. [ 606.489092][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.752244][T17264] 9p: Bad value for 'wfdno' [ 606.857592][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3592'. [ 607.858573][T17302] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3596'. [ 607.937747][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'. [ 607.978876][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'. [ 608.002877][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'. [ 608.011901][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'. [ 608.063894][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'. [ 608.139055][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'. [ 608.183719][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'. [ 608.401717][T17326] sctp: [Deprecated]: syz.3.3605 (pid 17326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.401717][T17326] Use struct sctp_sack_info instead [ 608.418490][T17320] loop0: detected capacity change from 0 to 8192 [ 608.515218][T13006] loop0: p1 < > p2 p4 < p5 > [ 608.519953][T13006] loop0: partition table partially beyond EOD, truncated [ 608.541826][ T28] audit: type=1326 audit(1774678742.235:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 608.541921][T13006] loop0: p1 start 134217728 is beyond EOD, truncated [ 608.592573][T13006] loop0: p2 size 591360 extends beyond EOD, truncated [ 608.608332][T13006] loop0: p5 size 591360 extends beyond EOD, truncated [ 608.616416][ T28] audit: type=1326 audit(1774678742.275:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 608.663481][T17320] loop0: p1 < > p2 p4 < p5 > [ 608.676313][T17320] loop0: partition table partially beyond EOD, truncated [ 608.692916][ T28] audit: type=1326 audit(1774678742.275:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 608.705789][T17320] loop0: p1 start 134217728 is beyond EOD, truncated [ 608.751751][ T28] audit: type=1326 audit(1774678742.275:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 608.764700][T17320] loop0: p2 size 591360 extends beyond EOD, [ 608.805702][ T28] audit: type=1326 audit(1774678742.345:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 608.809387][T17320] truncated [ 608.819933][ T28] audit: type=1326 audit(1774678742.345:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 608.849129][T17320] loop0: p5 size 591360 extends beyond EOD, [ 608.863455][ T28] audit: type=1326 audit(1774678742.355:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 608.893250][ T28] audit: type=1326 audit(1774678742.355:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 608.917273][ T28] audit: type=1326 audit(1774678742.355:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 608.974563][ T28] audit: type=1326 audit(1774678742.355:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d366c799 code=0x7ffc0000 [ 609.016148][T17320] truncated [ 609.563555][T17355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=17355 comm=syz.5.3616 [ 609.576380][T17355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=17355 comm=syz.5.3616 [ 609.822528][T17365] loop5: detected capacity change from 0 to 1024 [ 609.843616][T17365] EXT4-fs: inline encryption not supported [ 609.887060][T17365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 609.921910][T17365] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.983558][T17365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 610.172760][T17371] loop6: detected capacity change from 0 to 1024 [ 610.193050][T17371] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 610.242860][T17371] System zones: 0-1, 3-36 [ 610.267825][T17371] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3621: bad orphan inode 134217728 [ 610.319819][T17371] loop6: lost filesystem error report for type 5 error -117 [ 610.321311][T17371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.575172][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.829091][T17350] syz.0.3613 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 610.857578][T17350] CPU: 1 UID: 0 PID: 17350 Comm: syz.0.3613 Tainted: G W syzkaller #0 PREEMPT(full) [ 610.857726][T17350] Tainted: [W]=WARN [ 610.857733][T17350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.857810][T17350] Call Trace: [ 610.857817][T17350] [ 610.857824][T17350] __dump_stack+0x1d/0x30 [ 610.857849][T17350] dump_stack_lvl+0x95/0xd0 [ 610.857878][T17350] dump_stack+0x15/0x1b [ 610.857917][T17350] dump_header+0x80/0x240 [ 610.857963][T17350] oom_kill_process+0x295/0x350 [ 610.858010][T17350] out_of_memory+0x97d/0xb80 [ 610.858042][T17350] try_charge_memcg+0x62e/0xa10 [ 610.858090][T17350] obj_cgroup_charge_pages+0x23/0xc0 [ 610.858128][T17350] obj_cgroup_charge_account+0x73/0x1a0 [ 610.858228][T17350] __memcg_slab_post_alloc_hook+0x392/0x540 [ 610.858261][T17350] kmem_cache_alloc_noprof+0x1e2/0x400 [ 610.858283][T17350] ? alloc_buffer_head+0x35/0x1f0 [ 610.858378][T17350] alloc_buffer_head+0x35/0x1f0 [ 610.858412][T17350] folio_alloc_buffers+0x149/0x310 [ 610.858448][T17350] create_empty_buffers+0x2c/0x200 [ 610.858485][T17350] __block_write_begin_int+0x1d4/0xf90 [ 610.858574][T17350] ? __ext4_mark_inode_dirty+0x2fc/0x400 [ 610.858606][T17350] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 610.858641][T17350] ? __list_add_valid_or_report+0x38/0xe0 [ 610.858751][T17350] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 610.858782][T17350] ? __mark_inode_dirty+0x49d/0x7d0 [ 610.858834][T17350] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 610.858875][T17350] block_page_mkwrite+0x1a8/0x3c0 [ 610.858919][T17350] ext4_page_mkwrite+0x859/0xb90 [ 610.859063][T17350] ? folio_unlock+0xfe/0x150 [ 610.859137][T17350] handle_mm_fault+0x1904/0x3020 [ 610.859181][T17350] do_user_addr_fault+0x3fd/0x1050 [ 610.859215][T17350] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 610.859240][T17350] exc_page_fault+0x62/0xa0 [ 610.859334][T17350] asm_exc_page_fault+0x26/0x30 [ 610.859353][T17350] RIP: 0033:0x7f34d3540f20 [ 610.859368][T17350] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 81 93 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 610.859387][T17350] RSP: 002b:00007ffccb3d6600 EFLAGS: 00010202 [ 610.859408][T17350] RAX: 0000001b2ff1fd70 RBX: ffffffffffffbd70 RCX: ffffffff818230ee [ 610.859426][T17350] RDX: 0000001b2ff1fd6c RSI: 0000000000000004 RDI: 00007f34d4415720 [ 610.859443][T17350] RBP: 0000000000000852 R08: 00007f34d38d0000 R09: 00007f34d38d2000 [ 610.859484][T17350] R10: 00000000818230f2 R11: 0000000000000000 R12: 0000000000000000 [ 610.859496][T17350] R13: 000000000007ffff R14: ffffffff81823e70 R15: 00007f34d4415720 [ 610.859510][T17350] ? folio_mapping+0x10/0xe0 [ 610.859531][T17350] ? strndup_user+0xe/0xb0 [ 610.859576][T17350] [ 610.859610][T17350] memory: usage 307200kB, limit 307200kB, failcnt 823 [ 611.140502][T17350] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 611.154455][T17350] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 611.161797][T17350] Memory cgroup stats for /syz0: [ 611.162113][T17350] cache 4096 [ 611.170426][T17350] rss 0 [ 611.173261][T17350] shmem 0 [ 611.176218][T17350] mapped_file 0 [ 611.179700][T17350] dirty 0 [ 611.182657][T17350] writeback 0 [ 611.186032][T17350] workingset_refault_anon 35 [ 611.190651][T17350] workingset_refault_file 1001 [ 611.195512][T17350] swap 184320 [ 611.198813][T17350] swapcached 7811072 [ 611.202863][T17350] pgpgin 873174 [ 611.206348][T17350] pgpgout 873164 [ 611.209933][T17350] pgfault 564859 [ 611.213868][T17350] pgmajfault 26 [ 611.217380][T17350] inactive_anon 0 [ 611.221028][T17350] active_anon 32768 [ 611.226438][T17350] inactive_file 0 [ 611.230178][T17350] active_file 8192 [ 611.247272][T17350] unevictable 0 [ 611.250838][T17350] hierarchical_memory_limit 314572800 [ 611.256565][T17350] hierarchical_memsw_limit 9223372036854771712 [ 611.262749][T17350] total_cache 4096 [ 611.266792][T17350] total_rss 0 [ 611.270191][T17350] total_shmem 0 [ 611.275954][T17350] total_mapped_file 0 [ 611.280067][T17350] total_dirty 0 [ 611.283700][T17350] total_writeback 0 [ 611.287623][T17350] total_workingset_refault_anon 35 [ 611.293181][T17350] total_workingset_refault_file 1001 [ 611.305671][T17350] total_swap 184320 [ 611.320473][T17350] total_swapcached 7811072 [ 611.325477][T17350] total_pgpgin 873174 [ 611.329476][T17350] total_pgpgout 873164 [ 611.335129][T17350] total_pgfault 564859 [ 611.339265][T17350] total_pgmajfault 26 [ 611.345516][T17350] total_inactive_anon 0 [ 611.349729][T17350] total_active_anon 32768 [ 611.365714][T17350] total_inactive_file 0 [ 611.370371][T17350] total_active_file 8192 [ 611.375266][T17350] total_unevictable 0 [ 611.379376][T17350] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3613,pid=17350,uid=0 [ 611.395233][T17350] Memory cgroup out of memory: Killed process 17350 (syz.0.3613) total-vm:94032kB, anon-rss:1224kB, file-rss:21636kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 611.459559][T17402] xt_hashlimit: size too large, truncated to 1048576 [ 611.750033][T17409] loop6: detected capacity change from 0 to 128 [ 611.886629][T17410] syz.6.3632: attempt to access beyond end of device [ 611.886629][T17410] loop6: rw=2049, sector=138, nr_sectors = 32 limit=128 [ 611.901209][T17410] syz.6.3632: attempt to access beyond end of device [ 611.901209][T17410] loop6: rw=2049, sector=186, nr_sectors = 64 limit=128 [ 611.976577][T17409] syz.6.3632: attempt to access beyond end of device [ 611.976577][T17409] loop6: rw=524288, sector=138, nr_sectors = 32 limit=128 [ 611.990474][T17409] syz.6.3632: attempt to access beyond end of device [ 611.990474][T17409] loop6: rw=524288, sector=186, nr_sectors = 64 limit=128 [ 612.005224][T17409] syz.6.3632: attempt to access beyond end of device [ 612.005224][T17409] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 612.019281][T17409] syz.6.3632: attempt to access beyond end of device [ 612.019281][T17409] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 612.035469][T17409] syz.6.3632: attempt to access beyond end of device [ 612.035469][T17409] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 612.049739][T17408] syz.6.3632: attempt to access beyond end of device [ 612.049739][T17408] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 612.063674][T17409] syz.6.3632: attempt to access beyond end of device [ 612.063674][T17409] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 612.077583][T17408] syz.6.3632: attempt to access beyond end of device [ 612.077583][T17408] loop6: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 612.339667][T17413] tipc: Can't bind to reserved service type 0 [ 612.353037][T17413] netlink: 'syz.6.3633': attribute type 21 has an invalid length. [ 612.362911][T17413] __nla_validate_parse: 14 callbacks suppressed [ 612.362938][T17413] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3633'. [ 612.387189][T17413] netlink: 'syz.6.3633': attribute type 5 has an invalid length. [ 612.395230][T17413] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3633'. [ 612.463729][T17418] loop0: detected capacity change from 0 to 512 [ 612.473455][T17418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 612.480987][T17418] EXT4-fs: Ignoring removed mblk_io_submit option [ 612.503019][T17418] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 612.514000][T17418] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 612.522662][T17418] EXT4-fs (loop0): 1 truncate cleaned up [ 612.529025][T17418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.703453][T17422] syzkaller0: entered promiscuous mode [ 612.709152][T17422] syzkaller0: entered allmulticast mode [ 612.848066][T14134] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.970179][T17438] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 612.978683][T17438] FAULT_INJECTION: forcing a failure. [ 612.978683][T17438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.993038][T17438] CPU: 1 UID: 0 PID: 17438 Comm: syz.3.3642 Tainted: G W syzkaller #0 PREEMPT(full) [ 612.993066][T17438] Tainted: [W]=WARN [ 612.993072][T17438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.993117][T17438] Call Trace: [ 612.993123][T17438] [ 612.993129][T17438] __dump_stack+0x1d/0x30 [ 612.993153][T17438] dump_stack_lvl+0x95/0xd0 [ 612.993173][T17438] dump_stack+0x15/0x1b [ 612.993261][T17438] should_fail_ex+0x263/0x280 [ 612.993286][T17438] should_fail+0xb/0x20 [ 612.993307][T17438] should_fail_usercopy+0x1a/0x20 [ 612.993382][T17438] _copy_from_user+0x1c/0xb0 [ 612.993474][T17438] ___sys_sendmsg+0xc1/0x1e0 [ 612.993518][T17438] __x64_sys_sendmsg+0xd4/0x160 [ 612.993628][T17438] x64_sys_call+0x194c/0x3020 [ 612.993656][T17438] do_syscall_64+0x12c/0x370 [ 612.993683][T17438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.993806][T17438] RIP: 0033:0x7f88ab0ac799 [ 612.993824][T17438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.993847][T17438] RSP: 002b:00007f88a9b07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.993866][T17438] RAX: ffffffffffffffda RBX: 00007f88ab325fa0 RCX: 00007f88ab0ac799 [ 612.993880][T17438] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000005 [ 612.993913][T17438] RBP: 00007f88a9b07090 R08: 0000000000000000 R09: 0000000000000000 [ 612.993927][T17438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.993938][T17438] R13: 00007f88ab326038 R14: 00007f88ab325fa0 R15: 00007fff7bd44608 [ 612.993955][T17438] [ 613.323115][T17379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.504111][T17447] netlink: 'syz.6.3646': attribute type 1 has an invalid length. [ 613.512012][T17447] netlink: 'syz.6.3646': attribute type 2 has an invalid length. [ 613.643429][T17449] loop5: detected capacity change from 0 to 1764 [ 613.699986][T17453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3648'. [ 613.964573][T17462] loop6: detected capacity change from 0 to 512 [ 614.012197][T17462] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 614.062468][T17459] loop3: detected capacity change from 0 to 512 [ 614.079386][T17462] EXT4-fs (loop6): 1 truncate cleaned up [ 614.120050][T17462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.190032][T17459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 614.435624][T17459] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3650: bad orphan inode 131083 [ 614.543087][T17459] loop3: lost filesystem error report for type 5 error -117 [ 614.552838][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 614.566598][ C0] EXT4-fs (loop3): initial error at time 1774678748: ext4_orphan_get:1417 [ 614.575138][ C0] EXT4-fs (loop3): last error at time 1774678748: ext4_orphan_get:1417 [ 614.586890][T17459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.870808][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.982473][T17480] loop7: detected capacity change from 0 to 512 [ 615.019886][T17480] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 615.056314][T17480] EXT4-fs (loop7): 1 truncate cleaned up [ 615.105462][T17480] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.293285][T17493] netlink: 'syz.6.3661': attribute type 10 has an invalid length. [ 615.343821][T17493] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 615.600249][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.853026][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 615.853044][ T28] audit: type=1400 audit(1774678749.535:3485): avc: denied { write } for pid=17501 comm="syz.7.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 616.074080][T17507] FAULT_INJECTION: forcing a failure. [ 616.074080][T17507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.087684][T17507] CPU: 1 UID: 0 PID: 17507 Comm: syz.0.3665 Tainted: G W syzkaller #0 PREEMPT(full) [ 616.087717][T17507] Tainted: [W]=WARN [ 616.087763][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 616.087777][T17507] Call Trace: [ 616.087786][T17507] [ 616.087796][T17507] __dump_stack+0x1d/0x30 [ 616.087854][T17507] dump_stack_lvl+0x95/0xd0 [ 616.087971][T17507] dump_stack+0x15/0x1b [ 616.087997][T17507] should_fail_ex+0x263/0x280 [ 616.088070][T17507] should_fail+0xb/0x20 [ 616.088097][T17507] should_fail_usercopy+0x1a/0x20 [ 616.088134][T17507] _copy_to_user+0x20/0xa0 [ 616.088184][T17507] simple_read_from_buffer+0xb5/0x130 [ 616.088211][T17507] proc_fail_nth_read+0x10e/0x150 [ 616.088248][T17507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.088282][T17507] vfs_read+0x1ab/0x7f0 [ 616.088324][T17507] ? __rcu_read_unlock+0x4e/0x70 [ 616.088353][T17507] ? __fget_files+0x184/0x1c0 [ 616.088414][T17507] ? mutex_lock+0x57/0x90 [ 616.088448][T17507] ksys_read+0xdc/0x1a0 [ 616.088471][T17507] __x64_sys_read+0x40/0x50 [ 616.088494][T17507] x64_sys_call+0x2886/0x3020 [ 616.088537][T17507] do_syscall_64+0x12c/0x370 [ 616.088572][T17507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.088671][T17507] RIP: 0033:0x7f34d362cfce [ 616.088687][T17507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 616.088762][T17507] RSP: 002b:00007f34d209dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 616.088788][T17507] RAX: ffffffffffffffda RBX: 00007f34d209e6c0 RCX: 00007f34d362cfce [ 616.088806][T17507] RDX: 000000000000000f RSI: 00007f34d209e0a0 RDI: 0000000000000004 [ 616.088923][T17507] RBP: 00007f34d209e090 R08: 0000000000000000 R09: 0000000000000000 [ 616.088936][T17507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.088949][T17507] R13: 00007f34d38e6128 R14: 00007f34d38e6090 R15: 00007ffccb3d6568 [ 616.088971][T17507] [ 617.392765][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.487656][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.545804][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.628948][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.750714][T17550] loop5: detected capacity change from 0 to 164 [ 617.819382][T17541] lo speed is unknown, defaulting to 1000 [ 617.841648][T17541] lo speed is unknown, defaulting to 1000 [ 618.074922][T17574] loop5: detected capacity change from 0 to 512 [ 618.085814][T17574] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 618.108221][ T12] bond0 (unregistering): Released all slaves [ 618.135464][T17578] FAULT_INJECTION: forcing a failure. [ 618.135464][T17578] name failslab, interval 1, probability 0, space 0, times 0 [ 618.148617][T17574] EXT4-fs (loop5): orphan file too big: 4294967295 [ 618.184252][T17574] EXT4-fs (loop5): mount failed [ 618.214853][T17578] CPU: 0 UID: 0 PID: 17578 Comm: syz.7.3686 Tainted: G W syzkaller #0 PREEMPT(full) [ 618.214895][T17578] Tainted: [W]=WARN [ 618.214903][T17578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.214944][T17578] Call Trace: [ 618.214950][T17578] [ 618.214957][T17578] __dump_stack+0x1d/0x30 [ 618.214991][T17578] dump_stack_lvl+0x95/0xd0 [ 618.215019][T17578] dump_stack+0x15/0x1b [ 618.215096][T17578] should_fail_ex+0x263/0x280 [ 618.215132][T17578] should_failslab+0x8c/0xb0 [ 618.215162][T17578] __kvmalloc_node_noprof+0x155/0x650 [ 618.215235][T17578] ? snd_seq_pool_init+0x57/0x200 [ 618.215267][T17578] snd_seq_pool_init+0x57/0x200 [ 618.215328][T17578] ? _raw_spin_unlock_irq+0x9/0x30 [ 618.215387][T17578] snd_seq_ioctl_set_client_pool+0x17f/0x310 [ 618.215415][T17578] snd_seq_ioctl+0x177/0x2f0 [ 618.215451][T17578] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 618.215475][T17578] __se_sys_ioctl+0xce/0x140 [ 618.215616][T17578] __x64_sys_ioctl+0x43/0x50 [ 618.215640][T17578] x64_sys_call+0x1563/0x3020 [ 618.215673][T17578] do_syscall_64+0x12c/0x370 [ 618.215744][T17578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.215772][T17578] RIP: 0033:0x7f7ede13c799 [ 618.215825][T17578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.215844][T17578] RSP: 002b:00007f7edcb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.215867][T17578] RAX: ffffffffffffffda RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 618.215883][T17578] RDX: 0000200000000040 RSI: 000000004058534c RDI: 0000000000000005 [ 618.215904][T17578] RBP: 00007f7edcb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 618.215916][T17578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.215928][T17578] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 618.215953][T17578] [ 618.486796][T17541] chnl_net:caif_netlink_parms(): no params data found [ 618.605814][T17541] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.612994][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.619194][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.620533][T17541] bridge_slave_0: entered allmulticast mode [ 618.655768][T17600] 9p: Bad value for 'rfdno' [ 618.668948][T17541] bridge_slave_0: entered promiscuous mode [ 618.719336][ T12] hsr_slave_0: left promiscuous mode [ 618.753315][ T12] hsr_slave_1: left promiscuous mode [ 618.765093][T17608] loop3: detected capacity change from 0 to 512 [ 618.784948][T17608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 618.789672][ T12] veth1_macvtap: left promiscuous mode [ 618.792260][T17608] EXT4-fs: Ignoring removed mblk_io_submit option [ 618.830299][ T12] veth0_macvtap: left promiscuous mode [ 618.836112][T17608] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 618.852911][T17608] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 618.861102][ T12] veth1_vlan: left promiscuous mode [ 618.871568][T17608] EXT4-fs (loop3): 1 truncate cleaned up [ 618.877508][ T12] veth0_vlan: left promiscuous mode [ 618.883547][T17608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.931296][T17629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17629 comm=syz.7.3696 [ 619.193419][T17638] loop7: detected capacity change from 0 to 512 [ 619.238359][T17638] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 619.258230][T17638] EXT4-fs (loop7): 1 truncate cleaned up [ 619.267701][T17638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.298832][T17642] loop5: detected capacity change from 0 to 512 [ 619.335026][T17642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 619.341685][T17642] EXT4-fs: Ignoring removed mblk_io_submit option [ 619.392897][T17620] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 619.413551][T17642] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 619.417744][T17620] EXT4-fs (loop3): Remounting filesystem read-only [ 619.453127][T17642] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 619.485431][T17642] EXT4-fs (loop5): 1 truncate cleaned up [ 619.491518][T17642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.564931][T17541] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.582273][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.589565][T17541] bridge_slave_1: entered allmulticast mode [ 619.606351][T17541] bridge_slave_1: entered promiscuous mode [ 619.665019][T17541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.683683][T17541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.695421][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.834223][T17541] team0: Port device team_slave_0 added [ 619.853618][T17541] team0: Port device team_slave_1 added [ 619.935319][T17541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.942328][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.001165][T17541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.128563][T17662] loop3: detected capacity change from 0 to 256 [ 620.188906][T17662] FAT-fs (loop3): Directory bread(block 64) failed [ 620.196668][T17662] FAT-fs (loop3): Directory bread(block 65) failed [ 620.205004][T17662] FAT-fs (loop3): Directory bread(block 66) failed [ 620.214172][T17662] FAT-fs (loop3): Directory bread(block 67) failed [ 620.221886][T17662] FAT-fs (loop3): Directory bread(block 68) failed [ 620.230274][T17662] FAT-fs (loop3): Directory bread(block 69) failed [ 620.237113][T17662] FAT-fs (loop3): Directory bread(block 70) failed [ 620.244338][T17662] FAT-fs (loop3): Directory bread(block 71) failed [ 620.251108][T17662] FAT-fs (loop3): Directory bread(block 72) failed [ 620.258175][T17662] FAT-fs (loop3): Directory bread(block 73) failed [ 620.275571][T17541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.432746][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.825912][T17634] syz.6.3697 (17634) used greatest stack depth: 7032 bytes left [ 620.853076][T17541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.960634][T17541] hsr_slave_0: entered promiscuous mode [ 621.034905][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.050938][T17541] hsr_slave_1: entered promiscuous mode [ 621.083283][T17541] debugfs: 'hsr0' already exists in 'hsr' [ 621.134877][T17541] Cannot create hsr debugfs directory [ 621.164563][ T28] audit: type=1400 audit(1774678754.865:3486): avc: denied { create } for pid=17672 comm="syz.7.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 621.407069][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.813685][T17695] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3707'. [ 621.823167][ T28] audit: type=1400 audit(1774678755.515:3487): avc: denied { shutdown } for pid=17689 comm="syz.7.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 621.886777][T17690] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3707'. [ 621.910664][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 622.181060][T17541] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 622.205776][T17541] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 622.230834][T17722] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.242875][T17541] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 622.266892][T17541] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 622.320503][T17739] loop7: detected capacity change from 0 to 2048 [ 622.331285][T17541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.376949][T17541] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.411296][T17746] loop5: detected capacity change from 0 to 512 [ 622.411501][ T9145] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.424699][ T9145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.454619][T17742] SELinux: failed to load policy [ 622.496125][T17541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.509750][T17746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 622.523254][T17541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.536519][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.543625][ T9145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.627954][T17541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.637263][T17746] EXT4-fs: Ignoring removed mblk_io_submit option [ 622.703748][T17762] IPVS: Error connecting to the multicast addr [ 622.728603][T17746] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 622.767366][T17746] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 622.806921][T17746] EXT4-fs (loop5): 1 truncate cleaned up [ 622.825707][T17746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.086754][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.108132][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3718'. [ 623.372099][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3720'. [ 623.450485][T17541] veth0_vlan: entered promiscuous mode [ 623.476125][T17541] veth1_vlan: entered promiscuous mode [ 623.540410][T17541] veth0_macvtap: entered promiscuous mode [ 623.595738][T17541] veth1_macvtap: entered promiscuous mode [ 623.654483][T17541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.684016][T17541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.717385][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.747818][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.765586][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.930374][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.124462][ T28] audit: type=1400 audit(1774678757.825:3488): avc: denied { nlmsg_read } for pid=17840 comm="syz.8.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 624.158789][T17843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1545 sclass=netlink_audit_socket pid=17843 comm=syz.8.3727 [ 624.184575][T17849] netlink: 'syz.7.3729': attribute type 8 has an invalid length. [ 624.193808][T17846] loop3: detected capacity change from 0 to 512 [ 624.200391][T17846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 624.208986][ T28] audit: type=1400 audit(1774678757.855:3489): avc: denied { accept } for pid=17840 comm="syz.8.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 624.221862][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3724'. [ 624.240554][T17846] EXT4-fs: Ignoring removed mblk_io_submit option [ 624.242052][T17852] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3729'. [ 624.267978][T17848] loop5: detected capacity change from 0 to 512 [ 624.280648][T17848] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 624.282931][T17852] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3729'. [ 624.302019][T17846] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 624.323743][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3724'. [ 624.328042][T17848] EXT4-fs (loop5): 1 truncate cleaned up [ 624.344048][T17846] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 624.362650][T17848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.433043][T17846] EXT4-fs (loop3): 1 truncate cleaned up [ 624.463447][T17846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.949685][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.121249][T17863] syz.7.3732 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 625.155596][T17914] loop3: detected capacity change from 0 to 512 [ 625.175806][T17914] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 625.223444][T17914] EXT4-fs (loop3): 1 truncate cleaned up [ 625.248595][T17863] CPU: 1 UID: 0 PID: 17863 Comm: syz.7.3732 Tainted: G W syzkaller #0 PREEMPT(full) [ 625.248640][T17863] Tainted: [W]=WARN [ 625.248649][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.248699][T17863] Call Trace: [ 625.248713][T17863] [ 625.248720][T17863] __dump_stack+0x1d/0x30 [ 625.248748][T17863] dump_stack_lvl+0x95/0xd0 [ 625.248780][T17863] dump_stack+0x15/0x1b [ 625.248864][T17863] dump_header+0x80/0x240 [ 625.248894][T17863] oom_kill_process+0x295/0x350 [ 625.248924][T17863] out_of_memory+0x97d/0xb80 [ 625.249032][T17863] try_charge_memcg+0x62e/0xa10 [ 625.249145][T17863] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 625.249190][T17863] __swap_cache_prepare_and_add+0x386/0x530 [ 625.249351][T17863] swap_cache_alloc_folio+0xa2/0x120 [ 625.249387][T17863] swap_cluster_readahead+0x26e/0x3d0 [ 625.249429][T17863] swapin_readahead+0xde/0x840 [ 625.249473][T17863] ? _raw_spin_unlock+0x9/0x30 [ 625.249505][T17863] ? swap_put_entries_cluster+0x385/0x3a0 [ 625.249547][T17863] ? swap_put_entries_cluster+0xd1/0x3a0 [ 625.249615][T17863] ? __rcu_read_unlock+0x4e/0x70 [ 625.249642][T17863] ? swap_cache_get_folio+0x26f/0x280 [ 625.249681][T17863] do_swap_page+0x30d/0x2220 [ 625.249744][T17863] ? css_rstat_updated+0xbb/0x280 [ 625.249772][T17863] ? __rcu_read_lock+0x36/0x50 [ 625.249798][T17863] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 625.249836][T17863] handle_mm_fault+0xb46/0x3020 [ 625.249946][T17863] ? vma_start_read+0x1c7/0x2c0 [ 625.249984][T17863] do_user_addr_fault+0x62f/0x1050 [ 625.250173][T17863] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 625.250204][T17863] ? trace_page_fault_user+0x1f/0xe0 [ 625.250243][T17863] exc_page_fault+0x62/0xa0 [ 625.250267][T17863] asm_exc_page_fault+0x26/0x30 [ 625.250292][T17863] RIP: 0033:0x7f7ede00a14c [ 625.250365][T17863] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 625.250387][T17863] RSP: 002b:00007ffc63d94750 EFLAGS: 00010202 [ 625.250407][T17863] RAX: 0000000000000000 RBX: 00007f7ede3b6090 RCX: 0000555558110808 [ 625.250425][T17863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.250515][T17863] RBP: 00007f7ede3b7da0 R08: 0000000000000000 R09: 0000000000000000 [ 625.250531][T17863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000098a4b [ 625.250545][T17863] R13: 00007f7ede3b609c R14: 00000000000987aa R15: 00007f7ede3b6090 [ 625.250565][T17863] [ 625.250573][T17863] memory: usage 220360kB, limit 307200kB, failcnt 532 [ 625.355196][T17914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.400290][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.525308][T17863] memory+swap: usage 135704kB, limit 9007199254740988kB, failcnt 0 [ 625.535391][T17863] kmem: usage 135112kB, limit 9007199254740988kB, failcnt 0 [ 625.542707][T17863] Memory cgroup stats for /syz7: [ 625.587052][T17863] cache 0 [ 625.635271][T17931] loop5: detected capacity change from 0 to 512 [ 625.642034][T17863] rss 4096 [ 625.645586][T17863] shmem 0 [ 625.648702][T17863] mapped_file 0 [ 625.652312][T17863] dirty 0 [ 625.678490][ T28] audit: type=1400 audit(1774678759.355:3490): avc: denied { getopt } for pid=17926 comm="syz.6.3740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 625.699321][T17931] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 625.712455][T17863] writeback 0 [ 625.826541][T17931] EXT4-fs (loop5): 1 truncate cleaned up [ 625.832617][T17931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.850455][T17863] workingset_refault_anon 159 [ 625.889864][T17863] workingset_refault_file 0 [ 625.894484][T17863] swap 364544 [ 625.897917][T17863] swapcached 9170944 [ 625.901830][T17863] pgpgin 108063 [ 625.905375][T17863] pgpgout 108061 [ 625.908941][T17863] pgfault 124476 [ 625.912507][T17863] pgmajfault 125 [ 625.926873][T17863] inactive_anon 8192 [ 625.935867][T17863] active_anon 0 [ 625.956024][T17863] inactive_file 0 [ 625.969868][T17863] active_file 0 [ 625.987914][T17863] unevictable 0 [ 625.995460][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.022845][T17863] hierarchical_memory_limit 314572800 [ 626.055687][T17863] hierarchical_memsw_limit 9223372036854771712 [ 626.073299][T17955] raw_sendmsg: syz.3.3743 forgot to set AF_INET. Fix it! [ 626.097153][T17863] total_cache 0 [ 626.100664][T17863] total_rss 4096 [ 626.111995][T17959] loop3: detected capacity change from 0 to 512 [ 626.152915][T17863] total_shmem 0 [ 626.156536][T17863] total_mapped_file 0 [ 626.160540][T17863] total_dirty 0 [ 626.188837][T17863] total_writeback 0 [ 626.224848][T17863] total_workingset_refault_anon 159 [ 626.230077][T17863] total_workingset_refault_file 0 [ 626.282885][T17863] total_swap 364544 [ 626.300014][T17863] total_swapcached 9170944 [ 626.335799][T17980] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 626.349054][T17863] total_pgpgin 108063 [ 626.402701][T17863] total_pgpgout 108061 [ 626.413231][T17863] total_pgfault 124476 [ 626.422201][T17863] total_pgmajfault 125 [ 626.443889][T17985] loop8: detected capacity change from 0 to 1024 [ 626.475460][T17985] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.489578][T17863] total_inactive_anon 8192 [ 626.507145][T17991] netlink: 'syz.3.3749': attribute type 29 has an invalid length. [ 626.533460][T17541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.543291][T17863] total_active_anon 0 [ 626.547312][T17863] total_inactive_file 0 [ 626.551483][T17863] total_active_file 0 [ 626.564156][T17992] netlink: 'syz.3.3749': attribute type 29 has an invalid length. [ 626.566175][T17863] total_unevictable 0 [ 626.579844][T17991] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3749'. [ 626.629400][T17863] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3732,pid=17863,uid=0 [ 626.631365][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.672901][T17863] Memory cgroup out of memory: Killed process 17863 (syz.7.3732) total-vm:94164kB, anon-rss:1224kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 626.753138][T17992] ------------[ cut here ]------------ [ 626.758725][T17992] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 626.771270][T17992] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.3.3749/17992 [ 626.781640][T17992] Modules linked in: [ 626.785624][T17992] CPU: 0 UID: 0 PID: 17992 Comm: syz.3.3749 Tainted: G W syzkaller #0 PREEMPT(full) [ 626.787354][ T28] audit: type=1400 audit(1774678760.485:3491): avc: denied { listen } for pid=18001 comm="syz.6.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 626.796654][T17992] Tainted: [W]=WARN [ 626.796665][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 626.796678][T17992] RIP: 0010:u32_change+0x1463/0x14d0 [ 626.836683][T17992] Code: 31 ed e9 96 fe ff ff e8 0b fc c1 fc 48 8d 3d 64 33 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 c8 64 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 626.856458][T17992] RSP: 0018:ffffc900013cb5e0 EFLAGS: 00010283 [ 626.862569][T17992] RAX: ffffffff849764e5 RBX: ffffc900013cb7f0 RCX: 0000000000000010 [ 626.870620][T17992] RDX: ffffffff867e64c8 RSI: 0000000000000020 RDI: ffffffff87209850 [ 626.878666][T17992] RBP: ffffc900013cb6e8 R08: 000188810a4cbd87 R09: 0000000000000000 [ 626.886787][T17992] R10: ffff88810a4cbd00 R11: 0000000000000002 R12: ffff88810b0d5d00 [ 626.894980][T17992] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88810b0d5dc0 [ 626.903076][T17992] FS: 00007f88a9ae66c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 626.912066][T17992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.918867][T17992] CR2: 00007efd38136000 CR3: 000000015ad98000 CR4: 00000000003506f0 [ 626.927011][T17992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 626.927294][T18004] loop8: detected capacity change from 0 to 512 [ 626.935112][T17992] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 626.935146][T17992] Call Trace: [ 626.935156][T17992] [ 626.935238][T17992] tc_new_tfilter+0xfc0/0x1200 [ 626.960729][T17992] ? ns_capable+0x7c/0xb0 [ 626.965217][T17992] ? __pfx_tc_new_tfilter+0x10/0x10 [ 626.970479][T17992] rtnetlink_rcv_msg+0x64b/0x720 [ 626.975560][T17992] netlink_rcv_skb+0x123/0x220 [ 626.980430][T17992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 626.986105][T17992] rtnetlink_rcv+0x1c/0x30 [ 626.990552][T17992] netlink_unicast+0x5c0/0x690 [ 626.995632][T17992] netlink_sendmsg+0x5c8/0x6f0 [ 627.000477][T17992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.005701][T18004] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 627.006016][T17992] ____sys_sendmsg+0x563/0x5b0 [ 627.018888][T17992] ___sys_sendmsg+0x195/0x1e0 [ 627.023712][T17992] ? perf_trace_run_bpf_submit+0xac/0x110 [ 627.029536][T17992] __sys_sendmmsg+0x185/0x320 [ 627.034461][T17992] __x64_sys_sendmmsg+0x57/0x70 [ 627.039370][T17992] x64_sys_call+0x27aa/0x3020 [ 627.044229][T17992] do_syscall_64+0x12c/0x370 [ 627.049001][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.054982][T17992] RIP: 0033:0x7f88ab0ac799 [ 627.059504][T17992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.079207][T17992] RSP: 002b:00007f88a9ae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 627.087795][T17992] RAX: ffffffffffffffda RBX: 00007f88ab326090 RCX: 00007f88ab0ac799 [ 627.095835][T17992] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 627.103865][T17992] RBP: 00007f88ab142c99 R08: 0000000000000000 R09: 0000000000000000 [ 627.111891][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.115148][T18004] EXT4-fs (loop8): 1 truncate cleaned up [ 627.119938][T17992] R13: 00007f88ab326128 R14: 00007f88ab326090 R15: 00007fff7bd44608 [ 627.133684][T17992] [ 627.136753][T17992] ---[ end trace 0000000000000000 ]--- [ 627.156807][T18004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.547479][T18026] loop3: detected capacity change from 0 to 2048 [ 627.580025][T18026] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 627.635844][T18026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.745495][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.754879][T18039] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3756'. [ 627.784132][T17541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.820723][T18045] loop8: detected capacity change from 0 to 1024 [ 627.964531][T18045] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.055206][T17541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.087626][ T28] audit: type=1400 audit(1774678761.785:3492): avc: denied { write } for pid=18068 comm="syz.6.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 628.107854][T18069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18069 comm=syz.6.3765 [ 628.127828][T18056] loop3: detected capacity change from 0 to 8192 [ 628.193607][T18056] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 628.233278][T18056] FAT-fs (loop3): Filesystem has been set read-only [ 628.574310][T18098] 9p: Bad value for 'wfdno' [ 628.580037][T18070] syz.7.3766 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 628.663007][T18070] CPU: 0 UID: 0 PID: 18070 Comm: syz.7.3766 Tainted: G W syzkaller #0 PREEMPT(full) [ 628.663081][T18070] Tainted: [W]=WARN [ 628.663089][T18070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 628.663102][T18070] Call Trace: [ 628.663110][T18070] [ 628.663120][T18070] __dump_stack+0x1d/0x30 [ 628.663162][T18070] dump_stack_lvl+0x95/0xd0 [ 628.663190][T18070] dump_stack+0x15/0x1b [ 628.663215][T18070] dump_header+0x80/0x240 [ 628.663246][T18070] oom_kill_process+0x295/0x350 [ 628.663272][T18070] out_of_memory+0x97d/0xb80 [ 628.663361][T18070] try_charge_memcg+0x62e/0xa10 [ 628.663407][T18070] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 628.663447][T18070] __swap_cache_prepare_and_add+0x386/0x530 [ 628.663564][T18070] swap_cache_alloc_folio+0xa2/0x120 [ 628.663629][T18070] swap_cluster_readahead+0x26e/0x3d0 [ 628.663674][T18070] swapin_readahead+0xde/0x840 [ 628.663868][T18070] ? _raw_spin_unlock+0x9/0x30 [ 628.663896][T18070] ? swap_put_entries_cluster+0x385/0x3a0 [ 628.664018][T18070] ? swap_put_entries_cluster+0xd1/0x3a0 [ 628.664097][T18070] ? __rcu_read_unlock+0x4e/0x70 [ 628.664124][T18070] ? swap_cache_get_folio+0x26f/0x280 [ 628.664157][T18070] do_swap_page+0x30d/0x2220 [ 628.664218][T18070] ? css_rstat_updated+0xbb/0x280 [ 628.664241][T18070] ? __rcu_read_lock+0x36/0x50 [ 628.664264][T18070] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 628.664296][T18070] handle_mm_fault+0xb46/0x3020 [ 628.664400][T18070] ? vma_start_read+0x1c7/0x2c0 [ 628.664441][T18070] do_user_addr_fault+0x62f/0x1050 [ 628.664486][T18070] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 628.664577][T18070] ? trace_page_fault_user+0x1f/0xe0 [ 628.664610][T18070] exc_page_fault+0x62/0xa0 [ 628.664631][T18070] asm_exc_page_fault+0x26/0x30 [ 628.664715][T18070] RIP: 0033:0x7f7ede00a14c [ 628.664781][T18070] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 628.664800][T18070] RSP: 002b:00007ffc63d94750 EFLAGS: 00010202 [ 628.664820][T18070] RAX: 0000000000000000 RBX: 00007f7ede3b6090 RCX: 0000555558110808 [ 628.664836][T18070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.664851][T18070] RBP: 00007f7ede3b7da0 R08: 0000000000000000 R09: 0000000000000000 [ 628.664867][T18070] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000998ee [ 628.664888][T18070] R13: 00007f7ede3b609c R14: 0000000000099619 R15: 00007f7ede3b6090 [ 628.664912][T18070] [ 628.807197][T18070] memory: usage 245928kB, limit 307200kB, failcnt 741 [ 629.022850][T18070] memory+swap: usage 196448kB, limit 9007199254740988kB, failcnt 0 [ 629.053231][T18103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 629.091830][T18103] EXT4-fs: Ignoring removed mblk_io_submit option [ 629.098794][T18070] kmem: usage 192144kB, limit 9007199254740988kB, failcnt 0 [ 629.112858][T18070] Memory cgroup stats for /syz7: [ 629.113037][T18070] cache 0 [ 629.113047][T18070] rss 0 [ 629.113120][T18070] shmem 0 [ 629.113152][T18070] mapped_file 0 [ 629.113161][T18070] dirty 0 [ 629.113198][T18070] writeback 0 [ 629.113205][T18070] workingset_refault_anon 203 [ 629.113241][T18070] workingset_refault_file 0 [ 629.113249][T18070] swap 368640 [ 629.113258][T18070] swapcached 9302016 [ 629.113268][T18070] pgpgin 108252 [ 629.113277][T18070] pgpgout 108251 [ 629.113285][T18070] pgfault 124851 [ 629.113294][T18070] pgmajfault 153 [ 629.113303][T18070] inactive_anon 0 [ 629.113311][T18070] active_anon 4096 [ 629.113321][T18070] inactive_file 0 [ 629.113329][T18070] active_file 0 [ 629.113338][T18070] unevictable 0 [ 629.113355][T18070] hierarchical_memory_limit 314572800 [ 629.113363][T18070] hierarchical_memsw_limit 9223372036854771712 [ 629.113372][T18070] total_cache 0 [ 629.113421][T18070] total_rss 0 [ 629.113427][T18070] total_shmem 0 [ 629.113434][T18070] total_mapped_file 0 [ 629.113463][T18070] total_dirty 0 [ 629.113469][T18070] total_writeback 0 [ 629.113478][T18070] total_workingset_refault_anon 203 [ 629.113489][T18070] total_workingset_refault_file 0 [ 629.113499][T18070] total_swap 368640 [ 629.113508][T18070] total_swapcached 9302016 [ 629.113518][T18070] total_pgpgin 108252 [ 629.113527][T18070] total_pgpgout 108251 [ 629.113537][T18070] total_pgfault 124851 [ 629.113546][T18070] total_pgmajfault 153 [ 629.113628][T18070] total_inactive_anon 0 [ 629.113639][T18070] total_active_anon 4096 [ 629.113649][T18070] total_inactive_file 0 [ 629.113658][T18070] total_active_file 0 [ 629.113668][T18070] total_unevictable 0 [ 629.113678][T18070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3766,pid=18070,uid=0 [ 629.113866][T18070] Memory cgroup out of memory: Killed process 18070 (syz.7.3766) total-vm:94164kB, anon-rss:1224kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 629.194315][T18103] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 629.194364][T18103] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 629.194979][T18103] EXT4-fs (loop8): 1 truncate cleaned up [ 629.195593][T18103] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.317876][T18109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3775'. [ 629.844187][T17541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.936734][T18131] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3781'. [ 629.949811][T18109] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 629.972455][T18128] set_capacity_and_notify: 1 callbacks suppressed [ 629.972469][T18128] loop8: detected capacity change from 0 to 512 [ 629.991966][T18109] bond1 (unregistering): Released all slaves [ 630.006869][T18133] xt_TCPMSS: Only works on TCP SYN packets [ 630.049825][T18128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 630.190976][T18138] FAULT_INJECTION: forcing a failure. [ 630.190976][T18138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.205007][T18138] CPU: 0 UID: 0 PID: 18138 Comm: syz.7.3782 Tainted: G W syzkaller #0 PREEMPT(full) [ 630.205082][T18138] Tainted: [W]=WARN [ 630.205090][T18138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.205106][T18138] Call Trace: [ 630.205179][T18138] [ 630.205189][T18138] __dump_stack+0x1d/0x30 [ 630.205221][T18138] dump_stack_lvl+0x95/0xd0 [ 630.205323][T18138] dump_stack+0x15/0x1b [ 630.205503][T18138] should_fail_ex+0x263/0x280 [ 630.205613][T18138] should_fail+0xb/0x20 [ 630.205664][T18138] should_fail_usercopy+0x1a/0x20 [ 630.205694][T18138] _copy_from_user+0x1c/0xb0 [ 630.205723][T18138] sctp_setsockopt+0x164/0xea0 [ 630.205774][T18138] sock_common_setsockopt+0x69/0x80 [ 630.205807][T18138] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 630.205835][T18138] __sys_setsockopt+0x184/0x200 [ 630.205873][T18138] __x64_sys_setsockopt+0x64/0x80 [ 630.205913][T18138] x64_sys_call+0x2327/0x3020 [ 630.205942][T18138] do_syscall_64+0x12c/0x370 [ 630.205990][T18138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.206078][T18138] RIP: 0033:0x7f7ede13c799 [ 630.206092][T18138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.206110][T18138] RSP: 002b:00007f7edcb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 630.206133][T18138] RAX: ffffffffffffffda RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 630.206196][T18138] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000003 [ 630.206208][T18138] RBP: 00007f7edcb8f090 R08: 0000000000000010 R09: 0000000000000000 [ 630.206234][T18138] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 630.206248][T18138] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 630.206269][T18138] [ 630.398455][T18128] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 630.446908][T18128] smc: net device gretap0 erased user defined pnetid SYZ0 [ 630.483465][T18144] loop5: detected capacity change from 0 to 128 [ 630.526685][T17541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.652656][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 630.684425][T18153] bio_check_eod: 332 callbacks suppressed [ 630.684443][T18153] syz.5.3785: attempt to access beyond end of device [ 630.684443][T18153] loop5: rw=2049, sector=138, nr_sectors = 32 limit=128 [ 630.713808][T18151] loop7: detected capacity change from 0 to 512 [ 630.720718][T18151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 630.745137][T18155] futex_wake_op: syz.6.3787 tries to shift op by 32; fix this program [ 630.756838][T18151] EXT4-fs: Ignoring removed mblk_io_submit option [ 630.841922][T18151] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 630.912332][T18151] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 630.971699][T18153] syz.5.3785: attempt to access beyond end of device [ 630.971699][T18153] loop5: rw=2049, sector=186, nr_sectors = 64 limit=128 [ 631.058673][T18151] EXT4-fs (loop7): 1 truncate cleaned up [ 631.100293][T18151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.206665][T18144] syz.5.3785: attempt to access beyond end of device [ 631.206665][T18144] loop5: rw=524288, sector=138, nr_sectors = 32 limit=128 [ 631.289466][T18144] syz.5.3785: attempt to access beyond end of device [ 631.289466][T18144] loop5: rw=524288, sector=186, nr_sectors = 64 limit=128 [ 631.420286][T18143] syz.5.3785: attempt to access beyond end of device [ 631.420286][T18143] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 631.539190][T18144] syz.5.3785: attempt to access beyond end of device [ 631.539190][T18144] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 631.663712][T18143] syz.5.3785: attempt to access beyond end of device [ 631.663712][T18143] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 631.696785][T18144] syz.5.3785: attempt to access beyond end of device [ 631.696785][T18144] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 631.746880][T18143] syz.5.3785: attempt to access beyond end of device [ 631.746880][T18143] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 631.781095][T18144] syz.5.3785: attempt to access beyond end of device [ 631.781095][T18144] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 632.089336][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3792'. [ 632.150252][T14380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.160483][T18173] syzkaller1: entered promiscuous mode [ 632.169590][T18173] syzkaller1: entered allmulticast mode [ 632.311777][T18175] netlink: 'syz.5.3794': attribute type 2 has an invalid length. [ 632.328248][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3794'. [ 632.576280][T18184] SET target dimension over the limit! [ 632.662242][T18177] loop5: detected capacity change from 0 to 512 [ 632.669045][T18177] EXT4-fs: Ignoring removed nobh option [ 632.709945][T18177] EXT4-fs (loop5): 1 orphan inode deleted [ 632.716553][T18177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.785681][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.836606][T18200] loop3: detected capacity change from 0 to 512 [ 632.845278][T18200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 632.852115][T18200] EXT4-fs: Ignoring removed mblk_io_submit option [ 632.866251][T18202] loop5: detected capacity change from 0 to 1024 [ 632.878362][T18200] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 632.891766][T18200] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 632.900582][T18200] EXT4-fs (loop3): 1 truncate cleaned up [ 632.906708][T18200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.975046][T18209] netlink: 'syz.6.3803': attribute type 36 has an invalid length. [ 632.990379][T18209] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 633.000290][T18209] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 633.020228][T18209] netlink: 'syz.6.3803': attribute type 10 has an invalid length. [ 633.028527][T18209] macvlan1: entered allmulticast mode [ 633.037458][T18209] veth1_vlan: entered allmulticast mode [ 633.049701][T18209] team0: Port device macvlan1 added [ 633.352060][ T28] audit: type=1400 audit(1774678767.045:3493): avc: denied { create } for pid=18203 comm="syz.7.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 633.521736][T18202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.569791][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.629638][T18212] syz.7.3805 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 633.693224][T18212] CPU: 1 UID: 0 PID: 18212 Comm: syz.7.3805 Tainted: G W syzkaller #0 PREEMPT(full) [ 633.693356][T18212] Tainted: [W]=WARN [ 633.693366][T18212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.693382][T18212] Call Trace: [ 633.693390][T18212] [ 633.693399][T18212] __dump_stack+0x1d/0x30 [ 633.693432][T18212] dump_stack_lvl+0x95/0xd0 [ 633.693532][T18212] dump_stack+0x15/0x1b [ 633.693560][T18212] dump_header+0x80/0x240 [ 633.693588][T18212] oom_kill_process+0x295/0x350 [ 633.693615][T18212] out_of_memory+0x97d/0xb80 [ 633.693642][T18212] try_charge_memcg+0x62e/0xa10 [ 633.693733][T18212] obj_cgroup_charge_pages+0x23/0xc0 [ 633.693767][T18212] __memcg_kmem_charge_page+0x9e/0x170 [ 633.693804][T18212] __alloc_frozen_pages_noprof+0x18a/0x360 [ 633.693898][T18212] alloc_pages_mpol+0xb3/0x260 [ 633.693980][T18212] alloc_pages_noprof+0x8f/0x130 [ 633.694031][T18212] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 633.694080][T18212] __kvmalloc_node_noprof+0x3d4/0x650 [ 633.694146][T18212] ? futex_hash_allocate+0x190/0x9d0 [ 633.694180][T18212] ? futex_hash_allocate+0x190/0x9d0 [ 633.694216][T18212] futex_hash_allocate+0x190/0x9d0 [ 633.694252][T18212] ? cap_task_prctl+0x13f/0x6e0 [ 633.694286][T18212] futex_hash_prctl+0xd8/0xf0 [ 633.694329][T18212] __se_sys_prctl+0xa3d/0x13f0 [ 633.694444][T18212] __x64_sys_prctl+0x67/0x80 [ 633.694477][T18212] x64_sys_call+0x2533/0x3020 [ 633.694516][T18212] do_syscall_64+0x12c/0x370 [ 633.694622][T18212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.694669][T18212] RIP: 0033:0x7f7ede13c799 [ 633.694690][T18212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.694716][T18212] RSP: 002b:00007f7edcb6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 633.694819][T18212] RAX: ffffffffffffffda RBX: 00007f7ede3b6090 RCX: 00007f7ede13c799 [ 633.694837][T18212] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 633.694853][T18212] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 633.694869][T18212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.694903][T18212] R13: 00007f7ede3b6128 R14: 00007f7ede3b6090 R15: 00007ffc63d945e8 [ 633.694927][T18212] [ 633.700828][T18212] memory: usage 253120kB, limit 307200kB, failcnt 956 [ 633.943685][T18222] netlink: 'syz.8.3808': attribute type 21 has an invalid length. [ 633.982435][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3809'. [ 633.984798][T18222] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3808'. [ 634.003108][T18229] SET target dimension over the limit! [ 634.011569][T18212] memory+swap: usage 194732kB, limit 9007199254740988kB, failcnt 0 [ 634.031166][T18226] ip6gretap0: entered promiscuous mode [ 634.042883][T18212] kmem: usage 179396kB, limit 9007199254740988kB, failcnt 0 [ 634.059052][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.074883][T18226] vlan0: entered promiscuous mode [ 634.082931][T18212] Memory cgroup stats for /syz7: [ 634.083387][T18212] cache 0 [ 634.125698][T18212] rss 4096 [ 634.128768][T18212] shmem 0 [ 634.131724][T18212] mapped_file 0 [ 634.147470][T18222] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3808'. [ 634.152871][T18212] dirty 0 [ 634.169512][T18212] writeback 0 [ 634.172859][T18212] workingset_refault_anon 251 [ 634.177696][T18212] workingset_refault_file 0 [ 634.182224][T18212] swap 380928 [ 634.202852][T18212] swapcached 9449472 [ 634.229678][T18212] pgpgin 111697 [ 634.233409][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3815'. [ 634.256941][T18212] pgpgout 111696 [ 634.260080][T18246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 634.270727][T18212] pgfault 129005 [ 634.306254][T18212] pgmajfault 182 [ 634.309833][T18212] inactive_anon 0 [ 634.340002][T18212] active_anon 4096 [ 634.344021][T18212] inactive_file 0 [ 634.347762][T18212] active_file 0 [ 634.351318][T18212] unevictable 0 [ 634.355204][T18212] hierarchical_memory_limit 314572800 [ 634.360595][T18212] hierarchical_memsw_limit 9223372036854771712 [ 634.367063][T18212] total_cache 0 [ 634.370540][T18212] total_rss 4096 [ 634.373051][T18252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3816'. [ 634.374759][T18212] total_shmem 0 [ 634.386561][T18212] total_mapped_file 0 [ 634.390595][T18212] total_dirty 0 [ 634.394090][T18212] total_writeback 0 [ 634.398175][T18212] total_workingset_refault_anon 251 [ 634.404936][T18212] total_workingset_refault_file 0 [ 634.409985][T18212] total_swap 380928 [ 634.413941][T18212] total_swapcached 9449472 [ 634.419480][T18250] lo speed is unknown, defaulting to 1000 [ 634.428694][T18212] total_pgpgin 111697 [ 634.432716][T18212] total_pgpgout 111696 [ 634.449759][T18212] total_pgfault 129005 [ 634.459315][T18250] lo speed is unknown, defaulting to 1000 [ 634.460198][T18212] total_pgmajfault 182 [ 634.473030][T18212] total_inactive_anon 0 [ 634.477574][T18212] total_active_anon 4096 [ 634.481876][T18212] total_inactive_file 0 [ 634.486644][T18212] total_active_file 0 [ 634.494935][T18261] loop5: detected capacity change from 0 to 512 [ 634.506416][T18261] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 634.535867][T18261] EXT4-fs (loop5): 1 truncate cleaned up [ 634.542251][T18261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.563033][T18212] total_unevictable 0 [ 634.577063][T18212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3805,pid=18203,uid=0 [ 634.612413][T18259] lo speed is unknown, defaulting to 1000 [ 634.618277][T18212] Memory cgroup out of memory: Killed process 18203 (syz.7.3805) total-vm:100580kB, anon-rss:1224kB, file-rss:26452kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 634.666462][T18261] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.3818: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 634.723333][T18259] lo speed is unknown, defaulting to 1000 [ 634.755024][T18261] EXT4-fs (loop5): Remounting filesystem read-only [ 634.773010][T18261] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.3818: Deleting old file: nlink 4, error=-117 [ 634.808028][T16763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.051385][T18286] loop8: detected capacity change from 0 to 128 [ 635.061389][T18286] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3822'. [ 635.161629][T18299] loop3: detected capacity change from 0 to 512 [ 635.174885][T18299] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 635.195036][T18299] EXT4-fs (loop3): 1 truncate cleaned up [ 635.206303][T18299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.381249][T18313] ================================================================== [ 635.389483][T18313] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 635.396897][T18313] [ 635.399256][T18313] read-write to 0xffff8881077fdfe0 of 8 bytes by task 18299 on cpu 1: [ 635.407455][T18313] xas_clear_mark+0x91/0x180 [ 635.412091][T18313] __folio_start_writeback+0x270/0x370 [ 635.417684][T18313] ext4_bio_write_folio+0x5ad/0x9f0 [ 635.422941][T18313] mpage_process_page_bufs+0x4a1/0x620 [ 635.428449][T18313] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 635.434291][T18313] ext4_do_writepages+0x70f/0x2840 [ 635.439450][T18313] ext4_writepages+0x18f/0x320 [ 635.444240][T18313] do_writepages+0x1c6/0x310 [ 635.448870][T18313] file_write_and_wait_range+0x178/0x2f0 [ 635.454538][T18313] generic_buffers_fsync_noflush+0x45/0x130 [ 635.460460][T18313] ext4_sync_file+0x1aa/0x6b0 [ 635.465161][T18313] vfs_fsync_range+0xc5/0xe0 [ 635.469781][T18313] ext4_buffered_write_iter+0x34f/0x3c0 [ 635.475366][T18313] ext4_file_write_iter+0x380/0xfa0 [ 635.480583][T18313] do_iter_readv_writev+0x4fd/0x5a0 [ 635.485814][T18313] vfs_writev+0x2e1/0x900 [ 635.490171][T18313] __se_sys_pwritev2+0xfc/0x1c0 [ 635.495043][T18313] __x64_sys_pwritev2+0x67/0x80 [ 635.499938][T18313] x64_sys_call+0xe07/0x3020 [ 635.504560][T18313] do_syscall_64+0x12c/0x370 [ 635.509196][T18313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.515126][T18313] [ 635.517460][T18313] read to 0xffff8881077fdfe0 of 8 bytes by task 18313 on cpu 0: [ 635.525098][T18313] xas_find_marked+0x213/0x620 [ 635.529890][T18313] filemap_get_folios_tag+0xfa/0x510 [ 635.535210][T18313] mpage_prepare_extent_to_map+0x328/0xc50 [ 635.541053][T18313] ext4_do_writepages+0x70f/0x2840 [ 635.546221][T18313] ext4_writepages+0x18f/0x320 [ 635.551025][T18313] do_writepages+0x1c6/0x310 [ 635.555660][T18313] filemap_write_and_wait_range+0x166/0x370 [ 635.561608][T18313] fiemap_prep+0x14d/0x170 [ 635.566043][T18313] ext4_get_es_cache+0x1af/0x4f0 [ 635.571013][T18313] ext4_ioctl+0x1766/0x31b0 [ 635.575640][T18313] __se_sys_ioctl+0xce/0x140 [ 635.580255][T18313] __x64_sys_ioctl+0x43/0x50 [ 635.584915][T18313] x64_sys_call+0x1563/0x3020 [ 635.589657][T18313] do_syscall_64+0x12c/0x370 [ 635.594273][T18313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.600194][T18313] [ 635.602539][T18313] value changed: 0x00ffffffffffff81 -> 0x00fffffffffffe01 [ 635.609666][T18313] [ 635.612012][T18313] Reported by Kernel Concurrency Sanitizer on: [ 635.618180][T18313] CPU: 0 UID: 0 PID: 18313 Comm: syz.3.3827 Tainted: G W syzkaller #0 PREEMPT(full) [ 635.629225][T18313] Tainted: [W]=WARN [ 635.633038][T18313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.643112][T18313] ================================================================== [ 636.710327][T14163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.836853][T18283] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 637.903903][T18283] CPU: 0 UID: 0 PID: 18283 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 637.903947][T18283] Tainted: [W]=WARN [ 637.903957][T18283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.904047][T18283] Call Trace: [ 637.904057][T18283] [ 637.904067][T18283] __dump_stack+0x1d/0x30 [ 637.904151][T18283] dump_stack_lvl+0x95/0xd0 [ 637.904181][T18283] dump_stack+0x15/0x1b [ 637.904208][T18283] dump_header+0x80/0x240 [ 637.904292][T18283] oom_kill_process+0x295/0x350 [ 637.904421][T18283] out_of_memory+0x97d/0xb80 [ 637.904453][T18283] try_charge_memcg+0x62e/0xa10 [ 637.904505][T18283] __mem_cgroup_charge+0x65/0x150 [ 637.904573][T18283] shmem_get_folio_gfp+0x47b/0xd60 [ 637.904618][T18283] shmem_write_begin+0xfc/0x1f0 [ 637.904680][T18283] generic_perform_write+0x183/0x490 [ 637.904716][T18283] ? current_time+0x188/0x240 [ 637.904814][T18283] shmem_file_write_iter+0xc5/0xf0 [ 637.904858][T18283] __kernel_write_iter+0x319/0x590 [ 637.904953][T18283] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 637.905052][T18283] dump_user_range+0xa7d/0xdb0 [ 637.905094][T18283] elf_core_dump+0x21a2/0x2330 [ 637.905140][T18283] ? 0xffffffffff600000 [ 637.905214][T18283] coredump_write+0xacc/0xdd0 [ 637.905261][T18283] vfs_coredump+0x26c7/0x3130 [ 637.905312][T18283] ? __memcg_slab_free_hook+0xc4/0x240 [ 637.905356][T18283] ? __sigqueue_free+0xf4/0x130 [ 637.905439][T18283] ? proc_coredump_connector+0x160/0x2b0 [ 637.905533][T18283] ? __sigqueue_free+0xf4/0x130 [ 637.905566][T18283] ? kmem_cache_free+0xc8/0x380 [ 637.905628][T18283] get_signal+0xd80/0xf60 [ 637.905681][T18283] arch_do_signal_or_restart+0x96/0x450 [ 637.905762][T18283] irqentry_exit+0xf7/0x520 [ 637.905884][T18283] asm_exc_page_fault+0x26/0x30 [ 637.906027][T18283] RIP: 0033:0x7f7ede13c7a1 [ 637.906050][T18283] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 637.906071][T18283] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 637.906088][T18283] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 637.906102][T18283] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 637.906160][T18283] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 637.906174][T18283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.906186][T18283] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 637.906208][T18283] [ 637.906215][T18283] memory: usage 307200kB, limit 307200kB, failcnt 11436 [ 638.161003][T18283] memory+swap: usage 370300kB, limit 9007199254740988kB, failcnt 0 [ 638.168983][T18283] kmem: usage 25096kB, limit 9007199254740988kB, failcnt 0 [ 638.176298][T18283] Memory cgroup stats for /syz7: [ 638.176513][T18283] cache 288755712 [ 638.185195][T18283] rss 102400 [ 638.188412][T18283] shmem 288755712 [ 638.192086][T18283] mapped_file 0 [ 638.195597][T18283] dirty 0 [ 638.198592][T18283] writeback 0 [ 638.201906][T18283] workingset_refault_anon 265 [ 638.206714][T18283] workingset_refault_file 0 [ 638.211237][T18283] swap 64614400 [ 638.214753][T18283] swapcached 73834496 [ 638.218744][T18283] pgpgin 197970 [ 638.222292][T18283] pgpgout 127444 [ 638.226380][T18283] pgfault 134593 [ 638.229978][T18283] pgmajfault 196 [ 638.233638][T18283] inactive_anon 224825344 [ 638.237967][T18283] active_anon 64049152 [ 638.242118][T18283] inactive_file 0 [ 638.245800][T18283] active_file 0 [ 638.249268][T18283] unevictable 0 [ 638.252713][T18283] hierarchical_memory_limit 314572800 [ 638.258189][T18283] hierarchical_memsw_limit 9223372036854771712 [ 638.264655][T18283] total_cache 288755712 [ 638.268837][T18283] total_rss 102400 [ 638.272565][T18283] total_shmem 288755712 [ 638.276898][T18283] total_mapped_file 0 [ 638.280924][T18283] total_dirty 0 [ 638.284563][T18283] total_writeback 0 [ 638.288384][T18283] total_workingset_refault_anon 265 [ 638.293804][T18283] total_workingset_refault_file 0 [ 638.298850][T18283] total_swap 64614400 [ 638.303066][T18283] total_swapcached 73834496 [ 638.307581][T18283] total_pgpgin 197970 [ 638.311595][T18283] total_pgpgout 127444 [ 638.315873][T18283] total_pgfault 134593 [ 638.319965][T18283] total_pgmajfault 196 [ 638.324215][T18283] total_inactive_anon 224825344 [ 638.329071][T18283] total_active_anon 64049152 [ 638.334531][T18283] total_inactive_file 0 [ 638.338782][T18283] total_active_file 0 [ 638.349196][T18283] total_unevictable 0 [ 638.353311][T18283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18291,uid=0 [ 638.368380][T18283] Memory cgroup out of memory: Killed process 18291 (syz.7.3821) total-vm:90328kB, anon-rss:1244kB, file-rss:38784kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 638.392131][T18308] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 638.455462][T18308] CPU: 1 UID: 0 PID: 18308 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 638.455491][T18308] Tainted: [W]=WARN [ 638.455498][T18308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.455531][T18308] Call Trace: [ 638.455539][T18308] [ 638.455549][T18308] __dump_stack+0x1d/0x30 [ 638.455626][T18308] dump_stack_lvl+0x95/0xd0 [ 638.455648][T18308] dump_stack+0x15/0x1b [ 638.455674][T18308] dump_header+0x80/0x240 [ 638.455774][T18308] oom_kill_process+0x295/0x350 [ 638.455799][T18308] out_of_memory+0x97d/0xb80 [ 638.455827][T18308] try_charge_memcg+0x62e/0xa10 [ 638.455876][T18308] __mem_cgroup_charge+0x65/0x150 [ 638.455903][T18308] shmem_get_folio_gfp+0x47b/0xd60 [ 638.455946][T18308] shmem_write_begin+0xfc/0x1f0 [ 638.455980][T18308] generic_perform_write+0x183/0x490 [ 638.456014][T18308] shmem_file_write_iter+0xc5/0xf0 [ 638.456074][T18308] __kernel_write_iter+0x319/0x590 [ 638.456110][T18308] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 638.456168][T18308] dump_user_range+0xa7d/0xdb0 [ 638.456200][T18308] elf_core_dump+0x21a2/0x2330 [ 638.456241][T18308] ? 0xffffffffff600000 [ 638.456266][T18308] coredump_write+0xacc/0xdd0 [ 638.456372][T18308] vfs_coredump+0x26c7/0x3130 [ 638.456404][T18308] ? __memcg_slab_free_hook+0xc4/0x240 [ 638.456455][T18308] ? __sigqueue_free+0xf4/0x130 [ 638.456481][T18308] ? proc_coredump_connector+0x160/0x2b0 [ 638.456552][T18308] ? __sigqueue_free+0xf4/0x130 [ 638.456579][T18308] ? kmem_cache_free+0xc8/0x380 [ 638.456657][T18308] get_signal+0xd80/0xf60 [ 638.456693][T18308] arch_do_signal_or_restart+0x96/0x450 [ 638.456727][T18308] irqentry_exit+0xf7/0x520 [ 638.456800][T18308] asm_exc_page_fault+0x26/0x30 [ 638.456843][T18308] RIP: 0033:0x7f7ede13c7a1 [ 638.456862][T18308] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 638.456878][T18308] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 638.456956][T18308] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 638.456968][T18308] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 638.456979][T18308] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 638.456991][T18308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.457004][T18308] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 638.457022][T18308] [ 638.457094][T18308] memory: usage 293460kB, limit 307200kB, failcnt 11720 [ 638.834142][T18308] memory+swap: usage 359520kB, limit 9007199254740988kB, failcnt 0 [ 638.874384][T18308] kmem: usage 24928kB, limit 9007199254740988kB, failcnt 0 [ 638.905618][T18308] Memory cgroup stats for /syz7: [ 638.905866][T18308] cache 282611712 [ 638.940506][T18308] rss 98304 [ 638.956248][T18308] shmem 282611712 [ 638.972875][T18308] mapped_file 0 [ 638.982891][T18308] dirty 0 [ 638.998135][T18308] writeback 393216 [ 639.012479][T18308] workingset_refault_anon 265 [ 639.038181][T18308] workingset_refault_file 0 [ 639.063047][T18308] swap 64151552 [ 639.079597][T18308] swapcached 80777216 [ 639.098335][T18308] pgpgin 201021 [ 639.101862][T18308] pgpgout 131883 [ 639.114845][T18308] pgfault 134783 [ 639.118416][T18308] pgmajfault 196 [ 639.122053][T18308] inactive_anon 84140032 [ 639.126336][T18308] active_anon 197947392 [ 639.130510][T18308] inactive_file 0 [ 639.134196][T18308] active_file 0 [ 639.137665][T18308] unevictable 0 [ 639.141158][T18308] hierarchical_memory_limit 314572800 [ 639.147532][T18308] hierarchical_memsw_limit 9223372036854771712 [ 639.154257][T18308] total_cache 282611712 [ 639.158430][T18308] total_rss 98304 [ 639.162118][T18308] total_shmem 282611712 [ 639.166343][T18308] total_mapped_file 0 [ 639.170360][T18308] total_dirty 0 [ 639.173872][T18308] total_writeback 393216 [ 639.178201][T18308] total_workingset_refault_anon 265 [ 639.184108][T18308] total_workingset_refault_file 0 [ 639.189143][T18308] total_swap 64151552 [ 639.193184][T18308] total_swapcached 80777216 [ 639.197858][T18308] total_pgpgin 201021 [ 639.201856][T18308] total_pgpgout 131883 [ 639.205993][T18308] total_pgfault 134783 [ 639.210114][T18308] total_pgmajfault 196 [ 639.216363][T18308] total_inactive_anon 84140032 [ 639.221140][T18308] total_active_anon 197947392 [ 639.232043][T18308] total_inactive_file 0 [ 639.236394][T18308] total_active_file 0 [ 639.240404][T18308] total_unevictable 0 [ 639.244431][T18308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18283,uid=0 [ 639.259272][T18308] Memory cgroup out of memory: Killed process 18283 (syz.7.3821) total-vm:90328kB, anon-rss:1244kB, file-rss:38976kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 639.295002][T18319] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 639.312841][T18319] CPU: 0 UID: 0 PID: 18319 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 639.312873][T18319] Tainted: [W]=WARN [ 639.312882][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 639.312922][T18319] Call Trace: [ 639.312932][T18319] [ 639.312943][T18319] __dump_stack+0x1d/0x30 [ 639.312999][T18319] dump_stack_lvl+0x95/0xd0 [ 639.313023][T18319] dump_stack+0x15/0x1b [ 639.313050][T18319] dump_header+0x80/0x240 [ 639.313081][T18319] oom_kill_process+0x295/0x350 [ 639.313113][T18319] out_of_memory+0x97d/0xb80 [ 639.313195][T18319] try_charge_memcg+0x62e/0xa10 [ 639.313241][T18319] __mem_cgroup_charge+0x65/0x150 [ 639.313356][T18319] shmem_get_folio_gfp+0x47b/0xd60 [ 639.313397][T18319] shmem_write_begin+0xfc/0x1f0 [ 639.313436][T18319] generic_perform_write+0x183/0x490 [ 639.313480][T18319] ? current_time+0x188/0x240 [ 639.313562][T18319] shmem_file_write_iter+0xc5/0xf0 [ 639.313600][T18319] __kernel_write_iter+0x319/0x590 [ 639.313644][T18319] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 639.313742][T18319] dump_user_range+0xa7d/0xdb0 [ 639.313779][T18319] elf_core_dump+0x21a2/0x2330 [ 639.313891][T18319] ? 0xffffffffff600000 [ 639.313923][T18319] coredump_write+0xacc/0xdd0 [ 639.313999][T18319] vfs_coredump+0x26c7/0x3130 [ 639.314045][T18319] ? __memcg_slab_free_hook+0xc4/0x240 [ 639.314087][T18319] ? __sigqueue_free+0xf4/0x130 [ 639.314161][T18319] ? proc_coredump_connector+0x160/0x2b0 [ 639.314191][T18319] ? __sigqueue_free+0xf4/0x130 [ 639.314213][T18319] ? kmem_cache_free+0xc8/0x380 [ 639.314240][T18319] get_signal+0xd80/0xf60 [ 639.314353][T18319] arch_do_signal_or_restart+0x96/0x450 [ 639.314385][T18319] irqentry_exit+0xf7/0x520 [ 639.314405][T18319] asm_exc_page_fault+0x26/0x30 [ 639.314424][T18319] RIP: 0033:0x7f7ede13c7a1 [ 639.314516][T18319] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 639.314533][T18319] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 639.314547][T18319] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 639.314560][T18319] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 639.314571][T18319] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 639.314583][T18319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.314671][T18319] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 639.314689][T18319] [ 639.314695][T18319] memory: usage 307200kB, limit 307200kB, failcnt 12272 [ 639.567382][T18319] memory+swap: usage 351876kB, limit 9007199254740988kB, failcnt 0 [ 639.575573][T18319] kmem: usage 24756kB, limit 9007199254740988kB, failcnt 0 [ 639.582779][T18319] Memory cgroup stats for /syz7: [ 639.583127][T18319] cache 279240704 [ 639.591718][T18319] rss 94208 [ 639.594973][T18319] shmem 279240704 [ 639.598644][T18319] mapped_file 0 [ 639.602094][T18319] dirty 0 [ 639.605255][T18319] writeback 0 [ 639.608538][T18319] workingset_refault_anon 265 [ 639.613272][T18319] workingset_refault_file 4 [ 639.617788][T18319] swap 55382016 [ 639.621307][T18319] swapcached 80777216 [ 639.625392][T18319] pgpgin 202710 [ 639.628877][T18319] pgpgout 134503 [ 639.632431][T18319] pgfault 134884 [ 639.636077][T18319] pgmajfault 199 [ 639.639775][T18319] inactive_anon 15773696 [ 639.644067][T18319] active_anon 263602176 [ 639.648233][T18319] inactive_file 0 [ 639.651868][T18319] active_file 0 [ 639.655445][T18319] unevictable 0 [ 639.658920][T18319] hierarchical_memory_limit 314572800 [ 639.664321][T18319] hierarchical_memsw_limit 9223372036854771712 [ 639.670517][T18319] total_cache 279240704 [ 639.674788][T18319] total_rss 94208 [ 639.678416][T18319] total_shmem 279240704 [ 639.682630][T18319] total_mapped_file 0 [ 639.686695][T18319] total_dirty 0 [ 639.690185][T18319] total_writeback 0 [ 639.694038][T18319] total_workingset_refault_anon 265 [ 639.699256][T18319] total_workingset_refault_file 4 [ 639.704396][T18319] total_swap 55382016 [ 639.708380][T18319] total_swapcached 80777216 [ 639.712971][T18319] total_pgpgin 202710 [ 639.717007][T18319] total_pgpgout 134503 [ 639.721104][T18319] total_pgfault 134884 [ 639.725225][T18319] total_pgmajfault 199 [ 639.729302][T18319] total_inactive_anon 15773696 [ 639.734094][T18319] total_active_anon 263602176 [ 639.739000][T18319] total_inactive_file 0 [ 639.743200][T18319] total_active_file 0 [ 639.747186][T18319] total_unevictable 0 [ 639.751297][T18319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18309,uid=0 [ 639.765999][T18319] Memory cgroup out of memory: Killed process 18309 (syz.7.3821) total-vm:90328kB, anon-rss:1244kB, file-rss:42616kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 639.921826][T18284] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 640.029134][T18284] CPU: 0 UID: 0 PID: 18284 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 640.029241][T18284] Tainted: [W]=WARN [ 640.029289][T18284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.029305][T18284] Call Trace: [ 640.029312][T18284] [ 640.029322][T18284] __dump_stack+0x1d/0x30 [ 640.029355][T18284] dump_stack_lvl+0x95/0xd0 [ 640.029404][T18284] dump_stack+0x15/0x1b [ 640.029426][T18284] dump_header+0x80/0x240 [ 640.029448][T18284] oom_kill_process+0x295/0x350 [ 640.029481][T18284] out_of_memory+0x97d/0xb80 [ 640.029547][T18284] try_charge_memcg+0x62e/0xa10 [ 640.029590][T18284] __mem_cgroup_charge+0x65/0x150 [ 640.029637][T18284] shmem_get_folio_gfp+0x47b/0xd60 [ 640.029701][T18284] shmem_write_begin+0xfc/0x1f0 [ 640.029732][T18284] generic_perform_write+0x183/0x490 [ 640.029859][T18284] ? current_time+0x188/0x240 [ 640.029895][T18284] shmem_file_write_iter+0xc5/0xf0 [ 640.029935][T18284] __kernel_write_iter+0x319/0x590 [ 640.030070][T18284] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 640.030241][T18284] dump_user_range+0xa7d/0xdb0 [ 640.030281][T18284] elf_core_dump+0x21a2/0x2330 [ 640.030333][T18284] ? 0xffffffffff600000 [ 640.030405][T18284] coredump_write+0xacc/0xdd0 [ 640.030447][T18284] vfs_coredump+0x26c7/0x3130 [ 640.030504][T18284] ? __memcg_slab_free_hook+0xc4/0x240 [ 640.030613][T18284] ? __sigqueue_free+0xf4/0x130 [ 640.030646][T18284] ? proc_coredump_connector+0x160/0x2b0 [ 640.030718][T18284] ? __sigqueue_free+0xf4/0x130 [ 640.030752][T18284] ? kmem_cache_free+0xc8/0x380 [ 640.030790][T18284] get_signal+0xd80/0xf60 [ 640.030876][T18284] arch_do_signal_or_restart+0x96/0x450 [ 640.030921][T18284] irqentry_exit+0xf7/0x520 [ 640.030949][T18284] asm_exc_page_fault+0x26/0x30 [ 640.031004][T18284] RIP: 0033:0x7f7ede13c7a1 [ 640.031024][T18284] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 640.031049][T18284] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 640.031071][T18284] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 640.031114][T18284] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 640.031128][T18284] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 640.031142][T18284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.031206][T18284] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 640.031232][T18284] [ 640.031241][T18284] memory: usage 303508kB, limit 307200kB, failcnt 14341 [ 640.284940][T18284] memory+swap: usage 364576kB, limit 9007199254740988kB, failcnt 0 [ 640.292981][T18284] kmem: usage 24684kB, limit 9007199254740988kB, failcnt 0 [ 640.300296][T18284] Memory cgroup stats for /syz7: [ 640.300670][T18284] cache 283852800 [ 640.309280][T18284] rss 86016 [ 640.312405][T18284] shmem 283852800 [ 640.316101][T18284] mapped_file 0 [ 640.319572][T18284] dirty 0 [ 640.322533][T18284] writeback 0 [ 640.325892][T18284] workingset_refault_anon 265 [ 640.330583][T18284] workingset_refault_file 5 [ 640.335199][T18284] swap 64630784 [ 640.338664][T18284] swapcached 93040640 [ 640.342785][T18284] pgpgin 209206 [ 640.346311][T18284] pgpgout 139864 [ 640.349872][T18284] pgfault 135292 [ 640.353529][T18284] pgmajfault 199 [ 640.357098][T18284] inactive_anon 275345408 [ 640.361475][T18284] active_anon 8638464 [ 640.365498][T18284] inactive_file 0 [ 640.369144][T18284] active_file 0 [ 640.372619][T18284] unevictable 0 [ 640.376151][T18284] hierarchical_memory_limit 314572800 [ 640.381545][T18284] hierarchical_memsw_limit 9223372036854771712 [ 640.392893][T18284] total_cache 283852800 [ 640.397139][T18284] total_rss 86016 [ 640.400831][T18284] total_shmem 283852800 [ 640.452891][T18284] total_mapped_file 0 [ 640.456923][T18284] total_dirty 0 [ 640.460473][T18284] total_writeback 0 [ 640.510630][T18284] total_workingset_refault_anon 265 [ 640.528271][T18284] total_workingset_refault_file 5 [ 640.546609][T18284] total_swap 64630784 [ 640.550676][T18284] total_swapcached 93040640 [ 640.555890][T18284] total_pgpgin 209206 [ 640.561353][T18284] total_pgpgout 139864 [ 640.565779][T18284] total_pgfault 135292 [ 640.569937][T18284] total_pgmajfault 199 [ 640.574247][T18284] total_inactive_anon 275345408 [ 640.579140][T18284] total_active_anon 8638464 [ 640.584064][T18284] total_inactive_file 0 [ 640.588236][T18284] total_active_file 0 [ 640.592298][T18284] total_unevictable 0 [ 640.596368][T18284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18282,uid=0 [ 640.612076][T18284] Memory cgroup out of memory: Killed process 18282 (syz.7.3821) total-vm:90328kB, anon-rss:1240kB, file-rss:37248kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 640.631170][T18326] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 640.648047][T18326] CPU: 1 UID: 0 PID: 18326 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 640.648087][T18326] Tainted: [W]=WARN [ 640.648094][T18326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.648107][T18326] Call Trace: [ 640.648114][T18326] [ 640.648122][T18326] __dump_stack+0x1d/0x30 [ 640.648229][T18326] dump_stack_lvl+0x95/0xd0 [ 640.648253][T18326] dump_stack+0x15/0x1b [ 640.648278][T18326] dump_header+0x80/0x240 [ 640.648337][T18326] oom_kill_process+0x295/0x350 [ 640.648367][T18326] out_of_memory+0x97d/0xb80 [ 640.648393][T18326] try_charge_memcg+0x62e/0xa10 [ 640.648434][T18326] __mem_cgroup_charge+0x65/0x150 [ 640.648539][T18326] shmem_get_folio_gfp+0x47b/0xd60 [ 640.648578][T18326] shmem_write_begin+0xfc/0x1f0 [ 640.648607][T18326] generic_perform_write+0x183/0x490 [ 640.648675][T18326] ? current_time+0x188/0x240 [ 640.648717][T18326] shmem_file_write_iter+0xc5/0xf0 [ 640.648803][T18326] __kernel_write_iter+0x319/0x590 [ 640.648840][T18326] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 640.648887][T18326] dump_user_range+0xa7d/0xdb0 [ 640.649001][T18326] elf_core_dump+0x21a2/0x2330 [ 640.649050][T18326] ? 0xffffffffff600000 [ 640.649088][T18326] coredump_write+0xacc/0xdd0 [ 640.649165][T18326] vfs_coredump+0x26c7/0x3130 [ 640.649212][T18326] ? __memcg_slab_free_hook+0xc4/0x240 [ 640.649253][T18326] ? __sigqueue_free+0xf4/0x130 [ 640.649285][T18326] ? proc_coredump_connector+0x160/0x2b0 [ 640.649360][T18326] ? __sigqueue_free+0xf4/0x130 [ 640.649419][T18326] ? kmem_cache_free+0xc8/0x380 [ 640.649455][T18326] get_signal+0xd80/0xf60 [ 640.649503][T18326] arch_do_signal_or_restart+0x96/0x450 [ 640.649591][T18326] irqentry_exit+0xf7/0x520 [ 640.649618][T18326] asm_exc_page_fault+0x26/0x30 [ 640.649645][T18326] RIP: 0033:0x7f7ede13c7a1 [ 640.649665][T18326] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 640.649689][T18326] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 640.649734][T18326] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 640.649790][T18326] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 640.649806][T18326] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 640.649822][T18326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.649838][T18326] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 640.649864][T18326] [ 640.649872][T18326] memory: usage 307200kB, limit 307200kB, failcnt 14718 [ 640.912854][T18326] memory+swap: usage 353600kB, limit 9007199254740988kB, failcnt 0 [ 640.920780][T18326] kmem: usage 24656kB, limit 9007199254740988kB, failcnt 0 [ 640.928132][T18326] Memory cgroup stats for /syz7: [ 640.928359][T18326] cache 278773760 [ 640.937016][T18326] rss 86016 [ 640.940174][T18326] shmem 278773760 [ 640.943849][T18326] mapped_file 0 [ 640.947347][T18326] dirty 0 [ 640.950292][T18326] writeback 0 [ 640.956674][T18326] workingset_refault_anon 265 [ 640.963823][T18326] workingset_refault_file 5 [ 640.968424][T18326] swap 57950208 [ 640.971888][T18326] swapcached 93040640 [ 640.975957][T18326] pgpgin 212947 [ 640.979433][T18326] pgpgout 144866 [ 640.983036][T18326] pgfault 135526 [ 640.986598][T18326] pgmajfault 199 [ 640.990146][T18326] inactive_anon 32411648 [ 640.994438][T18326] active_anon 246448128 [ 640.998621][T18326] inactive_file 0 [ 641.002290][T18326] active_file 0 [ 641.005813][T18326] unevictable 0 [ 641.009304][T18326] hierarchical_memory_limit 314572800 [ 641.014721][T18326] hierarchical_memsw_limit 9223372036854771712 [ 641.021005][T18326] total_cache 278773760 [ 641.025269][T18326] total_rss 86016 [ 641.029051][T18326] total_shmem 278773760 [ 641.033253][T18326] total_mapped_file 0 [ 641.037246][T18326] total_dirty 0 [ 641.040704][T18326] total_writeback 0 [ 641.044658][T18326] total_workingset_refault_anon 265 [ 641.049876][T18326] total_workingset_refault_file 5 [ 641.054952][T18326] total_swap 57950208 [ 641.058946][T18326] total_swapcached 93040640 [ 641.063644][T18326] total_pgpgin 212947 [ 641.067641][T18326] total_pgpgout 144866 [ 641.071709][T18326] total_pgfault 135526 [ 641.075864][T18326] total_pgmajfault 199 [ 641.079945][T18326] total_inactive_anon 32411648 [ 641.084783][T18326] total_active_anon 246448128 [ 641.089667][T18326] total_inactive_file 0 [ 641.094001][T18326] total_active_file 0 [ 641.098001][T18326] total_unevictable 0 [ 641.102011][T18326] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18319,uid=0 [ 641.116840][T18326] Memory cgroup out of memory: Killed process 18319 (syz.7.3821) total-vm:90328kB, anon-rss:1244kB, file-rss:40576kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 641.257448][T18293] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 641.327601][T18293] CPU: 0 UID: 0 PID: 18293 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 641.327640][T18293] Tainted: [W]=WARN [ 641.327648][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 641.327728][T18293] Call Trace: [ 641.327736][T18293] [ 641.327745][T18293] __dump_stack+0x1d/0x30 [ 641.327781][T18293] dump_stack_lvl+0x95/0xd0 [ 641.327813][T18293] dump_stack+0x15/0x1b [ 641.327839][T18293] dump_header+0x80/0x240 [ 641.327926][T18293] oom_kill_process+0x295/0x350 [ 641.327951][T18293] out_of_memory+0x97d/0xb80 [ 641.328026][T18293] try_charge_memcg+0x62e/0xa10 [ 641.328123][T18293] __mem_cgroup_charge+0x65/0x150 [ 641.328199][T18293] shmem_get_folio_gfp+0x47b/0xd60 [ 641.328246][T18293] shmem_write_begin+0xfc/0x1f0 [ 641.328286][T18293] generic_perform_write+0x183/0x490 [ 641.328326][T18293] shmem_file_write_iter+0xc5/0xf0 [ 641.328373][T18293] __kernel_write_iter+0x319/0x590 [ 641.328416][T18293] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 641.328464][T18293] dump_user_range+0xa7d/0xdb0 [ 641.328556][T18293] elf_core_dump+0x21a2/0x2330 [ 641.328613][T18293] ? 0xffffffffff600000 [ 641.328859][T18293] coredump_write+0xacc/0xdd0 [ 641.328897][T18293] vfs_coredump+0x26c7/0x3130 [ 641.328945][T18293] ? __memcg_slab_free_hook+0xc4/0x240 [ 641.329083][T18293] ? __sigqueue_free+0xf4/0x130 [ 641.329116][T18293] ? proc_coredump_connector+0x160/0x2b0 [ 641.329188][T18293] ? __sigqueue_free+0xf4/0x130 [ 641.329213][T18293] ? kmem_cache_free+0xc8/0x380 [ 641.329272][T18293] get_signal+0xd80/0xf60 [ 641.329323][T18293] arch_do_signal_or_restart+0x96/0x450 [ 641.329379][T18293] irqentry_exit+0xf7/0x520 [ 641.329432][T18293] asm_exc_page_fault+0x26/0x30 [ 641.329461][T18293] RIP: 0033:0x7f7ede13c7a1 [ 641.329483][T18293] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 641.329505][T18293] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 641.329523][T18293] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 641.329612][T18293] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 641.329630][T18293] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 641.329648][T18293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.329665][T18293] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 641.329693][T18293] [ 641.329702][T18293] memory: usage 307200kB, limit 307200kB, failcnt 16491 [ 641.598946][T18293] memory+swap: usage 370080kB, limit 9007199254740988kB, failcnt 0 [ 641.606927][T18293] kmem: usage 24408kB, limit 9007199254740988kB, failcnt 0 [ 641.614387][T18293] Memory cgroup stats for /syz7: [ 641.614600][T18293] cache 289517568 [ 641.623859][T18293] rss 77824 [ 641.626985][T18293] shmem 289517568 [ 641.630671][T18293] mapped_file 0 [ 641.639970][T18293] dirty 0 [ 641.644649][T18293] writeback 0 [ 641.647966][T18293] workingset_refault_anon 265 [ 641.652658][T18293] workingset_refault_file 5 [ 641.672923][T18293] swap 64389120 [ 641.676426][T18293] swapcached 99729408 [ 641.680495][T18293] pgpgin 219037 [ 641.709726][T18293] pgpgout 148335 [ 641.713485][T18293] pgfault 135906 [ 641.717061][T18293] pgmajfault 199 [ 641.720677][T18293] inactive_anon 40464384 [ 641.754111][T18293] active_anon 249131008 [ 641.758373][T18293] inactive_file 0 [ 641.762029][T18293] active_file 0 [ 641.808484][T18293] unevictable 0 [ 641.812077][T18293] hierarchical_memory_limit 314572800 [ 641.842898][T18293] hierarchical_memsw_limit 9223372036854771712 [ 641.849092][T18293] total_cache 289517568 [ 641.874894][T18293] total_rss 77824 [ 641.878570][T18293] total_shmem 289517568 [ 641.882759][T18293] total_mapped_file 0 [ 641.907421][T18293] total_dirty 0 [ 641.910893][T18293] total_writeback 0 [ 641.946038][T18293] total_workingset_refault_anon 265 [ 641.951272][T18293] total_workingset_refault_file 5 [ 641.973333][T18293] total_swap 64389120 [ 641.977381][T18293] total_swapcached 99729408 [ 641.981956][T18293] total_pgpgin 219037 [ 642.012937][T18293] total_pgpgout 148335 [ 642.017076][T18293] total_pgfault 135906 [ 642.021163][T18293] total_pgmajfault 199 [ 642.042994][T18293] total_inactive_anon 40464384 [ 642.047783][T18293] total_active_anon 249131008 [ 642.052485][T18293] total_inactive_file 0 [ 642.088792][T18293] total_active_file 0 [ 642.102860][T18293] total_unevictable 0 [ 642.106909][T18293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18326,uid=0 [ 642.130577][T18293] Memory cgroup out of memory: Killed process 18326 (syz.7.3821) total-vm:90328kB, anon-rss:1240kB, file-rss:40448kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 642.163070][T18310] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 642.175345][T18310] CPU: 1 UID: 0 PID: 18310 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 642.175424][T18310] Tainted: [W]=WARN [ 642.175432][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 642.175448][T18310] Call Trace: [ 642.175456][T18310] [ 642.175466][T18310] __dump_stack+0x1d/0x30 [ 642.175504][T18310] dump_stack_lvl+0x95/0xd0 [ 642.175577][T18310] dump_stack+0x15/0x1b [ 642.175603][T18310] dump_header+0x80/0x240 [ 642.175632][T18310] oom_kill_process+0x295/0x350 [ 642.175660][T18310] out_of_memory+0x97d/0xb80 [ 642.175689][T18310] try_charge_memcg+0x62e/0xa10 [ 642.175756][T18310] __mem_cgroup_charge+0x65/0x150 [ 642.175814][T18310] shmem_get_folio_gfp+0x47b/0xd60 [ 642.175858][T18310] shmem_write_begin+0xfc/0x1f0 [ 642.175907][T18310] generic_perform_write+0x183/0x490 [ 642.175946][T18310] ? current_time+0x188/0x240 [ 642.175981][T18310] shmem_file_write_iter+0xc5/0xf0 [ 642.176052][T18310] __kernel_write_iter+0x319/0x590 [ 642.176133][T18310] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 642.176171][T18310] dump_user_range+0xa7d/0xdb0 [ 642.176202][T18310] elf_core_dump+0x21a2/0x2330 [ 642.176309][T18310] ? 0xffffffffff600000 [ 642.176352][T18310] coredump_write+0xacc/0xdd0 [ 642.176383][T18310] vfs_coredump+0x26c7/0x3130 [ 642.176452][T18310] ? __memcg_slab_free_hook+0xc4/0x240 [ 642.176499][T18310] ? __sigqueue_free+0xf4/0x130 [ 642.176525][T18310] ? proc_coredump_connector+0x160/0x2b0 [ 642.176584][T18310] ? __sigqueue_free+0xf4/0x130 [ 642.176608][T18310] ? kmem_cache_free+0xc8/0x380 [ 642.176635][T18310] get_signal+0xd80/0xf60 [ 642.176678][T18310] arch_do_signal_or_restart+0x96/0x450 [ 642.176775][T18310] irqentry_exit+0xf7/0x520 [ 642.176813][T18310] asm_exc_page_fault+0x26/0x30 [ 642.176836][T18310] RIP: 0033:0x7f7ede13c7a1 [ 642.176852][T18310] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 642.176868][T18310] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 642.176952][T18310] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 642.176964][T18310] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 642.176975][T18310] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 642.177045][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.177057][T18310] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 642.177075][T18310] [ 642.177174][T18310] memory: usage 307200kB, limit 307200kB, failcnt 17878 [ 642.430415][T18310] memory+swap: usage 350428kB, limit 9007199254740988kB, failcnt 0 [ 642.438371][T18310] kmem: usage 24368kB, limit 9007199254740988kB, failcnt 0 [ 642.445677][T18310] Memory cgroup stats for /syz7: [ 642.445928][T18310] cache 270348288 [ 642.454539][T18310] rss 77824 [ 642.457671][T18310] shmem 270348288 [ 642.461333][T18310] mapped_file 0 [ 642.464826][T18310] dirty 0 [ 642.467801][T18310] writeback 0 [ 642.471150][T18310] workingset_refault_anon 265 [ 642.475854][T18310] workingset_refault_file 162 [ 642.480565][T18310] swap 63430656 [ 642.484068][T18310] swapcached 103682048 [ 642.488137][T18310] pgpgin 222488 [ 642.491636][T18310] pgpgout 156466 [ 642.495232][T18310] pgfault 136109 [ 642.498793][T18310] pgmajfault 200 [ 642.502352][T18310] inactive_anon 118730752 [ 642.506729][T18310] active_anon 151695360 [ 642.510898][T18310] inactive_file 0 [ 642.514649][T18310] active_file 0 [ 642.518120][T18310] unevictable 0 [ 642.521570][T18310] hierarchical_memory_limit 314572800 [ 642.526978][T18310] hierarchical_memsw_limit 9223372036854771712 [ 642.533186][T18310] total_cache 270348288 [ 642.537351][T18310] total_rss 77824 [ 642.540996][T18310] total_shmem 270348288 [ 642.545200][T18310] total_mapped_file 0 [ 642.549248][T18310] total_dirty 0 [ 642.552701][T18310] total_writeback 0 [ 642.556552][T18310] total_workingset_refault_anon 265 [ 642.561841][T18310] total_workingset_refault_file 162 [ 642.567069][T18310] total_swap 63430656 [ 642.571067][T18310] total_swapcached 103682048 [ 642.575686][T18310] total_pgpgin 222488 [ 642.579687][T18310] total_pgpgout 156466 [ 642.583786][T18310] total_pgfault 136109 [ 642.587931][T18310] total_pgmajfault 200 [ 642.592015][T18310] total_inactive_anon 118730752 [ 642.596922][T18310] total_active_anon 151695360 [ 642.601675][T18310] total_inactive_file 0 [ 642.605859][T18310] total_active_file 0 [ 642.609852][T18310] total_unevictable 0 [ 642.613942][T18310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18308,uid=0 [ 642.628714][T18310] Memory cgroup out of memory: Killed process 18308 (syz.7.3821) total-vm:90328kB, anon-rss:1240kB, file-rss:48652kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 642.923029][T18302] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 643.009499][T18302] CPU: 1 UID: 0 PID: 18302 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 643.009533][T18302] Tainted: [W]=WARN [ 643.009542][T18302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.009587][T18302] Call Trace: [ 643.009595][T18302] [ 643.009605][T18302] __dump_stack+0x1d/0x30 [ 643.009634][T18302] dump_stack_lvl+0x95/0xd0 [ 643.009656][T18302] dump_stack+0x15/0x1b [ 643.009720][T18302] dump_header+0x80/0x240 [ 643.009820][T18302] oom_kill_process+0x295/0x350 [ 643.009897][T18302] out_of_memory+0x97d/0xb80 [ 643.009924][T18302] try_charge_memcg+0x62e/0xa10 [ 643.010011][T18302] __mem_cgroup_charge+0x65/0x150 [ 643.010050][T18302] shmem_get_folio_gfp+0x47b/0xd60 [ 643.010174][T18302] shmem_write_begin+0xfc/0x1f0 [ 643.010215][T18302] generic_perform_write+0x183/0x490 [ 643.010250][T18302] ? current_time+0x188/0x240 [ 643.010357][T18302] shmem_file_write_iter+0xc5/0xf0 [ 643.010439][T18302] __kernel_write_iter+0x319/0x590 [ 643.010485][T18302] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 643.010597][T18302] dump_user_range+0xa7d/0xdb0 [ 643.010636][T18302] elf_core_dump+0x21a2/0x2330 [ 643.010737][T18302] ? 0xffffffffff600000 [ 643.010767][T18302] coredump_write+0xacc/0xdd0 [ 643.010830][T18302] vfs_coredump+0x26c7/0x3130 [ 643.010874][T18302] ? __memcg_slab_free_hook+0xc4/0x240 [ 643.010993][T18302] ? __sigqueue_free+0xf4/0x130 [ 643.011025][T18302] ? proc_coredump_connector+0x160/0x2b0 [ 643.011083][T18302] ? __sigqueue_free+0xf4/0x130 [ 643.011108][T18302] ? kmem_cache_free+0xc8/0x380 [ 643.011201][T18302] get_signal+0xd80/0xf60 [ 643.011253][T18302] arch_do_signal_or_restart+0x96/0x450 [ 643.011294][T18302] irqentry_exit+0xf7/0x520 [ 643.011320][T18302] asm_exc_page_fault+0x26/0x30 [ 643.011418][T18302] RIP: 0033:0x7f7ede13c7a1 [ 643.011436][T18302] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 643.011457][T18302] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 643.011486][T18302] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 643.011539][T18302] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 643.011558][T18302] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 643.011570][T18302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.011582][T18302] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 643.011603][T18302] [ 643.011726][T18302] memory: usage 307200kB, limit 307200kB, failcnt 19393 [ 643.269066][T18302] memory+swap: usage 370316kB, limit 9007199254740988kB, failcnt 0 [ 643.277296][T18302] kmem: usage 24116kB, limit 9007199254740988kB, failcnt 0 [ 643.284602][T18302] Memory cgroup stats for /syz7: [ 643.284942][T18302] cache 289800192 [ 643.293601][T18302] rss 77824 [ 643.296751][T18302] shmem 289800192 [ 643.300406][T18302] mapped_file 0 [ 643.303916][T18302] dirty 0 [ 643.306886][T18302] writeback 0 [ 643.310182][T18302] workingset_refault_anon 265 [ 643.314994][T18302] workingset_refault_file 162 [ 643.319698][T18302] swap 64630784 [ 643.323200][T18302] swapcached 109264896 [ 643.327293][T18302] pgpgin 234833 [ 643.330833][T18302] pgpgout 164062 [ 643.334424][T18302] pgfault 136879 [ 643.338061][T18302] pgmajfault 200 [ 643.341625][T18302] inactive_anon 138297344 [ 643.346048][T18302] active_anon 151580672 [ 643.350218][T18302] inactive_file 0 [ 643.353883][T18302] active_file 0 [ 643.357351][T18302] unevictable 0 [ 643.360806][T18302] hierarchical_memory_limit 314572800 [ 643.366226][T18302] hierarchical_memsw_limit 9223372036854771712 [ 643.372375][T18302] total_cache 289800192 [ 643.376585][T18302] total_rss 77824 [ 643.380259][T18302] total_shmem 289800192 [ 643.384693][T18302] total_mapped_file 0 [ 643.388694][T18302] total_dirty 0 [ 643.392182][T18302] total_writeback 0 [ 643.396026][T18302] total_workingset_refault_anon 265 [ 643.401272][T18302] total_workingset_refault_file 162 [ 643.406560][T18302] total_swap 64630784 [ 643.410560][T18302] total_swapcached 109264896 [ 643.415209][T18302] total_pgpgin 234833 [ 643.419284][T18302] total_pgpgout 164062 [ 643.423467][T18302] total_pgfault 136879 [ 643.427550][T18302] total_pgmajfault 200 [ 643.431847][T18302] total_inactive_anon 138297344 [ 643.436852][T18302] total_active_anon 151580672 [ 643.441541][T18302] total_inactive_file 0 [ 643.445751][T18302] total_active_file 0 [ 643.449742][T18302] total_unevictable 0 [ 643.453755][T18302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18321,uid=0 [ 643.468673][T18302] Memory cgroup out of memory: Killed process 18321 (syz.7.3821) total-vm:90328kB, anon-rss:1244kB, file-rss:40384kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 643.486164][T18293] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 643.503085][T18293] CPU: 1 UID: 0 PID: 18293 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 643.503162][T18293] Tainted: [W]=WARN [ 643.503169][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.503182][T18293] Call Trace: [ 643.503190][T18293] [ 643.503200][T18293] __dump_stack+0x1d/0x30 [ 643.503277][T18293] dump_stack_lvl+0x95/0xd0 [ 643.503307][T18293] dump_stack+0x15/0x1b [ 643.503331][T18293] dump_header+0x80/0x240 [ 643.503361][T18293] oom_kill_process+0x295/0x350 [ 643.503462][T18293] out_of_memory+0x97d/0xb80 [ 643.503493][T18293] try_charge_memcg+0x62e/0xa10 [ 643.503555][T18293] __mem_cgroup_charge+0x65/0x150 [ 643.503598][T18293] shmem_get_folio_gfp+0x47b/0xd60 [ 643.503691][T18293] shmem_write_begin+0xfc/0x1f0 [ 643.503780][T18293] generic_perform_write+0x183/0x490 [ 643.503833][T18293] shmem_file_write_iter+0xc5/0xf0 [ 643.503958][T18293] __kernel_write_iter+0x319/0x590 [ 643.504002][T18293] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 643.504091][T18293] dump_user_range+0xa7d/0xdb0 [ 643.504125][T18293] elf_core_dump+0x21a2/0x2330 [ 643.504170][T18293] ? 0xffffffffff600000 [ 643.504250][T18293] coredump_write+0xacc/0xdd0 [ 643.504297][T18293] vfs_coredump+0x26c7/0x3130 [ 643.504345][T18293] ? __memcg_slab_free_hook+0xc4/0x240 [ 643.504377][T18293] ? __sigqueue_free+0xf4/0x130 [ 643.504435][T18293] ? proc_coredump_connector+0x160/0x2b0 [ 643.504473][T18293] ? __sigqueue_free+0xf4/0x130 [ 643.504497][T18293] ? kmem_cache_free+0xc8/0x380 [ 643.504547][T18293] get_signal+0xd80/0xf60 [ 643.504592][T18293] arch_do_signal_or_restart+0x96/0x450 [ 643.504642][T18293] irqentry_exit+0xf7/0x520 [ 643.504736][T18293] asm_exc_page_fault+0x26/0x30 [ 643.504759][T18293] RIP: 0033:0x7f7ede13c7a1 [ 643.504777][T18293] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 643.504801][T18293] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 643.504869][T18293] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 643.504883][T18293] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 643.504896][T18293] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 643.504909][T18293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.504971][T18293] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 643.504999][T18293] [ 643.505009][T18293] memory: usage 307200kB, limit 307200kB, failcnt 19434 [ 643.755948][T18293] memory+swap: usage 350508kB, limit 9007199254740988kB, failcnt 0 [ 643.763965][T18293] kmem: usage 24088kB, limit 9007199254740988kB, failcnt 0 [ 643.771168][T18293] Memory cgroup stats for /syz7: [ 643.771313][T18293] cache 271536128 [ 643.780005][T18293] rss 73728 [ 643.783224][T18293] shmem 271536128 [ 643.786850][T18293] mapped_file 0 [ 643.790395][T18293] dirty 0 [ 643.793374][T18293] writeback 0 [ 643.796674][T18293] workingset_refault_anon 265 [ 643.801351][T18293] workingset_refault_file 162 [ 643.806071][T18293] swap 62615552 [ 643.809602][T18293] swapcached 109264896 [ 643.813686][T18293] pgpgin 234833 [ 643.817267][T18293] pgpgout 168522 [ 643.820810][T18293] pgfault 136879 [ 643.824384][T18293] pgmajfault 200 [ 643.827946][T18293] inactive_anon 130224128 [ 643.832263][T18293] active_anon 141385728 [ 643.836443][T18293] inactive_file 0 [ 643.840080][T18293] active_file 0 [ 643.843560][T18293] unevictable 0 [ 643.847147][T18293] hierarchical_memory_limit 314572800 [ 643.852503][T18293] hierarchical_memsw_limit 9223372036854771712 [ 643.858751][T18293] total_cache 271536128 [ 643.862997][T18293] total_rss 73728 [ 643.866741][T18293] total_shmem 271536128 [ 643.870920][T18293] total_mapped_file 0 [ 643.874985][T18293] total_dirty 0 [ 643.879192][T18293] total_writeback 0 [ 643.883136][T18293] total_workingset_refault_anon 265 [ 643.888445][T18293] total_workingset_refault_file 162 [ 643.893697][T18293] total_swap 62615552 [ 643.897806][T18293] total_swapcached 109264896 [ 643.902400][T18293] total_pgpgin 234833 [ 643.906437][T18293] total_pgpgout 168522 [ 643.910549][T18293] total_pgfault 136879 [ 643.914664][T18293] total_pgmajfault 200 [ 643.918791][T18293] total_inactive_anon 130224128 [ 643.923772][T18293] total_active_anon 141385728 [ 643.928559][T18293] total_inactive_file 0 [ 643.932716][T18293] total_active_file 0 [ 643.936846][T18293] total_unevictable 0 [ 643.940852][T18293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18320,uid=0 [ 643.955645][T18293] Memory cgroup out of memory: Killed process 18320 (syz.7.3821) total-vm:90328kB, anon-rss:1240kB, file-rss:39104kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 644.109131][T18312] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 644.189454][T18312] CPU: 0 UID: 0 PID: 18312 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 644.189498][T18312] Tainted: [W]=WARN [ 644.189508][T18312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.189526][T18312] Call Trace: [ 644.189535][T18312] [ 644.189547][T18312] __dump_stack+0x1d/0x30 [ 644.189689][T18312] dump_stack_lvl+0x95/0xd0 [ 644.189716][T18312] dump_stack+0x15/0x1b [ 644.189767][T18312] dump_header+0x80/0x240 [ 644.189799][T18312] oom_kill_process+0x295/0x350 [ 644.189825][T18312] out_of_memory+0x97d/0xb80 [ 644.189935][T18312] try_charge_memcg+0x62e/0xa10 [ 644.190044][T18312] __mem_cgroup_charge+0x65/0x150 [ 644.190157][T18312] shmem_get_folio_gfp+0x47b/0xd60 [ 644.190222][T18312] shmem_write_begin+0xfc/0x1f0 [ 644.190261][T18312] generic_perform_write+0x183/0x490 [ 644.190330][T18312] ? current_time+0x188/0x240 [ 644.190442][T18312] shmem_file_write_iter+0xc5/0xf0 [ 644.190482][T18312] __kernel_write_iter+0x319/0x590 [ 644.190528][T18312] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 644.190625][T18312] dump_user_range+0xa7d/0xdb0 [ 644.190801][T18312] elf_core_dump+0x21a2/0x2330 [ 644.190840][T18312] ? 0xffffffffff600000 [ 644.190876][T18312] coredump_write+0xacc/0xdd0 [ 644.190916][T18312] vfs_coredump+0x26c7/0x3130 [ 644.190991][T18312] ? __memcg_slab_free_hook+0xc4/0x240 [ 644.191071][T18312] ? __sigqueue_free+0xf4/0x130 [ 644.191105][T18312] ? proc_coredump_connector+0x160/0x2b0 [ 644.191177][T18312] ? __sigqueue_free+0xf4/0x130 [ 644.191332][T18312] ? kmem_cache_free+0xc8/0x380 [ 644.191438][T18312] get_signal+0xd80/0xf60 [ 644.191482][T18312] arch_do_signal_or_restart+0x96/0x450 [ 644.191571][T18312] irqentry_exit+0xf7/0x520 [ 644.191601][T18312] asm_exc_page_fault+0x26/0x30 [ 644.191623][T18312] RIP: 0033:0x7f7ede13c7a1 [ 644.191673][T18312] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 644.191697][T18312] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 644.191719][T18312] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 644.191738][T18312] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 644.191802][T18312] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 644.191820][T18312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.191834][T18312] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 644.191855][T18312] [ 644.191863][T18312] memory: usage 307200kB, limit 307200kB, failcnt 20144 [ 644.454669][T18312] memory+swap: usage 370316kB, limit 9007199254740988kB, failcnt 0 [ 644.462618][T18312] kmem: usage 23860kB, limit 9007199254740988kB, failcnt 0 [ 644.470079][T18312] Memory cgroup stats for /syz7: [ 644.470302][T18312] cache 289939456 [ 644.478962][T18312] rss 73728 [ 644.482092][T18312] shmem 289939456 [ 644.485779][T18312] mapped_file 0 [ 644.489316][T18312] dirty 0 [ 644.492271][T18312] writeback 0 [ 644.495705][T18312] workingset_refault_anon 265 [ 644.500438][T18312] workingset_refault_file 162 [ 644.505270][T18312] swap 64630784 [ 644.508845][T18312] swapcached 111828992 [ 644.513039][T18312] pgpgin 242363 [ 644.516525][T18312] pgpgout 171528 [ 644.520094][T18312] pgfault 137348 [ 644.523826][T18312] pgmajfault 200 [ 644.527471][T18312] inactive_anon 163155968 [ 644.531852][T18312] active_anon 126332928 [ 644.536243][T18312] inactive_file 0 [ 644.539953][T18312] active_file 0 [ 644.547526][T18312] unevictable 0 [ 644.551024][T18312] hierarchical_memory_limit 314572800 [ 644.567930][T18312] hierarchical_memsw_limit 9223372036854771712 [ 644.586455][T18312] total_cache 289939456 [ 644.595204][T18312] total_rss 73728 [ 644.602482][T18312] total_shmem 289939456 [ 644.612304][T18312] total_mapped_file 0 [ 644.620282][T18312] total_dirty 0 [ 644.628240][T18312] total_writeback 0 [ 644.638839][T18312] total_workingset_refault_anon 265 [ 644.654288][T18312] total_workingset_refault_file 162 [ 644.670321][T18312] total_swap 64630784 [ 644.679017][T18312] total_swapcached 111828992 [ 644.688074][T18312] total_pgpgin 242363 [ 644.697603][T18312] total_pgpgout 171528 [ 644.707045][T18312] total_pgfault 137348 [ 644.713798][T18312] total_pgmajfault 200 [ 644.717996][T18312] total_inactive_anon 163155968 [ 644.723037][T18312] total_active_anon 126332928 [ 644.727814][T18312] total_inactive_file 0 [ 644.732009][T18312] total_active_file 0 [ 644.736272][T18312] total_unevictable 0 [ 644.740321][T18312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18317,uid=0 [ 644.759792][T18312] Memory cgroup out of memory: Killed process 18317 (syz.7.3821) total-vm:90328kB, anon-rss:1244kB, file-rss:40832kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 644.797776][T18331] syz.7.3821 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 644.843046][T18331] CPU: 1 UID: 0 PID: 18331 Comm: syz.7.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 644.843093][T18331] Tainted: [W]=WARN [ 644.843139][T18331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.843156][T18331] Call Trace: [ 644.843164][T18331] [ 644.843173][T18331] __dump_stack+0x1d/0x30 [ 644.843203][T18331] dump_stack_lvl+0x95/0xd0 [ 644.843229][T18331] dump_stack+0x15/0x1b [ 644.843275][T18331] dump_header+0x80/0x240 [ 644.843304][T18331] oom_kill_process+0x295/0x350 [ 644.843333][T18331] out_of_memory+0x97d/0xb80 [ 644.843421][T18331] try_charge_memcg+0x62e/0xa10 [ 644.843523][T18331] __mem_cgroup_charge+0x65/0x150 [ 644.843555][T18331] shmem_get_folio_gfp+0x47b/0xd60 [ 644.843668][T18331] shmem_write_begin+0xfc/0x1f0 [ 644.843707][T18331] generic_perform_write+0x183/0x490 [ 644.843827][T18331] shmem_file_write_iter+0xc5/0xf0 [ 644.843869][T18331] __kernel_write_iter+0x319/0x590 [ 644.843912][T18331] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 644.844030][T18331] dump_user_range+0xa7d/0xdb0 [ 644.844069][T18331] elf_core_dump+0x21a2/0x2330 [ 644.844123][T18331] ? 0xffffffffff600000 [ 644.844158][T18331] coredump_write+0xacc/0xdd0 [ 644.844231][T18331] vfs_coredump+0x26c7/0x3130 [ 644.844278][T18331] ? __memcg_slab_free_hook+0xc4/0x240 [ 644.844315][T18331] ? __sigqueue_free+0xf4/0x130 [ 644.844389][T18331] ? proc_coredump_connector+0x160/0x2b0 [ 644.844459][T18331] ? __sigqueue_free+0xf4/0x130 [ 644.844494][T18331] ? kmem_cache_free+0xc8/0x380 [ 644.844520][T18331] get_signal+0xd80/0xf60 [ 644.844581][T18331] arch_do_signal_or_restart+0x96/0x450 [ 644.844658][T18331] irqentry_exit+0xf7/0x520 [ 644.844699][T18331] asm_exc_page_fault+0x26/0x30 [ 644.844724][T18331] RIP: 0033:0x7f7ede13c7a1 [ 644.844744][T18331] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 644.844809][T18331] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 644.844829][T18331] RAX: 0000000000000000 RBX: 00007f7ede3b5fa0 RCX: 00007f7ede13c799 [ 644.844846][T18331] RDX: 0000200000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 644.844862][T18331] RBP: 00007f7ede1d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 644.844878][T18331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.844894][T18331] R13: 00007f7ede3b6038 R14: 00007f7ede3b5fa0 R15: 00007ffc63d945e8 [ 644.844944][T18331] [ 644.844953][T18331] memory: usage 307200kB, limit 307200kB, failcnt 21211 [ 645.094149][T18331] memory+swap: usage 357540kB, limit 9007199254740988kB, failcnt 0 [ 645.102171][T18331] kmem: usage 23836kB, limit 9007199254740988kB, failcnt 0 [ 645.109409][T18331] Memory cgroup stats for /syz7: [ 645.109763][T18331] cache 275918848 [ 645.118404][T18331] rss 69632 [ 645.121609][T18331] shmem 275918848 [ 645.125307][T18331] mapped_file 0 [ 645.128773][T18331] dirty 0 [ 645.131734][T18331] writeback 0 [ 645.135074][T18331] workingset_refault_anon 265 [ 645.139764][T18331] workingset_refault_file 162 [ 645.144487][T18331] swap 64466944 [ 645.147959][T18331] swapcached 113885184 [ 645.152063][T18331] pgpgin 244488 [ 645.155705][T18331] pgpgout 177093 [ 645.159351][T18331] pgfault 137482 [ 645.163058][T18331] pgmajfault 200 [ 645.166763][T18331] inactive_anon 156545024 [ 645.171104][T18331] active_anon 118996992 [ 645.175508][T18331] inactive_file 0 [ 645.179147][T18331] active_file 0 [ 645.182733][T18331] unevictable 0 [ 645.186455][T18331] hierarchical_memory_limit 314572800 [ 645.191886][T18331] hierarchical_memsw_limit 9223372036854771712 [ 645.198193][T18331] total_cache 275918848 [ 645.202380][T18331] total_rss 69632 [ 645.206198][T18331] total_shmem 275918848 [ 645.210449][T18331] total_mapped_file 0 [ 645.214757][T18331] total_dirty 0 [ 645.218361][T18331] total_writeback 0 [ 645.222271][T18331] total_workingset_refault_anon 265 [ 645.227680][T18331] total_workingset_refault_file 162 [ 645.233052][T18331] total_swap 64466944 [ 645.237075][T18331] total_swapcached 113885184 [ 645.241832][T18331] total_pgpgin 244488 [ 645.246058][T18317] syz.7.3821 (18317) used greatest stack depth: 7000 bytes left [ 645.253795][T18331] total_pgpgout 177093 [ 645.257926][T18331] total_pgfault 137482 [ 645.262146][T18331] total_pgmajfault 200 [ 645.266570][T18331] total_inactive_anon 156545024 [ 645.271487][T18331] total_active_anon 118996992 [ 645.276307][T18331] total_inactive_file 0 [ 645.280501][T18331] total_active_file 0 [ 645.284700][T18331] total_unevictable 0 [ 645.288721][T18331] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3821,pid=18284,uid=0 [ 645.303586][T18331] Memory cgroup out of memory: Killed process 18284 (syz.7.3821) total-vm:90328kB, anon-rss:1244kB, file-rss:41664kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000